last executing test programs: 3m29.801099771s ago: executing program 2 (id=32): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETSTEERINGEBPF(r0, 0x400454da, &(0x7f0000000000)) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='oom_score\x00') preadv(r1, &(0x7f0000000000), 0x0, 0x5, 0x0) r2 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) r3 = inotify_init1(0x0) inotify_add_watch(r3, &(0x7f0000000140)='./file0\x00', 0xa4000021) close(r3) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(&(0x7f00000003c0), 0xffffffffffffffff) syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), r1) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000007c0)={r1, 0xe0, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x5, &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xe1, &(0x7f0000000400)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000540), &(0x7f0000000580), 0x8, 0x4f, 0x8, 0x8, &(0x7f00000005c0)}}, 0x10) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000940)={'ip_vti0\x00', &(0x7f0000000800)={'ip_vti0\x00', 0x0, 0x700, 0x700, 0x8, 0xb25, {{0x43, 0x4, 0x3, 0x4, 0x10c, 0x66, 0x0, 0x9f, 0x2f, 0x0, @multicast2, @dev={0xac, 0x14, 0x14, 0x21}, {[@ra={0x94, 0x4}, @lsrr={0x83, 0x23, 0x7f, [@multicast2, @rand_addr=0x64010102, @local, @multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty, @rand_addr=0x64010102, @multicast1]}, @ra={0x94, 0x4}, @timestamp={0x44, 0x14, 0x8c, 0x0, 0x5, [0x96, 0x2, 0x7, 0x8]}, @timestamp={0x44, 0x28, 0x96, 0x0, 0x7, [0x1, 0x8, 0x80, 0x0, 0x200, 0xf9, 0x3307941b, 0x8, 0x9]}, @ssrr={0x89, 0x23, 0x60, [@empty, @dev={0xac, 0x14, 0x14, 0x11}, @multicast1, @private=0xa010101, @initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010100, @private=0xa010101, @loopback]}, @timestamp_addr={0x44, 0x1c, 0x3b, 0x1, 0x9, [{@broadcast, 0x10000000}, {@multicast2}, {@private=0xa010100, 0x7f}]}, @rr={0x7, 0x2b, 0x42, [@private=0xa010102, @multicast2, @broadcast, @remote, @loopback, @dev={0xac, 0x14, 0x14, 0x30}, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote, @private=0xa010102, @rand_addr=0x64010100]}, @rr={0x7, 0x17, 0x30, [@dev={0xac, 0x14, 0x14, 0x41}, @private=0xa010102, @loopback, @empty, @dev={0xac, 0x14, 0x14, 0x30}]}, @rr={0x7, 0xf, 0x15, [@remote, @multicast2, @dev={0xac, 0x14, 0x14, 0x10}]}]}}}}}) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000080)={[{@usrquota}, {@noblock_validity}, {@bh}, {@max_batch_time={'max_batch_time', 0x3d, 0x8c9}}, {@debug}, {@inlinecrypt}]}, 0x6, 0x5fc, &(0x7f0000000c00)="$eJzs3c9rHGUfAPDvzCZ5kzavaUXEFsWAhxakaVKLVS+29WAPBQv2IOKhoUlq6PYHTQq2FkzBg4KCiFeRXvwHvEvv3kRQb56FKlJRUOnK7M62m2Q3XdPsTpr5fGCzz/PM7D7PdydP5pmZPDsBlNZ49iON2BVx51QSMdaybDQaC8fz9W7/du109kiiVnv91ySSvKy5fpI/b88zwxHx7dGIRyur6124cvXsdLXW8F7E/sVzF/cvXLm6b/7c9JnZM7Pnpw68cPDQ5ItTB6c2JM7t+fOx4689+fH7bz8/9111XxKH4+TguzOxIo6NMh7jcScPsbV8ICIOZYk2n8vDZguEUGqV/PdxMCIej7Go1HMNYzH/UaGNA3qqVomoASWV6P9QUs1xQPPYvrvj4JM9HpX0z60jjQOg1fEPNM6NxHD92Gjb7aTlyKhxbmPHBtSf1fHPtd2fZ49Ydh7iz7tbZ2AD6ulk6XpEPNEu/qTeth31SLP402XtSCJiMiKG8va98gBtSFrSvTgPs5b1xp9GxOH8OSs/us76x1fk+x0/AOV080i+I1/Kcvf2f9nYozn+iTbjn9E2+671KHr/13n819zfD9fPkacrxmHZmOVE+7ccXFnw04fHPu1Uf+v4L3tk9TfHgv1w63rE7hXxf5AFm49/sviTNts/W+XU4e7qePX7X451WlZ0/LUbEXvaHv/cG5VmqTWuT+6fm6/OTjZ+tq3j62/e+rJT/UXHn23/bR3ib9n+6crXZZ/JxS7r+OrEjXOdlo3eN/7056Gkcbw5lJe8M724eGkqYig5nq/SUn5g7bY012m+Rxb/3mfa9/9lv//Xl7/PSPNPZhcuvnH2dqdl69n+LReT79S6bEMnWfwz99/+q/p/VvZJl3X88eblpzotWyv+kQcJDAAAAAAAAEoorV+DTdKJu+k0nZhozJd9LLal1QsLi8/OXbh8fiZib/3/IQfT5pXusUY+yfJT+f/DNvMHVuSfi4idEfFZZaSenzh9oTpTdPAAAAAAAAAAAAAAAAAAAACwSWzP5/8371P9e6Ux/x8oiV7eYA7Y3PR/KK96/191iyegDOz/obz0fygv/R/KS/+H8tL/obz0fygv/R/KS/8HAAAAgC1p59M3f0wiYumlkfojM5QvMyMItrbBohsAFKZSdAOAwty99G+wD6XT1fj/r/zLAXvfHKAASbvC+uCgtnbnv9n2lQAAAAAAAAAAAABAD+zZ1Xn+v7nBsLWZ9gfl9QDz/311ADzkfPU/lJdjfOB+s/iHOy0w/x8AAAAAAAAAAAAA+ma0/kjSiXwu8Gik6cRExP8jYkcMJnPz1dnJiHgkIn6oDP4vy08V3WgAAAAAAAAAAAAAAAAAAADYYhauXD07Xa3OXmpN/L2qZGsnmndB7UNdL8d/fFUk/f9YRiKi8I3Ss8RAS0kSsZRt+U3RsEsLsTmaUU8U/IcJAAAAAAAAAAAAAAAAAABKqGXucXu7v+hziwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACg/+7d/793iaJjBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeTv8GAAD//7V5QCw=") 3m28.270880828s ago: executing program 2 (id=41): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300001e880000850000007000000095"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_emit_ethernet(0x4e, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaac7aaaaaaaaaaaaaaaa0008008000000000000000000690780a0101020a01010244140a01e0000001fffffffce000afaebd5e306718d4d80001000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5c00000090780000"], 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000003000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x20000000}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x14, &(0x7f0000000480)=ANY=[@ANYRESHEX=r1, @ANYRESOCT=r2], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000004cbd1811c70000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$NFT_BATCH(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000007c0)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x4) sendmsg$NL80211_CMD_SET_MPATH(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000780)={&(0x7f0000000a00)={0x74, 0x0, 0x100, 0x70bd2c, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x0, 0x51}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x74}, 0x1, 0x0, 0x0, 0x4000010}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000180a0500000000000000000002000000300003802c00038014000100776732000000000000000000000000001400010076657468315f746f5f627269646765000900020073797a30000000000900010073797a300000000014000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x24040089}, 0x20008000) r5 = syz_open_dev$usbfs(&(0x7f0000000080), 0x75, 0x109301) ioctl$USBDEVFS_DISCONNECT_CLAIM(r5, 0x8108551b, &(0x7f0000002600)={0x0, 0x0, "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"}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00"/14], 0x48) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000004c0)={{{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x4e, 0x2, 0x0, 0xffffffeffffffffd}, {0x800, 0x0, 0x7fffffff, 0x20000000}, 0x0, 0x0, 0x0, 0x1}, {{@in6=@private1={0xfc, 0x1, '\x00', 0x9}, 0x0, 0x2b}, 0xa, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x3, 0x0, 0x0, 0x3, 0x0, 0x3c0}}, 0xe8) r6 = socket$inet_sctp(0x2, 0x1, 0x84) socket$rds(0x15, 0x5, 0x0) r7 = socket$kcm(0xa, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r6, 0x0, 0x487, &(0x7f0000000100)={{0x84, @remote, 0x4e24, 0x3, 'none\x00', 0x37, 0x2, 0x5}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e23, 0x0, 0x101c5, 0x12d61, 0x7}}, 0x44) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000900)={{}, &(0x7f00000008c0), &(0x7f0000000880)}, 0x20) sendmsg$sock(r7, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x8, @dev={0xfe, 0x80, '\x00', 0xfc}, 0xfc}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@timestamping={{0x14, 0x1, 0x25, 0x7f}}], 0x18}, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x18, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000001000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000240)='kmem_cache_free\x00', r8}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) statx(0xffffffffffffffff, 0x0, 0x800, 0x800, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) socket$kcm(0x29, 0x5, 0x0) syz_open_dev$sg(&(0x7f0000000080), 0x8000, 0x208040) 3m28.121778117s ago: executing program 2 (id=44): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETSTEERINGEBPF(r0, 0x400454da, &(0x7f0000000000)) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='oom_score\x00') preadv(r1, &(0x7f0000000000), 0x0, 0x5, 0x0) r2 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) r3 = inotify_init1(0x0) inotify_add_watch(r3, &(0x7f0000000140)='./file0\x00', 0xa4000021) openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000280), 0x88182, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(&(0x7f00000003c0), 0xffffffffffffffff) syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), r1) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000007c0)={r1, 0xe0, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x5, &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xe1, &(0x7f0000000400)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000540), &(0x7f0000000580), 0x8, 0x4f, 0x8, 0x8, &(0x7f00000005c0)}}, 0x10) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000940)={'ip_vti0\x00', &(0x7f0000000800)={'ip_vti0\x00', 0x0, 0x700, 0x700, 0x8, 0xb25, {{0x43, 0x4, 0x3, 0x4, 0x10c, 0x66, 0x0, 0x9f, 0x2f, 0x0, @multicast2, @dev={0xac, 0x14, 0x14, 0x21}, {[@ra={0x94, 0x4}, @lsrr={0x83, 0x23, 0x7f, [@multicast2, @rand_addr=0x64010102, @local, @multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty, @rand_addr=0x64010102, @multicast1]}, @ra={0x94, 0x4}, @timestamp={0x44, 0x14, 0x8c, 0x0, 0x5, [0x96, 0x2, 0x7, 0x8]}, @timestamp={0x44, 0x28, 0x96, 0x0, 0x7, [0x1, 0x8, 0x80, 0x0, 0x200, 0xf9, 0x3307941b, 0x8, 0x9]}, @ssrr={0x89, 0x23, 0x60, [@empty, @dev={0xac, 0x14, 0x14, 0x11}, @multicast1, @private=0xa010101, @initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010100, @private=0xa010101, @loopback]}, @timestamp_addr={0x44, 0x1c, 0x3b, 0x1, 0x9, [{@broadcast, 0x10000000}, {@multicast2}, {@private=0xa010100, 0x7f}]}, @rr={0x7, 0x2b, 0x42, [@private=0xa010102, @multicast2, @broadcast, @remote, @loopback, @dev={0xac, 0x14, 0x14, 0x30}, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote, @private=0xa010102, @rand_addr=0x64010100]}, @rr={0x7, 0x17, 0x30, [@dev={0xac, 0x14, 0x14, 0x41}, @private=0xa010102, @loopback, @empty, @dev={0xac, 0x14, 0x14, 0x30}]}, @rr={0x7, 0xf, 0x15, [@remote, @multicast2, @dev={0xac, 0x14, 0x14, 0x10}]}]}}}}}) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000080)={[{@usrquota}, {@noblock_validity}, {@bh}, {@max_batch_time={'max_batch_time', 0x3d, 0x8c9}}, {@debug}, {@inlinecrypt}]}, 0x6, 0x5fc, &(0x7f0000000c00)="$eJzs3c9rHGUfAPDvzCZ5kzavaUXEFsWAhxakaVKLVS+29WAPBQv2IOKhoUlq6PYHTQq2FkzBg4KCiFeRXvwHvEvv3kRQb56FKlJRUOnK7M62m2Q3XdPsTpr5fGCzz/PM7D7PdydP5pmZPDsBlNZ49iON2BVx51QSMdaybDQaC8fz9W7/du109kiiVnv91ySSvKy5fpI/b88zwxHx7dGIRyur6124cvXsdLXW8F7E/sVzF/cvXLm6b/7c9JnZM7Pnpw68cPDQ5ItTB6c2JM7t+fOx4689+fH7bz8/9111XxKH4+TguzOxIo6NMh7jcScPsbV8ICIOZYk2n8vDZguEUGqV/PdxMCIej7Go1HMNYzH/UaGNA3qqVomoASWV6P9QUs1xQPPYvrvj4JM9HpX0z60jjQOg1fEPNM6NxHD92Gjb7aTlyKhxbmPHBtSf1fHPtd2fZ49Ydh7iz7tbZ2AD6ulk6XpEPNEu/qTeth31SLP402XtSCJiMiKG8va98gBtSFrSvTgPs5b1xp9GxOH8OSs/us76x1fk+x0/AOV080i+I1/Kcvf2f9nYozn+iTbjn9E2+671KHr/13n819zfD9fPkacrxmHZmOVE+7ccXFnw04fHPu1Uf+v4L3tk9TfHgv1w63rE7hXxf5AFm49/sviTNts/W+XU4e7qePX7X451WlZ0/LUbEXvaHv/cG5VmqTWuT+6fm6/OTjZ+tq3j62/e+rJT/UXHn23/bR3ib9n+6crXZZ/JxS7r+OrEjXOdlo3eN/7056Gkcbw5lJe8M724eGkqYig5nq/SUn5g7bY012m+Rxb/3mfa9/9lv//Xl7/PSPNPZhcuvnH2dqdl69n+LReT79S6bEMnWfwz99/+q/p/VvZJl3X88eblpzotWyv+kQcJDAAAAAAAAEoorV+DTdKJu+k0nZhozJd9LLal1QsLi8/OXbh8fiZib/3/IQfT5pXusUY+yfJT+f/DNvMHVuSfi4idEfFZZaSenzh9oTpTdPAAAAAAAAAAAAAAAAAAAACwSWzP5/8371P9e6Ux/x8oiV7eYA7Y3PR/KK96/191iyegDOz/obz0fygv/R/KS/+H8tL/obz0fygv/R/KS/8HAAAAgC1p59M3f0wiYumlkfojM5QvMyMItrbBohsAFKZSdAOAwty99G+wD6XT1fj/r/zLAXvfHKAASbvC+uCgtnbnv9n2lQAAAAAAAAAAAABAD+zZ1Xn+v7nBsLWZ9gfl9QDz/311ADzkfPU/lJdjfOB+s/iHOy0w/x8AAAAAAAAAAAAA+ma0/kjSiXwu8Gik6cRExP8jYkcMJnPz1dnJiHgkIn6oDP4vy08V3WgAAAAAAAAAAAAAAAAAAADYYhauXD07Xa3OXmpN/L2qZGsnmndB7UNdL8d/fFUk/f9YRiKi8I3Ss8RAS0kSsZRt+U3RsEsLsTmaUU8U/IcJAAAAAAAAAAAAAAAAAABKqGXucXu7v+hziwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACg/+7d/793iaJjBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeTv8GAAD//7V5QCw=") 3m27.162947149s ago: executing program 2 (id=50): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x27e}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x3f, 0x0, 0x0, 0x0, 0xb}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r4}, 0x10) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="640000000206010200000000000000000000000015000300686173683a69702c706f72742c6e6574000000000900020073797a32000000000500040000000000140007800800124000000000050015002200000005000500020000000500010006"], 0x64}}, 0x0) ptrace$ARCH_ENABLE_TAGGED_ADDR(0x1e, r0, 0x5, 0x4002) sendmsg$IPSET_CMD_DESTROY(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000640)=ANY=[@ANYBLOB="1c0000000306010400000000000000000700f8010500010007000000"], 0x1c}, 0x1, 0x0, 0x0, 0x2880}, 0x10) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000f0000000000000c00000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000200b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r6}, 0x10) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x8, &(0x7f0000000080)={[{@sb={'sb', 0x3d, 0x1}}, {@nodioread_nolock}]}, 0x2, 0x53a, &(0x7f0000000c80)="$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") getdents(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) accept$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @initdev}, &(0x7f0000000100)=0x10) 3m25.277102992s ago: executing program 2 (id=63): timer_settime(0x0, 0x0, 0x0, 0x0) ioctl$IMADDTIMER(0xffffffffffffffff, 0x80044940, &(0x7f0000000600)=0x14) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000f00), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000011c0)={&(0x7f0000000f40)={0x64, r3, 0x1, 0xffffffff, 0x0, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x8000}}, {0x8}, {0x6}, {0x5}, {0x6}, {0x8, 0xb, 0x5}}]}, 0x64}, 0x1, 0x0, 0x0, 0x2004c111}, 0x0) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(0xffffffffffffffff, 0x40485404, &(0x7f0000000640)={{0xffffffffffffffff, 0x1, 0x9, 0x2}, 0x8001, 0x32}) clock_adjtime(0x1, &(0x7f00000001c0)={0x80, 0x8000000000000001, 0x2, 0x1, 0xff, 0x1, 0xfff, 0x1, 0x10, 0x8, 0x3, 0x7f, 0x3, 0x5, 0x100000000, 0xb9e, 0x0, 0x1ff, 0x1, 0x3, 0x8, 0x3, 0x4, 0x5, 0x9, 0x7}) epoll_wait(0xffffffffffffffff, &(0x7f0000000040)=[{}], 0x1, 0x400) r4 = socket(0x10, 0x803, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sysctl=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000ffe300000000"], 0x0, 0x0, 0x0, 0x0, 0x40f00}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) syz_open_dev$tty1(0xc, 0x4, 0x2) r7 = socket$netlink(0x10, 0x3, 0x4) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c0000001000030500000400fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="61000100000000001400128009000100626f6e64000000000400028008000a00", @ANYRES32=r8], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x4000) 3m24.974499531s ago: executing program 2 (id=69): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r4}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x3, 0xc, &(0x7f0000000240)=ANY=[@ANYRES16=r5, @ANYRESDEC, @ANYRESDEC=0x0], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x802}, 0x94) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000800)=ANY=[@ANYBLOB="24000000390007010000000000000000027c0000040000000c0001800600060086"], 0x24}}, 0x0) 3m24.953347434s ago: executing program 32 (id=69): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r4}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x3, 0xc, &(0x7f0000000240)=ANY=[@ANYRES16=r5, @ANYRESDEC, @ANYRESDEC=0x0], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x802}, 0x94) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000800)=ANY=[@ANYBLOB="24000000390007010000000000000000027c0000040000000c0001800600060086"], 0x24}}, 0x0) 2m10.384196382s ago: executing program 4 (id=835): bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x11, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32=0xffffffffffffffff, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000840)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x5, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000200)=ANY=[@ANYRESDEC=r0], 0x0, 0x9ab7, 0x0, 0x0, 0x41000, 0x3c, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x1f, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xfdef) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x20082, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffc000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000480)=@abs={0x0, 0x0, 0x8004e24}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000e8ffff05850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a00)={&(0x7f0000000d00)='sched_switch\x00', r5}, 0x10) bpf$ITER_CREATE(0x21, 0x0, 0x0) unshare(0x62040200) r6 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e02003c000b05d25a806f8c6394f90124fc600c05000f90c60100053582c137153e370a48018004f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x0, 0x5}, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x30006041) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r1}, 0x10) epoll_create1(0x0) 2m9.213498113s ago: executing program 4 (id=840): bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x11, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32=0xffffffffffffffff, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000840)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x5, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000200)=ANY=[@ANYRESDEC=r0], 0x0, 0x9ab7, 0x0, 0x0, 0x41000, 0x3c, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x1f, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xfdef) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x20082, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffc000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000480)=@abs={0x0, 0x0, 0x8004e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000e8ffff05850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a00)={&(0x7f0000000d00)='sched_switch\x00', r4}, 0x10) bpf$ITER_CREATE(0x21, 0x0, 0x0) unshare(0x62040200) r5 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e02003c000b05d25a806f8c6394f90124fc600c05000f90c60100053582c137153e370a48018004f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x0, 0x5}, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) epoll_create1(0x0) 2m8.282056812s ago: executing program 4 (id=845): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000"], 0x0, 0x2, 0x0, 0x0, 0x40e00, 0x0, '\x00', 0x0, @fallback=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdir(0x0, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_int(r3, &(0x7f0000000980)='cpu.idle\x00', 0x2, 0x0) write$cgroup_subtree(r4, 0x0, 0x27) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000040)={r2, 0xffffffffffffffff, 0x8}, 0x14) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r0}, &(0x7f0000000540), &(0x7f0000000580)=r1}, 0x20) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x8881, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r6) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000010c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, 0x0, &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r7}, &(0x7f0000000200), &(0x7f0000000280)=r8}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r8, 0x0, 0x4}, 0x18) ptrace$pokeuser(0x6, r6, 0x388, 0x7a09280d) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r9) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) 2m8.007271067s ago: executing program 4 (id=848): syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x2048c5, &(0x7f0000000480)=ANY=[@ANYBLOB="757466383d302c73686f72746e616d653d77696e6e742c73686f72746e616d653d77696e6e742c747a3d5554432c756e695f786c6174653d312c636865636b3d6e6f726d616c2c73686f72746e616d653d6d697865642c757365667265652c646973636172642c73686f72746e616d653d6d697865642c717569657400010000383d302c00"], 0x0, 0x29f, &(0x7f0000000580)="$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") r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000000)={0x6, 0x10, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000060000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007000000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000c500000095"], &(0x7f0000000640)='syzkaller\x00', 0x4, 0x94, &(0x7f0000000100)=""/148, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x55}, 0x94) syz_io_uring_setup(0x4ac9, &(0x7f00000002c0)={0x0, 0x3194, 0x10, 0x1103, 0x21e}, &(0x7f0000000240)=0x0, &(0x7f0000000340)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000004c0)=@IORING_OP_TIMEOUT={0xb, 0x10, 0x0, 0x0, 0x0, &(0x7f00000005c0)={0x0, 0x3938700}, 0x1, 0x8}) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x1e, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xae, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) r4 = msgget$private(0x0, 0x480) msgsnd(r4, &(0x7f0000000040)=ANY=[], 0x401, 0x0) msgsnd(r4, &(0x7f0000000480)=ANY=[@ANYRESOCT], 0x401, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x40080) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000840)=ANY=[@ANYBLOB="14000000100001000000000010000ca5bd7b0d0bb43900000c0a0101001000000073b63189a80000000a0000060900020073797a310000000009000100737b7a3100ebff00300003800c00008008000340000000021c0000800c00018006000100d10300000c000440000000002df31ab3040080140000001100010000000000000000000100000aa5f06c9f3a3f047085"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) msgsnd(r4, &(0x7f0000000a00)=ANY=[@ANYBLOB="0100"], 0x401, 0x0) msgctl$IPC_RMID(r4, 0x0) sendmsg$inet(r3, &(0x7f0000001600)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000280)="db", 0x1}], 0x1}, 0x41) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='sys_enter\x00', 0xffffffffffffffff, 0x0, 0x1000}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='kfree\x00'}, 0x9) perf_event_open(&(0x7f00000004c0)={0xa, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x840, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x8}, 0x10000, 0x3, 0x5, 0x0, 0x3, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8ab}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x111, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='mem_disconnect\x00'}, 0x10) 2m7.577698862s ago: executing program 4 (id=854): bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bind$bt_l2cap(0xffffffffffffffff, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b000000000000000000000000800000000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000016000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) move_pages(0x0, 0x1efe, &(0x7f0000000080), 0x0, &(0x7f0000000040), 0x0) 2m6.73970551s ago: executing program 4 (id=861): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000000c0)='kmem_cache_free\x00', r1}, 0x18) unshare(0x2040400) unshare(0x20060400) 2m6.695194486s ago: executing program 33 (id=861): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000000c0)='kmem_cache_free\x00', r1}, 0x18) unshare(0x2040400) unshare(0x20060400) 5.117600792s ago: executing program 5 (id=1979): setpgid(0x0, 0x0) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000640)={&(0x7f00000007c0)=ANY=[@ANYBLOB="9feb0100180000000000000028000000280000000a0000000800000000000001000000000a001a02000000000000000300000000050000000200000001000000005f2e5f610000300000cb8b77b6112ec8e9a4d80fbca334f9205fdd095759162f600175ebda939ce7c469650ed57bc41e7bba60d1cc894beca049c488c628309a92"], &(0x7f0000000480)=""/234, 0x4a, 0xea, 0x1, 0x1000, 0x10000}, 0x28) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) getpid() r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuset.effective_cpus\x00', 0x275a, 0x0) ftruncate(r2, 0x2000009) write$binfmt_script(r2, &(0x7f0000000080)={'#! ', './bus'}, 0x9) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x4, 0x3, &(0x7f0000000280)=ANY=[@ANYRES8=r1], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kmem_cache_free\x00', r3}, 0x18) capset(&(0x7f00000000c0)={0x19980330}, &(0x7f0000000040)={0x200000, 0x40200003, 0x0, 0x2, 0x7}) setrlimit(0x40000000000008, &(0x7f0000000080)={0x0, 0x6}) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r4, 0x1, 0x3c, &(0x7f0000000200)=0x1, 0x4) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), r0) sendmsg$TIPC_NL_KEY_FLUSH(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000580)={&(0x7f0000000440)={0x3c, r5, 0x10, 0x70bd28, 0x25dfdbfe, {}, [@TIPC_NLA_SOCK={0x8, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x4}]}, @TIPC_NLA_SOCK={0x20, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x4}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x10001}]}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x200400c1}, 0x80) r6 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r6, &(0x7f0000000040)={0x0, 0x20, &(0x7f0000000080)=[{&(0x7f0000000700)="89000000120081ae08060c40928505007f03e3f70000000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaee0c7a6ec08123d000200080001070400c46b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x20000010) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1803000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000014000800b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf910000000000b3b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ffffffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r8}, 0x10) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f0000000000), 0x4) 4.900519421s ago: executing program 5 (id=1983): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f00000700"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00'}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r3}, &(0x7f0000000040), 0x0}, 0x20) unshare(0x62040200) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYRESDEC], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x3, 0xc, &(0x7f0000000240)=ANY=[@ANYRES16, @ANYRESDEC, @ANYRESDEC=0x0], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x802}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000043c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f00000001c0)='ext4_ext_convert_to_initialized_fastpath\x00', r4}, 0x18) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000800)=ANY=[@ANYBLOB="24000000390007010000000000000000027c0000040000000c0001800600060086"], 0x24}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00'}, 0x10) socket$inet6_sctp(0xa, 0x1, 0x84) 4.092644104s ago: executing program 0 (id=1987): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="b40000000000000061147c000000000085100000fdffffff9500000000000000ccb9597edf39555c956774d2adb03d93a4f1777de54f20e0479963a61f9805cdfeeffcf871cc50c3cd62649c760bc00b1a1de3bd139c04e92408864fe5fe356f3364a01926d1246b2fc4f862e777f9acd604154fcac414cb81d43914aa08854f6d219868268ee449f59b99cec29cf169fab1f2e67720cf555f2681997c11c0b65685fb8d71b85de4b0bd82072779b4137ba92891fa496eaa9d9212b19367054ec24a6549c445f96c3deaac8e7deba57b08a456"], &(0x7f0000003ff6)='GPL\x00', 0xa, 0xfd90, &(0x7f000000cf3d)=""/195, 0x41100, 0x6, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0x79e85d2f96ac883c}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_route(0x10, 0x3, 0x0) syz_io_uring_setup(0x70f7, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='kfree\x00'}, 0x10) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x33, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x1f, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000001100000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xc, 0x0, &(0x7f0000000800)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioperm(0x0, 0x9, 0x40000000002) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r0}, 0x18) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB="210000000000000000000000000010000004"], 0x48) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x200000a, 0x13, r1, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[], 0x48) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=ANY=[@ANYBLOB="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"], 0x2dc}, 0x1, 0x0, 0x0, 0x41}, 0x0) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000240)='./file2\x00', 0x2000410, &(0x7f0000000000)={[{@bsdgroups}, {@nouid32}]}, 0xc1, 0x7e9, &(0x7f00000017c0)="$eJzs3c1rHG8dAPDvbF42SauJIGh7CggaKN2YGlsFDxEPIlgo6Nk2bLahZpMt2U1pQqDpQfAiqHgQ9NKzL/UgePXlqv+EeJAW0TRYT7oys7t53d0kbXa3/fXzgck8M/PMPPPN88yzz+4MuwF8sKbTP7mIKxHxwyRisrk+iYiRLDUcsdDI93p3u5hOSdTr3/pnkuX57aWDYyXN+aXmwqcj4o/fi7iWO17qeHNeLq03U7O11Yez1c2t6w9WF5dLy6W1m3Pz8zduffHWzZN7val//2Xr8ssfff1zv14Yjk89/8GfkliIy81te7vbxbc8/AnTMd38n4yk/8IjvnbRhQ1YMugT4I2kl+ZQ4yqPKzEZQ1mqg7e9AAGAd8KTiKgDAB+Y5LTX/yFDBAD4aGl9DrC3u11sTYP9RKK//vHViBhrxN+6v9nYMty8ZzeW3Qed2EuO3BlJImLqAsqfjoif/+47v0yn6NF9SIB2dp425nu7+WP9f5L2f6OnHyHfccvnu+1Wb+w3fWy1/g/65/fp+OdLJ8d/V/cf6BnL/h4b/4zl21y7b+L06z/3osOuZ+ibTpeO/75y6Nm2g/Hf/kNrU0PNpY9lY76R5P6Dcint2z4eETMxkk+X57Ks7Z+Cmnn131edyj88/vvXj7/7i7T8dH6QI/diOB/1xnN5/8vG60uLtcWLiD2L/2nE1eF28Sf749/kSP0v7Ed6p+NRj1bNN778/Z91ypnGn8bbmk7G31v1ZxGfbVv/B3WZdH0+cTZrDrOtRtHGb/7204lO5R/Ufz6bp+W33gv0Q1r/E93jn0pT1c2tlcVyubRePX8Zf342+YdO2w63//bxZ+3/iLT9jybfztKtlvZ4sVZbn4sYTb55cv2Ng31by638afwzn2l//bdv/42+IH1PeG9/qbvhl6O/ah6qbfyZnU7x91Ya/9K56r9Lot7c59im569XhjqVf7b6n89SM801Z+n/TjnTt2jNAAAAAAAAAAAAAAAAAAAAAAAAAHB+uYi4HEmusJ/O5QqFxm94fzImcuVKtXbtfmVjbSmy38qeipFc66suJw99H+pc8/vwW8s3ji1/ISI+ERE/yY9ny4Vipbw06OABAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoOnS0d//f5LOCoXGtr/nB312AEDPjA36BACAvvP6DwAfnvO9/o/37DwAgP459/v/etKbEwEA+ubMr//3enseAED/uP8PAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAj925fTud6v/Z3S6my0uPNjdWKo+uL5WqK4XVjWKhWFl/WFiuVJbLpUKxstrxQDuNWblSeTgfaxuPZ2ulam22url1d7WysVa7+2B1cbl0tzTSt8gAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4Oyqm1sri+VyaV2iS2K8NN45TxIRAz/D0xJpXV/kAYff0ZB3/jqSteuumWPqvWn8o13yJBdZ1vjxNYd7ifFBdE0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA74X/BwAA///YTBJy") bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000a200000000000007020000f8ffffffb703000008000000b70400008a163063e78101795d085fa2590000000085000000030000009500"/85], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) seccomp$SECCOMP_GET_ACTION_AVAIL(0x2, 0x0, &(0x7f0000000280)=0x7fff0000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00'}, 0x10) syz_mount_image$iso9660(&(0x7f0000000540), &(0x7f00000001c0)='./file1\x00', 0x14004, &(0x7f00000005c0)=ANY=[@ANYRES32=0x0], 0x4, 0x70a, &(0x7f00000232c0)="$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") chown(&(0x7f0000000040)='./file1\x00', 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.stat\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r3, 0x0) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000040), 0x5}, 0x38) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x17, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000003000080000000000400000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500001cdc6f8fd9f984dc2f98d2caa6702a680083000000bf090000000000fd5509010000000000950000000000000018430000020000000000000000000000950000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000c000000b700000000000000bf91000000000000b7020000000000008500000084000000b7000000000000009500000000000000"], &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x6, &(0x7f0000000000)=""/6, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 3.874540782s ago: executing program 5 (id=1989): bpf$ENABLE_STATS(0x20, 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000100)) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f0000000c00)={[{@noblock_validity}, {}, {@sysvgroups}, {@resuid={'resuid', 0x3d, 0xee01}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@nodelalloc}, {@nodelalloc}, {@noauto_da_alloc}, {@nomblk_io_submit}]}, 0x3, 0x56a, &(0x7f00000015c0)="$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") r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x800) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x0, 0x0, &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r3}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000540)='./file7\x00', 0x1c0) 3.539828895s ago: executing program 1 (id=1990): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) sendmsg$IPSET_CMD_PROTOCOL(0xffffffffffffffff, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000800)={0x34, 0x1, 0x6, 0x201, 0x0, 0x0, {0x1, 0x0, 0x8}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x8001}, 0x200080c0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c020000190001000000000000000000e00000020000000000000000000000000000000000000000000000000000000000000003000000000a0000205e000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000800000000000000000000000000000700000000000000000000000000000000000000000000000300000000000000070000000000000000000000000000000000000000000000e02700000000000000000000000000002d00000000000000000000000000000084010500ac1414bb000000000000000000000000000000006c01000000000000ac14142c000000000000000000000000000000000000560000000000fdffffff01000000ac141410000000000000000000000000000000003200000000000000fe800000000000000000000000000500023500000000000000000200feffffff00000000ff010000000000000000000000000001000000003c00000002000000ff0200000000000000000000000000010000000001030000000000000000000000000000ff020000000000000000000000000001000004d33c00000002000000ffffffff00000000000000000000000000000000000000000000000003000000000000000a010102000000000000000000000000000000003200000002"], 0x23c}}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="160000000000000005000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3, 0x0, 0xfffffffffffffffd}, 0x18) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000004cc0), r4) sendmsg$NLBL_UNLABEL_C_STATICADD(r4, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000004e00)={&(0x7f0000004d00)=ANY=[@ANYBLOB="84000000", @ANYRES16=r5, @ANYBLOB="01002abd7000fedbdf2503000000080004000a010101140006006272696467655f736c6176655f31000014000200ff02000000000000000000000000000114000300fe8000000000000000000000000000aa290007"], 0x84}, 0x1, 0x0, 0x0, 0x200080c4}, 0x48040) 3.490239421s ago: executing program 1 (id=1991): syz_mount_image$ext4(&(0x7f0000000700)='ext4\x00', &(0x7f0000000080)='./file1\x00', 0x8052, &(0x7f00000000c0)={[{@grpjquota}, {@bh}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x7fffffff}}, {@barrier_val}]}, 0x3, 0x4f4, &(0x7f0000000740)="$eJzs3E9sVNUeAODfnba0/Hv08Xi8B6IW0dhIbKGgsDAxGE1caGLERF02bSFIoYaWRAjqkBhcGhL3xqVbF27VDTGsTNzi0sSQEMMGMCGOuTP3dqbDzJRppx1Lvy+Z9px7595zzj333Dn3nLkTwLo1lP5JKuEbEbEtIgr1bxiq/Lt7+9LEvduXJqJYKh3/IylvdieNZ7LdxOYsMlyIKHyWVFfUmL1w8fT49PTUuSw+Onfmw9HZCxefPzWQLTl69PChg0deHHuh/UI1SC8t153dn8zs2fX6+1ffnOjNl+ep1ZajU4ZiqFFWyp7pdGJdtrUmnPR2MSO0JT3/0+rqK7f/bdETrSqvuIo5A1ZaqVQq9TdfXSzVu/zAEmDNioFu5wDojvyDPr3/zV+NOgIbVqb70XW3jlVugNJy381eEU+WF+bjIH1197edNBQR7xX//Cp9RbNxiJ4VShwAWJd+OJb3BOv6f4OVmZH756+9nP7/VzaHMhgR/46I7RHxn4jYERH/jYidEfG/iPh/3f7TrkupRfpDdfH59OcnoQo3O1TUhtL+30vZ3Fa1/7cgA4M9WWxrRN5hnjqQHZPh6Os/cWp66mCLNH589Zcvmq2r7f+lrzT9vC+Y5eNmb90A3eT43PiSC1zn1uWI3b315U96I5L5mYAkInZFxO429jtYEz713Dd75iN9C9+3ePnLSg3n0Towz1T6OuLZSO7fvX2pGAvqv5pismB+8sz4yamTU2fH5ucnRwdieurAaHoWHGiYxvWfr7zVLP1Fy//db/WbvHbk++MduylI639Tzfkf+fxttfyDSUQyP187234aV379vOnc6lLP/w3JO+Vwfl/60fjc3LmDERuSNx5cPlbdNo+n/6NYKf/wvsbtf3u2TXokHouI9CR+PCKeiModYpr3vRHxVETsa1H+n155+oO2y19oscMOSss/WXf9q9T8gvqvztc3CyTZ3GCDVT2n99641+Ti8XD1f7gcGs6WNL7+JQsuEc1ymn/apUv+WvbRAwAAgLWhEBFbasaStkShMDJSGQPaEZsK0zOzc/tPzJw/O5muixiMvkI+0lUZD+5L8vHPwZr4WF38UDZu/GXPxnJ8ZGJmerKrJQc2l9t8UhiJeLenpv2nfve9E3j0eV4L1q9W7T/txO+8uoqZAVbVw3/+X/t4RTMCrLqa9t/sCf/iEr73BawB7v+BqsV/6Mc1A9a+krYM61pb7X+/HwGER0lvvD0fXqXnDoF/iKX2/z/tcD6AVbXoc/3LCpT6G68aiAffHAOtd9gTS8vGxgZpdSWQ9qy6kvrGpWyV/5pC0/dEob0d9kdn6vTEMo9G8dzsyZ0dP/lL2XflO12D3zZvp9f7W9TO8gNduRwBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB03N8BAAD//6Yc4S8=") setxattr$incfs_metadata(&(0x7f0000000240)='./file1\x00', &(0x7f0000000280), 0x0, 0x0, 0x1) (fail_nth: 1) 3.254417982s ago: executing program 0 (id=1993): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="b40000000000000061147c000000000085100000fdffffff9500000000000000ccb9597edf39555c956774d2adb03d93a4f1777de54f20e0479963a61f9805cdfeeffcf871cc50c3cd62649c760bc00b1a1de3bd139c04e92408864fe5fe356f3364a01926d1246b2fc4f862e777f9acd604154fcac414cb81d43914aa08854f6d219868268ee449f59b99cec29cf169fab1f2e67720cf555f2681997c11c0b65685fb8d71b85de4b0bd82072779b4137ba92891fa496eaa9d9212b19367054ec24a6549c445f96c3deaac8e7deba57b08a456"], &(0x7f0000003ff6)='GPL\x00', 0xa, 0xfd90, &(0x7f000000cf3d)=""/195, 0x41100, 0x6, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0x79e85d2f96ac883c}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_route(0x10, 0x3, 0x0) syz_io_uring_setup(0x70f7, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='kfree\x00'}, 0x10) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x33, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x1f, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000001100000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xc, 0x0, &(0x7f0000000800)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioperm(0x0, 0x9, 0x40000000002) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000340)='kfree\x00', r0}, 0x18) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x48) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x200000a, 0x13, r1, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[], 0x48) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=ANY=[@ANYBLOB="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"], 0x2dc}, 0x1, 0x0, 0x0, 0x41}, 0x0) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000240)='./file2\x00', 0x2000410, &(0x7f0000000000)={[{@bsdgroups}, {@nouid32}]}, 0xc1, 0x7e9, &(0x7f00000017c0)="$eJzs3c1rHG8dAPDvbF42SauJIGh7CggaKN2YGlsFDxEPIlgo6Nk2bLahZpMt2U1pQqDpQfAiqHgQ9NKzL/UgePXlqv+EeJAW0TRYT7oys7t53d0kbXa3/fXzgck8M/PMPPPN88yzz+4MuwF8sKbTP7mIKxHxwyRisrk+iYiRLDUcsdDI93p3u5hOSdTr3/pnkuX57aWDYyXN+aXmwqcj4o/fi7iWO17qeHNeLq03U7O11Yez1c2t6w9WF5dLy6W1m3Pz8zduffHWzZN7val//2Xr8ssfff1zv14Yjk89/8GfkliIy81te7vbxbc8/AnTMd38n4yk/8IjvnbRhQ1YMugT4I2kl+ZQ4yqPKzEZQ1mqg7e9AAGAd8KTiKgDAB+Y5LTX/yFDBAD4aGl9DrC3u11sTYP9RKK//vHViBhrxN+6v9nYMty8ZzeW3Qed2EuO3BlJImLqAsqfjoif/+47v0yn6NF9SIB2dp425nu7+WP9f5L2f6OnHyHfccvnu+1Wb+w3fWy1/g/65/fp+OdLJ8d/V/cf6BnL/h4b/4zl21y7b+L06z/3osOuZ+ibTpeO/75y6Nm2g/Hf/kNrU0PNpY9lY76R5P6Dcint2z4eETMxkk+X57Ks7Z+Cmnn131edyj88/vvXj7/7i7T8dH6QI/diOB/1xnN5/8vG60uLtcWLiD2L/2nE1eF28Sf749/kSP0v7Ed6p+NRj1bNN778/Z91ypnGn8bbmk7G31v1ZxGfbVv/B3WZdH0+cTZrDrOtRtHGb/7204lO5R/Ufz6bp+W33gv0Q1r/E93jn0pT1c2tlcVyubRePX8Zf342+YdO2w63//bxZ+3/iLT9jybfztKtlvZ4sVZbn4sYTb55cv2Ng31by638afwzn2l//bdv/42+IH1PeG9/qbvhl6O/ah6qbfyZnU7x91Ya/9K56r9Lot7c59im569XhjqVf7b6n89SM801Z+n/TjnTt2jNAAAAAAAAAAAAAAAAAAAAAAAAAHB+uYi4HEmusJ/O5QqFxm94fzImcuVKtXbtfmVjbSmy38qeipFc66suJw99H+pc8/vwW8s3ji1/ISI+ERE/yY9ny4Vipbw06OABAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoOnS0d//f5LOCoXGtr/nB312AEDPjA36BACAvvP6DwAfnvO9/o/37DwAgP459/v/etKbEwEA+ubMr//3enseAED/uP8PAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAj925fTud6v/Z3S6my0uPNjdWKo+uL5WqK4XVjWKhWFl/WFiuVJbLpUKxstrxQDuNWblSeTgfaxuPZ2ulam22url1d7WysVa7+2B1cbl0tzTSt8gAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4Oyqm1sri+VyaV2iS2K8NN45TxIRAz/D0xJpXV/kAYff0ZB3/jqSteuumWPqvWn8o13yJBdZ1vjxNYd7ifFBdE0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA74X/BwAA///YTBJy") bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000a200000000000007020000f8ffffffb703000008000000b70400008a163063e78101795d085fa2590000000085000000030000009500"/85], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) seccomp$SECCOMP_GET_ACTION_AVAIL(0x2, 0x0, &(0x7f0000000280)=0x7fff0000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00'}, 0x10) syz_mount_image$iso9660(&(0x7f0000000540), &(0x7f00000001c0)='./file1\x00', 0x14004, &(0x7f00000005c0)=ANY=[@ANYRES32=0x0], 0x4, 0x70a, &(0x7f00000232c0)="$eJzs3V+P21gZBvDnJJkkk0JVAapWVbdzOmWlqRhSJ7NNFRUkjHOSMSRxZHtgRkJaFTqDRs0UaItEc9PODX+k5Qtwtzdc8CFW4oKr/RZwBdIKhIR2BUJGPraTTOJkJm3a2aXPb7Qb5/j18etjr896xj4GERERERERERERERERERERERERERERERERERERERERERERERERERERERERERERERERERERERERERERERERERERQVgNw6gItO3uzq6czWq4Tif5ksXU/Ki2FdyMJm7OW+dKuF5AhP+gWMRbUfFbXxmFXA7/tY6r0berKIYfRQwuXL5098u5TLL8nIRfBBat8PHTwYN7/f7+ozPEZrFw9ecJmTMEtVTX9hy7Y7aUtD1H1ms149Z205NNu628Pc9XHWm5KuM7rtywbspKvb4lVXnP2em2GmZbJYV3vl41jJr8TiHa0QDKnrVtt9t2t6VjwtlhzB35/g+iAGV2pDw47O9vjeXzLK2Nw6BKSvKZ8eAwqHra5laNarVSqVYrtdv123cMIzdVYISEMYSpiKUftHSeMvHxusAiyzt5E72kjNX4j/FnAbRRRBc72IVM/bHQgAsHnRnzY0n//84tNXe94/1/0suvjGZfge7/r0Xfrs3q/2fkIiH1AmlzxIzyxX5WdEYSj/EUAzzAPfTRxz4eLaFuCbn20jXkjbgll5LPzJ8WFLqw4cGBjQ5MtPBFyLhEoo4aajDwHrbRhAeJJmy0oeBhDx58qPCIyoeZKpjw4cCFxAYs3IREBXXUsQUJhTL24GAHXbTQgIlPgiA4wKFu9604n+cpW40kqDJjIwrIJcfdPqpztnZW///DZ9HScf9vsP9/U0XHQSH6+GheDNFnQBBf/y9o7dVkQ0RERERERESvgtC/fRf6r/JvAwjQtNvKOBFTOLfsiIiIiIiIiGgZBIICrkJEd+XjbYjp638iIiIiIiIi+nwT+hk7AaCkb+oXo8elzvJLgOxrSJGIiIiIiIiIXpJ+8v9aHgj0Xf5rEAtd/xMRERERERHR58Cvx8bYz2XjMXaD5M/6GQBrfymID/9egLsijnu7XxVHZjjHPIpjpu4A8JtXxMV4oF79kQegv1nqqojXJoF/Jb99CH18kD7W//MgIoRwJxLIZ8crmJGACNdcy8Xf8D6uR4tcj8eZvz/IQM+JRhQuNe22KltO+24Fpnkx46td/+cPD38BuMPtPDjs75d/9JP+fZ3LcVh0fBRW+uxEOpn0xhjl8kSPt6CfuUgb3XgVzWSVv+l2SkKv10i2PwvzKDO+onk7oLYKRFv5S6xH+2w9iGJLg+GI+wJY04M/VMp6l53YendFjLKoTG552o6YseVFncWNKObGxo3oI2mTsJ6MKH4tC1TLk/sgTHQsi+p4Fqe3hfjHRPvPzwKiGLbFVpjFH8OKJtri+x9GC2/1dpPhMc6SxdRRQER0Xg5GvZAexHxqjP2ke0hOamfvd5AD4rPcjN59tJYg7j+S3v3J74Koh8oCufhvE+lrSfoVhGf0DaHryUcDuueupJzRjfKnQRCYF4sYP6P/NwiSDTIW6N2OgyCYPKP/YfQOpDjtqSz+HQTB3YruSX470at+EC7wwcz1eu1qFkUU8OTop/gkmb3/4/2H1epWzXjXMG5XsaL/VyH+yIJ9DxERTTn9HTs6IjMnQryL61Ed1+//7Z1o6kSP96X4lgLtFtDHfWwmrxBYS6+1hAN885/RbQib0VUrsF6KPksDefnS3fCqdhh7KHL6DS+bM6/qdGcZxerbG6rD2OS9Q5NXgKPYrVe8F4iIiF6v9Rn9MHCi/8fJ/r94ov/fxEYUsXEl9bq7NHZL4WZydTy8pB9cOE6NrZye/LeW3BhERERvCOV+LEr+r4Tr2r33KvV6xfS3lXQd67vStRstJe2ur1xr2+y2lOy5ju9YTlv2XBTsVeVJb6fXc1xfNh1X9hzP3tVvfpfxq9891TG7vm15vbYyPSUtp+ubli8btmfJ3s6327a3rVy9sNdTlt20LdO3na70nB3XUmUpPaXGAu2G6vp20w4nu7Ln2h3T3ZPfc9o7HSUbyrNcu+c7UYXJuuxu03E7utoygoVfdEhERPT/6PHTwYN7/f7+o8mJ1fDSPCo5xoyY6Yl8SoUcI4iIiOgzZtRdL7BQ8RUmREREREREREREREREREREREREREREREREU05/pG/BiZW0hwWBYcnPLsYleI7RI4ZT9Qi8bD6fun/SA/u9yOKZYYkAcIalkkciBg8+mhO8OixJmn885niRDHEJeOH2+esXgAu6BFFJbokHwPTzo0s/xtImvnEQteisGD0zdVZhuC9yy//PIZx4+PvpWSJs+SAIgvmLF062Yf7sx3MOwKP8nF2wesrx87rPRET0uv0vAAD//ySOL9Y=") chown(&(0x7f0000000040)='./file1\x00', 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.stat\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r3, 0x0) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000040), 0x5}, 0x38) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x17, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000003000080000000000400000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500001cdc6f8fd9f984dc2f98d2caa6702a680083000000bf090000000000fd5509010000000000950000000000000018430000020000000000000000000000950000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000c000000b700000000000000bf91000000000000b7020000000000008500000084000000b7000000000000009500000000000000"], &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x6, &(0x7f0000000000)=""/6, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2.946492411s ago: executing program 1 (id=1995): openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x101800, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00') getdents(r0, 0xffffffffffffffff, 0x7a) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000200)={'syztnl0\x00', &(0x7f0000000a00)={'tunl0\x00', 0x0, 0x8000, 0x20, 0x5, 0xd, {{0x5, 0x4, 0x3, 0x1d, 0x14, 0x65, 0x0, 0x0, 0x4, 0x0, @rand_addr=0x64010100, @empty}}}}) r2 = syz_io_uring_setup(0xa4d, &(0x7f0000000480)={0x0, 0x28ad, 0x80, 0x9, 0x200}, &(0x7f0000000680)=0x0, &(0x7f0000000440)=0x0) capset(&(0x7f0000000100)={0x20071026}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x81, 0xfffffffb}) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000500)={'vxcan0\x00', 0x0}) r6 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000280)={0x0, 0x1, 0x10}, 0xc) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000640)={&(0x7f00000005c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x6, [@const={0xb, 0x0, 0x0, 0xa, 0x5}, @func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0x3, 0x1}]}, @int={0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x21, 0x1}]}, {0x0, [0x2e, 0x0, 0x30, 0x30]}}, &(0x7f00000006c0)=""/209, 0x4e, 0xd1, 0x1, 0xfffffff7}, 0x28) r7 = open_tree(0xffffffffffffff9c, &(0x7f0000000e00)='./file0\x00', 0x9001) renameat2(r7, &(0x7f0000000140)='./file0\x00', r7, &(0x7f0000000040)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x4) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000540)={0x2, 0x4, 0x8, 0x1, 0x80, r6, 0x220, '\x00', r5, 0x0, 0x0, 0x4}, 0x50) r9 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1e, 0x1c, &(0x7f0000001840)=ANY=[@ANYBLOB="1800000000000000000000000300000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000b7080000000000007b9af8ff00000000b7080000080000007b00020000000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018220000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7050000080000006200000076000000bf91000000000000b5020000000000008500000085000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_lookup=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x2c, 0x0, 0x0, 0x4}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_OPENAT2={0x1c, 0x9, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x23456}) io_uring_enter(r2, 0x47bc, 0x0, 0x0, 0x0, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x0) r10 = socket(0x28, 0x801, 0x0) r11 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) fsmount(r11, 0x0, 0x71) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x8c, &(0x7f0000000000)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r11, @ANYBLOB=',wfdno=', @ANYRESHEX=r10, @ANYBLOB="322b894b"]) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/crypto\x00', 0x0, 0x0) ioctl$BTRFS_IOC_DEFRAG(r10, 0x50009402, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000000c0)={0x0, 0x5, 0x8}, 0xc) 2.863466922s ago: executing program 6 (id=1997): setpgid(0x0, 0x0) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000640)={&(0x7f00000007c0)=ANY=[@ANYBLOB="9feb0100180000000000000028000000280000000a0000000800000000000001000000000a001a02000000000000000300000000050000000200000001000000005f2e5f610000300000cb8b77b6112ec8e9a4d80fbca334f9205fdd095759162f600175ebda939ce7c469650ed57bc41e7bba60d1cc894beca049c488c628309a92"], &(0x7f0000000480)=""/234, 0x4a, 0xea, 0x1, 0x1000, 0x10000}, 0x28) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) getpid() r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuset.effective_cpus\x00', 0x275a, 0x0) ftruncate(r2, 0x2000009) write$binfmt_script(r2, &(0x7f0000000080)={'#! ', './bus'}, 0x9) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x4, 0x3, &(0x7f0000000280)=ANY=[@ANYRES8=r1], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kmem_cache_free\x00', r3}, 0x18) capset(&(0x7f00000000c0)={0x19980330}, &(0x7f0000000040)={0x200000, 0x40200003, 0x0, 0x2, 0x7}) setrlimit(0x40000000000008, &(0x7f0000000080)={0x0, 0x6}) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r4, 0x1, 0x3c, &(0x7f0000000200)=0x1, 0x4) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), r0) sendmsg$TIPC_NL_KEY_FLUSH(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000580)={&(0x7f0000000440)={0x3c, r5, 0x10, 0x70bd28, 0x25dfdbfe, {}, [@TIPC_NLA_SOCK={0x8, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x4}]}, @TIPC_NLA_SOCK={0x20, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x4}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x10001}]}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x200400c1}, 0x80) r6 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r6, &(0x7f0000000040)={0x0, 0x20, &(0x7f0000000080)=[{&(0x7f0000000700)="89000000120081ae08060c40928505007f03e3f70000000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaee0c7a6ec08123d000200080001070400c46b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x20000010) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1803000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000014000800b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf910000000000b3b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ffffffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r8}, 0x10) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f0000000000), 0x4) 2.676078326s ago: executing program 6 (id=1998): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYRESHEX=0x0], 0x48) r1 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) r2 = fsmount(r1, 0x0, 0x0) r3 = openat$cgroup_subtree(r2, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000340)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r0, @ANYBLOB, @ANYRES16=r2, @ANYRESOCT=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xd6f]}, 0x0, 0x8) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r4, 0x3) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, 0x0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000140)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2c}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2}}}}}}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x0) syz_emit_ethernet(0xa0, &(0x7f0000000a00)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x6, 0x4, 0x0, 0x0, 0x92, 0x67, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local, {[@end]}}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5}, {"a5d96015f1ece62c226c037296d6e6db3af1851148f194ac975ac4bf8f088a2947934cffdbf5f534e094c78890066d4b3280d67d48a7c9614623de3d43a42884456addfdeded1f39bce10ace8dccb230d9fae8574a79101d28c757e59d9b3e985c1a47b1c805"}}}}}}, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x0, 0x0, 0x0, 0x4, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000100)={&(0x7f00002c2000/0x3000)=nil, &(0x7f00003c4000/0x1000)=nil, &(0x7f000020d000/0x3000)=nil, &(0x7f00002be000/0x4000)=nil, &(0x7f0000571000/0x4000)=nil, &(0x7f0000735000/0x3000)=nil, &(0x7f0000393000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f000053a000/0x2000)=nil, &(0x7f0000017000/0x2000)=nil, &(0x7f0000489000/0x4000)=nil, &(0x7f0000000000)="270ac8e45d5f5490c5df142ca2b3965e50d237e1c11d19bed71b1e2bb3e753d5dae01accd33fcfd67d26c6ef88808e7178cdf6e620afa5ec9d9199899088b7bb2f79ea1391929b8e2be98438920dddd84a96c17756372bc9d430c194dcbbce05bccefeb691824b647ca719a10ea276e5934047f39d9d7293486800c3247364fe3fcfb670480d44fb4686500c0d41fd8a395dd0fd1d858487b372b2081a8ad30ee3a73d90766b23d9a6ef1d7d5d2d8c436544c2a9558bf1b1c0a5f2fcc19be6e6f5c57537b512e1ca7649371e64c482", 0xcf}, 0x68) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) 2.483338661s ago: executing program 6 (id=1999): r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b0000000700000008000000a6ad6a1a05"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000000000000000000000000001811000064a8370b82833d8d80ae5b875864d60280ecbb579e3f412d505342d0c57ee436c90eacc5c1e9d4b160bd3b8ca91ffc94de93fc85ec96857bd3fdda9dfbffdf898233b6ae67f6158ced8c8a7ec96ad6e01fb12b52ea3ecbe814e845cabd756fc8333c100c33c9c026d7442623f754a2a0", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000ebff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xa8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) r3 = accept4$vsock_stream(r0, &(0x7f0000000200)={0x28, 0x0, 0x2711, @hyper}, 0x10, 0x40000) accept4$vsock_stream(r3, &(0x7f0000000300)={0x28, 0x0, 0xffff96cd, @my=0x1}, 0x10, 0x800) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@deltaction={0x4c, 0x18, 0x2, 0x70bd2c, 0x25dfdc00, {0xa}, [@TCA_ACT_TAB={0x38, 0x1, [{0xc, 0x13, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0x20, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x81}}, {0xc, 0x9, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x80000007}}, {0x10, 0x8, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x44000}, 0x20040844) madvise(&(0x7f00004fd000/0x4000)=nil, 0x4000, 0x9) r5 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000000c0)={'bond0\x00'}) socket$inet6(0xa, 0x3, 0x6) r6 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r6, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f) connect$inet(r6, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r6, &(0x7f0000007fc0), 0x800001d, 0x300) syz_clone(0x41000100, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x42164000, 0x0, 0x0, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r7 = getpid() sched_setscheduler(r7, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb2570000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r8, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x2000000}, 0x6e) sendmmsg$unix(r9, &(0x7f0000000000), 0x651, 0x0) sched_getaffinity(r7, 0x8, &(0x7f0000000000)) recvmmsg(r8, &(0x7f00000000c0), 0x10106, 0x2, 0x0) 2.405939201s ago: executing program 0 (id=2001): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18080000000000000000000000000002850000000f000000850000002a0000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sys_enter\x00', r1, 0x0, 0xffffffffffffffff}, 0x18) get_mempolicy(0x0, 0x0, 0x4, &(0x7f000038d000/0x1000)=nil, 0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r2, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_inet6_udp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0xc04, &(0x7f0000000580)={[{@orlov}, {@noinit_itable}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$eJzs3c9vFFUcAPDvbH/QUrSFGBUP0sQYSJSWFjDEeICrIQ3+iBcvVloQKdDQGi2aUBK8mBgvxph48iD+F0rkyklPHrx4MiREDUcT18x2pnTb2ZYubacyn0+y9M17O7w33X773r6+NxtAZQ2m/9Qi9kbEdBLRn8wvlnVGVji48Lx7f39yOn0kUa+/8WcSSZaXPz/JvvZlJ/dExM8/JbGnY2W9M3NXzo9PTU1ezo6HZy9MD8/MXTl47sL42cmzkxdHXxo9dvTI0WMjh9q6rqsFeSevv/9h/2djb3/3zT/JyPe/jSVxPF7Nnrj0OjbKYAw2vifJyqK+YxtdWUk6sp+TpS9x0llig1iX/PXrioinoj864v6L1x+fvlZq44BNVU8i6kBFJeIfKiofB+Tv7Ze/D66VMioBtsLdEwsTACvjv3NhbjB6GnMDO+8lsXRaJ4mI9mbmmu2KiNu3xq6fuTV2PTZpHg4oNn8tIp4uiv+kEf8D0RMDjfivNcV/Oi44lX1N819vs/7lU8XiH7bOQvz3rBr/0SL+31kS/++2Wf/g/eR7vU3x39vuJQEAAAAAAEBl3TwRES8W/f2/trj+JwrW//RFxPENqH9w2fHKv//X7mxANUCBuyciXilc/1vLV/8OdGSpxxrrAbqSM+emJg9FxOMRcSC6dqTHI6vUcfDzPV+3KhvM1v/lj7T+29lawKwddzp3NJ8zMT47/rDXDUTcvRbxTOH632Sx/08K+v/098H0A9ax5/kbp1qVrR3/wGapfxuxv7D/v3/XimT1+3MMN8YDw/moYKVnP/7ih1b1txv/bjEBDy/t/3euHv8DydL79cysv47Dc531VmXtjv+7kzcbt5zpzvI+Gp+dvTwS0Z2c7Ehzm/JH199meBTl8ZDHSxr/B55bff6vaPzfGxHzy/7v5K/mPcW5J//t+71Ve4z/oTxp/E+sq/9ff2L0xsCPrep/sP7/SKOvP5DlmP+DBV/lYdrdnF8Qjp1FRVvdXgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4FNQiYlcktaHFdK02NBTRFxFPxM7a1KWZ2RfOXPrg4kRa1vj8/1r+Sb/9C8dJ/vn/A0uOR5cdH46I3RHxZUdv43jo9KWpibIvHgAAAAAAAAAAAAAAAAAAALaJvhb7/1N/dJTdOmDTdZbdAKA0BfH/SxntALae/h+qS/xDdYl/qC7xD9Ul/qG6xD9Ul/iH6hL/AAAAAADwSNm97+avSUTMv9zbeKS6s7KuUlsGbLZa2Q0ASuMWP1Bdlv5AdXmPDyRrlPe0PGmtM1czffohTgYAAAAAAAAAAACAytm/1/5/qCr7/6G67P+H6sr3/+8ruR3A1vMeH4g1dvIX7v9f8ywAAAAAAAAAAAAAYCPNzF05Pz41NXlZ4q3t0YytTNTr9avpT8F2ac//PJEvhd8u7VmWyPf6PdhZ5f1OAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAmv0XAAD//xYSJMU=") r4 = syz_io_uring_setup(0x3ac6, &(0x7f00000001c0)={0x0, 0xffff7ffd, 0x10100, 0x0, 0x281}, &(0x7f0000000080)=0x0, &(0x7f0000000100)=0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r5, r6, &(0x7f0000000380)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r7, 0x0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='8\f\x00\x00'], 0xc48}, 0x0, 0xe3d08660d3cd4684}) io_uring_enter(r4, 0x92, 0x0, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='tlb_flush\x00', r3}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) syz_usbip_server_init(0x2) r8 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r8, 0x0, 0x27, 0x0, 0xc) r9 = creat(&(0x7f0000010280)='./file0\x00', 0x182) openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) openat$selinux_policy(0xffffff9c, &(0x7f0000000180), 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xf, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000053c480d9", @ANYRESDEC=r9, @ANYRESOCT=0x0], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, r9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) lsm_get_self_attr(0x69, &(0x7f0000000480)={0x0, 0x0, 0xbc, 0x9c, ""/156}, &(0x7f0000000140)=0xbc, 0x0) 1.969141037s ago: executing program 1 (id=2002): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) sendmsg$IPSET_CMD_PROTOCOL(0xffffffffffffffff, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000800)={0x34, 0x1, 0x6, 0x201, 0x0, 0x0, {0x1, 0x0, 0x8}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x8001}, 0x200080c0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c020000190001000000000000000000e00000020000000000000000000000000000000000000000000000000000000000000003000000000a0000205e000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000800000000000000000000000000000700000000000000000000000000000000000000000000000300000000000000070000000000000000000000000000000000000000000000e02700000000000000000000000000002d00000000000000000000000000000084010500ac1414bb000000000000000000000000000000006c01000000000000ac14142c000000000000000000000000000000000000560000000000fdffffff01000000ac141410000000000000000000000000000000003200000000000000fe800000000000000000000000000500023500000000000000000200feffffff00000000ff010000000000000000000000000001000000003c00000002000000ff0200000000000000000000000000010000000001030000000000000000000000000000ff020000000000000000000000000001000004d33c00000002000000ffffffff00000000000000000000000000000000000000000000000003000000000000000a010102000000000000000000000000000000003200000002"], 0x23c}}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="160000000000000005000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3, 0x0, 0xfffffffffffffffd}, 0x18) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000004cc0), r4) sendmsg$NLBL_UNLABEL_C_STATICADD(r4, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000004e00)={&(0x7f0000004d00)=ANY=[@ANYBLOB="84000000", @ANYRES16=r5, @ANYBLOB="01002abd7000fedbdf2503000000080004000a010101140006006272696467655f736c6176655f31000014000200ff02000000000000000000000000000114000300fe8000000000000000000000000000aa290007"], 0x84}, 0x1, 0x0, 0x0, 0x200080c4}, 0x48040) 1.884443638s ago: executing program 1 (id=2003): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETSTEERINGEBPF(r0, 0x400454da, &(0x7f0000000000)) r1 = syz_open_procfs(0xffffffffffffffff, 0x0) r2 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) r3 = inotify_init1(0x0) inotify_add_watch(r3, &(0x7f0000000140)='./file0\x00', 0xa4000021) close(r3) openat$selinux_enforce(0xffffffffffffff9c, 0x0, 0x88182, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(&(0x7f00000003c0), 0xffffffffffffffff) syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), r1) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000007c0)={r1, 0xe0, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340), ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380), &(0x7f00000003c0), 0x0, 0xe1, &(0x7f0000000400)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000540), &(0x7f0000000580), 0x8, 0x4f, 0x8, 0x8, &(0x7f00000005c0)}}, 0x10) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000940)={'ip_vti0\x00', &(0x7f0000000800)={'ip_vti0\x00', 0x0, 0x700, 0x700, 0x8, 0xb25, {{0x42, 0x4, 0x3, 0x4, 0x108, 0x66, 0x0, 0x9f, 0x2f, 0x0, @multicast2, @dev={0xac, 0x14, 0x14, 0x21}, {[@ra={0x94, 0x4}, @lsrr={0x83, 0x23, 0x7f, [@multicast2, @rand_addr=0x64010102, @local, @multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty, @rand_addr=0x64010102, @multicast1]}, @ra={0x94, 0x4}, @timestamp={0x44, 0x14, 0x8c, 0x0, 0x5, [0x96, 0x2, 0x7, 0x8]}, @timestamp={0x44, 0x28, 0x96, 0x0, 0x7, [0x1, 0x8, 0x80, 0x0, 0x200, 0xf9, 0x3307941b, 0x8, 0x9]}, @ssrr={0x89, 0x23, 0x60, [@empty, @dev={0xac, 0x14, 0x14, 0x11}, @multicast1, @private=0xa010101, @initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010100, @private=0xa010101, @loopback]}, @timestamp_addr={0x44, 0x1c, 0x3b, 0x1, 0x9, [{@broadcast, 0x10000000}, {@multicast2}, {@private=0xa010100, 0x7f}]}, @rr={0x7, 0x2b, 0x42, [@private=0xa010102, @multicast2, @broadcast, @remote, @loopback, @dev={0xac, 0x14, 0x14, 0x30}, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote, @private=0xa010102, @rand_addr=0x64010100]}, @rr={0x7, 0x17, 0x30, [@dev={0xac, 0x14, 0x14, 0x41}, @private=0xa010102, @loopback, @empty, @dev={0xac, 0x14, 0x14, 0x30}]}, @rr={0x7, 0xb, 0x15, [@remote, @dev={0xac, 0x14, 0x14, 0x10}]}]}}}}}) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000080)={[{@usrquota}, {@noblock_validity}, {@bh}, {@max_batch_time={'max_batch_time', 0x3d, 0x8c9}}, {@debug}, {@inlinecrypt}]}, 0x6, 0x5fc, &(0x7f0000000c00)="$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") 1.586726246s ago: executing program 5 (id=2004): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xbc, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@multicast2, 0x0, 0x5, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x80000000000a9, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x7fffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000000}}, [@tmpl={0x4}]}, 0xbc}}, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc000000190001002dbd70000000000064010100000000000000000000000000fc01000000000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000800000000000003000000000000000000000000000000fdfffffffbffffff0000000000000000ffffffffffffffff053b000000000000000000000000000002000000000000005600000000000000feffffffff7f40000200000000000008000000000000000001"], 0xfc}}, 0x0) process_vm_writev(0x0, &(0x7f0000000500), 0x9, 0x0, 0x0, 0x0) r1 = socket$key(0xf, 0x3, 0x2) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c000000100085060000", @ANYRES32=r4, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000780)=ANY=[@ANYBLOB="3c00000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800a000100767863616e0000000400028008000a00", @ANYRES32=r4], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$IPSET_CMD_GET_BYNAME(r2, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0xe, 0x6, 0x5, 0x0, 0x0, {0x7, 0x0, 0xa}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4800) socket$nl_generic(0x10, 0x3, 0x10) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000010c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r5}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x10, &(0x7f0000000d40)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$key(r1, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) 1.267854437s ago: executing program 3 (id=2007): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB='\v\x00\x00\x00\b\x00\x00\x00\f'], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xd, &(0x7f0000000c80)=ANY=[@ANYBLOB="18000000220000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000021007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1, 0x0, 0xfffffffffffffffc}, 0x18) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e0000000800000000001800038014000380"], 0x44}}, 0x40) 1.253141339s ago: executing program 3 (id=2008): r0 = socket$netlink(0x10, 0x3, 0x10) setpgid(0x0, 0x0) bind$netlink(r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000640)={&(0x7f00000007c0)=ANY=[@ANYBLOB="9feb0100180000000000000028000000280000000a0000000800000000000001000000000a001a02000000000000000300000000050000000200000001000000005f2e5f610000300000cb8b77b6112ec8e9a4d80fbca334f9205fdd095759162f600175ebda939ce7c469650ed57bc41e7bba60d1cc894beca049c488c628309a92"], &(0x7f0000000480)=""/234, 0x4a, 0xea, 0x1, 0x1000, 0x10000}, 0x28) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) getpid() r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuset.effective_cpus\x00', 0x275a, 0x0) ftruncate(r3, 0x2000009) write$binfmt_script(r3, &(0x7f0000000080)={'#! ', './bus'}, 0x9) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x4, 0x3, &(0x7f0000000280)=ANY=[@ANYRES8=r2], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kmem_cache_free\x00', r4}, 0x18) capset(&(0x7f00000000c0)={0x19980330}, &(0x7f0000000040)={0x200000, 0x40200003, 0x0, 0x2, 0x7}) setrlimit(0x40000000000008, &(0x7f0000000080)={0x0, 0x6}) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r5, 0x1, 0x3c, &(0x7f0000000200)=0x1, 0x4) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), r1) sendmsg$TIPC_NL_KEY_FLUSH(r0, &(0x7f00000005c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000580)={&(0x7f0000000440)={0x3c, r6, 0x10, 0x70bd28, 0x25dfdbfe, {}, [@TIPC_NLA_SOCK={0x8, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x4}]}, @TIPC_NLA_SOCK={0x20, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x4}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x10001}]}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x200400c1}, 0x80) r7 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r7, &(0x7f0000000040)={0x0, 0x20, &(0x7f0000000080)=[{&(0x7f0000000700)="89000000120081ae08060c40928505007f03e3f70000000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaee0c7a6ec08123d000200080001070400c46b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x20000010) r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1803000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b702000014000800b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf910000000000b3b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ffffffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r9}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) 1.200116326s ago: executing program 3 (id=2009): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYRESHEX=0x0], 0x48) r1 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) r2 = fsmount(r1, 0x0, 0x0) r3 = openat$cgroup_subtree(r2, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000340)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r0, @ANYBLOB, @ANYRES16=r2, @ANYRESOCT=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xd6f]}, 0x0, 0x8) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r4, 0x3) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, 0x0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000140)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2c}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2}}}}}}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x0) syz_emit_ethernet(0xa0, &(0x7f0000000a00)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x6, 0x4, 0x0, 0x0, 0x92, 0x67, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local, {[@end]}}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5}, {"a5d96015f1ece62c226c037296d6e6db3af1851148f194ac975ac4bf8f088a2947934cffdbf5f534e094c78890066d4b3280d67d48a7c9614623de3d43a42884456addfdeded1f39bce10ace8dccb230d9fae8574a79101d28c757e59d9b3e985c1a47b1c805"}}}}}}, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x0, 0x0, 0x0, 0x4, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000100)={&(0x7f00002c2000/0x3000)=nil, &(0x7f00003c4000/0x1000)=nil, &(0x7f000020d000/0x3000)=nil, &(0x7f00002be000/0x4000)=nil, &(0x7f0000571000/0x4000)=nil, &(0x7f0000735000/0x3000)=nil, &(0x7f0000393000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f000053a000/0x2000)=nil, &(0x7f0000017000/0x2000)=nil, &(0x7f0000489000/0x4000)=nil, &(0x7f0000000000)="270ac8e45d5f5490c5df142ca2b3965e50d237e1c11d19bed71b1e2bb3e753d5dae01accd33fcfd67d26c6ef88808e7178cdf6e620afa5ec9d9199899088b7bb2f79ea1391929b8e2be98438920dddd84a96c17756372bc9d430c194dcbbce05bccefeb691824b647ca719a10ea276e5934047f39d9d7293486800c3247364fe3fcfb670480d44fb4686500c0d41fd8a395dd0fd1d858487b372b2081a8ad30ee3a73d90766b23d9a6ef1d7d5d2d8c436544c2a9558bf1b1c0a5f2fcc19be6e6f5c57537b512e1ca7649371e64c482", 0xcf}, 0x68) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) 1.134623994s ago: executing program 1 (id=2010): bpf$ENABLE_STATS(0x20, 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000100)) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f0000000c00)={[{@noblock_validity}, {}, {@sysvgroups}, {@resuid={'resuid', 0x3d, 0xee01}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@nodelalloc}, {@nodelalloc}, {@noauto_da_alloc}, {@nomblk_io_submit}]}, 0x3, 0x56a, &(0x7f00000015c0)="$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") r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x800) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000540)='./file7\x00', 0x1c0) 938.555159ms ago: executing program 3 (id=2011): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000580)={'batadv_slave_0\x00', 0x0}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCADDRT(r2, 0x890b, &(0x7f0000000800)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @rand_addr=' \x01\x00', @private0, 0x0, 0x6, 0x0, 0x500, 0x6, 0x1a0107, r1}) 869.795398ms ago: executing program 6 (id=2012): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=0xffffffffffffffff, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0xffffffffffffffb4}, 0x94) r3 = socket$inet6(0x10, 0x3, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0b00000008000000010001000900000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYRESHEX=r1], 0x0, 0x5, 0x0, 0x0, 0x41000, 0x3c, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0xffffffff, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1d, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000380)='neigh_update\x00', r5}, 0x10) sendto$inet6(r3, &(0x7f00000000c0)="900000001c001f4d154a817393278bff0a80a578020000000104740014000100ac1414bb0542d6401051a2d708f37ac8da1a297e0099c5ac0000c5b068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000760700c0c80cefd28581d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee9aa241731ae9e0b390", 0x90, 0x0, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYRESOCT=0x0], &(0x7f00000000c0)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001240)={&(0x7f0000000200)='kfree\x00', r6, 0x0, 0xfffffffffffffffd}, 0x18) r7 = getpgrp(0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='net/ip_tables_matches\x00') r8 = syz_pidfd_open(r7, 0x0) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x3, 0xc, &(0x7f00000006c0)=ANY=[@ANYBLOB="180200000004000000000000050000008500000087000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000009000000850000000600000095"], &(0x7f0000000080)='GPL\x00', 0x2, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xc}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r9, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) fremovexattr(r8, &(0x7f0000000280)=@known='trusted.overlay.nlink\x00') ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket$unix(0x1, 0x1, 0x0) r10 = socket(0x400000000010, 0x3, 0x0) r11 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000340)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r12, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0) socket$kcm(0x11, 0x3, 0x0) r13 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r13) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @broadcast}) socket(0x11, 0x800, 0x0) socket$unix(0x1, 0x2, 0x0) 869.368448ms ago: executing program 3 (id=2013): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) sendmsg$IPSET_CMD_PROTOCOL(0xffffffffffffffff, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000800)={0x34, 0x1, 0x6, 0x201, 0x0, 0x0, {0x1, 0x0, 0x8}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x8001}, 0x200080c0) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="160000000000000005000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2, 0x0, 0xfffffffffffffffd}, 0x18) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000004cc0), r3) sendmsg$NLBL_UNLABEL_C_STATICADD(r3, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000004e00)={&(0x7f0000004d00)=ANY=[@ANYBLOB="84000000", @ANYRES16=r4, @ANYBLOB="01002abd7000fedbdf2503000000080004000a010101140006006272696467655f736c6176655f31000014000200ff02000000000000000000000000000114000300fe8000000000000000000000000000aa290007"], 0x84}, 0x1, 0x0, 0x0, 0x200080c4}, 0x48040) 860.670229ms ago: executing program 0 (id=2014): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300001e880000850000007000000095"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_emit_ethernet(0x4e, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaac7aaaaaaaaaaaaaaaa0008008000000000000000000690780a0101020a01010244140a01e0000001fffffffce000afaebd5e306718d4d80001000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5c00000090780000"], 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000003000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x20000000}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x14, &(0x7f0000000480)=ANY=[@ANYRESHEX=r1, @ANYRESOCT=r2], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000"], 0x7c}}, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000004cbd1811c70000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r5}, 0x18) sendmsg$NFT_BATCH(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000007c0)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x4) sendmsg$NL80211_CMD_SET_MPATH(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000780)={&(0x7f0000000a00)={0x74, 0x0, 0x100, 0x70bd2c, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x0, 0x51}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x74}, 0x1, 0x0, 0x0, 0x4000010}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000180a0500000000000000000002000000300003802c00038014000100776732000000000000000000000000001400010076657468315f746f5f627269646765000900020073797a30000000000900010073797a300000000014000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x24040089}, 0x20008000) r6 = syz_open_dev$usbfs(&(0x7f0000000080), 0x75, 0x109301) ioctl$USBDEVFS_DISCONNECT_CLAIM(r6, 0x8108551b, &(0x7f0000002600)={0x0, 0x0, "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"}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00"/14], 0x48) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000004c0)={{{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x4e, 0x2, 0x0, 0xffffffeffffffffd}, {0x800, 0x0, 0x7fffffff, 0x20000000}, 0x0, 0x0, 0x0, 0x1}, {{@in6=@private1={0xfc, 0x1, '\x00', 0x9}, 0x0, 0x2b}, 0xa, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x3, 0x0, 0x0, 0x3, 0x0, 0x3c0}}, 0xe8) r7 = socket$inet_sctp(0x2, 0x1, 0x84) socket$rds(0x15, 0x5, 0x0) r8 = socket$kcm(0xa, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r7, 0x0, 0x487, &(0x7f0000000100)={{0x84, @remote, 0x4e24, 0x3, 'none\x00', 0x37, 0x2, 0x5}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e23, 0x0, 0x101c5, 0x12d61, 0x7}}, 0x44) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000900)={{}, &(0x7f00000008c0), &(0x7f0000000880)}, 0x20) sendmsg$sock(r8, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x8, @dev={0xfe, 0x80, '\x00', 0xfc}, 0xfc}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@timestamping={{0x14, 0x1, 0x25, 0x7f}}], 0x18}, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x18, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000001000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000240)='kmem_cache_free\x00', r9}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) statx(0xffffffffffffffff, 0x0, 0x800, 0x800, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) socket$kcm(0x29, 0x5, 0x0) syz_open_dev$sg(&(0x7f0000000080), 0x8000, 0x208040) 819.888014ms ago: executing program 3 (id=2015): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=0xffffffffffffffff, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r3}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{}, &(0x7f0000000040), 0x0}, 0x20) unshare(0x62040200) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x3) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYRESDEC], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x3, 0xc, &(0x7f0000000240)=ANY=[@ANYRES16=r4, @ANYRESDEC, @ANYRESDEC=0x0], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x802}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000043c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f00000001c0)='ext4_ext_convert_to_initialized_fastpath\x00', r5}, 0x18) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000800)=ANY=[@ANYBLOB="24000000390007010000000000000000027c0000040000000c0001800600060086"], 0x24}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00'}, 0x10) socket$inet6_sctp(0xa, 0x1, 0x84) 780.487779ms ago: executing program 0 (id=2016): r0 = socket$can_raw(0x1d, 0x3, 0x1) recvmmsg(r0, 0x0, 0x0, 0x14103, 0x0) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) connect$nfc_llcp(r1, &(0x7f0000000b00)={0x27, 0x0, 0x1, 0x2, 0x7, 0x7, "9b3136ec60812f2cae1393c8aea058e1f5cdfe337d2a4435de261cd29800c7d5ef73fbda587a5a7c8aed3b2ae4c81e63d2588b49b8870cedb03e1b571273a5", 0x2b}, 0x60) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) bind$can_raw(r0, &(0x7f00000001c0)={0x1d, r2}, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xd, &(0x7f0000000c80)=ANY=[@ANYBLOB="18000000220000000000000000000000850000006d00000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000021007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r4, 0xc0a85320, &(0x7f00000003c0)={{0x80}, 'port1\x00', 0x511e36599023629, 0x100040, 0xe, 0x2, 0x2, 0x2, 0x0, 0x0, 0x5, 0x21}) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r4, 0x40a85321, &(0x7f0000000580)={{0x80}, 'port0\x00', 0x71, 0x100c75, 0x7, 0x4, 0x1ff, 0x3, 0xb597, 0x0, 0x1}) 616.283041ms ago: executing program 6 (id=2017): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000380)={0xffffffffffffffff}, 0x111, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{0xa, 0xfffe, 0x0, @empty, 0x4}, {0xa, 0x0, 0x0, @loopback, 0xfffffffc}, r2, 0x3fc}}, 0x48) 546.52838ms ago: executing program 0 (id=2018): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$key(0xf, 0x3, 0x2) recvmmsg(r1, &(0x7f0000000440), 0x6f5, 0x2000000022, &(0x7f0000000480)={0x77359400}) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000000)=0x3818, 0x8) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0900000004000000e27f000001"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRESDEC=r2, @ANYBLOB="0000000000000000b7080000080000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000400)='GPL\x00', 0xfffeffff, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8010}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sys_enter\x00', r3}, 0x18) r4 = epoll_create1(0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r6) ptrace$setregs(0xd, r6, 0x0, &(0x7f00000003c0)) r7 = socket$inet6(0xa, 0x2, 0x0) sendmsg$inet6(r7, &(0x7f00000000c0)={&(0x7f00000001c0)={0xa, 0x4e20, 0x80000, @dev={0xfe, 0x80, '\x00', 0x20}}, 0x1c, 0x0, 0x0, &(0x7f0000000080)=ANY=[], 0xa}, 0xc0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r5, &(0x7f0000000100)) shutdown(r5, 0x0) epoll_wait(r4, &(0x7f0000000000)=[{}], 0x1, 0xfffc) epoll_ctl$EPOLL_CTL_MOD(r4, 0x3, r5, &(0x7f0000000140)={0x2000200b}) sendmsg$key(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x10}}, 0x10) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x2, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4e24, 0x2, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000200)=@gcm_256={{0x303}, "b5d4c27c5c778dd0", "5f128fd81908609c81286d4f6a539024ffb7007ed672afb4be7aec5ca3d27dbf", '\x00', "b690a3fabf2cb970"}, 0x38) write$binfmt_script(r0, &(0x7f00000003c0), 0x4) recvmmsg(r0, 0x0, 0x0, 0x40000002, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) syz_io_uring_setup(0x2948, &(0x7f0000000240)={0x0, 0xf24b, 0x4, 0x1, 0x187}, &(0x7f00000001c0), &(0x7f00000002c0)) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000180)={&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0}, &(0x7f0000000140)=0x40) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000380)="ac", 0x1}], 0x1) 270.400615ms ago: executing program 6 (id=2019): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="b40000000000000061147c000000000085100000fdffffff9500000000000000ccb9597edf39555c956774d2adb03d93a4f1777de54f20e0479963a61f9805cdfeeffcf871cc50c3cd62649c760bc00b1a1de3bd139c04e92408864fe5fe356f3364a01926d1246b2fc4f862e777f9acd604154fcac414cb81d43914aa08854f6d219868268ee449f59b99cec29cf169fab1f2e67720cf555f2681997c11c0b65685fb8d71b85de4b0bd82072779b4137ba92891fa496eaa9d9212b19367054ec24a6549c445f96c3deaac8e7deba57b08a456"], &(0x7f0000003ff6)='GPL\x00', 0xa, 0xfd90, &(0x7f000000cf3d)=""/195, 0x41100, 0x6, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0x79e85d2f96ac883c}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_route(0x10, 0x3, 0x0) syz_io_uring_setup(0x70f7, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='kfree\x00'}, 0x10) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x33, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x1f, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000001100000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xc, 0x0, &(0x7f0000000800)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioperm(0x0, 0x9, 0x40000000002) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000340)='kfree\x00', r0}, 0x18) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x48) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x200000a, 0x13, r1, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[], 0x48) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=ANY=[@ANYBLOB="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"], 0x2dc}, 0x1, 0x0, 0x0, 0x41}, 0x0) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000240)='./file2\x00', 0x2000410, &(0x7f0000000000)={[{@bsdgroups}, {@nouid32}]}, 0xc1, 0x7e9, &(0x7f00000017c0)="$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") bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000a200000000000007020000f8ffffffb703000008000000b70400008a163063e78101795d085fa2590000000085000000030000009500"/85], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) seccomp$SECCOMP_GET_ACTION_AVAIL(0x2, 0x0, &(0x7f0000000280)=0x7fff0000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00'}, 0x10) syz_mount_image$iso9660(&(0x7f0000000540), &(0x7f00000001c0)='./file1\x00', 0x14004, &(0x7f00000005c0)=ANY=[@ANYRES32=0x0], 0x4, 0x70a, &(0x7f00000232c0)="$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") chown(&(0x7f0000000040)='./file1\x00', 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.stat\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r3, 0x0) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000040), 0x5}, 0x38) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x17, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000003000080000000000400000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500001cdc6f8fd9f984dc2f98d2caa6702a680083000000bf090000000000fd5509010000000000950000000000000018430000020000000000000000000000950000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000c000000b700000000000000bf91000000000000b7020000000000008500000084000000b7000000000000009500000000000000"], &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x6, &(0x7f0000000000)=""/6, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 221.152152ms ago: executing program 5 (id=2020): syz_mount_image$vfat(&(0x7f0000001800), &(0x7f0000000180)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc888, &(0x7f0000002340)=ANY=[@ANYRES16=0x0, @ANYRES32=0x0], 0x4, 0x273, &(0x7f0000000680)="$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") syz_mount_image$msdos(&(0x7f00000003c0), &(0x7f0000000340)='.\x00', 0x126a4b5, &(0x7f0000004140)=ANY=[@ANYRES16, @ANYRES64, @ANYRES16, @ANYRES16, @ANYRESDEC, @ANYRES16, @ANYRES16, @ANYBLOB="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", @ANYRESHEX=0x0, @ANYRES32], 0x5, 0x0, &(0x7f0000000000)) lremovexattr(&(0x7f0000000000)='./file0\x00', 0x0) 0s ago: executing program 5 (id=2021): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='net/tcp6\x00') preadv(r0, &(0x7f0000000100)=[{&(0x7f0000002140)=""/4089, 0xff9}], 0x1, 0x10145, 0x4) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r1, 0x0) kernel console output (not intermixed with test programs): (4096), stripe is disabled [ 220.320756][T10665] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 220.332000][T10665] EXT4-fs error (device loop0): ext4_map_blocks:783: inode #3: block 2: comm syz.0.1669: lblock 2 mapped to illegal pblock 2 (length 1) [ 220.346999][T10665] __quota_error: 150 callbacks suppressed [ 220.347019][T10665] Quota error (device loop0): qtree_write_dquot: dquota write failed [ 220.362092][T10665] EXT4-fs error (device loop0): ext4_map_blocks:783: inode #3: block 48: comm syz.0.1669: lblock 0 mapped to illegal pblock 48 (length 1) [ 220.377524][T10667] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 220.386446][T10665] Quota error (device loop0): v2_write_file_info: Can't write info structure [ 220.396231][T10665] EXT4-fs error (device loop0): ext4_acquire_dquot:6986: comm syz.0.1669: Failed to acquire dquot type 0 [ 220.408982][T10665] EXT4-fs error (device loop0) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 220.418678][T10665] EXT4-fs error (device loop0): ext4_evict_inode:253: inode #11: comm syz.0.1669: mark_inode_dirty error [ 220.435758][T10665] EXT4-fs warning (device loop0): ext4_evict_inode:256: couldn't mark inode dirty (err -117) [ 220.448333][T10665] EXT4-fs (loop0): 1 orphan inode deleted [ 220.455026][ T168] EXT4-fs error (device loop0): ext4_map_blocks:783: inode #3: block 1: comm kworker/u8:5: lblock 1 mapped to illegal pblock 1 (length 1) [ 220.469675][ T168] Quota error (device loop0): remove_tree: Can't read quota data block 1 [ 220.478257][ T168] EXT4-fs error (device loop0): ext4_release_dquot:7022: comm kworker/u8:5: Failed to release dquot type 0 [ 220.480326][T10667] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 220.494930][T10665] EXT4-fs error (device loop0): __ext4_get_inode_loc:4830: comm syz.0.1669: Invalid inode table block 1 in block_group 0 [ 220.512544][T10665] EXT4-fs error (device loop0) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 220.530381][T10665] EXT4-fs error (device loop0): ext4_quota_off:7270: inode #3: comm syz.0.1669: mark_inode_dirty error [ 220.616852][ T168] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.630889][ T168] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.661311][ T168] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.669823][ T168] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.698860][T10685] validate_nla: 3 callbacks suppressed [ 220.698882][T10685] netlink: 'syz.0.1677': attribute type 10 has an invalid length. [ 220.714250][T10685] bond0: (slave dummy0): Releasing backup interface [ 220.721632][T10685] dummy0: left promiscuous mode [ 220.726867][T10685] dummy0: left allmulticast mode [ 220.733856][T10685] dummy0: entered promiscuous mode [ 220.739290][T10685] dummy0: entered allmulticast mode [ 220.745447][T10685] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 220.755017][T10685] team0: Failed to send options change via netlink (err -105) [ 220.762616][T10685] team0: Port device dummy0 added [ 220.789654][T10689] netlink: zone id is out of range [ 220.794835][T10689] netlink: zone id is out of range [ 220.814290][T10692] 8021q: adding VLAN 0 to HW filter on device bond16 [ 220.827104][T10692] bridge0: port 7(bond16) entered blocking state [ 220.833592][T10692] bridge0: port 7(bond16) entered disabled state [ 220.855737][T10692] bond16: entered allmulticast mode [ 220.882354][T10692] bond16: entered promiscuous mode [ 220.896333][T10692] bridge0: port 7(bond16) entered blocking state [ 220.902849][T10692] bridge0: port 7(bond16) entered forwarding state [ 220.910265][T10689] netlink: zone id is out of range [ 220.915446][T10689] netlink: zone id is out of range [ 220.920844][T10689] netlink: zone id is out of range [ 220.926481][T10689] netlink: zone id is out of range [ 220.941322][T10689] netlink: set zone limit has 8 unknown bytes [ 221.083648][T10702] loop5: detected capacity change from 0 to 512 [ 221.165859][T10701] loop0: detected capacity change from 0 to 512 [ 221.204131][ T6482] bridge0: port 7(bond16) entered disabled state [ 221.390748][T10702] ext4 filesystem being mounted at /316/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 221.415628][T10701] ext4 filesystem being mounted at /350/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 221.868588][T10713] blktrace: Concurrent blktraces are not allowed on loop0 [ 222.353759][T10721] x_tables: duplicate underflow at hook 2 [ 222.380958][T10721] loop3: detected capacity change from 0 to 1024 [ 222.395009][T10721] EXT4-fs: Ignoring removed bh option [ 222.417592][T10721] EXT4-fs: inline encryption not supported [ 222.428772][T10721] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 222.447491][T10721] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 222.466214][T10721] EXT4-fs error (device loop3): ext4_map_blocks:783: inode #3: block 2: comm syz.3.1685: lblock 2 mapped to illegal pblock 2 (length 1) [ 222.485913][T10723] loop1: detected capacity change from 0 to 128 [ 222.498296][T10721] Quota error (device loop3): qtree_write_dquot: dquota write failed [ 222.524014][T10721] EXT4-fs error (device loop3): ext4_map_blocks:783: inode #3: block 48: comm syz.3.1685: lblock 0 mapped to illegal pblock 48 (length 1) [ 222.562773][T10721] Quota error (device loop3): v2_write_file_info: Can't write info structure [ 222.571680][T10721] EXT4-fs error (device loop3): ext4_acquire_dquot:6986: comm syz.3.1685: Failed to acquire dquot type 0 [ 222.601844][T10721] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 222.613804][T10721] EXT4-fs error (device loop3): ext4_evict_inode:253: inode #11: comm syz.3.1685: mark_inode_dirty error [ 222.637970][T10721] EXT4-fs warning (device loop3): ext4_evict_inode:256: couldn't mark inode dirty (err -117) [ 222.662293][T10721] EXT4-fs (loop3): 1 orphan inode deleted [ 222.675027][T10721] EXT4-fs mount: 33 callbacks suppressed [ 222.675044][T10721] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 222.693424][ T3697] EXT4-fs error (device loop3): ext4_map_blocks:783: inode #3: block 1: comm kworker/u8:20: lblock 1 mapped to illegal pblock 1 (length 1) [ 222.715425][ T3697] Quota error (device loop3): remove_tree: Can't read quota data block 1 [ 222.724113][ T3697] EXT4-fs error (device loop3): ext4_release_dquot:7022: comm kworker/u8:20: Failed to release dquot type 0 [ 222.748100][T10727] loop1: detected capacity change from 0 to 1024 [ 222.767186][T10727] EXT4-fs: Ignoring removed bh option [ 222.782152][T10721] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 222.795959][T10727] EXT4-fs: inline encryption not supported [ 222.802653][T10721] ext4: Unknown parameter '' [ 222.820309][T10721] EXT4-fs error (device loop3): ext4_map_blocks:783: inode #2: block 16: comm syz.3.1685: lblock 0 mapped to illegal pblock 16 (length 1) [ 222.838175][T10727] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 222.849515][T10727] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 222.859033][T10727] EXT4-fs error (device loop1): ext4_map_blocks:783: inode #3: block 2: comm syz.1.1687: lblock 2 mapped to illegal pblock 2 (length 1) [ 222.874628][T10727] Quota error (device loop1): qtree_write_dquot: dquota write failed [ 222.895784][T10727] EXT4-fs error (device loop1): ext4_map_blocks:783: inode #3: block 48: comm syz.1.1687: lblock 0 mapped to illegal pblock 48 (length 1) [ 222.911055][T10727] Quota error (device loop1): v2_write_file_info: Can't write info structure [ 222.911925][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 222.920210][T10727] EXT4-fs error (device loop1): ext4_acquire_dquot:6986: comm syz.1.1687: Failed to acquire dquot type 0 [ 222.931477][ T3917] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 222.949553][T10727] EXT4-fs error (device loop1) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 222.959437][T10727] EXT4-fs error (device loop1): ext4_evict_inode:253: inode #11: comm syz.1.1687: mark_inode_dirty error [ 222.985448][T10727] EXT4-fs warning (device loop1): ext4_evict_inode:256: couldn't mark inode dirty (err -117) [ 222.999987][T10727] EXT4-fs (loop1): 1 orphan inode deleted [ 223.006303][T10727] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 223.018884][ T3697] EXT4-fs error (device loop1): ext4_map_blocks:783: inode #3: block 1: comm kworker/u8:20: lblock 1 mapped to illegal pblock 1 (length 1) [ 223.042199][ T3697] Quota error (device loop1): remove_tree: Can't read quota data block 1 [ 223.050811][ T3697] EXT4-fs error (device loop1): ext4_release_dquot:7022: comm kworker/u8:20: Failed to release dquot type 0 [ 223.054096][T10735] __nla_validate_parse: 5 callbacks suppressed [ 223.054145][T10735] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1688'. [ 223.083576][T10727] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 223.096478][T10727] EXT4-fs error (device loop1): __ext4_get_inode_loc:4830: comm syz.1.1687: Invalid inode table block 1 in block_group 0 [ 223.113159][T10727] EXT4-fs error (device loop1) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 223.123301][T10727] EXT4-fs error (device loop1): ext4_quota_off:7270: inode #3: comm syz.1.1687: mark_inode_dirty error [ 223.155871][T10738] loop5: detected capacity change from 0 to 1024 [ 223.166234][T10739] 8021q: adding VLAN 0 to HW filter on device bond14 [ 223.167420][T10738] EXT4-fs: Ignoring removed orlov option [ 223.185391][T10739] bridge0: port 4(bond14) entered blocking state [ 223.191855][T10739] bridge0: port 4(bond14) entered disabled state [ 223.203081][T10738] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 223.205872][T10739] bond14: entered allmulticast mode [ 223.222266][T10739] bond14: entered promiscuous mode [ 223.227683][T10739] bridge0: port 4(bond14) entered blocking state [ 223.234082][T10739] bridge0: port 4(bond14) entered forwarding state [ 223.241659][ T12] bridge0: port 4(bond14) entered disabled state [ 223.404223][ T12] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 223.490250][ T6498] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 223.513054][ T6498] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 223.567637][ T6498] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 224.040441][T10738] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(8) [ 224.047061][T10738] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 224.054805][T10738] vhci_hcd vhci_hcd.0: Device attached [ 224.079235][T10761] netlink: 'syz.1.1696': attribute type 1 has an invalid length. [ 224.105202][ T29] audit: type=1326 audit(1768579905.136:8156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10737 comm="syz.5.1691" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21ed8cf749 code=0x7ffc0000 [ 224.136053][T10757] vhci_hcd: connection closed [ 224.136315][ T2917] vhci_hcd vhci_hcd.5: stop threads [ 224.146338][ T2917] vhci_hcd vhci_hcd.5: release socket [ 224.148703][T10761] 8021q: adding VLAN 0 to HW filter on device bond17 [ 224.151760][ T2917] vhci_hcd vhci_hcd.5: disconnect device [ 224.192395][T10763] 8021q: adding VLAN 0 to HW filter on device bond17 [ 224.199954][T10763] bond17: (slave vxcan7): The slave device specified does not support setting the MAC address [ 224.217941][T10763] bond17: (slave vxcan7): Error -95 calling set_mac_address [ 224.319388][T10759] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 224.693071][ T3917] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 224.719304][T10775] x_tables: duplicate underflow at hook 2 [ 224.726867][T10769] loop3: detected capacity change from 0 to 128 [ 224.743365][T10775] loop5: detected capacity change from 0 to 1024 [ 224.777089][T10775] EXT4-fs: Ignoring removed bh option [ 224.792518][T10775] EXT4-fs: inline encryption not supported [ 224.806774][T10775] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 224.842262][T10775] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 224.897636][T10780] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1699'. [ 224.906720][T10780] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1699'. [ 224.937386][T10775] EXT4-fs error (device loop5): ext4_map_blocks:783: inode #3: block 2: comm syz.5.1700: lblock 2 mapped to illegal pblock 2 (length 1) [ 224.957822][T10775] EXT4-fs error (device loop5): ext4_map_blocks:783: inode #3: block 48: comm syz.5.1700: lblock 0 mapped to illegal pblock 48 (length 1) [ 224.972291][T10775] EXT4-fs error (device loop5): ext4_acquire_dquot:6986: comm syz.5.1700: Failed to acquire dquot type 0 [ 224.987922][T10775] EXT4-fs error (device loop5) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 224.997603][T10775] EXT4-fs error (device loop5): ext4_evict_inode:253: inode #11: comm syz.5.1700: mark_inode_dirty error [ 225.012695][T10775] EXT4-fs warning (device loop5): ext4_evict_inode:256: couldn't mark inode dirty (err -117) [ 225.030189][T10786] loop6: detected capacity change from 0 to 1024 [ 225.039580][T10784] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1704'. [ 225.047341][T10775] EXT4-fs (loop5): 1 orphan inode deleted [ 225.050787][T10786] EXT4-fs: Ignoring removed bh option [ 225.066246][ T6498] EXT4-fs error (device loop5): ext4_map_blocks:783: inode #3: block 1: comm kworker/u8:36: lblock 1 mapped to illegal pblock 1 (length 1) [ 225.074072][T10775] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 225.080907][T10784] netlink: 312 bytes leftover after parsing attributes in process `syz.3.1704'. [ 225.102246][T10784] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1704'. [ 225.119321][T10786] EXT4-fs: inline encryption not supported [ 225.130832][ T6498] EXT4-fs error (device loop5): ext4_release_dquot:7022: comm kworker/u8:36: Failed to release dquot type 0 [ 225.143190][T10786] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 225.175653][T10786] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 225.185093][T10775] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 225.198269][T10789] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1705'. [ 225.208436][T10786] EXT4-fs error (device loop6): ext4_map_blocks:783: inode #3: block 2: comm syz.6.1703: lblock 2 mapped to illegal pblock 2 (length 1) [ 225.226272][T10790] ext4: Unknown parameter '' [ 225.232459][T10784] loop3: detected capacity change from 0 to 2048 [ 225.241866][T10775] EXT4-fs error (device loop5): ext4_map_blocks:783: inode #2: block 16: comm syz.5.1700: lblock 0 mapped to illegal pblock 16 (length 1) [ 225.258541][T10789] netlink: 312 bytes leftover after parsing attributes in process `syz.1.1705'. [ 225.267832][T10789] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1705'. [ 225.283479][T10786] EXT4-fs error (device loop6): ext4_map_blocks:783: inode #3: block 48: comm syz.6.1703: lblock 0 mapped to illegal pblock 48 (length 1) [ 225.318216][ T3917] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 225.338828][T10784] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 225.338840][T10791] loop1: detected capacity change from 0 to 2048 [ 225.357852][T10786] __quota_error: 24 callbacks suppressed [ 225.357872][T10786] Quota error (device loop6): v2_write_file_info: Can't write info structure [ 225.372429][T10786] EXT4-fs error (device loop6): ext4_acquire_dquot:6986: comm syz.6.1703: Failed to acquire dquot type 0 [ 225.412422][T10791] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 225.459386][T10797] netlink: 'syz.5.1706': attribute type 1 has an invalid length. [ 225.506724][T10797] 8021q: adding VLAN 0 to HW filter on device bond19 [ 225.531055][T10786] EXT4-fs error (device loop6) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 225.574350][T10799] 8021q: adding VLAN 0 to HW filter on device bond19 [ 225.588637][T10786] EXT4-fs error (device loop6): ext4_evict_inode:253: inode #11: comm syz.6.1703: mark_inode_dirty error [ 225.600913][T10789] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 225.617244][T10799] bond19: (slave vxcan7): The slave device specified does not support setting the MAC address [ 225.639211][T10799] bond19: (slave vxcan7): Error -95 calling set_mac_address [ 225.647218][T10784] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 225.662537][T10789] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 594 with error 28 [ 225.674995][T10789] EXT4-fs (loop1): This should not happen!! Data will be lost [ 225.674995][T10789] [ 225.685127][T10789] EXT4-fs (loop1): Total free blocks count 0 [ 225.691407][T10789] EXT4-fs (loop1): Free/Dirty block details [ 225.697370][T10789] EXT4-fs (loop1): free_blocks=2415919104 [ 225.703199][T10789] EXT4-fs (loop1): dirty_blocks=608 [ 225.708521][T10789] EXT4-fs (loop1): Block reservation details [ 225.714525][T10789] EXT4-fs (loop1): i_reserved_data_blocks=38 [ 225.716273][T10784] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 326 with error 28 [ 225.720839][T10786] EXT4-fs warning (device loop6): ext4_evict_inode:256: couldn't mark inode dirty (err -117) [ 225.732956][T10784] EXT4-fs (loop3): This should not happen!! Data will be lost [ 225.732956][T10784] [ 225.753032][T10784] EXT4-fs (loop3): Total free blocks count 0 [ 225.759115][T10784] EXT4-fs (loop3): Free/Dirty block details [ 225.765043][T10784] EXT4-fs (loop3): free_blocks=2415919104 [ 225.770930][T10784] EXT4-fs (loop3): dirty_blocks=336 [ 225.771351][T10786] EXT4-fs (loop6): 1 orphan inode deleted [ 225.776180][T10784] EXT4-fs (loop3): Block reservation details [ 225.776196][T10784] EXT4-fs (loop3): i_reserved_data_blocks=21 [ 225.776365][T10797] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1550 sclass=netlink_route_socket pid=10797 comm=syz.5.1706 [ 225.786169][ T2917] EXT4-fs error (device loop6): ext4_map_blocks:783: inode #3: block 1: comm kworker/u8:12: lblock 1 mapped to illegal pblock 1 (length 1) [ 225.836697][T10786] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 225.850640][ T2917] Quota error (device loop6): remove_tree: Can't read quota data block 1 [ 225.859184][ T2917] EXT4-fs error (device loop6): ext4_release_dquot:7022: comm kworker/u8:12: Failed to release dquot type 0 [ 225.887307][T10786] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 225.932080][T10786] EXT4-fs error (device loop6): __ext4_get_inode_loc:4830: comm syz.6.1703: Invalid inode table block 1 in block_group 0 [ 225.986212][T10786] EXT4-fs error (device loop6) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 225.997878][T10786] EXT4-fs error (device loop6): ext4_quota_off:7270: inode #3: comm syz.6.1703: mark_inode_dirty error [ 226.091979][ T168] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 594 with error 28 [ 226.143759][ T29] audit: type=1400 audit(1768579907.176:8177): avc: denied { write } for pid=10818 comm="syz.1.1707" name="virtual_nci" dev="devtmpfs" ino=132 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 226.182181][ T168] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2 with error 28 [ 226.371529][T10858] loop3: detected capacity change from 0 to 512 [ 226.445777][T10858] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 226.486201][ T29] audit: type=1326 audit(1768579907.506:8178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10876 comm="syz.6.1713" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f201d11f749 code=0x7ffc0000 [ 226.509829][ T29] audit: type=1326 audit(1768579907.506:8179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10876 comm="syz.6.1713" exe="/root/syz-executor" sig=0 arch=c000003e syscall=332 compat=0 ip=0x7f201d11f749 code=0x7ffc0000 [ 226.533353][ T29] audit: type=1326 audit(1768579907.506:8180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10876 comm="syz.6.1713" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f201d11f749 code=0x7ffc0000 [ 226.556887][ T29] audit: type=1326 audit(1768579907.506:8181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10876 comm="syz.6.1713" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f201d11f749 code=0x7ffc0000 [ 226.580564][ T29] audit: type=1326 audit(1768579907.506:8182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10876 comm="syz.6.1713" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f201d11f749 code=0x7ffc0000 [ 226.604133][ T29] audit: type=1326 audit(1768579907.506:8183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10876 comm="syz.6.1713" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f201d11f749 code=0x7ffc0000 [ 226.627648][ T29] audit: type=1326 audit(1768579907.506:8184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10876 comm="syz.6.1713" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f201d11f749 code=0x7ffc0000 [ 226.651543][T10858] ext4 filesystem being mounted at /343/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 226.691134][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 226.758192][T10893] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1718'. [ 226.861107][T10893] loop1: detected capacity change from 0 to 2048 [ 226.917426][T10893] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 226.973189][T10904] loop5: detected capacity change from 0 to 512 [ 226.993467][T10893] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 227.008649][T10893] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 726 with error 28 [ 227.021138][T10893] EXT4-fs (loop1): This should not happen!! Data will be lost [ 227.021138][T10893] [ 227.030920][T10893] EXT4-fs (loop1): Total free blocks count 0 [ 227.036984][T10893] EXT4-fs (loop1): Free/Dirty block details [ 227.042909][T10893] EXT4-fs (loop1): free_blocks=2415919104 [ 227.048675][T10893] EXT4-fs (loop1): dirty_blocks=736 [ 227.053891][T10893] EXT4-fs (loop1): Block reservation details [ 227.059925][T10893] EXT4-fs (loop1): i_reserved_data_blocks=46 [ 227.071803][T10904] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 227.084437][T10904] ext4 filesystem being mounted at /323/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 227.224234][ T12] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 726 with error 28 [ 227.331162][T10927] loop1: detected capacity change from 0 to 2048 [ 227.368235][T10927] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 227.391483][T10928] 8021q: adding VLAN 0 to HW filter on device bond15 [ 227.456552][T10926] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 227.490523][T10933] loop3: detected capacity change from 0 to 512 [ 227.519064][T10928] bridge0: port 5(bond15) entered blocking state [ 227.525493][T10928] bridge0: port 5(bond15) entered disabled state [ 227.549083][T10926] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 954 with error 28 [ 227.561551][T10926] EXT4-fs (loop1): This should not happen!! Data will be lost [ 227.561551][T10926] [ 227.571575][T10926] EXT4-fs (loop1): Total free blocks count 0 [ 227.577675][T10926] EXT4-fs (loop1): Free/Dirty block details [ 227.583631][T10926] EXT4-fs (loop1): free_blocks=2415919104 [ 227.589428][T10926] EXT4-fs (loop1): dirty_blocks=960 [ 227.594669][T10926] EXT4-fs (loop1): Block reservation details [ 227.600752][T10926] EXT4-fs (loop1): i_reserved_data_blocks=60 [ 227.612182][T10933] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 227.635188][T10928] bond15: entered allmulticast mode [ 227.679497][T10928] bond15: entered promiscuous mode [ 227.688182][T10933] ext4 filesystem being mounted at /346/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 227.700230][ T3917] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 227.716592][T10928] bridge0: port 5(bond15) entered blocking state [ 227.723040][T10928] bridge0: port 5(bond15) entered forwarding state [ 227.807458][ T6482] bridge0: port 5(bond15) entered disabled state [ 227.832208][T10938] x_tables: duplicate underflow at hook 2 [ 227.871121][ T3692] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 638 with error 28 [ 228.001193][T10938] EXT4-fs: Ignoring removed bh option [ 228.017093][T10941] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 228.052470][T10938] EXT4-fs: inline encryption not supported [ 228.104787][T10938] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 228.106159][T10941] ext4 filesystem being mounted at /324/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 228.147614][ T3917] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 228.157095][T10938] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 228.176446][T10938] EXT4-fs error (device loop6): ext4_map_blocks:783: inode #3: block 2: comm syz.6.1728: lblock 2 mapped to illegal pblock 2 (length 1) [ 228.190817][T10938] EXT4-fs error (device loop6): ext4_map_blocks:783: inode #3: block 48: comm syz.6.1728: lblock 0 mapped to illegal pblock 48 (length 1) [ 228.205470][T10938] EXT4-fs error (device loop6): ext4_acquire_dquot:6986: comm syz.6.1728: Failed to acquire dquot type 0 [ 228.219999][T10938] EXT4-fs error (device loop6) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 228.229638][T10938] EXT4-fs error (device loop6): ext4_evict_inode:253: inode #11: comm syz.6.1728: mark_inode_dirty error [ 228.245707][T10946] x_tables: duplicate underflow at hook 2 [ 228.268636][T10948] __nla_validate_parse: 5 callbacks suppressed [ 228.268679][T10948] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1730'. [ 228.283906][T10948] netlink: 312 bytes leftover after parsing attributes in process `syz.0.1730'. [ 228.293051][T10948] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1730'. [ 228.306108][T10938] EXT4-fs warning (device loop6): ext4_evict_inode:256: couldn't mark inode dirty (err -117) [ 228.320730][T10946] EXT4-fs: Ignoring removed bh option [ 228.343189][T10946] EXT4-fs: inline encryption not supported [ 228.357182][T10938] EXT4-fs (loop6): 1 orphan inode deleted [ 228.366108][T10938] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 228.378247][T10946] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 228.389674][ T168] EXT4-fs error (device loop6): ext4_map_blocks:783: inode #3: block 1: comm kworker/u8:5: lblock 1 mapped to illegal pblock 1 (length 1) [ 228.409119][T10948] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 228.419279][ T168] EXT4-fs error (device loop6): ext4_release_dquot:7022: comm kworker/u8:5: Failed to release dquot type 0 [ 228.443005][T10946] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 228.465286][T10955] ext4: Unknown parameter '' [ 228.470704][T10938] EXT4-fs (loop6): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 228.483007][T10938] EXT4-fs error (device loop6): ext4_map_blocks:783: inode #2: block 16: comm syz.6.1728: lblock 0 mapped to illegal pblock 16 (length 1) [ 228.499099][T10946] EXT4-fs error (device loop5): ext4_map_blocks:783: inode #3: block 2: comm syz.5.1729: lblock 2 mapped to illegal pblock 2 (length 1) [ 228.527279][T10953] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 228.541364][T10948] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 228.557544][ T7269] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 228.561982][T10948] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 862 with error 28 [ 228.576736][T10953] ext4 filesystem being mounted at /379/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 228.579159][T10948] EXT4-fs (loop0): This should not happen!! Data will be lost [ 228.579159][T10948] [ 228.599293][T10948] EXT4-fs (loop0): Total free blocks count 0 [ 228.599770][T10946] EXT4-fs error (device loop5): ext4_map_blocks:783: inode #3: block 48: comm syz.5.1729: lblock 0 mapped to illegal pblock 48 (length 1) [ 228.605340][T10948] EXT4-fs (loop0): Free/Dirty block details [ 228.605358][T10948] EXT4-fs (loop0): free_blocks=2415919104 [ 228.605375][T10948] EXT4-fs (loop0): dirty_blocks=864 [ 228.636555][T10948] EXT4-fs (loop0): Block reservation details [ 228.642577][T10948] EXT4-fs (loop0): i_reserved_data_blocks=54 [ 228.646485][T10946] EXT4-fs error (device loop5): ext4_acquire_dquot:6986: comm syz.5.1729: Failed to acquire dquot type 0 [ 228.692610][T10946] EXT4-fs error (device loop5) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 228.712707][T10946] EXT4-fs error (device loop5): ext4_evict_inode:253: inode #11: comm syz.5.1729: mark_inode_dirty error [ 228.744448][T10946] EXT4-fs warning (device loop5): ext4_evict_inode:256: couldn't mark inode dirty (err -117) [ 228.765044][T10946] EXT4-fs (loop5): 1 orphan inode deleted [ 228.771579][T10946] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 228.784395][ T6482] EXT4-fs error (device loop5): ext4_map_blocks:783: inode #3: block 1: comm kworker/u8:35: lblock 1 mapped to illegal pblock 1 (length 1) [ 228.806165][ T6482] EXT4-fs error (device loop5): ext4_release_dquot:7022: comm kworker/u8:35: Failed to release dquot type 0 [ 228.837739][T10946] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 228.882363][T10964] ext4: Unknown parameter '' [ 228.892946][T10964] EXT4-fs error (device loop5): ext4_map_blocks:783: inode #2: block 16: comm syz.5.1729: lblock 0 mapped to illegal pblock 16 (length 1) [ 228.999313][ T3317] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 229.017072][T10966] netlink: 'syz.6.1733': attribute type 1 has an invalid length. [ 229.028743][ T3917] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 229.074372][T10966] 8021q: adding VLAN 0 to HW filter on device bond2 [ 229.098450][T10972] netlink: 'syz.5.1735': attribute type 10 has an invalid length. [ 229.121797][T10972] netlink: 'syz.5.1735': attribute type 10 has an invalid length. [ 229.131236][T10975] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1550 sclass=netlink_route_socket pid=10975 comm=syz.6.1733 [ 229.174142][T10972] team0: Port device dummy0 removed [ 229.203864][ T6482] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 862 with error 28 [ 229.217328][T10972] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 229.252173][T10970] 8021q: adding VLAN 0 to HW filter on device bond2 [ 229.278414][T10970] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address [ 229.321052][T10970] bond2: (slave vxcan3): Error -95 calling set_mac_address [ 229.386171][T10993] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 229.409614][T10993] ext4 filesystem being mounted at /327/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 229.512423][ T3917] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 229.563018][T11016] 8021q: adding VLAN 0 to HW filter on device bond16 [ 229.603178][T11016] bridge0: port 6(bond16) entered blocking state [ 229.609678][T11016] bridge0: port 6(bond16) entered disabled state [ 229.695826][T11016] bond16: entered allmulticast mode [ 229.730020][T11016] bond16: entered promiscuous mode [ 229.760989][T11016] bridge0: port 6(bond16) entered blocking state [ 229.767539][T11016] bridge0: port 6(bond16) entered forwarding state [ 229.794323][T11037] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1745'. [ 229.810061][T11037] netlink: 312 bytes leftover after parsing attributes in process `syz.5.1745'. [ 229.819259][T11037] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1745'. [ 229.945960][T11065] set_capacity_and_notify: 6 callbacks suppressed [ 229.952640][T11065] loop5: detected capacity change from 0 to 2048 [ 229.984475][T11019] loop1: detected capacity change from 0 to 128 [ 230.116879][T11070] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1747'. [ 230.136135][T11070] netlink: 312 bytes leftover after parsing attributes in process `syz.6.1747'. [ 230.145220][T11070] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1747'. [ 230.196561][T11071] loop6: detected capacity change from 0 to 2048 [ 230.246075][ T3692] bridge0: port 6(bond16) entered disabled state [ 230.268641][T11065] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 230.286849][T11071] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 230.384525][T11037] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 230.416124][T11037] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 404 with error 28 [ 230.428568][T11037] EXT4-fs (loop5): This should not happen!! Data will be lost [ 230.428568][T11037] [ 230.438240][T11037] EXT4-fs (loop5): Total free blocks count 0 [ 230.444323][T11037] EXT4-fs (loop5): Free/Dirty block details [ 230.450361][T11037] EXT4-fs (loop5): free_blocks=2415919104 [ 230.456171][T11037] EXT4-fs (loop5): dirty_blocks=416 [ 230.461389][T11037] EXT4-fs (loop5): Block reservation details [ 230.467432][T11037] EXT4-fs (loop5): i_reserved_data_blocks=26 [ 230.479567][T11070] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 230.519418][T11070] EXT4-fs (loop6): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 476 with error 28 [ 230.531843][T11070] EXT4-fs (loop6): This should not happen!! Data will be lost [ 230.531843][T11070] [ 230.541604][T11070] EXT4-fs (loop6): Total free blocks count 0 [ 230.547636][T11070] EXT4-fs (loop6): Free/Dirty block details [ 230.553670][T11070] EXT4-fs (loop6): free_blocks=2415919104 [ 230.559464][T11070] EXT4-fs (loop6): dirty_blocks=480 [ 230.564718][T11070] EXT4-fs (loop6): Block reservation details [ 230.570763][T11070] EXT4-fs (loop6): i_reserved_data_blocks=30 [ 230.608534][T11084] netlink: 'syz.1.1749': attribute type 10 has an invalid length. [ 230.616755][T11084] netlink: 'syz.1.1749': attribute type 10 has an invalid length. [ 230.625534][T11084] team0: Port device dummy0 removed [ 230.636954][T11084] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 230.762374][ T29] kauditd_printk_skb: 18 callbacks suppressed [ 230.762389][ T29] audit: type=1326 audit(1768579911.796:8197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11085 comm="syz.0.1750" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1bec07f749 code=0x7ffc0000 [ 230.792294][ T29] audit: type=1326 audit(1768579911.796:8198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11085 comm="syz.0.1750" exe="/root/syz-executor" sig=0 arch=c000003e syscall=332 compat=0 ip=0x7f1bec07f749 code=0x7ffc0000 [ 230.815889][ T29] audit: type=1326 audit(1768579911.796:8199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11085 comm="syz.0.1750" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1bec07f749 code=0x7ffc0000 [ 230.839596][ T29] audit: type=1326 audit(1768579911.796:8200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11085 comm="syz.0.1750" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1bec07f749 code=0x7ffc0000 [ 230.863159][ T29] audit: type=1326 audit(1768579911.796:8201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11085 comm="syz.0.1750" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1bec07f749 code=0x7ffc0000 [ 230.886724][ T29] audit: type=1326 audit(1768579911.796:8202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11085 comm="syz.0.1750" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f1bec07f749 code=0x7ffc0000 [ 230.910190][ T29] audit: type=1326 audit(1768579911.796:8203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11085 comm="syz.0.1750" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1bec07f749 code=0x7ffc0000 [ 230.933756][ T29] audit: type=1326 audit(1768579911.796:8204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11085 comm="syz.0.1750" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f1bec07df90 code=0x7ffc0000 [ 230.957294][ T29] audit: type=1326 audit(1768579911.796:8205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11085 comm="syz.0.1750" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1bec07f749 code=0x7ffc0000 [ 230.980789][ T29] audit: type=1326 audit(1768579911.796:8206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11085 comm="syz.0.1750" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1bec07f749 code=0x7ffc0000 [ 231.071055][ T3692] EXT4-fs (loop6): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 210 with error 28 [ 231.095635][ T6498] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 390 with error 28 [ 231.226429][T11096] loop5: detected capacity change from 0 to 512 [ 231.244434][T11101] netlink: 'syz.0.1756': attribute type 1 has an invalid length. [ 231.264185][T11096] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 231.292048][T11101] 8021q: adding VLAN 0 to HW filter on device bond17 [ 231.301820][T11096] ext4 filesystem being mounted at /330/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 231.320047][T11107] 8021q: adding VLAN 0 to HW filter on device bond17 [ 231.345056][T11107] bond17: (slave vxcan3): The slave device specified does not support setting the MAC address [ 231.348555][T11109] netlink: 'syz.1.1758': attribute type 10 has an invalid length. [ 231.359106][T11107] bond17: (slave vxcan3): Error -95 calling set_mac_address [ 231.371757][ T3917] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 231.387324][T11109] bond0: (slave dummy0): Releasing backup interface [ 231.407551][T11109] team0: Port device dummy0 added [ 231.429722][T11112] netlink: 'syz.1.1758': attribute type 10 has an invalid length. [ 231.452162][T11111] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1759'. [ 231.464064][T11112] team0: Port device dummy0 removed [ 231.469753][T11114] netlink: 'syz.0.1760': attribute type 10 has an invalid length. [ 231.480680][T11112] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 231.499538][T11111] loop5: detected capacity change from 0 to 2048 [ 231.518380][T11114] netlink: 'syz.0.1760': attribute type 10 has an invalid length. [ 231.529054][T11114] dummy0: left promiscuous mode [ 231.539706][T11114] dummy0: left allmulticast mode [ 231.545614][T11111] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 231.558326][T11114] team0: Port device dummy0 removed [ 231.566965][T11114] dummy0: entered promiscuous mode [ 231.578742][T11114] dummy0: entered allmulticast mode [ 231.595168][T11114] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 231.664663][T11111] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 231.696153][T11111] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 664 with error 28 [ 231.708602][T11111] EXT4-fs (loop5): This should not happen!! Data will be lost [ 231.708602][T11111] [ 231.718349][T11111] EXT4-fs (loop5): Total free blocks count 0 [ 231.724419][T11111] EXT4-fs (loop5): Free/Dirty block details [ 231.730405][T11111] EXT4-fs (loop5): free_blocks=2415919104 [ 231.736233][T11111] EXT4-fs (loop5): dirty_blocks=672 [ 231.741557][T11111] EXT4-fs (loop5): Block reservation details [ 231.747608][T11111] EXT4-fs (loop5): i_reserved_data_blocks=42 [ 231.822315][T11119] loop0: detected capacity change from 0 to 128 [ 231.841149][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 232.009927][T11131] can0: slcan on ttyS3. [ 232.053107][ T12] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2 with error 28 [ 232.067163][T11130] can0 (unregistered): slcan off ttyS3. [ 232.321698][T11151] bond0: (slave dummy0): Releasing backup interface [ 232.329442][T11151] dummy0: left promiscuous mode [ 232.334466][T11151] dummy0: left allmulticast mode [ 232.345493][T11151] dummy0: entered promiscuous mode [ 232.350843][T11151] dummy0: entered allmulticast mode [ 232.357592][T11151] team0: Port device dummy0 added [ 232.370982][T11153] bond0: (slave dummy0): Releasing backup interface [ 232.381797][T11153] team0: Port device dummy0 added [ 232.396243][T11153] team0: Port device dummy0 removed [ 232.429284][T11153] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 232.562974][T11151] dummy0: left promiscuous mode [ 232.597465][T11151] dummy0: left allmulticast mode [ 232.623965][T11151] team0: Port device dummy0 removed [ 232.664674][T11151] dummy0: entered promiscuous mode [ 232.722863][T11151] dummy0: entered allmulticast mode [ 232.754169][T11151] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 232.906139][T11169] 8021q: adding VLAN 0 to HW filter on device bond3 [ 232.958553][T11169] 8021q: adding VLAN 0 to HW filter on device bond3 [ 232.968758][T11169] bond3: (slave vxcan3): The slave device specified does not support setting the MAC address [ 232.983500][T11169] bond3: (slave vxcan3): Error -95 calling set_mac_address [ 233.058423][T11180] loop3: detected capacity change from 0 to 128 [ 233.082223][T11179] skbuff: bad partial csum: csum=65489/0 headroom=64 headlen=65491 [ 233.234038][T11189] hsr_slave_1 (unregistering): left promiscuous mode [ 233.247275][T11188] loop6: detected capacity change from 0 to 2048 [ 233.254953][T11192] bond0: (slave dummy0): Releasing backup interface [ 233.265292][T11192] team0: Port device dummy0 added [ 233.277414][T11192] team0: Port device dummy0 removed [ 233.284522][T11192] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 233.284855][T11188] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 233.372869][T11188] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 233.388126][T11188] EXT4-fs (loop6): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 722 with error 28 [ 233.400537][T11188] EXT4-fs (loop6): This should not happen!! Data will be lost [ 233.400537][T11188] [ 233.410222][T11188] EXT4-fs (loop6): Total free blocks count 0 [ 233.416278][T11188] EXT4-fs (loop6): Free/Dirty block details [ 233.422226][T11188] EXT4-fs (loop6): free_blocks=2415919104 [ 233.428023][T11188] EXT4-fs (loop6): dirty_blocks=736 [ 233.433255][T11188] EXT4-fs (loop6): Block reservation details [ 233.439281][T11188] EXT4-fs (loop6): i_reserved_data_blocks=46 [ 233.469230][ T7190] EXT4-fs (loop6): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 24 with error 28 [ 233.518727][T11205] loop3: detected capacity change from 0 to 512 [ 233.572519][T11218] FAULT_INJECTION: forcing a failure. [ 233.572519][T11218] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 233.585701][T11218] CPU: 1 UID: 0 PID: 11218 Comm: syz.0.1795 Not tainted syzkaller #0 PREEMPT(voluntary) [ 233.585744][T11218] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 233.585758][T11218] Call Trace: [ 233.585767][T11218] [ 233.585776][T11218] __dump_stack+0x1d/0x30 [ 233.585804][T11218] dump_stack_lvl+0x95/0xd0 [ 233.585905][T11218] dump_stack+0x15/0x1b [ 233.585929][T11218] should_fail_ex+0x265/0x280 [ 233.585958][T11218] should_fail+0xb/0x20 [ 233.585987][T11218] should_fail_usercopy+0x1a/0x20 [ 233.586079][T11218] _copy_from_user+0x1c/0xb0 [ 233.586115][T11218] ___sys_sendmsg+0xc1/0x1d0 [ 233.586189][T11218] __x64_sys_sendmsg+0xd4/0x160 [ 233.586229][T11218] x64_sys_call+0x17ba/0x3000 [ 233.586262][T11218] do_syscall_64+0xca/0x2b0 [ 233.586288][T11218] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 233.586378][T11218] RIP: 0033:0x7f1bec07f749 [ 233.586395][T11218] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 233.586416][T11218] RSP: 002b:00007f1beaadf038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 233.586488][T11218] RAX: ffffffffffffffda RBX: 00007f1bec2d5fa0 RCX: 00007f1bec07f749 [ 233.586508][T11218] RDX: 0000000004040080 RSI: 0000200000000000 RDI: 0000000000000003 [ 233.586525][T11218] RBP: 00007f1beaadf090 R08: 0000000000000000 R09: 0000000000000000 [ 233.586541][T11218] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 233.586557][T11218] R13: 00007f1bec2d6038 R14: 00007f1bec2d5fa0 R15: 00007fff60050ee8 [ 233.586578][T11218] [ 233.767311][T11205] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 233.796939][T11205] ext4 filesystem being mounted at /355/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 233.871120][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 233.884656][T11224] bond0: (slave dummy0): Releasing backup interface [ 233.922046][T11224] dummy0: left promiscuous mode [ 233.948000][T11224] dummy0: left allmulticast mode [ 233.961181][T11224] dummy0: entered promiscuous mode [ 233.991173][T11224] dummy0: entered allmulticast mode [ 234.002179][T11224] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 234.016331][T11224] team0: Failed to send options change via netlink (err -105) [ 234.023849][T11224] team0: Port device dummy0 added [ 234.038039][T11239] validate_nla: 9 callbacks suppressed [ 234.038056][T11239] netlink: 'syz.6.1801': attribute type 10 has an invalid length. [ 234.071861][T11238] bond0: (slave dummy0): Releasing backup interface [ 234.090568][T11238] team0: Port device dummy0 added [ 234.098786][T11241] __nla_validate_parse: 7 callbacks suppressed [ 234.098883][T11241] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1803'. [ 234.117494][T11241] netlink: 312 bytes leftover after parsing attributes in process `syz.1.1803'. [ 234.126654][T11241] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1803'. [ 234.184471][T11249] loop1: detected capacity change from 0 to 2048 [ 234.209447][T11249] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 234.222377][T11251] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1807'. [ 234.227300][T11253] capability: warning: `syz.0.1808' uses deprecated v2 capabilities in a way that may be insecure [ 234.231608][T11251] netlink: 312 bytes leftover after parsing attributes in process `syz.5.1807'. [ 234.251178][T11251] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1807'. [ 234.310334][T11260] FAULT_INJECTION: forcing a failure. [ 234.310334][T11260] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 234.321735][T11258] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1809'. [ 234.323543][T11260] CPU: 1 UID: 0 PID: 11260 Comm: syz.6.1810 Not tainted syzkaller #0 PREEMPT(voluntary) [ 234.323594][T11260] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 234.323639][T11260] Call Trace: [ 234.323668][T11260] [ 234.323698][T11260] __dump_stack+0x1d/0x30 [ 234.323788][T11260] dump_stack_lvl+0x95/0xd0 [ 234.323904][T11260] dump_stack+0x15/0x1b [ 234.323968][T11260] should_fail_ex+0x265/0x280 [ 234.324044][T11260] should_fail+0xb/0x20 [ 234.324135][T11260] should_fail_usercopy+0x1a/0x20 [ 234.324211][T11260] _copy_from_user+0x1c/0xb0 [ 234.324304][T11260] lo_ioctl+0x386/0x12a0 [ 234.324381][T11260] ? __rcu_read_unlock+0x4f/0x70 [ 234.324466][T11260] ? avc_has_extended_perms+0x609/0x800 [ 234.324606][T11260] ? blkdev_common_ioctl+0xbf0/0x1f90 [ 234.324676][T11260] ? do_vfs_ioctl+0x866/0xe10 [ 234.324866][T11260] ? selinux_file_ioctl+0x308/0x3a0 [ 234.324987][T11260] ? __pfx_lo_ioctl+0x10/0x10 [ 234.325050][T11260] ? __pfx_blkdev_ioctl+0x10/0x10 [ 234.325122][T11260] blkdev_ioctl+0x37d/0x460 [ 234.325216][T11260] ? __pfx_blkdev_ioctl+0x10/0x10 [ 234.325280][T11260] __se_sys_ioctl+0xce/0x140 [ 234.325447][T11260] __x64_sys_ioctl+0x43/0x50 [ 234.325543][T11260] x64_sys_call+0x14b0/0x3000 [ 234.325662][T11260] do_syscall_64+0xca/0x2b0 [ 234.325728][T11260] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 234.325803][T11260] RIP: 0033:0x7f201d11f749 [ 234.325885][T11260] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 234.325941][T11260] RSP: 002b:00007f201bb7f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 234.326009][T11260] RAX: ffffffffffffffda RBX: 00007f201d375fa0 RCX: 00007f201d11f749 [ 234.326104][T11260] RDX: 00002000000002c0 RSI: 0000000000004c0a RDI: 0000000000000003 [ 234.326145][T11260] RBP: 00007f201bb7f090 R08: 0000000000000000 R09: 0000000000000000 [ 234.326188][T11260] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 234.326230][T11260] R13: 00007f201d376038 R14: 00007f201d375fa0 R15: 00007ffed331e1d8 [ 234.326357][T11260] [ 234.572247][T11258] netlink: 312 bytes leftover after parsing attributes in process `syz.3.1809'. [ 234.581430][T11258] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1809'. [ 234.591447][T11259] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 234.726246][T11251] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 234.755324][T11262] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 234.766272][T11251] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1340 with error 28 [ 234.779972][T11251] EXT4-fs (loop5): This should not happen!! Data will be lost [ 234.779972][T11251] [ 234.789658][T11251] EXT4-fs (loop5): Total free blocks count 0 [ 234.795668][T11251] EXT4-fs (loop5): Free/Dirty block details [ 234.801607][T11251] EXT4-fs (loop5): free_blocks=2415919104 [ 234.807460][T11251] EXT4-fs (loop5): dirty_blocks=1344 [ 234.812801][T11251] EXT4-fs (loop5): Block reservation details [ 234.819076][T11251] EXT4-fs (loop5): i_reserved_data_blocks=84 [ 234.870959][T11279] netlink: 'syz.6.1815': attribute type 10 has an invalid length. [ 234.902566][T11282] netlink: 'syz.6.1817': attribute type 10 has an invalid length. [ 234.916329][T11258] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 234.936144][T11283] EXT4-fs: inline encryption not supported [ 234.953429][T11284] netlink: 'syz.6.1817': attribute type 10 has an invalid length. [ 234.972552][T11284] team0: Port device dummy0 removed [ 234.977939][T11258] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 286 with error 28 [ 234.990415][T11258] EXT4-fs (loop3): This should not happen!! Data will be lost [ 234.990415][T11258] [ 235.000086][T11258] EXT4-fs (loop3): Total free blocks count 0 [ 235.006125][T11258] EXT4-fs (loop3): Free/Dirty block details [ 235.012046][T11258] EXT4-fs (loop3): free_blocks=2415919104 [ 235.017828][T11258] EXT4-fs (loop3): dirty_blocks=288 [ 235.023053][T11258] EXT4-fs (loop3): Block reservation details [ 235.029077][T11258] EXT4-fs (loop3): i_reserved_data_blocks=18 [ 235.054109][T11283] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 235.066746][T11284] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 235.079888][ T3317] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000900. [ 235.097267][T11282] bond0: (slave dummy0): Releasing backup interface [ 235.136786][ T3319] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 235.157541][T11282] team0: Port device dummy0 added [ 235.235932][ T6498] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 232 with error 28 [ 235.272076][ T7190] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 954 with error 28 [ 235.332940][T11303] set_capacity_and_notify: 3 callbacks suppressed [ 235.332959][T11303] loop5: detected capacity change from 0 to 1024 [ 235.354181][T11303] EXT4-fs: Ignoring removed nomblk_io_submit option [ 235.372945][T11303] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 235.404973][T11303] System zones: 0-1, 3-36 [ 235.433077][T11303] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 235.452650][T11312] 8021q: adding VLAN 0 to HW filter on device bond12 [ 235.469274][T11312] bridge0: port 1(bond12) entered blocking state [ 235.475709][T11312] bridge0: port 1(bond12) entered disabled state [ 235.482617][T11312] bond12: entered allmulticast mode [ 235.489567][T11312] bond12: entered promiscuous mode [ 235.494085][T11316] loop0: detected capacity change from 0 to 512 [ 235.495425][T11312] bridge0: port 1(bond12) entered blocking state [ 235.507415][T11312] bridge0: port 1(bond12) entered forwarding state [ 235.516178][ T6608] bridge0: port 1(bond12) entered disabled state [ 235.526048][T11303] infiniband syz: RDMA CMA: cma_listen_on_dev, error -98 [ 235.536038][T11316] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 235.572219][T11316] ext4 filesystem being mounted at /387/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 235.593747][ T3917] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 235.621044][ T3319] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 235.704147][T11322] loop0: detected capacity change from 0 to 512 [ 235.739498][T11322] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 235.754531][T11322] ext4 filesystem being mounted at /388/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 235.812655][ T3319] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 235.867021][ T29] kauditd_printk_skb: 136 callbacks suppressed [ 235.867039][ T29] audit: type=1326 audit(1768579916.906:8343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11331 comm="syz.5.1829" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21ed8cf749 code=0x7ffc0000 [ 235.917944][ T29] audit: type=1326 audit(1768579916.906:8344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11331 comm="syz.5.1829" exe="/root/syz-executor" sig=0 arch=c000003e syscall=158 compat=0 ip=0x7f21ed8cf749 code=0x7ffc0000 [ 235.941684][ T29] audit: type=1326 audit(1768579916.906:8345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11331 comm="syz.5.1829" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21ed8cf749 code=0x7ffc0000 [ 235.965429][ T29] audit: type=1326 audit(1768579916.906:8346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11331 comm="syz.5.1829" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f21ed8cf749 code=0x7ffc0000 [ 235.989044][ T29] audit: type=1326 audit(1768579916.906:8347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11331 comm="syz.5.1829" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21ed8cf749 code=0x7ffc0000 [ 236.012626][ T29] audit: type=1326 audit(1768579916.906:8348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11331 comm="syz.5.1829" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f21ed8cf749 code=0x7ffc0000 [ 236.036154][ T29] audit: type=1326 audit(1768579916.906:8349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11331 comm="syz.5.1829" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21ed8cf749 code=0x7ffc0000 [ 236.059795][ T29] audit: type=1326 audit(1768579916.906:8350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11331 comm="syz.5.1829" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f21ed8cf749 code=0x7ffc0000 [ 236.083364][ T29] audit: type=1326 audit(1768579916.906:8351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11331 comm="syz.5.1829" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21ed8cf749 code=0x7ffc0000 [ 236.106898][ T29] audit: type=1326 audit(1768579916.906:8352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11331 comm="syz.5.1829" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f21ed8cf749 code=0x7ffc0000 [ 236.191828][T11341] loop1: detected capacity change from 0 to 512 [ 236.222137][T11342] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1832'. [ 236.270148][T11341] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 236.282672][T11341] ext4 filesystem being mounted at /401/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 236.308132][T11339] loop6: detected capacity change from 0 to 2048 [ 236.491271][T11339] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 236.604288][T11355] netlink: zone id is out of range [ 236.609544][T11355] netlink: zone id is out of range [ 236.638730][T11339] EXT4-fs (loop6): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 666 with error 28 [ 236.651223][T11339] EXT4-fs (loop6): This should not happen!! Data will be lost [ 236.651223][T11339] [ 236.661092][T11339] EXT4-fs (loop6): Total free blocks count 0 [ 236.667117][T11339] EXT4-fs (loop6): Free/Dirty block details [ 236.673078][T11339] EXT4-fs (loop6): free_blocks=2415919104 [ 236.678974][T11339] EXT4-fs (loop6): dirty_blocks=672 [ 236.684210][T11339] EXT4-fs (loop6): Block reservation details [ 236.690339][T11339] EXT4-fs (loop6): i_reserved_data_blocks=42 [ 236.739180][T11355] netlink: zone id is out of range [ 236.744523][T11355] netlink: zone id is out of range [ 236.749835][T11355] netlink: zone id is out of range [ 236.757098][T11355] netlink: zone id is out of range [ 236.799302][T11355] netlink: set zone limit has 8 unknown bytes [ 237.335364][T11371] FAULT_INJECTION: forcing a failure. [ 237.335364][T11371] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 237.348643][T11371] CPU: 0 UID: 0 PID: 11371 Comm: syz.1.1840 Not tainted syzkaller #0 PREEMPT(voluntary) [ 237.348677][T11371] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 237.348690][T11371] Call Trace: [ 237.348742][T11371] [ 237.348826][T11371] __dump_stack+0x1d/0x30 [ 237.348851][T11371] dump_stack_lvl+0x95/0xd0 [ 237.348872][T11371] dump_stack+0x15/0x1b [ 237.348969][T11371] should_fail_ex+0x265/0x280 [ 237.349005][T11371] should_fail+0xb/0x20 [ 237.349024][T11371] should_fail_usercopy+0x1a/0x20 [ 237.349125][T11371] _copy_from_user+0x1c/0xb0 [ 237.349191][T11371] __sys_bind+0x106/0x2a0 [ 237.349228][T11371] __x64_sys_bind+0x3f/0x50 [ 237.349250][T11371] x64_sys_call+0x2ceb/0x3000 [ 237.349275][T11371] do_syscall_64+0xca/0x2b0 [ 237.349302][T11371] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 237.349442][T11371] RIP: 0033:0x7f7f90c2f749 [ 237.349488][T11371] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 237.349507][T11371] RSP: 002b:00007f7f8f697038 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 237.349604][T11371] RAX: ffffffffffffffda RBX: 00007f7f90e85fa0 RCX: 00007f7f90c2f749 [ 237.349619][T11371] RDX: 0000000000000010 RSI: 0000200000000080 RDI: 0000000000000003 [ 237.349631][T11371] RBP: 00007f7f8f697090 R08: 0000000000000000 R09: 0000000000000000 [ 237.349643][T11371] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 237.349658][T11371] R13: 00007f7f90e86038 R14: 00007f7f90e85fa0 R15: 00007ffcb38e6c18 [ 237.349681][T11371] [ 237.563201][T11377] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 237.614987][ T12] EXT4-fs (loop6): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 180 with error 28 [ 237.627516][ T12] EXT4-fs (loop6): This should not happen!! Data will be lost [ 237.627516][ T12] [ 237.674212][T11381] loop1: detected capacity change from 0 to 128 [ 237.787728][T11392] x_tables: duplicate underflow at hook 2 [ 237.799085][T11392] loop5: detected capacity change from 0 to 1024 [ 237.814694][T11392] EXT4-fs: Ignoring removed bh option [ 237.846101][T11392] EXT4-fs: inline encryption not supported [ 237.847467][T11394] 8021q: adding VLAN 0 to HW filter on device bond4 [ 237.878408][T11394] bridge0: port 4(bond4) entered blocking state [ 237.884807][T11392] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 237.884817][T11394] bridge0: port 4(bond4) entered disabled state [ 237.899998][T11394] bond4: entered allmulticast mode [ 237.908154][T11394] bond4: entered promiscuous mode [ 237.913489][T11394] bridge0: port 4(bond4) entered blocking state [ 237.919877][T11394] bridge0: port 4(bond4) entered forwarding state [ 237.927744][ T3687] bridge0: port 4(bond4) entered disabled state [ 237.944833][T11392] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 237.957129][T11392] EXT4-fs error (device loop5): ext4_map_blocks:783: inode #3: block 2: comm syz.5.1848: lblock 2 mapped to illegal pblock 2 (length 1) [ 237.986243][T11392] EXT4-fs error (device loop5): ext4_map_blocks:783: inode #3: block 48: comm syz.5.1848: lblock 0 mapped to illegal pblock 48 (length 1) [ 238.016332][T11392] EXT4-fs error (device loop5): ext4_acquire_dquot:6986: comm syz.5.1848: Failed to acquire dquot type 0 [ 238.046303][T11392] EXT4-fs error (device loop5) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 238.059619][T11392] EXT4-fs error (device loop5): ext4_evict_inode:253: inode #11: comm syz.5.1848: mark_inode_dirty error [ 238.088474][T11392] EXT4-fs warning (device loop5): ext4_evict_inode:256: couldn't mark inode dirty (err -117) [ 238.116140][T11392] EXT4-fs (loop5): 1 orphan inode deleted [ 238.139070][ T12] EXT4-fs error (device loop5): ext4_map_blocks:783: inode #3: block 1: comm kworker/u8:0: lblock 1 mapped to illegal pblock 1 (length 1) [ 238.196128][T11404] ext4: Unknown parameter '' [ 238.202787][T11404] EXT4-fs error (device loop5): ext4_map_blocks:783: inode #2: block 16: comm syz.5.1848: lblock 0 mapped to illegal pblock 16 (length 1) [ 238.217080][ T12] EXT4-fs error (device loop5): ext4_release_dquot:7022: comm kworker/u8:0: Failed to release dquot type 0 [ 238.231479][T11392] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 238.703449][T11409] netlink: 'syz.1.1852': attribute type 21 has an invalid length. [ 238.757953][T11411] xt_CT: You must specify a L4 protocol and not use inversions on it [ 238.816534][T11417] FAULT_INJECTION: forcing a failure. [ 238.816534][T11417] name failslab, interval 1, probability 0, space 0, times 0 [ 238.829255][T11417] CPU: 1 UID: 0 PID: 11417 Comm: syz.5.1854 Not tainted syzkaller #0 PREEMPT(voluntary) [ 238.829288][T11417] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 238.829305][T11417] Call Trace: [ 238.829362][T11417] [ 238.829370][T11417] __dump_stack+0x1d/0x30 [ 238.829398][T11417] dump_stack_lvl+0x95/0xd0 [ 238.829425][T11417] dump_stack+0x15/0x1b [ 238.829520][T11417] should_fail_ex+0x265/0x280 [ 238.829609][T11417] should_failslab+0x8c/0xb0 [ 238.829650][T11417] __kmalloc_node_track_caller_noprof+0xb9/0x5b0 [ 238.829684][T11417] ? sidtab_sid2str_get+0xa0/0x130 [ 238.829725][T11417] kmemdup_noprof+0x2b/0x70 [ 238.829912][T11417] sidtab_sid2str_get+0xa0/0x130 [ 238.829942][T11417] security_sid_to_context_core+0x1eb/0x2e0 [ 238.829971][T11417] security_sid_to_context+0x27/0x40 [ 238.830003][T11417] selinux_lsmprop_to_secctx+0x67/0xf0 [ 238.830037][T11417] security_lsmprop_to_secctx+0x1a3/0x1c0 [ 238.830107][T11417] audit_log_subj_ctx+0xa4/0x3e0 [ 238.830135][T11417] ? skb_put+0xa9/0xf0 [ 238.830168][T11417] audit_log_task_context+0x48/0x70 [ 238.830199][T11417] audit_log_task+0xf4/0x250 [ 238.830235][T11417] ? kstrtouint+0x76/0xc0 [ 238.830280][T11417] audit_seccomp+0x61/0x100 [ 238.830313][T11417] ? __seccomp_filter+0x832/0x1260 [ 238.830462][T11417] __seccomp_filter+0x843/0x1260 [ 238.830497][T11417] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 238.830527][T11417] ? vfs_write+0x7e8/0x960 [ 238.830549][T11417] __secure_computing+0x82/0x150 [ 238.830589][T11417] syscall_trace_enter+0xcf/0x1e0 [ 238.830621][T11417] do_syscall_64+0xa4/0x2b0 [ 238.830705][T11417] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 238.830730][T11417] RIP: 0033:0x7f21ed8cdf90 [ 238.830744][T11417] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 69 95 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 bc 95 02 00 8b 44 [ 238.830762][T11417] RSP: 002b:00007f21ec32ef60 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 238.830800][T11417] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f21ed8cdf90 [ 238.830817][T11417] RDX: 0000000000000000 RSI: 00007f21ed95407e RDI: 00000000ffffff9c [ 238.830841][T11417] RBP: 00007f21ed95407e R08: 0000000000000000 R09: 0000000000000000 [ 238.830857][T11417] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 238.830873][T11417] R13: 00007f21edb26038 R14: 00007f21edb25fa0 R15: 00007ffc00584c98 [ 238.830895][T11417] [ 239.083163][T11420] loop1: detected capacity change from 0 to 1024 [ 239.102137][T11420] EXT4-fs: Ignoring removed bh option [ 239.111624][T11420] EXT4-fs: inline encryption not supported [ 239.126450][T11420] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 239.195080][T11420] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 239.245404][T11420] EXT4-fs error (device loop1): ext4_map_blocks:783: inode #3: block 2: comm syz.1.1856: lblock 2 mapped to illegal pblock 2 (length 1) [ 239.276793][T11428] loop5: detected capacity change from 0 to 256 [ 239.286859][T11420] EXT4-fs error (device loop1): ext4_map_blocks:783: inode #3: block 48: comm syz.1.1856: lblock 0 mapped to illegal pblock 48 (length 1) [ 239.333214][T11428] __nla_validate_parse: 3 callbacks suppressed [ 239.333243][T11428] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1859'. [ 239.348510][T11420] EXT4-fs error (device loop1): ext4_acquire_dquot:6986: comm syz.1.1856: Failed to acquire dquot type 0 [ 239.379586][T11420] EXT4-fs error (device loop1) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 239.390465][T11420] EXT4-fs error (device loop1): ext4_evict_inode:253: inode #11: comm syz.1.1856: mark_inode_dirty error [ 239.408001][T11420] EXT4-fs warning (device loop1): ext4_evict_inode:256: couldn't mark inode dirty (err -117) [ 239.420923][T11420] EXT4-fs (loop1): 1 orphan inode deleted [ 239.437396][ T7190] EXT4-fs error (device loop1): ext4_map_blocks:783: inode #3: block 1: comm kworker/u8:38: lblock 1 mapped to illegal pblock 1 (length 1) [ 239.453088][ T7190] EXT4-fs error (device loop1): ext4_release_dquot:7022: comm kworker/u8:38: Failed to release dquot type 0 [ 239.466278][T11420] EXT4-fs error (device loop1): __ext4_get_inode_loc:4830: comm syz.1.1856: Invalid inode table block 1 in block_group 0 [ 239.479280][T11420] EXT4-fs error (device loop1) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 239.499768][T11420] EXT4-fs error (device loop1): ext4_quota_off:7270: inode #3: comm syz.1.1856: mark_inode_dirty error [ 239.702700][T11448] loop6: detected capacity change from 0 to 512 [ 239.734811][T11448] EXT4-fs error (device loop6): ext4_orphan_get:1417: comm syz.6.1865: bad orphan inode 15 [ 239.761263][T11454] netlink: 'syz.1.1867': attribute type 10 has an invalid length. [ 239.805016][T11459] netlink: 83992 bytes leftover after parsing attributes in process `syz.3.1861'. [ 239.821082][T11448] ext4_test_bit(bit=14, block=5) = 0 [ 239.830404][T11454] bond0: (slave dummy0): Releasing backup interface [ 239.858550][T11454] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 239.893198][T11448] EXT4-fs error (device loop6): __ext4_new_inode:1073: comm syz.6.1865: reserved inode found cleared - inode=1 [ 239.909811][T11459] netlink: zone id is out of range [ 239.914963][T11459] netlink: zone id is out of range [ 239.916512][T11454] team0: Failed to send options change via netlink (err -105) [ 239.927645][T11454] team0: Port device dummy0 added [ 239.943561][T11448] tipc: Enabling of bearer rejected, failed to enable media [ 239.992874][T11459] netlink: zone id is out of range [ 239.998087][T11459] netlink: zone id is out of range [ 240.104121][T11459] netlink: zone id is out of range [ 240.142974][T11459] netlink: zone id is out of range [ 240.837393][T11459] netlink: set zone limit has 8 unknown bytes [ 240.976399][T11476] x_tables: duplicate underflow at hook 2 [ 240.983552][ T29] kauditd_printk_skb: 700 callbacks suppressed [ 240.983569][ T29] audit: type=1326 audit(1768579922.016:9046): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11474 comm="syz.6.1874" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f201d11f749 code=0x7ffc0000 [ 241.019281][T11476] loop0: detected capacity change from 0 to 1024 [ 241.026090][T11476] EXT4-fs: Ignoring removed bh option [ 241.040325][T11476] EXT4-fs: inline encryption not supported [ 241.081845][T11476] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 241.097867][ T29] audit: type=1326 audit(1768579922.016:9047): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11474 comm="syz.6.1874" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f201d11f749 code=0x7ffc0000 [ 241.121526][ T29] audit: type=1326 audit(1768579922.016:9048): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11474 comm="syz.6.1874" exe="/root/syz-executor" sig=0 arch=c000003e syscall=163 compat=0 ip=0x7f201d11f749 code=0x7ffc0000 [ 241.145364][ T29] audit: type=1326 audit(1768579922.016:9049): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11474 comm="syz.6.1874" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f201d11f749 code=0x7ffc0000 [ 241.168959][ T29] audit: type=1326 audit(1768579922.016:9050): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11474 comm="syz.6.1874" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f201d11f749 code=0x7ffc0000 [ 241.204358][T11481] loop6: detected capacity change from 0 to 1024 [ 241.210836][T11476] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 241.221980][T11476] EXT4-fs error (device loop0): ext4_map_blocks:783: inode #3: block 2: comm syz.0.1873: lblock 2 mapped to illegal pblock 2 (length 1) [ 241.255166][T11481] EXT4-fs: Ignoring removed orlov option [ 241.266281][T11484] netlink: 'syz.1.1877': attribute type 1 has an invalid length. [ 241.280832][T11484] 8021q: adding VLAN 0 to HW filter on device bond18 [ 241.283605][T11476] Quota error (device loop0): qtree_write_dquot: dquota write failed [ 241.302995][T11484] 8021q: adding VLAN 0 to HW filter on device bond18 [ 241.310544][T11484] bond18: (slave vxcan7): The slave device specified does not support setting the MAC address [ 241.322266][T11484] bond18: (slave vxcan7): Error -95 calling set_mac_address [ 241.331715][T11476] EXT4-fs error (device loop0): ext4_map_blocks:783: inode #3: block 48: comm syz.0.1873: lblock 0 mapped to illegal pblock 48 (length 1) [ 241.349985][T11476] Quota error (device loop0): v2_write_file_info: Can't write info structure [ 241.358922][T11476] EXT4-fs error (device loop0): ext4_acquire_dquot:6986: comm syz.0.1873: Failed to acquire dquot type 0 [ 241.370648][T11476] EXT4-fs error (device loop0) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 241.380259][T11476] EXT4-fs error (device loop0): ext4_evict_inode:253: inode #11: comm syz.0.1873: mark_inode_dirty error [ 241.391760][T11476] EXT4-fs warning (device loop0): ext4_evict_inode:256: couldn't mark inode dirty (err -117) [ 241.412269][T11476] EXT4-fs (loop0): 1 orphan inode deleted [ 241.426393][ T4143] EXT4-fs error (device loop0): ext4_map_blocks:783: inode #3: block 1: comm kworker/u8:29: lblock 1 mapped to illegal pblock 1 (length 1) [ 241.466727][ T4143] Quota error (device loop0): remove_tree: Can't read quota data block 1 [ 241.475328][ T4143] EXT4-fs error (device loop0): ext4_release_dquot:7022: comm kworker/u8:29: Failed to release dquot type 0 [ 241.483047][T11491] netlink: 'syz.1.1879': attribute type 1 has an invalid length. [ 241.506919][T11476] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 241.517005][T11476] ext4: Unknown parameter '' [ 241.523660][T11476] EXT4-fs error (device loop0): ext4_map_blocks:783: inode #2: block 16: comm syz.0.1873: lblock 0 mapped to illegal pblock 16 (length 1) [ 241.536204][T11491] 8021q: adding VLAN 0 to HW filter on device bond19 [ 241.564588][T11493] geneve2: entered promiscuous mode [ 241.585291][T11493] team0: Device geneve2 is up. Set it down before adding it as a team port [ 241.655088][T11491] 8021q: adding VLAN 0 to HW filter on device bond19 [ 241.678602][T11498] loop0: detected capacity change from 0 to 128 [ 241.682808][T11491] bond19: (slave vxcan7): The slave device specified does not support setting the MAC address [ 241.698284][T11498] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 241.706834][T11498] FAT-fs (loop0): Filesystem has been set read-only [ 241.715263][T11498] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 241.738345][T11491] bond19: (slave vxcan7): Error -95 calling set_mac_address [ 241.796753][ T29] audit: type=1326 audit(1768579922.836:9051): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11501 comm="syz.0.1882" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1bec07f749 code=0x7ffc0000 [ 241.835460][T11481] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(8) [ 241.842038][T11481] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 241.849968][T11481] vhci_hcd vhci_hcd.0: Device attached [ 241.865020][ T29] audit: type=1326 audit(1768579922.836:9052): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11501 comm="syz.0.1882" exe="/root/syz-executor" sig=0 arch=c000003e syscall=332 compat=0 ip=0x7f1bec07f749 code=0x7ffc0000 [ 241.883967][T11506] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1883'. [ 241.944398][T11504] vhci_hcd: connection closed [ 241.944647][ T2917] vhci_hcd vhci_hcd.6: stop threads [ 241.954711][ T2917] vhci_hcd vhci_hcd.6: release socket [ 241.960157][ T2917] vhci_hcd vhci_hcd.6: disconnect device [ 241.960527][T11509] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1550 sclass=netlink_route_socket pid=11509 comm=syz.5.1883 [ 242.011201][T11510] loop0: detected capacity change from 0 to 512 [ 242.070372][T11510] ext4 filesystem being mounted at /400/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 242.169646][T11536] netlink: 'syz.1.1890': attribute type 10 has an invalid length. [ 242.190084][T11536] netlink: 'syz.1.1890': attribute type 10 has an invalid length. [ 242.199353][T11536] team0: Port device dummy0 removed [ 242.206990][T11536] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 242.420833][T11549] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1550 sclass=netlink_route_socket pid=11549 comm=syz.1.1891 [ 242.761887][T11594] loop6: detected capacity change from 0 to 512 [ 242.837468][T11594] ext4 filesystem being mounted at /172/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 242.872761][T11606] FAULT_INJECTION: forcing a failure. [ 242.872761][T11606] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 242.885947][T11606] CPU: 1 UID: 0 PID: 11606 Comm: syz.5.1893 Not tainted syzkaller #0 PREEMPT(voluntary) [ 242.885985][T11606] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 242.886003][T11606] Call Trace: [ 242.886012][T11606] [ 242.886083][T11606] __dump_stack+0x1d/0x30 [ 242.886115][T11606] dump_stack_lvl+0x95/0xd0 [ 242.886172][T11606] dump_stack+0x15/0x1b [ 242.886195][T11606] should_fail_ex+0x265/0x280 [ 242.886218][T11606] should_fail+0xb/0x20 [ 242.886238][T11606] should_fail_usercopy+0x1a/0x20 [ 242.886283][T11606] _copy_to_user+0x20/0xa0 [ 242.886320][T11606] simple_read_from_buffer+0xb5/0x130 [ 242.886345][T11606] proc_fail_nth_read+0x10e/0x150 [ 242.886383][T11606] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 242.886447][T11606] vfs_read+0x1a8/0x770 [ 242.886465][T11606] ? __rcu_read_unlock+0x4f/0x70 [ 242.886491][T11606] ? __fget_files+0x184/0x1c0 [ 242.886512][T11606] ? mutex_lock+0x58/0x90 [ 242.886616][T11606] ksys_read+0xda/0x1a0 [ 242.886639][T11606] __x64_sys_read+0x40/0x50 [ 242.886663][T11606] x64_sys_call+0x2889/0x3000 [ 242.886738][T11606] do_syscall_64+0xca/0x2b0 [ 242.886836][T11606] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 242.886866][T11606] RIP: 0033:0x7f21ed8ce15c [ 242.886886][T11606] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 242.886911][T11606] RSP: 002b:00007f21ec32f030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 242.886998][T11606] RAX: ffffffffffffffda RBX: 00007f21edb25fa0 RCX: 00007f21ed8ce15c [ 242.887015][T11606] RDX: 000000000000000f RSI: 00007f21ec32f0a0 RDI: 0000000000000005 [ 242.887031][T11606] RBP: 00007f21ec32f090 R08: 0000000000000000 R09: 0000000000000000 [ 242.887048][T11606] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 242.887064][T11606] R13: 00007f21edb26038 R14: 00007f21edb25fa0 R15: 00007ffc00584c98 [ 242.887089][T11606] [ 243.392134][T11660] netlink: 'syz.1.1898': attribute type 4 has an invalid length. [ 243.399985][T11660] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1898'. [ 243.411397][T11664] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1900'. [ 243.425033][T11660] .`: renamed from bond0 (while UP) [ 243.468509][T11664] 9pnet_fd: Insufficient options for proto=fd [ 243.517620][T11672] loop6: detected capacity change from 0 to 1024 [ 243.525107][T11672] EXT4-fs: Ignoring removed nomblk_io_submit option [ 243.801175][T11690] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1909'. [ 243.832099][T11690] netlink: 312 bytes leftover after parsing attributes in process `syz.5.1909'. [ 243.841328][T11690] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1909'. [ 243.879094][T11693] loop5: detected capacity change from 0 to 2048 [ 244.025364][T11690] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 244.072525][T11690] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1032 with error 28 [ 244.085078][T11690] EXT4-fs (loop5): This should not happen!! Data will be lost [ 244.085078][T11690] [ 244.094871][T11690] EXT4-fs (loop5): Total free blocks count 0 [ 244.100888][T11690] EXT4-fs (loop5): Free/Dirty block details [ 244.106838][T11690] EXT4-fs (loop5): free_blocks=2415919104 [ 244.112594][T11690] EXT4-fs (loop5): dirty_blocks=1040 [ 244.117997][T11690] EXT4-fs (loop5): Block reservation details [ 244.124110][T11690] EXT4-fs (loop5): i_reserved_data_blocks=65 [ 244.278620][ T3687] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 552 with error 28 [ 244.291556][ T3687] EXT4-fs (loop5): This should not happen!! Data will be lost [ 244.291556][ T3687] [ 244.465150][T11708] FAULT_INJECTION: forcing a failure. [ 244.465150][T11708] name failslab, interval 1, probability 0, space 0, times 0 [ 244.477845][T11708] CPU: 0 UID: 0 PID: 11708 Comm: syz.5.1913 Not tainted syzkaller #0 PREEMPT(voluntary) [ 244.477953][T11708] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 244.477969][T11708] Call Trace: [ 244.477978][T11708] [ 244.477987][T11708] __dump_stack+0x1d/0x30 [ 244.478017][T11708] dump_stack_lvl+0x95/0xd0 [ 244.478066][T11708] dump_stack+0x15/0x1b [ 244.478085][T11708] should_fail_ex+0x265/0x280 [ 244.478168][T11708] should_failslab+0x8c/0xb0 [ 244.478193][T11708] kmem_cache_alloc_noprof+0x69/0x4b0 [ 244.478214][T11708] ? radix_tree_node_alloc+0x8a/0x1f0 [ 244.478246][T11708] radix_tree_node_alloc+0x8a/0x1f0 [ 244.478287][T11708] idr_get_free+0x1fa/0x550 [ 244.478319][T11708] idr_alloc_u32+0xe8/0x1a0 [ 244.478385][T11708] idr_alloc_cyclic+0x7b/0x140 [ 244.478404][T11708] bpf_link_prime+0x69/0x1d0 [ 244.478433][T11708] bpf_xdp_link_attach+0x217/0x5d0 [ 244.478468][T11708] link_create+0x4d2/0x690 [ 244.478563][T11708] __sys_bpf+0x628/0x7c0 [ 244.478596][T11708] __x64_sys_bpf+0x41/0x50 [ 244.478630][T11708] x64_sys_call+0x28e1/0x3000 [ 244.478658][T11708] do_syscall_64+0xca/0x2b0 [ 244.478735][T11708] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 244.478760][T11708] RIP: 0033:0x7f21ed8cf749 [ 244.478779][T11708] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 244.478888][T11708] RSP: 002b:00007f21ec32f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 244.478955][T11708] RAX: ffffffffffffffda RBX: 00007f21edb25fa0 RCX: 00007f21ed8cf749 [ 244.478971][T11708] RDX: 0000000000000040 RSI: 0000200000000240 RDI: 000000000000001c [ 244.478986][T11708] RBP: 00007f21ec32f090 R08: 0000000000000000 R09: 0000000000000000 [ 244.479002][T11708] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 244.479018][T11708] R13: 00007f21edb26038 R14: 00007f21edb25fa0 R15: 00007ffc00584c98 [ 244.479052][T11708] [ 244.480178][T11706] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1912'. [ 244.683721][T11706] netlink: 312 bytes leftover after parsing attributes in process `syz.3.1912'. [ 244.692909][T11706] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1912'. [ 244.734349][T11712] loop3: detected capacity change from 0 to 2048 [ 244.784406][T11721] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1915'. [ 244.895566][T11729] tipc: Enabling of bearer rejected, failed to enable media [ 245.004887][T11738] loop0: detected capacity change from 0 to 1024 [ 245.011825][T11738] EXT4-fs: Ignoring removed bh option [ 245.019121][T11738] EXT4-fs: inline encryption not supported [ 245.025525][T11738] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 245.069830][T11706] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 245.190695][T11706] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 926 with error 28 [ 245.203170][T11706] EXT4-fs (loop3): This should not happen!! Data will be lost [ 245.203170][T11706] [ 245.212927][T11706] EXT4-fs (loop3): Total free blocks count 0 [ 245.219143][T11706] EXT4-fs (loop3): Free/Dirty block details [ 245.225108][T11706] EXT4-fs (loop3): free_blocks=2415919104 [ 245.230861][T11706] EXT4-fs (loop3): dirty_blocks=928 [ 245.236121][T11706] EXT4-fs (loop3): Block reservation details [ 245.242129][T11706] EXT4-fs (loop3): i_reserved_data_blocks=58 [ 245.263167][T11738] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 245.298173][T11738] EXT4-fs error (device loop0): ext4_map_blocks:783: inode #3: block 2: comm syz.0.1921: lblock 2 mapped to illegal pblock 2 (length 1) [ 245.326735][T11743] loop6: detected capacity change from 0 to 1024 [ 245.348697][T11743] EXT4-fs: Ignoring removed bh option [ 245.354229][T11743] EXT4-fs: inline encryption not supported [ 245.361404][T11738] EXT4-fs error (device loop0): ext4_map_blocks:783: inode #3: block 48: comm syz.0.1921: lblock 0 mapped to illegal pblock 48 (length 1) [ 245.388557][T11743] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 245.433788][T11743] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 245.444461][T11738] EXT4-fs error (device loop0): ext4_acquire_dquot:6986: comm syz.0.1921: Failed to acquire dquot type 0 [ 245.482941][T11743] EXT4-fs error (device loop6): ext4_map_blocks:783: inode #3: block 2: comm syz.6.1922: lblock 2 mapped to illegal pblock 2 (length 1) [ 245.505481][T11738] EXT4-fs error (device loop0) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 245.560214][T11738] EXT4-fs error (device loop0): ext4_evict_inode:253: inode #11: comm syz.0.1921: mark_inode_dirty error [ 245.571612][T11743] EXT4-fs error (device loop6): ext4_map_blocks:783: inode #3: block 48: comm syz.6.1922: lblock 0 mapped to illegal pblock 48 (length 1) [ 245.590011][T11738] EXT4-fs warning (device loop0): ext4_evict_inode:256: couldn't mark inode dirty (err -117) [ 245.600464][T11743] EXT4-fs error (device loop6): ext4_acquire_dquot:6986: comm syz.6.1922: Failed to acquire dquot type 0 [ 245.611948][T11738] EXT4-fs (loop0): 1 orphan inode deleted [ 245.618170][T11743] EXT4-fs error (device loop6) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 245.628176][ T7742] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2 with error 28 [ 245.629510][T11743] EXT4-fs error (device loop6): ext4_evict_inode:253: inode #11: comm syz.6.1922: mark_inode_dirty error [ 245.640487][ T7742] EXT4-fs (loop3): This should not happen!! Data will be lost [ 245.640487][ T7742] [ 245.661940][ T3687] EXT4-fs error (device loop0): ext4_map_blocks:783: inode #3: block 1: comm kworker/u8:18: lblock 1 mapped to illegal pblock 1 (length 1) [ 245.676844][T11743] EXT4-fs warning (device loop6): ext4_evict_inode:256: couldn't mark inode dirty (err -117) [ 245.687721][ T3687] EXT4-fs error (device loop0): ext4_release_dquot:7022: comm kworker/u8:18: Failed to release dquot type 0 [ 245.699513][T11743] EXT4-fs (loop6): 1 orphan inode deleted [ 245.708252][ T3692] EXT4-fs error (device loop6): ext4_map_blocks:783: inode #3: block 1: comm kworker/u8:19: lblock 1 mapped to illegal pblock 1 (length 1) [ 245.727359][T11747] ext4: Unknown parameter '' [ 245.736656][ T3692] EXT4-fs error (device loop6): ext4_release_dquot:7022: comm kworker/u8:19: Failed to release dquot type 0 [ 245.750779][T11743] EXT4-fs error (device loop6): __ext4_get_inode_loc:4830: comm syz.6.1922: Invalid inode table block 1 in block_group 0 [ 245.756511][T11747] EXT4-fs error (device loop0): ext4_map_blocks:783: inode #2: block 16: comm syz.0.1921: lblock 0 mapped to illegal pblock 16 (length 1) [ 245.776498][T11743] EXT4-fs error (device loop6) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 245.787526][T11738] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 245.797973][T11743] EXT4-fs error (device loop6): ext4_quota_off:7270: inode #3: comm syz.6.1922: mark_inode_dirty error [ 245.859371][T11751] netlink: 'syz.0.1925': attribute type 10 has an invalid length. [ 245.874197][T11751] netlink: 'syz.0.1925': attribute type 10 has an invalid length. [ 245.882343][T11751] dummy0: left promiscuous mode [ 245.887431][T11751] dummy0: left allmulticast mode [ 245.928898][T11751] team0: Port device dummy0 removed [ 245.941279][T11751] dummy0: entered promiscuous mode [ 245.946913][T11751] dummy0: entered allmulticast mode [ 245.952847][T11751] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 246.042054][T11768] FAULT_INJECTION: forcing a failure. [ 246.042054][T11768] name failslab, interval 1, probability 0, space 0, times 0 [ 246.054824][T11768] CPU: 0 UID: 0 PID: 11768 Comm: syz.3.1930 Not tainted syzkaller #0 PREEMPT(voluntary) [ 246.054856][T11768] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 246.054880][T11768] Call Trace: [ 246.054894][T11768] [ 246.054904][T11768] __dump_stack+0x1d/0x30 [ 246.054941][T11768] dump_stack_lvl+0x95/0xd0 [ 246.055033][T11768] dump_stack+0x15/0x1b [ 246.055058][T11768] should_fail_ex+0x265/0x280 [ 246.055104][T11768] should_failslab+0x8c/0xb0 [ 246.055127][T11768] kmem_cache_alloc_node_noprof+0x6b/0x4c0 [ 246.055154][T11768] ? perf_event_alloc+0x159/0x18d0 [ 246.055202][T11768] perf_event_alloc+0x159/0x18d0 [ 246.055320][T11768] ? __pfx_ptrace_triggered+0x10/0x10 [ 246.055356][T11768] ? _parse_integer+0x27/0x40 [ 246.055381][T11768] ? __pfx_ptrace_triggered+0x10/0x10 [ 246.055413][T11768] perf_event_create_kernel_counter+0xba/0x380 [ 246.055527][T11768] ? __pfx_ptrace_triggered+0x10/0x10 [ 246.055562][T11768] register_user_hw_breakpoint+0x32/0x40 [ 246.055624][T11768] ptrace_set_debugreg+0x536/0x640 [ 246.055658][T11768] arch_ptrace+0x361/0x3f0 [ 246.055699][T11768] __se_sys_ptrace+0xf3/0x2c0 [ 246.055735][T11768] __x64_sys_ptrace+0x55/0x70 [ 246.055766][T11768] x64_sys_call+0x2ee5/0x3000 [ 246.055830][T11768] do_syscall_64+0xca/0x2b0 [ 246.055925][T11768] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 246.055953][T11768] RIP: 0033:0x7f815f4bf749 [ 246.055975][T11768] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 246.056047][T11768] RSP: 002b:00007f815df1f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000065 [ 246.056070][T11768] RAX: ffffffffffffffda RBX: 00007f815f715fa0 RCX: 00007f815f4bf749 [ 246.056118][T11768] RDX: 0000000000000388 RSI: 0000000000000451 RDI: 0000000000000006 [ 246.056131][T11768] RBP: 00007f815df1f090 R08: 0000000000000000 R09: 0000000000000000 [ 246.056143][T11768] R10: 000000002590f58a R11: 0000000000000246 R12: 0000000000000001 [ 246.056154][T11768] R13: 00007f815f716038 R14: 00007f815f715fa0 R15: 00007ffc3524d438 [ 246.056172][T11768] [ 246.312245][T11758] loop5: detected capacity change from 0 to 128 [ 246.338719][T11775] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1932'. [ 246.347726][T11775] netlink: 312 bytes leftover after parsing attributes in process `syz.3.1932'. [ 246.356808][T11775] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1932'. [ 246.379963][T11776] loop0: detected capacity change from 0 to 128 [ 246.455824][T11775] loop3: detected capacity change from 0 to 2048 [ 246.805208][T11775] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 246.932166][T11775] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 142 with error 28 [ 246.944657][T11775] EXT4-fs (loop3): This should not happen!! Data will be lost [ 246.944657][T11775] [ 246.954355][T11775] EXT4-fs (loop3): Total free blocks count 0 [ 246.960402][T11775] EXT4-fs (loop3): Free/Dirty block details [ 246.966343][T11775] EXT4-fs (loop3): free_blocks=2415919104 [ 246.972092][T11775] EXT4-fs (loop3): dirty_blocks=144 [ 246.977355][T11775] EXT4-fs (loop3): Block reservation details [ 246.983456][T11775] EXT4-fs (loop3): i_reserved_data_blocks=9 [ 247.060475][ T29] kauditd_printk_skb: 173 callbacks suppressed [ 247.060493][ T29] audit: type=1326 audit(1768579928.096:9220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11787 comm="syz.0.1936" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1bec07f749 code=0x7ffc0000 [ 247.094858][ T29] audit: type=1326 audit(1768579928.096:9221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11787 comm="syz.0.1936" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1bec07f749 code=0x7ffc0000 [ 247.118656][ T29] audit: type=1326 audit(1768579928.126:9222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11787 comm="syz.0.1936" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f1bec07f749 code=0x7ffc0000 [ 247.142298][ T29] audit: type=1326 audit(1768579928.126:9223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11787 comm="syz.0.1936" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1bec07f749 code=0x7ffc0000 [ 247.166828][ T29] audit: type=1326 audit(1768579928.126:9224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11787 comm="syz.0.1936" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f1bec07f749 code=0x7ffc0000 [ 247.190334][ T29] audit: type=1326 audit(1768579928.126:9225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11787 comm="syz.0.1936" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1bec07f749 code=0x7ffc0000 [ 247.213937][ T29] audit: type=1326 audit(1768579928.126:9226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11787 comm="syz.0.1936" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1bec07f749 code=0x7ffc0000 [ 247.237512][ T29] audit: type=1326 audit(1768579928.126:9227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11787 comm="syz.0.1936" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1bec07f749 code=0x7ffc0000 [ 247.261174][ T29] audit: type=1326 audit(1768579928.126:9228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11787 comm="syz.0.1936" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1bec07f749 code=0x7ffc0000 [ 247.284821][ T29] audit: type=1326 audit(1768579928.126:9229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11787 comm="syz.0.1936" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1bec07f749 code=0x7ffc0000 [ 247.316887][ T3778] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 142 with error 28 [ 247.329323][ T3778] EXT4-fs (loop3): This should not happen!! Data will be lost [ 247.329323][ T3778] [ 247.435503][T11796] netlink: 'syz.6.1939': attribute type 10 has an invalid length. [ 247.488422][T11802] netlink: 'syz.6.1939': attribute type 10 has an invalid length. [ 247.534865][T11806] loop5: detected capacity change from 0 to 128 [ 247.542760][T11805] FAULT_INJECTION: forcing a failure. [ 247.542760][T11805] name failslab, interval 1, probability 0, space 0, times 0 [ 247.555584][T11805] CPU: 0 UID: 0 PID: 11805 Comm: syz.3.1942 Not tainted syzkaller #0 PREEMPT(voluntary) [ 247.555619][T11805] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 247.555632][T11805] Call Trace: [ 247.555639][T11805] [ 247.555647][T11805] __dump_stack+0x1d/0x30 [ 247.555680][T11805] dump_stack_lvl+0x95/0xd0 [ 247.555709][T11805] dump_stack+0x15/0x1b [ 247.555735][T11805] should_fail_ex+0x265/0x280 [ 247.555767][T11805] should_failslab+0x8c/0xb0 [ 247.555792][T11805] __kmalloc_cache_noprof+0x65/0x4c0 [ 247.555821][T11805] ? __se_sys_memfd_create+0x1d6/0x6b0 [ 247.555913][T11805] ? mutex_unlock+0x4f/0x90 [ 247.556029][T11805] __se_sys_memfd_create+0x1d6/0x6b0 [ 247.556112][T11805] __x64_sys_memfd_create+0x31/0x40 [ 247.556144][T11805] x64_sys_call+0x28cb/0x3000 [ 247.556168][T11805] do_syscall_64+0xca/0x2b0 [ 247.556206][T11805] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 247.556234][T11805] RIP: 0033:0x7f815f4bf749 [ 247.556250][T11805] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 247.556269][T11805] RSP: 002b:00007f815df1ee18 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 247.556289][T11805] RAX: ffffffffffffffda RBX: 00000000000004e8 RCX: 00007f815f4bf749 [ 247.556327][T11805] RDX: 00007f815df1eef0 RSI: 0000000000000000 RDI: 00007f815f544960 [ 247.556353][T11805] RBP: 0000200000000f40 R08: 00007f815df1ebb7 R09: 00007f815df1ee40 [ 247.556371][T11805] R10: 000000000000000a R11: 0000000000000202 R12: 0000200000000140 [ 247.556386][T11805] R13: 00007f815df1eef0 R14: 00007f815df1eeb0 R15: 0000200000000500 [ 247.556405][T11805] [ 247.775842][T11810] loop3: detected capacity change from 0 to 1024 [ 247.783118][T11810] EXT4-fs: Ignoring removed orlov option [ 247.833614][T11802] team0: Port device dummy0 removed [ 247.857229][T11802] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 247.883248][T11816] loop1: detected capacity change from 0 to 512 [ 247.944834][T11819] netlink: 'syz.6.1947': attribute type 1 has an invalid length. [ 248.003322][T11816] ext4 filesystem being mounted at /431/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 248.020055][T11819] 8021q: adding VLAN 0 to HW filter on device bond5 [ 248.038725][T11824] netlink: 'syz.5.1946': attribute type 10 has an invalid length. [ 248.141212][T11832] netlink: 'syz.5.1946': attribute type 10 has an invalid length. [ 248.175901][T11801] Set syz1 is full, maxelem 65536 reached [ 248.195089][T11828] 8021q: adding VLAN 0 to HW filter on device bond5 [ 248.202598][T11828] bond5: (slave vxcan3): The slave device specified does not support setting the MAC address [ 248.215054][T11828] bond5: (slave vxcan3): Error -95 calling set_mac_address [ 248.225151][T11810] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(8) [ 248.231693][T11810] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 248.239373][T11810] vhci_hcd vhci_hcd.0: Device attached [ 248.252453][T11833] loop0: detected capacity change from 0 to 512 [ 248.260827][T11824] bond0: (slave dummy0): Releasing backup interface [ 248.285363][T11824] team0: Port device dummy0 added [ 248.297268][T11839] loop1: detected capacity change from 0 to 512 [ 248.304827][T11833] ext4 filesystem being mounted at /409/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 248.316648][T11832] team0: Port device dummy0 removed [ 248.323409][T11832] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 248.344282][T11836] vhci_hcd: connection closed [ 248.344486][ T7763] vhci_hcd vhci_hcd.3: stop threads [ 248.354703][ T7763] vhci_hcd vhci_hcd.3: release socket [ 248.360216][ T7763] vhci_hcd vhci_hcd.3: disconnect device [ 248.376751][T11839] EXT4-fs warning (device loop1): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 248.392033][T11839] EXT4-fs (loop1): mount failed [ 248.417339][T11839] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 248.588030][T11839] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 248.647442][T11839] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 249.097972][T11864] netlink: 'syz.3.1957': attribute type 10 has an invalid length. [ 249.115637][T11864] bond0: (slave dummy0): Releasing backup interface [ 249.159009][T11866] netlink: 'syz.3.1957': attribute type 10 has an invalid length. [ 249.168144][T11864] team0: Port device dummy0 added [ 249.193004][T11839] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 249.213426][T11866] team0: Port device dummy0 removed [ 249.224881][T11866] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 249.344211][ T7763] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 249.353205][ T7763] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 249.378503][ T7763] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 249.422751][ T7763] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 249.511504][T11878] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1961'. [ 249.528353][T11882] FAULT_INJECTION: forcing a failure. [ 249.528353][T11882] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 249.541836][T11882] CPU: 1 UID: 0 PID: 11882 Comm: syz.6.1963 Not tainted syzkaller #0 PREEMPT(voluntary) [ 249.541863][T11882] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 249.541877][T11882] Call Trace: [ 249.541883][T11882] [ 249.541891][T11882] __dump_stack+0x1d/0x30 [ 249.541916][T11882] dump_stack_lvl+0x95/0xd0 [ 249.541950][T11882] dump_stack+0x15/0x1b [ 249.541969][T11882] should_fail_ex+0x265/0x280 [ 249.541998][T11882] should_fail+0xb/0x20 [ 249.542049][T11882] should_fail_usercopy+0x1a/0x20 [ 249.542075][T11882] _copy_from_user+0x1c/0xb0 [ 249.542108][T11882] ___sys_sendmsg+0xc1/0x1d0 [ 249.542197][T11882] __x64_sys_sendmsg+0xd4/0x160 [ 249.542244][T11882] x64_sys_call+0x17ba/0x3000 [ 249.542277][T11882] do_syscall_64+0xca/0x2b0 [ 249.542305][T11882] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 249.542348][T11882] RIP: 0033:0x7f201d11f749 [ 249.542364][T11882] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 249.542388][T11882] RSP: 002b:00007f201bb7f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 249.542412][T11882] RAX: ffffffffffffffda RBX: 00007f201d375fa0 RCX: 00007f201d11f749 [ 249.542429][T11882] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000000000000006 [ 249.542496][T11882] RBP: 00007f201bb7f090 R08: 0000000000000000 R09: 0000000000000000 [ 249.542512][T11882] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 249.542525][T11882] R13: 00007f201d376038 R14: 00007f201d375fa0 R15: 00007ffed331e1d8 [ 249.542616][T11882] [ 249.590605][T11878] netlink: 312 bytes leftover after parsing attributes in process `syz.3.1961'. [ 249.713862][T11878] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1961'. [ 249.755546][T11884] loop3: detected capacity change from 0 to 2048 [ 249.860742][T11878] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 249.875884][T11878] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 992 with error 28 [ 249.888337][T11878] EXT4-fs (loop3): This should not happen!! Data will be lost [ 249.888337][T11878] [ 249.898097][T11878] EXT4-fs (loop3): Total free blocks count 0 [ 249.904176][T11878] EXT4-fs (loop3): Free/Dirty block details [ 249.910132][T11878] EXT4-fs (loop3): free_blocks=2415919104 [ 249.915889][T11878] EXT4-fs (loop3): dirty_blocks=992 [ 249.921162][T11878] EXT4-fs (loop3): Block reservation details [ 249.927195][T11878] EXT4-fs (loop3): i_reserved_data_blocks=62 [ 250.002209][T11899] loop5: detected capacity change from 0 to 1024 [ 250.025673][T11899] EXT4-fs: Ignoring removed orlov option [ 250.081315][T11902] 8021q: adding VLAN 0 to HW filter on device bond0 [ 250.118492][T11902] bond0: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 250.187972][ T5007] bond0: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 250.250831][T11918] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1975'. [ 250.316699][T11921] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1550 sclass=netlink_route_socket pid=11921 comm=syz.0.1975 [ 250.346428][ T5007] bond0: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 250.388490][T11899] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(8) [ 250.395065][T11899] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 250.402775][T11899] vhci_hcd vhci_hcd.0: Device attached [ 250.409863][ T7742] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 992 with error 28 [ 250.422401][ T7742] EXT4-fs (loop3): This should not happen!! Data will be lost [ 250.422401][ T7742] [ 250.459316][T11923] vhci_hcd: connection closed [ 250.460393][ T7742] vhci_hcd vhci_hcd.5: stop threads [ 250.470615][ T7742] vhci_hcd vhci_hcd.5: release socket [ 250.476109][ T7742] vhci_hcd vhci_hcd.5: disconnect device [ 250.675226][T11956] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1977'. [ 250.684227][T11956] netlink: 312 bytes leftover after parsing attributes in process `syz.6.1977'. [ 250.693347][T11956] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1977'. [ 250.796565][T11956] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 250.820152][T11956] EXT4-fs (loop6): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 840 with error 28 [ 250.832617][T11956] EXT4-fs (loop6): This should not happen!! Data will be lost [ 250.832617][T11956] [ 250.842409][T11956] EXT4-fs (loop6): Total free blocks count 0 [ 250.848497][T11956] EXT4-fs (loop6): Free/Dirty block details [ 250.854596][T11956] EXT4-fs (loop6): free_blocks=2415919104 [ 250.860388][T11956] EXT4-fs (loop6): dirty_blocks=848 [ 250.865619][T11956] EXT4-fs (loop6): Block reservation details [ 250.871682][T11956] EXT4-fs (loop6): i_reserved_data_blocks=53 [ 251.163144][ T7742] EXT4-fs (loop6): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 840 with error 28 [ 251.175715][ T7742] EXT4-fs (loop6): This should not happen!! Data will be lost [ 251.175715][ T7742] [ 251.188957][T12020] netlink: 'syz.0.1981': attribute type 10 has an invalid length. [ 251.210326][T12020] bond0: (slave dummy0): Releasing backup interface [ 251.219427][T12020] dummy0: left promiscuous mode [ 251.224373][T12020] dummy0: left allmulticast mode [ 251.240662][T12024] netlink: 'syz.0.1981': attribute type 10 has an invalid length. [ 251.246785][T12020] dummy0: entered promiscuous mode [ 251.257738][T12020] dummy0: entered allmulticast mode [ 251.263918][T12020] team0: Port device dummy0 added [ 251.318468][T12024] dummy0: left promiscuous mode [ 251.330615][T12024] dummy0: left allmulticast mode [ 251.354080][T12024] team0: Port device dummy0 removed [ 251.361417][T12024] dummy0: entered promiscuous mode [ 251.379257][T12024] dummy0: entered allmulticast mode [ 251.385349][T12024] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 251.442061][T12034] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1982'. [ 251.466302][T12034] netlink: 312 bytes leftover after parsing attributes in process `syz.6.1982'. [ 251.475396][T12034] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1982'. [ 251.726231][T12039] set_capacity_and_notify: 1 callbacks suppressed [ 251.726247][T12039] loop6: detected capacity change from 0 to 2048 [ 251.786806][T12042] loop0: detected capacity change from 0 to 512 [ 251.831554][T12042] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 251.935867][T12047] loop3: detected capacity change from 0 to 1024 [ 251.942598][T12047] EXT4-fs: Ignoring removed bh option [ 251.965744][T12047] EXT4-fs: inline encryption not supported [ 251.982610][T12047] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 251.984439][T12042] ext4 filesystem being mounted at /416/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 251.993883][T12039] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 252.025528][T12039] EXT4-fs (loop6): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 394 with error 28 [ 252.025876][T12047] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 252.037974][T12039] EXT4-fs (loop6): This should not happen!! Data will be lost [ 252.037974][T12039] [ 252.055757][T12039] EXT4-fs (loop6): Total free blocks count 0 [ 252.061858][T12039] EXT4-fs (loop6): Free/Dirty block details [ 252.067889][T12039] EXT4-fs (loop6): free_blocks=2415919104 [ 252.069070][T12047] EXT4-fs error (device loop3): ext4_map_blocks:783: inode #3: block 2: comm syz.3.1986: lblock 2 mapped to illegal pblock 2 (length 1) [ 252.073639][T12039] EXT4-fs (loop6): dirty_blocks=400 [ 252.073658][T12039] EXT4-fs (loop6): Block reservation details [ 252.073669][T12039] EXT4-fs (loop6): i_reserved_data_blocks=25 [ 252.127528][T12047] __quota_error: 149 callbacks suppressed [ 252.127547][T12047] Quota error (device loop3): qtree_write_dquot: dquota write failed [ 252.141829][T12047] EXT4-fs error (device loop3): ext4_map_blocks:783: inode #3: block 48: comm syz.3.1986: lblock 0 mapped to illegal pblock 48 (length 1) [ 252.173399][T12047] Quota error (device loop3): v2_write_file_info: Can't write info structure [ 252.182353][T12047] EXT4-fs error (device loop3): ext4_acquire_dquot:6986: comm syz.3.1986: Failed to acquire dquot type 0 [ 252.258040][T12047] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 252.276338][T12047] EXT4-fs error (device loop3): ext4_evict_inode:253: inode #11: comm syz.3.1986: mark_inode_dirty error [ 252.297323][T12056] loop0: detected capacity change from 0 to 2048 [ 252.328533][T12059] loop5: detected capacity change from 0 to 1024 [ 252.336681][T12059] EXT4-fs: Ignoring removed nomblk_io_submit option [ 252.386232][T12047] EXT4-fs warning (device loop3): ext4_evict_inode:256: couldn't mark inode dirty (err -117) [ 252.456959][T12056] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 252.476079][T12047] EXT4-fs (loop3): 1 orphan inode deleted [ 252.491918][ T4143] EXT4-fs (loop6): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 300 with error 28 [ 252.504354][ T4143] EXT4-fs (loop6): This should not happen!! Data will be lost [ 252.504354][ T4143] [ 252.506365][T12056] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 204 with error 28 [ 252.526495][T12056] EXT4-fs (loop0): This should not happen!! Data will be lost [ 252.526495][T12056] [ 252.536223][T12056] EXT4-fs (loop0): Total free blocks count 0 [ 252.542268][T12056] EXT4-fs (loop0): Free/Dirty block details [ 252.548235][T12056] EXT4-fs (loop0): free_blocks=2415919104 [ 252.553983][T12056] EXT4-fs (loop0): dirty_blocks=208 [ 252.559285][T12056] EXT4-fs (loop0): Block reservation details [ 252.565329][T12056] EXT4-fs (loop0): i_reserved_data_blocks=13 [ 252.571396][ T3583] EXT4-fs error (device loop3): ext4_map_blocks:783: inode #3: block 1: comm kworker/u8:13: lblock 1 mapped to illegal pblock 1 (length 1) [ 252.633496][ T3583] Quota error (device loop3): remove_tree: Can't read quota data block 1 [ 252.642080][ T3583] EXT4-fs error (device loop3): ext4_release_dquot:7022: comm kworker/u8:13: Failed to release dquot type 0 [ 252.691845][T12047] EXT4-fs unmount: 47 callbacks suppressed [ 252.691860][T12047] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 252.714737][T12071] loop1: detected capacity change from 0 to 512 [ 252.717287][T12047] EXT4-fs error (device loop3): __ext4_get_inode_loc:4830: comm syz.3.1986: Invalid inode table block 1 in block_group 0 [ 252.736465][T12047] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 252.746310][T12071] EXT4-fs: Ignoring removed bh option [ 252.768325][T12071] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 252.806604][T12047] EXT4-fs error (device loop3): ext4_quota_off:7270: inode #3: comm syz.3.1986: mark_inode_dirty error [ 252.813845][T12074] loop6: detected capacity change from 0 to 512 [ 252.821578][T12071] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.1991: invalid indirect mapped block 4294967295 (level 1) [ 252.826961][T12074] EXT4-fs: Ignoring removed bh option [ 252.844160][T12074] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 252.874465][T12074] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #11: comm syz.6.1992: invalid indirect mapped block 4294967295 (level 1) [ 252.896294][T12071] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.1991: invalid indirect mapped block 4294967295 (level 1) [ 252.911360][ T3583] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 204 with error 28 [ 252.923860][ T3583] EXT4-fs (loop0): This should not happen!! Data will be lost [ 252.923860][ T3583] [ 252.930244][T12074] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #11: comm syz.6.1992: invalid indirect mapped block 4294967295 (level 1) [ 252.947858][T12074] EXT4-fs (loop6): 2 truncates cleaned up [ 252.971237][T12074] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 252.988495][T12071] EXT4-fs (loop1): 2 truncates cleaned up [ 252.994777][T12071] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 253.020684][T12071] FAULT_INJECTION: forcing a failure. [ 253.020684][T12071] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 253.033853][T12071] CPU: 0 UID: 0 PID: 12071 Comm: syz.1.1991 Not tainted syzkaller #0 PREEMPT(voluntary) [ 253.033880][T12071] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 253.033896][T12071] Call Trace: [ 253.033920][T12071] [ 253.033930][T12071] __dump_stack+0x1d/0x30 [ 253.033965][T12071] dump_stack_lvl+0x95/0xd0 [ 253.033987][T12071] dump_stack+0x15/0x1b [ 253.034006][T12071] should_fail_ex+0x265/0x280 [ 253.034029][T12071] should_fail+0xb/0x20 [ 253.034075][T12071] should_fail_usercopy+0x1a/0x20 [ 253.034182][T12071] strncpy_from_user+0x27/0x260 [ 253.034225][T12071] path_setxattrat+0xeb/0x310 [ 253.034301][T12071] __x64_sys_setxattr+0x6e/0x90 [ 253.034396][T12071] x64_sys_call+0xf1e/0x3000 [ 253.034429][T12071] do_syscall_64+0xca/0x2b0 [ 253.034456][T12071] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 253.034485][T12071] RIP: 0033:0x7f7f90c2f749 [ 253.034504][T12071] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 253.034529][T12071] RSP: 002b:00007f7f8f697038 EFLAGS: 00000246 ORIG_RAX: 00000000000000bc [ 253.034585][T12071] RAX: ffffffffffffffda RBX: 00007f7f90e85fa0 RCX: 00007f7f90c2f749 [ 253.034603][T12071] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000200000000240 [ 253.034619][T12071] RBP: 00007f7f8f697090 R08: 0000000000000001 R09: 0000000000000000 [ 253.034636][T12071] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 253.034652][T12071] R13: 00007f7f90e86038 R14: 00007f7f90e85fa0 R15: 00007ffcb38e6c18 [ 253.034676][T12071] [ 253.069704][T12074] IPv6: sit1: Disabled Multicast RS [ 253.173419][T12079] loop3: detected capacity change from 0 to 164 [ 253.209463][ T3317] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 253.229878][T12077] loop0: detected capacity change from 0 to 2048 [ 253.235353][T12079] Unable to read rock-ridge attributes [ 253.244452][ T29] audit: type=1400 audit(1768579934.276:9378): avc: denied { mount } for pid=12078 comm="syz.3.1994" name="/" dev="loop3" ino=1792 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 253.293916][ T7269] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 253.310440][T12077] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 253.325432][ T29] audit: type=1400 audit(1768579934.316:9379): avc: denied { unmount } for pid=3316 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 253.345701][ T29] audit: type=1326 audit(1768579934.356:9380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12082 comm="syz.3.1996" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f815f4bf749 code=0x7ffc0000 [ 253.369323][ T29] audit: type=1326 audit(1768579934.356:9381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12082 comm="syz.3.1996" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f815f4bf749 code=0x7ffc0000 [ 253.475452][T12077] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 253.516241][ T29] audit: type=1326 audit(1768579934.556:9382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12082 comm="syz.3.1996" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f815f4bf749 code=0x7ffc0000 [ 253.539898][T12077] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 564 with error 28 [ 253.543736][ T29] audit: type=1326 audit(1768579934.556:9383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12082 comm="syz.3.1996" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f815f4bf749 code=0x7ffc0000 [ 253.552317][T12077] EXT4-fs (loop0): This should not happen!! Data will be lost [ 253.552317][T12077] [ 253.552336][T12077] EXT4-fs (loop0): Total free blocks count 0 [ 253.552354][T12077] EXT4-fs (loop0): Free/Dirty block details [ 253.575857][ T29] audit: type=1326 audit(1768579934.556:9384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12082 comm="syz.3.1996" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f815f4bf749 code=0x7ffc0000 [ 253.585622][T12077] EXT4-fs (loop0): free_blocks=2415919104 [ 253.626790][T12077] EXT4-fs (loop0): dirty_blocks=576 [ 253.632130][T12077] EXT4-fs (loop0): Block reservation details [ 253.638171][T12077] EXT4-fs (loop0): i_reserved_data_blocks=36 [ 253.771449][ T7759] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 564 with error 28 [ 253.801641][T12099] loop3: detected capacity change from 0 to 2048 [ 253.835694][T12099] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 253.859236][T12105] EXT4-fs: Ignoring removed orlov option [ 253.886483][T12105] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 253.999737][T12099] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 254.021588][T12099] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 254.034192][T12099] EXT4-fs (loop3): This should not happen!! Data will be lost [ 254.034192][T12099] [ 254.044008][T12099] EXT4-fs (loop3): Total free blocks count 0 [ 254.050044][T12099] EXT4-fs (loop3): Free/Dirty block details [ 254.055962][T12099] EXT4-fs (loop3): free_blocks=2415919104 [ 254.061785][T12099] EXT4-fs (loop3): dirty_blocks=2080 [ 254.067140][T12099] EXT4-fs (loop3): Block reservation details [ 254.073156][T12099] EXT4-fs (loop3): i_reserved_data_blocks=130 [ 254.326538][T12116] EXT4-fs: Ignoring removed bh option [ 254.342642][T12116] EXT4-fs: inline encryption not supported [ 254.380360][T12116] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 254.412205][T12116] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 254.437119][T12116] EXT4-fs error (device loop1): ext4_map_blocks:783: inode #3: block 2: comm syz.1.2003: lblock 2 mapped to illegal pblock 2 (length 1) [ 254.481475][T12105] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(8) [ 254.488044][T12105] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 254.495740][T12105] vhci_hcd vhci_hcd.0: Device attached [ 254.510497][T12116] EXT4-fs error (device loop1): ext4_map_blocks:783: inode #3: block 48: comm syz.1.2003: lblock 0 mapped to illegal pblock 48 (length 1) [ 254.551200][T12059] syz.5.1989 (12059) used greatest stack depth: 5312 bytes left [ 254.587226][ T3917] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 254.600132][T12116] EXT4-fs error (device loop1): ext4_acquire_dquot:6986: comm syz.1.2003: Failed to acquire dquot type 0 [ 254.615667][T12119] vhci_hcd: connection closed [ 254.615797][ T7774] vhci_hcd vhci_hcd.0: stop threads [ 254.625895][ T7774] vhci_hcd vhci_hcd.0: release socket [ 254.631526][ T7774] vhci_hcd vhci_hcd.0: disconnect device [ 254.654872][T12116] EXT4-fs error (device loop1) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 254.669744][T12122] __nla_validate_parse: 11 callbacks suppressed [ 254.669765][T12122] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2004'. [ 254.685287][ T3504] vhci_hcd vhci_hcd.0: vhci_device speed not set [ 254.691791][T12116] EXT4-fs error (device loop1): ext4_evict_inode:253: inode #11: comm syz.1.2003: mark_inode_dirty error [ 254.707083][ T7774] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 360 with error 28 [ 254.719612][T12116] EXT4-fs warning (device loop1): ext4_evict_inode:256: couldn't mark inode dirty (err -117) [ 254.730006][T12116] EXT4-fs (loop1): 1 orphan inode deleted [ 254.736145][T12116] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 254.749434][ T7759] EXT4-fs error (device loop1): ext4_map_blocks:783: inode #3: block 1: comm kworker/u8:40: lblock 1 mapped to illegal pblock 1 (length 1) [ 254.764390][T12123] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1550 sclass=netlink_route_socket pid=12123 comm=syz.5.2004 [ 254.780716][ T7759] EXT4-fs error (device loop1): ext4_release_dquot:7022: comm kworker/u8:40: Failed to release dquot type 0 [ 254.793240][T12116] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 254.809667][T12116] EXT4-fs error (device loop1): __ext4_get_inode_loc:4830: comm syz.1.2003: Invalid inode table block 1 in block_group 0 [ 254.888846][T12116] EXT4-fs error (device loop1) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 254.978008][T12116] EXT4-fs error (device loop1): ext4_quota_off:7270: inode #3: comm syz.1.2003: mark_inode_dirty error [ 255.061715][T12149] EXT4-fs: Ignoring removed nomblk_io_submit option [ 255.098199][T12149] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 255.307318][ T3319] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 255.331294][T12174] netlink: 96 bytes leftover after parsing attributes in process `syz.6.2012'. [ 256.087876][T12228] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2019'. [ 256.118013][T12228] netlink: 312 bytes leftover after parsing attributes in process `syz.6.2019'. [ 256.127151][T12228] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2019'. [ 256.169974][ T3006] ================================================================== [ 256.178109][ T3006] BUG: KCSAN: data-race in set_nlink / set_nlink [ 256.184465][ T3006] [ 256.186800][ T3006] read to 0xffff8881074faeb8 of 4 bytes by task 3310 on cpu 0: [ 256.194359][ T3006] set_nlink+0x29/0xb0 [ 256.198447][ T3006] kernfs_iop_permission+0x1e2/0x220 [ 256.203761][ T3006] inode_permission+0x2de/0x3c0 [ 256.208641][ T3006] link_path_walk+0x779/0xe30 [ 256.213349][ T3006] path_openat+0x1c0/0x23b0 [ 256.217888][ T3006] do_filp_open+0x109/0x230 [ 256.222445][ T3006] do_sys_openat2+0xa6/0x150 [ 256.227090][ T3006] __x64_sys_openat+0xf2/0x120 [ 256.231895][ T3006] x64_sys_call+0x2b07/0x3000 [ 256.236712][ T3006] do_syscall_64+0xca/0x2b0 [ 256.241229][ T3006] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 256.247138][ T3006] [ 256.249515][ T3006] write to 0xffff8881074faeb8 of 4 bytes by task 3006 on cpu 1: [ 256.257163][ T3006] set_nlink+0x99/0xb0 [ 256.261248][ T3006] kernfs_iop_permission+0x1e2/0x220 [ 256.266554][ T3006] inode_permission+0x2de/0x3c0 [ 256.271424][ T3006] link_path_walk+0x779/0xe30 [ 256.276556][ T3006] path_lookupat+0x8c/0x500 [ 256.281086][ T3006] filename_lookup+0x147/0x340 [ 256.285877][ T3006] vfs_statx+0x9d/0x390 [ 256.290051][ T3006] vfs_fstatat+0x115/0x170 [ 256.294499][ T3006] __se_sys_newfstatat+0x55/0x260 [ 256.299545][ T3006] __x64_sys_newfstatat+0x55/0x70 [ 256.304594][ T3006] x64_sys_call+0x111f/0x3000 [ 256.309309][ T3006] do_syscall_64+0xca/0x2b0 [ 256.313845][ T3006] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 256.319756][ T3006] [ 256.322180][ T3006] value changed: 0x00000008 -> 0x00000009 [ 256.327908][ T3006] [ 256.330248][ T3006] Reported by Kernel Concurrency Sanitizer on: [ 256.336416][ T3006] CPU: 1 UID: 0 PID: 3006 Comm: udevd Not tainted syzkaller #0 PREEMPT(voluntary) [ 256.345811][ T3006] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 256.355976][ T3006] ================================================================== [ 256.506434][T12228] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 256.623709][ T3317] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 256.637649][T12228] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 256.653351][T12228] EXT4-fs (loop6): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 980 with error 28 [ 256.665843][T12228] EXT4-fs (loop6): This should not happen!! Data will be lost [ 256.665843][T12228] [ 256.675611][T12228] EXT4-fs (loop6): Total free blocks count 0 [ 256.681673][T12228] EXT4-fs (loop6): Free/Dirty block details [ 256.687743][T12228] EXT4-fs (loop6): free_blocks=2415919104 [ 256.693587][T12228] EXT4-fs (loop6): dirty_blocks=992 [ 256.698915][T12228] EXT4-fs (loop6): Block reservation details [ 256.704929][T12228] EXT4-fs (loop6): i_reserved_data_blocks=62 [ 256.873385][ T3687] EXT4-fs (loop6): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 980 with error 28