last executing test programs: 2m49.456666467s ago: executing program 0 (id=16): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000200000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300", 0xffffffff}, 0x48, 0xffffffffffffffff) 2m49.388654228s ago: executing program 0 (id=18): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000810018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020000008500000082"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='qdisc_destroy\x00', r1}, 0x10) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @broadcast}) close(r2) r4 = openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x48, r5, 0x300, 0x70bd26, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x8}, @NL80211_ATTR_MESH_SETUP={0xc, 0x70, [@NL80211_MESH_SETUP_ENABLE_VENDOR_METRIC={0x5, 0x2, 0x1}]}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random=0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000040}, 0x4000000) write$binfmt_elf64(r4, &(0x7f00000004c0)=ANY=[@ANYBLOB="7f454c46fe017ff2ffffffffffffff7f02000600ffff0000060000000000000040000000000000004701000000000000ff000000060038000200ce010400ff7f060000000008000000000000000000800300000000000000ffffff7f00000000060000000000000080000000000000000900000000000000050000000100000000040000000000000000000000000000070000000000000005000000000000000421000000000000407b00000000000056ef5a088c0fa6bfd9e27d98a0f2976180b86600000000502e00"/451], 0x1c3) 2m49.121780713s ago: executing program 0 (id=21): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001880), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)={0x2c, r1, 0xacf5e67dd0b583a1, 0x0, 0x0, {{0x5}, {@val={0x8}, @void}}, [@NL80211_ATTR_HE_OBSS_PD={0x10, 0x117, 0x0, 0x1, [@NL80211_HE_OBSS_PD_ATTR_NON_SRG_MAX_OFFSET={0x5, 0x3, 0x8}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 2m48.894661676s ago: executing program 0 (id=24): r0 = openat$sndseq(0xffffff9c, &(0x7f0000000000), 0x0) r1 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r4, 0x0, 0x100}, 0x18) syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000003c0)='./bus\x00', 0x0, &(0x7f0000000740)={[], [{@smackfshat={'smackfshat', 0x3d, '\xb4'}}, {@smackfsdef={'smackfsdef', 0x3d, '\xb4'}}, {@dont_measure}, {@fsmagic={'fsmagic', 0x3d, 0x8000000000000001}}, {@context={'context', 0x3d, 'sysadm_u'}}]}, 0x9, 0x76f, &(0x7f0000001580)="$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") bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffdfc, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r5}, 0x10) pwrite64(r1, &(0x7f0000000080)='3', 0x1, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000040)='net/igmp\x00') pread64(r6, &(0x7f0000032500)=""/102400, 0x19000, 0x4001) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x2041, 0x0) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000050c0)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="180100000100a7d9000000000020b200850000007b00000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x6c, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r8}, 0x10) syz_open_pts(r7, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000004080)=ANY=[@ANYBLOB="02000000040000000400000022bf00000004"], 0x48) r10 = open(&(0x7f00000000c0)='.\x00', 0x40000, 0x0) ioctl$FS_IOC_SETFLAGS(r10, 0x40086602, &(0x7f00000001c0)=0x10) inotify_add_watch(r10, &(0x7f00000001c0)='./file0\x00', 0x1) mmap(&(0x7f0000480000/0x3000)=nil, 0x3000, 0x4, 0x11, r9, 0xb4d1000) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0xc0505350, &(0x7f0000000080)={{0x0, 0x1}, {0x4}, 0xffffffef, 0x6}) 2m48.749523078s ago: executing program 0 (id=27): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x12, 0xb, &(0x7f0000000300)=ANY=[@ANYRESOCT], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x9, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_dev$usbmon(&(0x7f0000000280), 0x1, 0x42d481) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1000001, 0x13, r2, 0x0) sendmmsg$unix(r1, &(0x7f0000005e00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo/3\x00') bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000400000009"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r3}, &(0x7f0000000800), &(0x7f0000000840)=r4}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r5}, 0x10) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x52, &(0x7f0000000080)={0x0, 0x8b48, 0x50, 0x0, 0x2f3}, &(0x7f0000ff0000), 0x0) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$tipc(0x1e, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @lowpan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r8}]}, 0x3c}}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r9 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') close_range(r9, 0xffffffffffffffff, 0x0) 2m47.586277645s ago: executing program 0 (id=34): r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = gettid() rt_sigprocmask(0x0, &(0x7f0000000000)={[0xffffffed]}, 0x0, 0x8) timer_create(0x3, &(0x7f000049efa0)={0x0, 0x14, 0x4, @tid=r1}, &(0x7f0000044000)) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10) syz_emit_ethernet(0x86, &(0x7f0000000340)=ANY=[@ANYBLOB="01800400000000000000000008004503007800000000002f907800000000ffffffff0000883e0064907802000000030000009b00000044c108fc5c47c72626fe2f7cfa25b602ed00a4e23aa1fa1930cef8210607f8b6b31f8650fa9ef26d78b501b40402b3f74ca615813e0a1261b6b63b29d2396379"], 0x0) r4 = socket(0x2, 0x5, 0x0) perf_event_open(&(0x7f0000001700)={0x2, 0x80, 0x3f, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}, 0x806, 0x3, 0xa, 0x0, 0x2, 0x1, 0x4, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800019f00000000000000000a000000000000000800010001000000040004"], 0x24}, 0x1, 0x0, 0x0, 0x48884}, 0x20048810) sendmmsg$inet_sctp(r4, &(0x7f0000000bc0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000001c0)=[{0x0, 0xdc05}], 0x1, &(0x7f0000000140)=ANY=[@ANYBLOB="30000000000000008400000001000000000000000c0000000000", @ANYRES32=0x0], 0x30}], 0x1, 0x0) 2m47.558111756s ago: executing program 32 (id=34): r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = gettid() rt_sigprocmask(0x0, &(0x7f0000000000)={[0xffffffed]}, 0x0, 0x8) timer_create(0x3, &(0x7f000049efa0)={0x0, 0x14, 0x4, @tid=r1}, &(0x7f0000044000)) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10) syz_emit_ethernet(0x86, &(0x7f0000000340)=ANY=[@ANYBLOB="01800400000000000000000008004503007800000000002f907800000000ffffffff0000883e0064907802000000030000009b00000044c108fc5c47c72626fe2f7cfa25b602ed00a4e23aa1fa1930cef8210607f8b6b31f8650fa9ef26d78b501b40402b3f74ca615813e0a1261b6b63b29d2396379"], 0x0) r4 = socket(0x2, 0x5, 0x0) perf_event_open(&(0x7f0000001700)={0x2, 0x80, 0x3f, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}, 0x806, 0x3, 0xa, 0x0, 0x2, 0x1, 0x4, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800019f00000000000000000a000000000000000800010001000000040004"], 0x24}, 0x1, 0x0, 0x0, 0x48884}, 0x20048810) sendmmsg$inet_sctp(r4, &(0x7f0000000bc0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000001c0)=[{0x0, 0xdc05}], 0x1, &(0x7f0000000140)=ANY=[@ANYBLOB="30000000000000008400000001000000000000000c0000000000", @ANYRES32=0x0], 0x30}], 0x1, 0x0) 2m34.240630576s ago: executing program 3 (id=196): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r6], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x15) mkdirat(0xffffffffffffff9c, 0x0, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x7, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r7}, 0x10) r8 = syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401) r9 = fcntl$dupfd(r8, 0x0, r8) ioctl$USBDEVFS_SUBMITURB(r9, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x2, 0x3, 0x0, 0x0, 0x7995}, 0xfcb5, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r10}, 0x10) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) r11 = syz_io_uring_setup(0x497, &(0x7f0000000180)={0x0, 0x787f, 0x0, 0x4, 0x286}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r12, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r12, r13, &(0x7f00000002c0)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0, 0x8, 0x0, 0x1}) io_uring_enter(r11, 0x3516, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x3c}}, 0x8000) r14 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r14, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_TARGET_NETNSID={0x8, 0x2e, 0x1}, @IFLA_NET_NS_PID={0x8}]}, 0x30}}, 0x0) syz_emit_ethernet(0x7a, &(0x7f0000004540)={@link_local, @empty, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "9a83c9", 0x4, 0x2f, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @local, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x88be}}}}}}}, 0x0) 2m33.593556796s ago: executing program 3 (id=202): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) unshare(0x400) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000001c0)={'sit0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x10, 0x1}}]}}, @TCA_RATE={0x6}]}, 0x4c}, 0x1, 0x0, 0x0, 0x48801}, 0x0) 2m33.397344219s ago: executing program 3 (id=205): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r2, &(0x7f0000000500)="a4", 0x34000, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0xf000000, @loopback, 0xffffffff}, 0x1c) 2m33.156764823s ago: executing program 3 (id=206): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000640)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000002"], &(0x7f0000000340)=""/142, 0x26, 0x8e, 0x1, 0x0, 0x0, @void, @value}, 0x28) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x6, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, r0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_mount_image$vfat(&(0x7f00000005c0), &(0x7f00000002c0)='./file0\x00', 0xc80, &(0x7f0000000180)=ANY=[@ANYBLOB="00631dda01aef2456795dd9b26209f1c0f624854ea3dd5a00bd6df44035f5c3ae796fec6d633a0ffad0569794acfef7da01767fd4175f2cd82df769aa2ee7bfe3640554507d2e660c9f9e222a72e1e3e71145c480657d2864e5e276f028d64701ae31cde0ceaf408fdb05c0f4142da00e900000100000149e6d308cbe315789f4baffe39bbced9b1d421d2e290e9fc563b62225f002ee310e1fa7321000000000000d6231001a4b2d467825f3abb0c167e129cf1fa0e7854103f4bf2d3a0194983bc86cbd3d75ccef3c8ac4516dac102"], 0x1, 0x266, &(0x7f0000000340)="$eJzs281OE1EYxvGHDwVBmCqKgjG+0Y1uJlCvoCGQGJtokBo/EpNBptp0aEmnwdQYYefW6yAu3ZkYb4CNV+DCHRuXLIxjmKnQlhrDQiba/29zXnJ4mnP6njZn0dl58Ha1XAzdoldXf59pUNrUrpRRvwaU6GuO/XF9Uq02dWMi/+XyvYePbufy+flFs4Xc0s2smY1f+fji1burn+qj99+PfxjSdubJzrfs1+3J7amdH0vPS6GVQqtU6+bZcrVa95YD31ZKYdk1uxv4XuhbqRL6tbb5YlBdW2uYV1kZG1mr+WFoXqVhZb9h9arVaw3znnmlirmua2Mjwp8UthYXvVzaq8DfVavlvDlJ04dmClupLAgAAKSK+38v4/7fC/bu/4+bn9923P8BAAAAAAAAAAAAAAAAAAAAAPgX7EaRE0WR82s8IcVP+ETNv09JGpE0Kum0pDFJ45IcSRlJZySdlTQh6Zyk85ImJV2QdFHSVMtrpb1XHEb/exv97230v7e1PLg7LK2+WS+sF5Ixmc8VVVIgXzNy9D3uZVNSL9zKz89YLKNLqxvN/MZ6YaA9Pytn78B0y88meWvPD8Xnbj+flbN3wLrls13zw7p+rSXvytHnp6oq0Ep8Jg/yr2fN5u7kO/LT8f/971zb17V/rvu7+SR/hPPR8f4Oanow3b1DChsvy14Q+DUKCgqK/SLtbyYch4Omp70SAAAAAAAAAAAAAAAAAMBRHMfPCdPeIwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAnX4GAAD//5KSYE0=") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x4030582a, &(0x7f0000000300)={0x113e, 0x2, 0x0, 0x10002}) mknodat$null(0xffffffffffffff9c, 0x0, 0x0, 0x103) statfs(&(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0)=""/44) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f00000007c0)=ANY=[@ANYBLOB="e7000000000000000000bd90f32485c8d51aeb05ac9f0a0000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095af2b6f035ca1d3d4f7bd3c717cb1dc0875ac3ed8030890eaad2f882dcfcd5c4a4dc1f1bf372522205451ab9a5b861a7edba844d3da12a840e9312b81a752066a87161975f36aec2adb717ebd0e451d3b5d2b6c3a1e02518c5681319e742193a861d52686525c20a1343a453b95e17951fcbc42d3f3"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f0000000980)='sys_enter\x00', r2}, 0x10) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = shmget$private(0x0, 0x3000, 0x54001800, &(0x7f000010d000/0x3000)=nil) shmat(r3, &(0x7f0000003000/0x1000)=nil, 0xffffffffffffdfff) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_QUANTUM={0x8, 0x3, 0x916}, @TCA_FQ_INITIAL_QUANTUM={0x8, 0x4, 0x5d}]}}]}, 0x40}}, 0x0) r9 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r9, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r9, &(0x7f00000000c0)={0x1d, r10}, 0x18) connect$can_j1939(r9, &(0x7f0000000140)={0x1d, r10}, 0x18) sendmmsg(r9, &(0x7f0000003e40)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000001c0)="b875a1431a05b9319c", 0x9}], 0x1}}], 0x1, 0x0) recvmmsg(r9, &(0x7f0000000180)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000200)=""/189}, {&(0x7f00000002c0)=""/182}, {&(0x7f0000000380)=""/4096}, {&(0x7f0000001380)=""/198}, {&(0x7f0000001480)=""/169}, {&(0x7f0000001540)=""/4096}], 0x10, &(0x7f0000002540)=""/216}}], 0x2, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x8914, &(0x7f0000000080)) 2m33.036758374s ago: executing program 3 (id=207): syncfs(0xffffffffffffffff) perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xa4, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2008, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0xf}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffb}]}) r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3f, 0x1, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, @perf_bp={0x0, 0x13}, 0x400, 0xffffffff, 0x6, 0x6, 0x0, 0x1, 0xfff9, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = io_uring_setup(0x3efa, &(0x7f0000000240)={0x0, 0x0, 0x1840, 0x2, 0x10081}) io_uring_register$IORING_REGISTER_RESTRICTIONS(r2, 0xb, &(0x7f0000000540), 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="0100000002000000040000000300000000000000", @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00O\x00'/29], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020641700000000002020007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 2m32.821568398s ago: executing program 3 (id=208): bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) fsopen(&(0x7f00000003c0)='cgroup\x00', 0x1) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000006c0)={r0, 0x0, 0x63, 0x7a, &(0x7f00000000c0)="553d9a1440191198336c358a768d597d2f9b80f987a6ba57e62f6143efd4f6c948235993500b1ebaf5bdcb4809c1a46585e55dd33262016d8bbbadedd2559caf483b427f89e1d9f6552b16683edaa08803fbef3c317e16420bacd9409da601f1cb972b", &(0x7f0000000140)=""/122, 0x3, 0x0, 0xc3, 0x73, &(0x7f00000005c0)="3b6196f2e9a518f0413a71576bdbfd212ed22efa03e71a28c2f56b3add0c0907426b0349babee78fb65c6cb7e0984a77ce796e7c880ec12fd3cea2e38889e9ad1a632560b952ebc0a7fd200a5691b7fae07e1d1ce7b6ed347632513db2d61a36d79a013524a0e1aa3dd702f7b8eda91eb12953d7096c8e519363ec8e0be8707e793f396e7b5dd7339a83b32b63f3944240f84bf9c726d748d5d1ee3f396c2ead6db5ff40b4e062e01a737fabefed1c3c2b3de20496c3e1b8fa9406eaaf36337630a207", &(0x7f00000004c0)="0aa7d9842633a39b6ab5caddacf7008a6dbbe58352a48da792d88a8571ebc8fbec1746e0e020e9b3104cd3c45e48ce117827d8112cd18b49dde11d8910cd5a983bdcb248c4f56ae51115083559c6217b1ad060fecbbd2bca7087ad2cc45e400c6c904e49b731f7e544fa9572b2d38d4ef8edb8", 0x5, 0x0, 0xffffabff}, 0x50) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3f, 0x1, 0x0, 0x0, 0x0, 0x1, 0x2240, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180200000020702500000000002020207b1af8ff00000000bfa100000000000007010000dbffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000340)='kfree\x00', r1, 0x0, 0xfffffffffffffffd}, 0x18) socket$packet(0x11, 0x3, 0x300) bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYRES64, @ANYRES32, @ANYBLOB="0000000000edff00190e00000000080000003305", @ANYRESOCT=r0], 0x50) socket$nl_sock_diag(0x10, 0x3, 0x4) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB], &(0x7f00000003c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) r3 = socket$igmp(0x2, 0x3, 0x2) ioperm(0x0, 0x44, 0x7) read(0xffffffffffffffff, 0x0, 0x0) setsockopt$MRT_ADD_VIF(r3, 0x0, 0xca, &(0x7f00000002c0)={0x1, 0x4, 0x0, 0x0, @vifc_lcl_ifindex, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) setgroups(0x0, 0x0) getgroups(0x1, &(0x7f0000000100)=[0xee00]) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='configfs\x00', 0x0, 0x0) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000}) fchmodat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x5e) r4 = syz_init_net_socket$x25(0x9, 0x5, 0x0) sendmsg$TIPC_NL_PEER_REMOVE(r4, &(0x7f0000000740)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000540)={&(0x7f00000009c0)={0x2c0, 0x0, 0xf00, 0x70bd25, 0x25dfdbfe, {}, [@TIPC_NLA_MEDIA={0x18, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}]}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xfffffffb}]}, @TIPC_NLA_MEDIA={0xe4, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x44a9}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5c}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_TOL={0x8}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffff8}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}]}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}]}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}]}]}, @TIPC_NLA_NODE={0x58, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x4a, 0x4, {'gcm(aes)\x00', 0x22, "63e6dfedfdcefc3c15c0c6b5252b49e0508ec7c89ec4c3ef9a8aac6762d306df6a27"}}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7}]}, @TIPC_NLA_NODE={0x14c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x4a, 0x4, {'gcm(aes)\x00', 0x22, "2f904b7c93ec0aff582d8d86e63a411c2293d1e475354bb480d36b375d5183f8a4a6"}}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x80000001}, @TIPC_NLA_NODE_ID={0xe1, 0x3, "0de790bb1fef285497f5db496e635c070c0bfb1857d9b6b9b27cae8fd7420eaf023869c13f25ac718f474941c51087389ca0ffb9af13abf01d01403e677089949410c609b365c783a09e27305b640b17cc7dd8551adceec1d9260051296caa7f2763c32eb7f43ddfd182b57cc6b386570eb9d8d822cb785f9c0c8797bdf5f5b534ba3ed9180b83470e9c53b450c81355383951437b7faaf287fe4b13b456e6cafcf57d557ac56467241b1f451267b62268585b1903b4c426125a3573497eaaf7f1cf90fc3135843cd385b91e1195a424aba2f936619b3333a93ba6e220"}, @TIPC_NLA_NODE_ADDR={0x8}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0x2c0}, 0x1, 0x0, 0x0, 0x14090}, 0x40) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000780)=@newqdisc={0xa8, 0x24, 0x4ee4e6a52ff56541, 0x7fffffd, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xfff7}, {0xffff, 0x6}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x78, 0x2, {{0xfffffffe, 0x2, 0x40, 0x9, 0xe9, 0xcc36}, [@TCA_NETEM_ECN={0x8}, @TCA_NETEM_LOSS={0x48, 0x5, 0x0, 0x1, [@NETEM_LOSS_GE={0x14, 0x2, {0x8, 0xdd9d, 0x5, 0x1}}, @NETEM_LOSS_GI={0x18, 0x1, {0xbea1, 0x40, 0x14, 0x8, 0x3ff}}, @NETEM_LOSS_GI={0x18, 0x1, {0x9, 0x1, 0x400, 0x2, 0x9e50}}]}, @TCA_NETEM_REORDER={0xc, 0x3, {0x9, 0x6}}]}}}]}, 0xa8}}, 0x0) 2m32.794248918s ago: executing program 33 (id=208): bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) fsopen(&(0x7f00000003c0)='cgroup\x00', 0x1) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000006c0)={r0, 0x0, 0x63, 0x7a, &(0x7f00000000c0)="553d9a1440191198336c358a768d597d2f9b80f987a6ba57e62f6143efd4f6c948235993500b1ebaf5bdcb4809c1a46585e55dd33262016d8bbbadedd2559caf483b427f89e1d9f6552b16683edaa08803fbef3c317e16420bacd9409da601f1cb972b", &(0x7f0000000140)=""/122, 0x3, 0x0, 0xc3, 0x73, &(0x7f00000005c0)="3b6196f2e9a518f0413a71576bdbfd212ed22efa03e71a28c2f56b3add0c0907426b0349babee78fb65c6cb7e0984a77ce796e7c880ec12fd3cea2e38889e9ad1a632560b952ebc0a7fd200a5691b7fae07e1d1ce7b6ed347632513db2d61a36d79a013524a0e1aa3dd702f7b8eda91eb12953d7096c8e519363ec8e0be8707e793f396e7b5dd7339a83b32b63f3944240f84bf9c726d748d5d1ee3f396c2ead6db5ff40b4e062e01a737fabefed1c3c2b3de20496c3e1b8fa9406eaaf36337630a207", &(0x7f00000004c0)="0aa7d9842633a39b6ab5caddacf7008a6dbbe58352a48da792d88a8571ebc8fbec1746e0e020e9b3104cd3c45e48ce117827d8112cd18b49dde11d8910cd5a983bdcb248c4f56ae51115083559c6217b1ad060fecbbd2bca7087ad2cc45e400c6c904e49b731f7e544fa9572b2d38d4ef8edb8", 0x5, 0x0, 0xffffabff}, 0x50) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3f, 0x1, 0x0, 0x0, 0x0, 0x1, 0x2240, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180200000020702500000000002020207b1af8ff00000000bfa100000000000007010000dbffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000340)='kfree\x00', r1, 0x0, 0xfffffffffffffffd}, 0x18) socket$packet(0x11, 0x3, 0x300) bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYRES64, @ANYRES32, @ANYBLOB="0000000000edff00190e00000000080000003305", @ANYRESOCT=r0], 0x50) socket$nl_sock_diag(0x10, 0x3, 0x4) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB], &(0x7f00000003c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) r3 = socket$igmp(0x2, 0x3, 0x2) ioperm(0x0, 0x44, 0x7) read(0xffffffffffffffff, 0x0, 0x0) setsockopt$MRT_ADD_VIF(r3, 0x0, 0xca, &(0x7f00000002c0)={0x1, 0x4, 0x0, 0x0, @vifc_lcl_ifindex, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) setgroups(0x0, 0x0) getgroups(0x1, &(0x7f0000000100)=[0xee00]) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='configfs\x00', 0x0, 0x0) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000}) fchmodat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x5e) r4 = syz_init_net_socket$x25(0x9, 0x5, 0x0) sendmsg$TIPC_NL_PEER_REMOVE(r4, &(0x7f0000000740)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000540)={&(0x7f00000009c0)={0x2c0, 0x0, 0xf00, 0x70bd25, 0x25dfdbfe, {}, [@TIPC_NLA_MEDIA={0x18, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}]}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xfffffffb}]}, @TIPC_NLA_MEDIA={0xe4, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x44a9}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5c}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_TOL={0x8}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffff8}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}]}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}]}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}]}]}, @TIPC_NLA_NODE={0x58, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x4a, 0x4, {'gcm(aes)\x00', 0x22, "63e6dfedfdcefc3c15c0c6b5252b49e0508ec7c89ec4c3ef9a8aac6762d306df6a27"}}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7}]}, @TIPC_NLA_NODE={0x14c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x4a, 0x4, {'gcm(aes)\x00', 0x22, "2f904b7c93ec0aff582d8d86e63a411c2293d1e475354bb480d36b375d5183f8a4a6"}}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x80000001}, @TIPC_NLA_NODE_ID={0xe1, 0x3, "0de790bb1fef285497f5db496e635c070c0bfb1857d9b6b9b27cae8fd7420eaf023869c13f25ac718f474941c51087389ca0ffb9af13abf01d01403e677089949410c609b365c783a09e27305b640b17cc7dd8551adceec1d9260051296caa7f2763c32eb7f43ddfd182b57cc6b386570eb9d8d822cb785f9c0c8797bdf5f5b534ba3ed9180b83470e9c53b450c81355383951437b7faaf287fe4b13b456e6cafcf57d557ac56467241b1f451267b62268585b1903b4c426125a3573497eaaf7f1cf90fc3135843cd385b91e1195a424aba2f936619b3333a93ba6e220"}, @TIPC_NLA_NODE_ADDR={0x8}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0x2c0}, 0x1, 0x0, 0x0, 0x14090}, 0x40) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000780)=@newqdisc={0xa8, 0x24, 0x4ee4e6a52ff56541, 0x7fffffd, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xfff7}, {0xffff, 0x6}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x78, 0x2, {{0xfffffffe, 0x2, 0x40, 0x9, 0xe9, 0xcc36}, [@TCA_NETEM_ECN={0x8}, @TCA_NETEM_LOSS={0x48, 0x5, 0x0, 0x1, [@NETEM_LOSS_GE={0x14, 0x2, {0x8, 0xdd9d, 0x5, 0x1}}, @NETEM_LOSS_GI={0x18, 0x1, {0xbea1, 0x40, 0x14, 0x8, 0x3ff}}, @NETEM_LOSS_GI={0x18, 0x1, {0x9, 0x1, 0x400, 0x2, 0x9e50}}]}, @TCA_NETEM_REORDER={0xc, 0x3, {0x9, 0x6}}]}}}]}, 0xa8}}, 0x0) 1.713873003s ago: executing program 2 (id=3003): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffffffff}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000800)='./file0\x00', 0x0, &(0x7f0000000980)=ANY=[@ANYBLOB="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", @ANYRESHEX=0x0, @ANYRESOCT], 0x2, 0x699, &(0x7f0000000140)="$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") r1 = memfd_create(&(0x7f00000000c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x2) write$binfmt_script(r1, &(0x7f0000000300)={'#! ', './file0'}, 0xb) execveat(r1, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) fsopen(&(0x7f0000000100)='configfs\x00', 0x0) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000100)="4df069d64970996b9472d4b5", 0xc}], 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) socket$netlink(0x10, 0x3, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000840)={{{@in6=@empty, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private2}, 0x0, @in=@multicast1}}, &(0x7f0000000940)=0xe8) quotactl_fd$Q_GETINFO(r1, 0xffffffff80000501, r2, &(0x7f0000001a00)) 1.592240135s ago: executing program 2 (id=3007): r0 = socket$inet6(0xa, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 1.520074657s ago: executing program 2 (id=3010): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x8, &(0x7f00000001c0)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}}]}, &(0x7f0000000300)='GPL\x00', 0x9, 0x1, &(0x7f0000000340)=""/1, 0x0, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) io_submit(0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x410c84, &(0x7f0000000340), 0x1, 0x775, &(0x7f0000001180)="$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") r1 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x88882, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0) r4 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1802000000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r5, 0xffffffffffffffff}, &(0x7f0000000180), &(0x7f00000001c0)=r4}, 0x20) r7 = openat$binfmt_register(0xffffff9c, &(0x7f0000000040), 0x1, 0x0) write$binfmt_register(r7, &(0x7f0000000100)={0x3a, 'syz3', 0x3a, 'E', 0x3a, 0x6, 0x3a, 'E', 0x3a, '@{@$\x9a$^', 0x3a, './file0', 0x3a, [0x46]}, 0x30) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r8}, 0x10) write(r3, &(0x7f0000004200)='t', 0x1) sendfile(r3, r2, 0x0, 0x3ffff) sendfile(r3, r2, 0x0, 0x7ffff000) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r6, 0xc0096616, &(0x7f0000000000)={0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}) fallocate(r1, 0x0, 0x0, 0x1001f0) 1.116407573s ago: executing program 6 (id=3016): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="620af8ffa1dc0021bfa100000000000007010000f8ffffffb702000007000000bd120000000000008500000010000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24561f1b2607995daa56f151905ea23c22624c9f87f9793f3bbb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64b751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07372c29184ff7f4a7c0000070000006056feb4cc664c0af9360a1f7a5e6b607130c89f18c0c1089d8b8588d72ec29c48b45e0000000000000401d01aa27ae8b09e00e79ab20b0b8ed8fb7a68000000000000000000006fa03c6468978089b302d7ff6023cdcedb5e0125ebbcebdde510cb2364149215108337719acd97cfa107d40224edc5465a932b77a74e802a0dc6bf25d8a242bc6099ad2300000480006ef6c1ff0900ff0000000010c63a949e8b7955394ffaff03000000000000ab87b1bfeda7be586602d985430cea080000000000000026abfb0767192361448279b05d96a703a660581eecdbf5bcd3de227a167ca17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9b081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80af740b5b7632d5933a1c1fa5605bd7603f2ba2a790d62d6faec2fed44da4928b30142ba1fde5c5d50b83bae616b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0cb97fca585ec6bf58351d578be00d952aab9c71764b0a8a7583c90b3433b809bdb9fbd48bc877505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223d8d9e86c5ea06d108d8f80a0eb4fa39f6b5c02e6d6d90756ff578f57000000009700cf0b4b8bc229413300000000000000000003000000000000000000000000001000000000559711e6e8fcffffffffffffffb2d02edc3e01dd271c896249ed85b980680b09000000000f0000169cdcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffffd897ef3b7cda42f93d53046da21b40216e14ba2d6af8656b01e17addaedab25b30002abbba7fa725f38400be7c1f001b2cd3170400000085be9e48dccf1f9f3282830689da6b53b263339863297771d74732d400003341bf4a00fc9fec2271ff01589646efd1cf870cd7bb2366fde4a594290c405ff870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d30a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78249788f11f761038b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe760e717a04becff0f719197724f4fce1093b62d7e8c7123d890cec55bf404e4e1f74b7eed82571be54c72d978cf906df08f11f1c4042e36acd37d7f9e109f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2acd1fe582786105c70600000000000000b7561301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c542c9062ece84c99a061887a20639b41c8c12ee86c50804042b3eac1f871b136345cf67ca3fb5aac518a75f9e7d7101da841735e186c489b3a06fb99e0347f23a054de2f4d92d6bd72ee2c9f0390a6f01e3e483b4ad05573af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f91e358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df90400000000000000d6b2c5eaff07000000000000b99c9cc0ad1857216f000000009191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e669261192899d4562db0e22d564ae09bb6d163118e401e024fd452277c3887d6116c6cc9d8046c216c1f895778cb26e22a2a798de44aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99a3594191e104d417e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250df98674152f94e32409e2a3bce109b6000000000000a1fec9000000d694210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137ab79a404abde7750898b59270b939b81367ac91bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f00fb8191bbab2dc591dda61f0868afc4294859323e7a45319f18101288a0268893373750d1a8fe64680b0a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7d58c08acaf30065b928a31d2eca55f74a23641f61f2d5b308cf01cfaed9ef0ce21d69993e9960ff5f76015e6009756237badf4e7965bbe2777e808fcba821a00e8c5c39609ff854356cb490000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546bb2e51935ab9067ec3ad2a182068e1e3a0e2505bc7f41019645466ac96e0d0b3bc19faa5449209b085f3c334b47f067bbab40743b2a428f1da1f626602111b40e761fd21081920382f14d12ca3c471c7868e7da7eaa69eb7f7f80572fdd11bb1d070080fbc22bf73468788df51710eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331ff5e20fa26b8471d9e1cc9eb3d541e407cc2dae5e690cd628ab84875f2c50ba830d3f474b079b407000000deff000040430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df902aeec50e71b967ce7daac4be290159f6bcd75f0dda9de5532e66ae9e48b0ed1254a81faae79b6af6fbb869604d51de44c4e0973171ad47d6c00ebc7603093f000000fdec743af930cd6db49a47613808bad959719c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f15d6533f78a1f4e2df4ca23d867693fd42de9b49a1b36d48a44ba6a4530e59bec53e876dc660dd6d89f80a4377b1b1292a893a516dab183ee65744fb8fc4f9ce2242e0f000000000100000000d77480e0345effff6413258d1f6eb190aa28cbb4bafe3436b176c7ed4b132fb805d5edd9d188daf28d89c014c3ecca10ae55704544673e1fb03b84f63e022fe755f4007a4a899eaf52c4f491f1e97c862e29e4570600000091c691faee1e0c8fe056a07474e6e5490a7d3c3402000000b60600d837c6befc63ddf2f594ad7cbc56a1e44d218c956a5392a995f1fae8e9f206efbb33854dc70104d74dc07748f9745cb796da2dfb714a0500000000000000faed94fc39acfb3fd25dfa8116a154cd1226e1bb72b59fed817072a0da60160761fd3dffda0f7c592eabd8ab68334d2a1693cb187539049e331272bf5135044df8161400211b8012b6eb1ed5656e83f65509bb4b323c5bd61bff949d3bade2f6ffda1360c2786e16937ab61d6dcafed319c7167d0885f9c6d1f442954c167dd9b4acd9468ce3674c82bbb2e31389179b025dbe063b7f906217b2cf8410c7023aa3e5cc3ba1000000000000000000000000000000006ae6301a2da44394275c582a6516bb92ea1980a0a659f2f1811c8b281c209647c4241f292b20508b215dde27bb2487a6e2b5e4a8ccfab90c23827ef06cbe364073005f8a6d1456aaeb85ffb7858f24eced67a67ab825e863928ed64c83f62ffdaa997657335b63c6b4163aff094059e626766845fd779c9e6cdbbd64c2499ce3ffe2fef03f7cdd0d90f3a7579579a142c0f7b318264d5c13c31cf475829528267ead38523cab7e1664e8426cfce471fef821c8a02a7e7d954d05b68a9c28f79429b09e2bb3681ae2b831e27c735123361c193d66ed4d71f19b199d371ec6bfada7cd370e3fdd3cd980fa1e145fd3f3e96b1feb53c865e1ada08f5d16ed652ee0c7f45352222692fbd679212c225d097aa90f7e1fb1f983415f43e75a19ecf7fd21bfa150ef563aa72ba3c43c5f3d9be128ec26b691f31f9cab931631606a81622f120675c962be2d3b5e95f74f0b209e42e6bdd76e6e725295b1d78d928f6f63e4581d5cc41cbde2ba66adc1168070c8c6e18a6a234f5f9311ef0f78924b68dbb4712efdb6974667bdb54f16fd2061b9ba93638dd177227e94e4ebd0ec1d437db948062bf41742000000000000000000305f70dd02fa0c61d5fe6d8ff35389246037e18d34c1375ae04f44f0c2543c772c5ccb137be7dc1874c514b37c668554d77d4ea5ed144a648257f4a0301067bbcd9b91072659d872f26b796e2b81025edb5f45f785e2c2602b248ecdd80f019ca659be7e8ae953325a27564f33c9d458a60be3dab38baab7eb1a66ab1ffd6308f7fd51beb356fe75eb985b7581bb5584c53984ba9c3340f97e8d3825681c53de5f554e595b00000000000000006a8fa9f05d64c4be42f981f00051a39938613067dbd1427e01bfec016e51844cefa8a855bf23ac887b4a88eed6d9443857242f28e31a41d20105fbf3394ff910e734b4d9101265ff729c426e01c1ab13dda8c388b909006f19eecb87e39175e85e17000000000000000000009431807e43886903526074e6b40244c938a4c68a38c25ddd7c143b3f1400010000ec66815cf8d1f56aa1424bc9b5d58790298e5b310969e50c222563b54e60854e1b0100448aca8c5ccbf5546ce4c3cd5a733fec25fb94e1e0f966bcbd28a4d8fe4f556eaa1104a793006619700798354c6ae05025040965e3083562bfa20968c04007d21dc02c9fd1f75e1ff40f439bdde4e784012e52049b483d02f81b88f5f57816b3fecec79cfca8d37203e769759d6b6a56b7605ced8ee18475a77ff0963a565fb6021d216c01b1098e40550a1cfd80e918d685a7b099a4f8ed654cd76ca61fe5ad8a31ec558fdbfa706d5e738bceae81fe777c307d5bc72183a4c2d35732ab916a781b9912160a3fd2a2e74dd690c57bdfdc1f069f949170ef8cb9c13c12138116bca7a8c59363799be7005c51bc25a8bbe2cf5ddf6aa161693782b0e7feb8a768f391b49d4c978c96dbb52f21c122eba9f17c8bed10591958cf06321a248b5f76ceedfe0d080d6aeadc11b237b3326dd04b86ac37c0d131544888db9e128d059761ad9a393e96c3b41c13c5a381bff187a75de560ba6eb3faa5ff8d2bb3c88f8de5efc2fb2200cfda6d07ceae22577064334fbf76a23e62e6059211d995b879f6b7d3f7fcf03652b81e6b7cdeff947ad185d3c6269ca247b429c3b872a8f1ef60407d29a874f4ec31c9effed55543a65a6b4d778cebcd43b7905f3960140bd783540a7353014bda8e9c7a34a5f428fd1f8eb11e837dd9d586487fdebcb1ecd3a003ff0fda4be617fecf1ff0ef2c74664d60a4b9423f3297bc8eb91b4ee1d73272abbef3e7a828a7d7ab055a8eb58fe379de85338304e26e3620941b463e9049fd105c74c91cc4d71b0f76e2c2e4825106aa7ce2a3adbbc7a0443ece58e752b47e6f677eff7c5c568a89d6e36b165c39132a0f27080ece2a94c320b002c77f82662675a7713c7067081cac15994698c41ff4754268ae1676384ff799783f55d7e5a1a0920300000000000000d98440c355927629f2bcf9dc405a18ca0264400abf38e90000000000000000008faf2cddffbfa69bf32eb718e88ec75603ed7c7a8825ce0f27a114bd7a4ab74d0c7b8d90ccc1c3ca6620def782e24d75aed70eb676437f62677a69e0994cd82d72e95493c830fe9515329f40b7025326dec33a527c5d999298eaa3690fd0d38a02fc6e0bc16dbe19f353027edc014411e1138087221492f5d5e5cc9d0a1acd3f581eda9a807aa0e609f935f626d96351e0ff116686cbeb8939feecd5dac8cf45101942cc7cec21b7f337df5431bcf7e504b7c427f70a10e1cb8993a661306a0576b638a0171e6800b5b35589d676eb30ed1a72e8f7b057eb281c4504195635b6b285ebaba019913a2520e43ed790231f047f7d3789c10ae7d724929f77aec1d33d9587580268ee14396f71e7ef588cb2560d6bd0795a9b97281229eb16de086553469fad7214ffc3e416f8b8e442dce1d37f9b1c88a5d8a8d9f2fe45bd8df213ecb4194c8554aea13cadcd502e51f6fec80418e772b5bd8d0228949058038b185909ee542848680f9ad43f4057d676d5e21ae3d7e0e4a28c04f112a94707f032b35915e42993ff148291b8babe026646ee41905992db217561b90811c4702a14f312fe5d2ae7257db6be1034cc1c346b76a853ce274bf0435e18f7e86c660c18c80f30505dd4cf2ae2a1893b83c62d61bfeadc1f913e4cab2b897e096dd3fe3525090410cb23bab36cdf200a36014032cf6e5121803c5a0c4a273a19f340163fc6265425d513a1294b8439276394945d94a589708e32a1cb30f1fa4b2f08e01dc5e8c6732e6dc59b5c8cb400000000000000592c9b68f09c8f5ddb20b4ae08b4d9df548e5ed6cd47b91a4bea8b6aa52edf64576aef1e43f2958437fdc20fbbd0d4e13d8cce1193b2f9b4f107e25af178d056e1b1e40bd75b013f7484fae0bc447b1ffaf34819fe3ad1a634c94345e26e1e68dec08723a37b05d1594a66a4718a51d4d67fc880c9d640f4eacc509873f1a103c87f69"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x41) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(0x0, 0xffffffffffffffff) r4 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000004700)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000e40)={0xd0, r4, 0x405, 0x70bd27, 0x25dfdbfc, {}, [{{0x8, 0x1, r5}, {0xb4, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8003}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0xfffffff8}}}]}}]}, 0xd0}, 0x1, 0x0, 0x0, 0x4000401}, 0x44084) r6 = socket$netlink(0x10, 0x3, 0x10) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) bind$netlink(r6, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') bpf$MAP_CREATE(0x0, 0x0, 0x48) r7 = getpid() r8 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bind$inet(0xffffffffffffffff, 0x0, 0x0) r9 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r9, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x6}, 0x1c) setsockopt$SO_BINDTODEVICE(r9, 0x1, 0x19, 0x0, 0x0) syz_emit_ethernet(0x83, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030086dd601b8b97004d88c19edace00000000000000002100000002ff02000000000000000000000000000104004e20004d13"], 0x0) ppoll(&(0x7f0000000d40)=[{r9, 0x2444}], 0x1, &(0x7f0000000300), 0x0, 0x62) sendmsg$DEVLINK_CMD_RELOAD(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, 0x0, 0x1, 0x70bd26, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r7}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x0) r10 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r10, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4) 1.116037173s ago: executing program 5 (id=3018): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='qdisc_reset\x00'}, 0x10) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, 0x0) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) listen(r1, 0x101) r2 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r2, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r2, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) sendmmsg$inet(r2, &(0x7f0000000900)=[{{0x0, 0x0, &(0x7f00000002c0)=[{0x0}], 0x1}}, {{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000440)="8a8793", 0x3}], 0x1}}], 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000a0db000000000000000000850000000e000000d50000002a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f00000000c0)='netlink_extack\x00', r3}, 0x11) 1.113129863s ago: executing program 6 (id=3019): socket$kcm(0x21, 0x2, 0x2) bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r2, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r3}, 0x10) add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300"}, 0x52ba, 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000180)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4004045) syz_genetlink_get_family_id$netlbl_mgmt(0x0, 0xffffffffffffffff) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f0000000280)={0x2, 0x0, @local}, 0x10) connect$inet(r4, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r4, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000040)={0x100000011, @multicast2, 0x0, 0x0, 'lblc\x00', 0x5, 0x88, 0x54}, 0x2c) socket$nl_route(0x10, 0x3, 0x0) 1.081131743s ago: executing program 5 (id=3020): r0 = socket$inet6(0xa, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 1.046674964s ago: executing program 5 (id=3021): dup(0xffffffffffffffff) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x64, '\x00', 0x0, @cgroup_sysctl, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000c80)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10) syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x20c006, &(0x7f00000004c0)={[{@grpjquota}, {@mblk_io_submit}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@lazytime}, {@discard}, {@resuid}], [{@seclabel}]}, 0x1, 0x446, &(0x7f0000000d40)="$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") 1.031520744s ago: executing program 6 (id=3022): bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x2, @perf_config_ext={0xf60, 0x4}, 0x1100, 0xca0, 0x3a65, 0x5, 0x0, 0x8, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x8, &(0x7f00000001c0)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}}]}, &(0x7f0000000300)='GPL\x00', 0x9, 0x1, &(0x7f0000000340)=""/1, 0x0, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) io_submit(0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x410c84, &(0x7f0000000340), 0x1, 0x775, &(0x7f0000001180)="$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") r1 = open(0x0, 0x14927e, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x88882, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0) r4 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{}, &(0x7f0000000180), &(0x7f00000001c0)=r4}, 0x20) openat$binfmt_register(0xffffff9c, &(0x7f0000000040), 0x1, 0x0) write(r3, &(0x7f0000004200)='t', 0x1) sendfile(r3, r2, 0x0, 0x3ffff) sendfile(r3, r2, 0x0, 0x7ffff000) fallocate(r1, 0x0, 0x0, 0x1001f0) 1.011837775s ago: executing program 4 (id=3024): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000002c0)='kmem_cache_free\x00', r0, 0x0, 0x8}, 0x18) r1 = bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x560b0007, &(0x7f0000000000)="259a53f271a76d2686dd4c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 944.789245ms ago: executing program 4 (id=3025): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x9, 0x4, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f00000001c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xf5f9d700}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000440)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x5, &(0x7f0000000100), 0x0, 0x58c, &(0x7f0000000600)="$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") mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='trans=fd', @ANYRES64, @ANYBLOB="3c90c49e57cdba7766646e6f3d", @ANYRESHEX]) 942.804595ms ago: executing program 1 (id=3026): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="020000000400000008000000"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r0}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) io_pgetevents(0x0, 0x10, 0x5, &(0x7f0000000180)=[{}, {}, {}, {}, {}], &(0x7f0000000240), &(0x7f0000000300)={&(0x7f00000002c0)={[0xd]}, 0x8}) 901.170546ms ago: executing program 5 (id=3027): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000700)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002dbd7000fbdbdf2502000000180001801400020076657468305f746f5f687372"], 0x2c}, 0x1, 0x0, 0x0, 0x2000000}, 0x4000) 869.618056ms ago: executing program 1 (id=3028): r0 = socket$rds(0x15, 0x5, 0x0) sendmsg$rds(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000012c0)=[@rdma_args={0x48, 0x114, 0x1, {{0xfe, 0x2}, {&(0x7f0000001080)=""/148, 0x94}, &(0x7f00000011c0)=[{&(0x7f0000001140)=""/102, 0x66}], 0x1, 0x60, 0xffffffff00000001}}], 0x48, 0x8004}, 0x0) 868.991427ms ago: executing program 2 (id=3029): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000002140)={0x1, &(0x7f0000000880)=[{0x6, 0x0, 0x0, 0x7fff0200}]}) kexec_load(0xcf5, 0x0, 0x0, 0x3e0000) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f00000001c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xf5f9d700}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000440)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, @void, @value}, 0x94) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x5, &(0x7f0000000100), 0x0, 0x58c, &(0x7f0000000600)="$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") mount$nfs(0x0, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x1c0030, 0x0) chroot(&(0x7f0000000100)='./file0\x00') umount2(&(0x7f00000002c0)='./file0\x00', 0x0) 841.908357ms ago: executing program 6 (id=3030): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x1000410, &(0x7f0000000100)={[{@grpid}, {@grpquota}]}, 0x4, 0x4eb, &(0x7f0000000540)="$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") r0 = creat(&(0x7f0000000280)='./bus\x00', 0x2) pwritev2(r0, &(0x7f0000000040)=[{&(0x7f0000000b80)="caa5", 0x2}], 0x1, 0x10fffff, 0xffffffff, 0x1) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000, 0x2, @perf_bp={0x0, 0xa}, 0x1000, 0x5dd8, 0x0, 0x5, 0x0, 0x8, 0xfffb, 0x0, 0x1, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f0000000340)='./bus\x00', 0x44000, 0x136) bpf$MAP_CREATE(0x0, 0x0, 0x48) r2 = dup3(r1, r0, 0x0) finit_module(r2, 0x0, 0x200000000000000) 834.223157ms ago: executing program 5 (id=3031): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) unshare(0x400) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000001c0)={'sit0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x10, 0x1}}]}}, @TCA_RATE={0x6}]}, 0x4c}, 0x1, 0x0, 0x0, 0x48801}, 0x0) 780.040428ms ago: executing program 1 (id=3032): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0xc0ed0040, &(0x7f0000000000)={[{@noblock_validity}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@data_err_abort}, {@noload}, {@quota}, {@lazytime}]}, 0xfe, 0x472, &(0x7f0000000940)="$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") r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000300)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000340)=@gcm_128={{0x304}, "a6341a1a379332f5", "1fd33cb95d66a1781f31bf07fd2ae874", "62266bd8", "d1b29b99d21d88a2"}, 0x28) write$binfmt_script(r0, &(0x7f0000000780)={'#! ', './file0'}, 0xb) 694.588579ms ago: executing program 1 (id=3033): socket$kcm(0x21, 0x2, 0x2) bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r2, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r3}, 0x10) add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300"}, 0x52ba, 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000180)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4004045) syz_genetlink_get_family_id$netlbl_mgmt(0x0, 0xffffffffffffffff) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f0000000280)={0x2, 0x0, @local}, 0x10) connect$inet(r4, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r4, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000040)={0x100000011, @multicast2, 0x0, 0x0, 'lblc\x00', 0x5, 0x88, 0x54}, 0x2c) socket$nl_route(0x10, 0x3, 0x0) 687.391969ms ago: executing program 4 (id=3034): r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3f, 0x1, 0x0, 0x0, 0x0, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, @perf_bp={0x0, 0x13}, 0x400, 0xffffffff, 0x6, 0x2, 0x0, 0x1, 0xfff9, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x8) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000fc0)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0) (fail_nth: 6) 642.24524ms ago: executing program 5 (id=3035): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) socket$kcm(0x10, 0x100000000002, 0x4) r0 = request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x1}, &(0x7f0000001fee)='R\x10rust\xe3c*sgrVin:Dd', 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) keyctl$setperm(0x5, r0, 0x14000000) socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1], &(0x7f0000000600)='GPL\x00', 0x6, 0x0, 0x0, 0x41000, 0x2c, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, @void, @value}, 0x94) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r2, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x808000, 0x4, 0x20300, 0xfc}, 0x1c) setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000000100)=@req3={0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x861}, 0x1c) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0) poll(&(0x7f0000000200)=[{r3, 0x1}], 0x1, 0x9) syz_mount_image$ext4(&(0x7f0000000280)='ext2\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x4, &(0x7f0000000080), 0xfe, 0x25e, &(0x7f0000001000)="$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") r4 = openat(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x0, 0x0) open_by_handle_at(r4, &(0x7f0000000240)=@reiserfs_2={0x8, 0x2, {0xb}}, 0x0) r5 = openat$cgroup_type(r1, &(0x7f0000000080), 0x2, 0x0) write$cgroup_type(r5, &(0x7f0000000240), 0x9) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB="b800000019000100000000000000000000000000000000000000000000000000ac1e0001000000000000000000000000000000004e2300000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000100000000004ea12175edc4f3d0c090d1fe0000060000000000000000000000000000ae820ba2dd1d00d4b7b92eaa5f5e61beeffded63fe0800"], 0xb8}}, 0x0) r7 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffdfc, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r4}, &(0x7f0000000000), &(0x7f0000000180)=r7}, 0xfffffffffffffeb6) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r9}, 0x10) r10 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r10, &(0x7f0000000040)={0xa, 0x0, &(0x7f0000000340)={&(0x7f0000000b00)=ANY=[@ANYBLOB="020300000b0000000000000000000000030006000000000002000000e000000100000000000000000200010000001c000000fb16000000000300050000000000020000007f0000010000000000000000010018"], 0x58}, 0x1, 0x7}, 0x0) stat(&(0x7f0000000480)='./file0/../file0/../file0/../file0\x00', &(0x7f0000000640)) 375.268634ms ago: executing program 1 (id=3036): connect$pppl2tp(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000680)={[{@journal_path={'journal_path', 0x3d, './file0'}}, {@errors_remount}, {@journal_path={'journal_path', 0x3d, './file0'}}, {@norecovery}, {@barrier}, {@lazytime}, {@sb}, {@min_batch_time}, {@commit={'commit', 0x3d, 0x80000000}}], [{@fsmagic={'fsmagic', 0x3d, 0xffff}}, {@fsmagic={'fsmagic', 0x3d, 0x2}}, {@pcr={'pcr', 0x3d, 0x2d}}, {@fowner_eq}, {@context={'context', 0x3d, 'unconfined_u'}}, {@euid_gt}, {@defcontext={'defcontext', 0x3d, 'root'}}, {@mask={'mask', 0x3d, 'MAY_READ'}}, {@rootcontext={'rootcontext', 0x3d, 'sysadm_u'}}, {@audit}]}, 0xfc, 0x56d, &(0x7f0000000ec0)="$eJzs3d9rW1UcAPDvTdv91nYwhvoggz04mUvX1h8TBOej6HCg7zO0d2U0XUaTjrUO3B7ciy8yBBEH4h/gu4/Df8C/YqCDIaPogwiVm9502Zo0bZeZrPl84G7n3Huzc07O/Z6dk3tDAhhYx7I/ChEvR8Q3ScRo07HhyA8eWztv5eH16WxLYnX10z+TSPJ9jfOT/O+DeealiPj1q4iThY3lVpeW50rlcrqQ58dr81fGq0vLpy7Nl2bT2fTy5NTUmbemJt995+2utfX1839//8ndD898fXzlu5/vH76dxNk4lB9rbsdTuNGcOVb6N0+NxNknTpzoQmH9JOl1BdiRoTzORyIbA0ZjKI96YPf7MiJWgQGViH8YUI15QGNt36V18HPjwQdrC6CN7R9e+2wk9tXXRgdWksdWRtl6d6wL5Wdl/PLHndvZFpt/DrG/Qx5gW27cjIjTw8Mbx78kH/+2YfTx7On6h8ebe7KMQfv/B3rpbjb/eaPV/KewPv+JFvOfgy1idyc6x3/hfheKaSub/73Xcv67PnSNDeW5F+pzvpHk4qVyejoiXoyIEzGyN8tvdj/nzMq91XbHmud/2ZaV35gL5vW4P7z38dfMlGqlp2lzswc3I15pOf9N1vs/adH/2ftxfotlHE3vvNruWOf2P1urP0W81rL/H93RSja/Pzlevx7GG1fFRn/dOvpbu/J73f6s/w9s3v6xpPl+bXX7Zfy475+03bGdXv97ks/q6T35vmulWm1hImJP8vHG/ZOPXtvIN87P2n/i+ObjX6vrP1t8fb7F9t86cqvtqf3Q/zPb6v/tJ+599MUP7crfWv+/WU+dyPdsZfzbagWf5r0DAAAAAACAflOIiEORFIrr6UKhWFx7vuNIHCiUK9XayYuVxcszUf+u7FiMFBp3ukebnoeYyJ+HbeQnn8hPRcThiPh2aH89X5yulGc6Ph0GAAAAAAAAAAAAAAAAAAAAg+Fgm+//Z34f6nXtgGeu/sMGe3tdC6AXOv7kfzd+6QnoSx3jH9i1xD8MLvEPg0v8w+AS/zC4xD8MLvEPg0v8AwAAAAAAAAAAAAAAAAAAAAAAAAAAQFedP3cu21ZXHl6fzvIzV5cW5ypXT82k1bni/OJ0cbqycKU4W6nMltPidGW+079XrlSuTEzG4rXxWlqtjVeXli/MVxYv1y5cmi/NphfSkf+lVQAAAAAAAAAAAAAAAAAAAPB8qS4tz5XK5XRBom3i/eiLajzLBq7Z0cuHe1PnQkT0wVu3exM9HpgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoMl/AQAA//8i0jS+") bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3f, 0x1, 0x0, 0x0, 0x0, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, @perf_config_ext={0x2, 0x400}, 0x590, 0xffffffff, 0x6, 0x2, 0x0, 0x1, 0xfff9, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x8) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0) 362.724704ms ago: executing program 2 (id=3037): bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xd, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000700)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002dbd7000fbdbdf2502000000180001"], 0x2c}, 0x1, 0x0, 0x0, 0x2000000}, 0x4000) 279.198006ms ago: executing program 6 (id=3038): dup(0xffffffffffffffff) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x64, '\x00', 0x0, @cgroup_sysctl, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000c80)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10) syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x20c006, &(0x7f00000004c0)={[{@grpjquota}, {@mblk_io_submit}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@lazytime}, {@discard}, {@resuid}], [{@seclabel}]}, 0x1, 0x446, &(0x7f0000000d40)="$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") 278.882316ms ago: executing program 4 (id=3039): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x1000}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x2, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffc}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000000, 0x110, r0, 0xeaa96000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kmem_cache_free\x00', r2}, 0x10) write$cgroup_subtree(r0, 0x0, 0xfdef) 278.457695ms ago: executing program 2 (id=3040): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x8, &(0x7f00000001c0)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}}]}, &(0x7f0000000300)='GPL\x00', 0x9, 0x1, &(0x7f0000000340)=""/1, 0x0, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) io_submit(0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x410c84, &(0x7f0000000340), 0x1, 0x775, &(0x7f0000001180)="$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") r1 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x88882, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0) r4 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1802000000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r5, 0xffffffffffffffff}, &(0x7f0000000180), &(0x7f00000001c0)=r4}, 0x20) r7 = openat$binfmt_register(0xffffff9c, &(0x7f0000000040), 0x1, 0x0) write$binfmt_register(r7, &(0x7f0000000100)={0x3a, 'syz3', 0x3a, 'E', 0x3a, 0x6, 0x3a, 'E', 0x3a, '@{@$\x9a$^', 0x3a, './file0', 0x3a, [0x46]}, 0x30) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r8}, 0x10) write(r3, &(0x7f0000004200)='t', 0x1) sendfile(r3, r2, 0x0, 0x3ffff) sendfile(r3, r2, 0x0, 0x7ffff000) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r6, 0xc0096616, &(0x7f0000000000)={0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}) fallocate(r1, 0x0, 0x0, 0x1001f0) 219.908096ms ago: executing program 4 (id=3041): bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x2, @perf_config_ext={0xf60, 0x4}, 0x1100, 0xca0, 0x3a65, 0x5, 0x0, 0x8, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x8, &(0x7f00000001c0)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}}]}, &(0x7f0000000300)='GPL\x00', 0x9, 0x1, &(0x7f0000000340)=""/1, 0x0, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) io_submit(0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x410c84, &(0x7f0000000340), 0x1, 0x775, &(0x7f0000001180)="$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") r1 = open(0x0, 0x14927e, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x88882, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0) r4 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{}, &(0x7f0000000180), &(0x7f00000001c0)=r4}, 0x20) openat$binfmt_register(0xffffff9c, &(0x7f0000000040), 0x1, 0x0) write(r3, &(0x7f0000004200)='t', 0x1) sendfile(r3, r2, 0x0, 0x3ffff) sendfile(r3, r2, 0x0, 0x7ffff000) fallocate(r1, 0x0, 0x0, 0x1001f0) 102.407998ms ago: executing program 6 (id=3042): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="020000000400000008000000"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r0}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) io_pgetevents(0x0, 0x10, 0x5, &(0x7f0000000180)=[{}, {}, {}, {}, {}], &(0x7f0000000240), &(0x7f0000000300)={&(0x7f00000002c0)={[0xd]}, 0x8}) 92.532839ms ago: executing program 1 (id=3043): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x6, &(0x7f0000000000)=0x9, 0x8, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000002c0)='kmem_cache_free\x00', r0, 0x0, 0x8}, 0x18) r1 = socket(0x10, 0x3, 0x0) connect$netlink(r1, &(0x7f0000000280)=@proc={0x10, 0x0, 0x1}, 0xc) sendmsg$nl_route_sched(r1, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000040)={&(0x7f0000000400)=@gettaction={0x24, 0x32, 0x100, 0x70bd2b, 0x25dfdbfe, {}, [@action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1}}, @action_gd=@TCA_ACT_TAB={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x20044001}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000005980)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r2, @ANYBLOB="1f3f1ef05ebde9d42669ca9684ee36570f9fbc578a3d476dc2a57f5bb93a2b155ec64bfcea767a5f893bf15e284eada1"], 0x18, 0x800}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000b80)=ANY=[@ANYBLOB="14000000401e00000181550001000000", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00'], 0x18, 0x40810}}], 0x2, 0x0) get_mempolicy(0x0, 0x0, 0xfffffffffffffffd, &(0x7f0000365000/0x3000)=nil, 0x3) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="7000000000010104000000000000000002000000240001801400018008000100ac1e010108000200e00000010c000280050180080001000000000008000200e00000020c0002800500010000000000080007400000000008000840800000000400048000"/112], 0x70}}, 0x0) chdir(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x106) 0s ago: executing program 4 (id=3044): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0xc0ed0040, &(0x7f0000000000)={[{@noblock_validity}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@data_err_abort}, {@noload}, {@quota}, {@lazytime}]}, 0xfe, 0x472, &(0x7f0000000940)="$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") r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000300)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000340)=@gcm_128={{0x304}, "a6341a1a379332f5", "1fd33cb95d66a1781f31bf07fd2ae874", "62266bd8", "d1b29b99d21d88a2"}, 0x28) write$binfmt_script(r0, &(0x7f0000000780)={'#! ', './file0'}, 0xb) kernel console output (not intermixed with test programs): oop2): encrypted files will use data=ordered instead of data journaling mode [ 177.532136][T10919] EXT4-fs (loop2): 1 truncate cleaned up [ 177.545026][T10918] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 177.572957][T10918] EXT4-fs (loop1): 1 truncate cleaned up [ 177.587740][T10925] team0: Port device geneve1 removed [ 177.596725][T10928] team0: Unable to change to the same mode the team is in [ 177.627423][T10932] validate_nla: 10 callbacks suppressed [ 177.627437][T10932] netlink: 'syz.1.2601': attribute type 21 has an invalid length. [ 177.641243][T10932] netlink: 'syz.1.2601': attribute type 1 has an invalid length. [ 177.649098][T10932] netlink: 144 bytes leftover after parsing attributes in process `syz.1.2601'. [ 177.673538][T10936] netlink: 'syz.6.2603': attribute type 10 has an invalid length. [ 177.681513][T10936] netlink: 40 bytes leftover after parsing attributes in process `syz.6.2603'. [ 177.701739][T10936] team0: Port device geneve1 added [ 177.711667][T10938] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 177.781142][T10947] loop1: detected capacity change from 0 to 164 [ 177.797517][T10951] loop6: detected capacity change from 0 to 512 [ 177.806761][T10951] EXT4-fs (loop6): mounting ext3 file system using the ext4 subsystem [ 177.820316][T10947] bio_check_eod: 8 callbacks suppressed [ 177.820328][T10947] syz.1.2608: attempt to access beyond end of device [ 177.820328][T10947] loop1: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 177.840249][T10947] syz.1.2608: attempt to access beyond end of device [ 177.840249][T10947] loop1: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 177.840290][T10951] EXT4-fs (loop6): invalid journal inode [ 177.840313][T10951] EXT4-fs (loop6): can't get journal size [ 177.871603][T10951] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e056c118, mo2=0002] [ 177.880309][T10953] loop2: detected capacity change from 0 to 2048 [ 177.889597][T10951] System zones: 1-12, 13-13 [ 177.895070][T10951] EXT4-fs (loop6): 1 truncate cleaned up [ 177.917708][T10958] loop1: detected capacity change from 0 to 512 [ 177.924723][ T295] unregister_netdevice: waiting for batadv0 to become free. Usage count = 3 [ 177.933683][T10958] EXT4-fs: Ignoring removed mblk_io_submit option [ 177.948654][T10958] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 177.978658][T10958] EXT4-fs (loop1): 1 truncate cleaned up [ 178.068039][T10964] team0: Port device geneve1 removed [ 178.079912][T10964] team0: Unable to change to the same mode the team is in [ 178.091347][T10849] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.128070][T10849] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.139663][T10971] netlink: 'syz.6.2617': attribute type 21 has an invalid length. [ 178.139992][T10849] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.161460][T10849] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.169990][T10971] netlink: 'syz.6.2617': attribute type 1 has an invalid length. [ 178.171476][T10973] netlink: 'syz.2.2616': attribute type 10 has an invalid length. [ 178.177850][T10971] netlink: 144 bytes leftover after parsing attributes in process `syz.6.2617'. [ 178.185734][T10973] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2616'. [ 178.301771][T10985] loop5: detected capacity change from 0 to 1024 [ 178.331674][T10985] EXT4-fs (loop5): orphan cleanup on readonly fs [ 178.340694][T10988] loop6: detected capacity change from 0 to 164 [ 178.355514][T10985] EXT4-fs error (device loop5): ext4_orphan_get:1416: comm syz.5.2622: bad orphan inode 8 [ 178.375554][T10988] syz.6.2623: attempt to access beyond end of device [ 178.375554][T10988] loop6: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 178.389807][T10988] syz.6.2623: attempt to access beyond end of device [ 178.389807][T10988] loop6: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 178.390866][T10985] 9pnet: Could not find request transport: fdÿÿÿÿÿÿÿÿ<ÄžWͺwfdno=0xffffffffffffffff [ 178.413139][T10995] loop4: detected capacity change from 0 to 512 [ 178.422986][T10995] EXT4-fs: Ignoring removed mblk_io_submit option [ 178.445449][T10995] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 178.464484][T10995] EXT4-fs (loop4): 1 truncate cleaned up [ 178.466595][T11000] team0: Unable to change to the same mode the team is in [ 178.482104][T11000] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 178.521205][T11002] loop4: detected capacity change from 0 to 2048 [ 178.531898][T11000] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 178.543657][T10997] team0: Unable to change to the same mode the team is in [ 178.571159][T11000] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 178.596786][T11010] netlink: 'syz.6.2631': attribute type 10 has an invalid length. [ 178.606939][T11010] team0: Port device geneve1 added [ 178.616191][T11000] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 178.805216][T11027] loop4: detected capacity change from 0 to 2048 [ 178.816271][T11027] ext4 filesystem being mounted at /515/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 179.089390][ T5144] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm kworker/u8:25: bg 0: block 345: padding at end of block bitmap is not set [ 179.104373][ T5144] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 2048 with error 117 [ 179.117125][ T5144] EXT4-fs (loop4): This should not happen!! Data will be lost [ 179.117125][ T5144] [ 179.144277][ T5169] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 2065 with max blocks 2040 with error 28 [ 179.157065][ T5169] EXT4-fs (loop4): This should not happen!! Data will be lost [ 179.157065][ T5169] [ 179.166765][ T5169] EXT4-fs (loop4): Total free blocks count 0 [ 179.172746][ T5169] EXT4-fs (loop4): Free/Dirty block details [ 179.178769][ T5169] EXT4-fs (loop4): free_blocks=0 [ 179.183708][ T5169] EXT4-fs (loop4): dirty_blocks=2048 [ 179.189027][ T5169] EXT4-fs (loop4): Block reservation details [ 179.195041][ T5169] EXT4-fs (loop4): i_reserved_data_blocks=128 [ 179.254875][T11034] loop4: detected capacity change from 0 to 164 [ 179.264044][T11034] syz.4.2640: attempt to access beyond end of device [ 179.264044][T11034] loop4: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 179.278231][T11034] syz.4.2640: attempt to access beyond end of device [ 179.278231][T11034] loop4: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 179.316148][T11036] team0: Unable to change to the same mode the team is in [ 179.350496][T11038] loop4: detected capacity change from 0 to 2048 [ 179.371068][T11038] binfmt_misc: register: failed to install interpreter file ./file0 [ 179.620080][T11053] loop2: detected capacity change from 0 to 2048 [ 179.700666][T11062] loop4: detected capacity change from 0 to 2048 [ 179.746178][T11062] binfmt_misc: register: failed to install interpreter file ./file0 [ 179.758508][T11070] team0: Unable to change to the same mode the team is in [ 179.800187][T11072] loop1: detected capacity change from 0 to 512 [ 179.817733][T11072] EXT4-fs: Ignoring removed mblk_io_submit option [ 179.827312][T11072] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 179.840343][T11072] EXT4-fs (loop1): 1 truncate cleaned up [ 179.991596][T11086] netlink: 'syz.2.2659': attribute type 10 has an invalid length. [ 180.888504][T11110] loop4: detected capacity change from 0 to 512 [ 180.895311][T11110] EXT4-fs: Ignoring removed mblk_io_submit option [ 180.902079][T11110] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 180.913263][T11110] EXT4-fs (loop4): 1 truncate cleaned up [ 180.957172][T11117] random: crng reseeded on system resumption [ 181.027243][ T29] kauditd_printk_skb: 877 callbacks suppressed [ 181.027257][ T29] audit: type=1326 audit(1743389023.003:9124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11115 comm="syz.4.2670" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4671eed169 code=0x0 [ 181.111099][T11125] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 181.120539][T11127] loop4: detected capacity change from 0 to 2048 [ 181.139015][ T29] audit: type=1326 audit(1743389023.113:9125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11130 comm="syz.1.2676" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44812cd169 code=0x7ffc0000 [ 181.162702][ T29] audit: type=1326 audit(1743389023.113:9126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11130 comm="syz.1.2676" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44812cd169 code=0x7ffc0000 [ 181.188197][ T29] audit: type=1326 audit(1743389023.113:9127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11130 comm="syz.1.2676" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f44812cd169 code=0x7ffc0000 [ 181.211921][ T29] audit: type=1326 audit(1743389023.113:9128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11130 comm="syz.1.2676" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44812cd169 code=0x7ffc0000 [ 181.235482][ T29] audit: type=1326 audit(1743389023.113:9129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11130 comm="syz.1.2676" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f44812cd169 code=0x7ffc0000 [ 181.237320][T11132] binfmt_misc: register: failed to install interpreter file ./file0 [ 181.259042][ T29] audit: type=1326 audit(1743389023.163:9130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11130 comm="syz.1.2676" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44812cd169 code=0x7ffc0000 [ 181.296499][T11131] loop1: detected capacity change from 0 to 164 [ 181.312866][ T29] audit: type=1326 audit(1743389023.183:9131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11130 comm="syz.1.2676" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44812cd169 code=0x7ffc0000 [ 181.336477][ T29] audit: type=1326 audit(1743389023.243:9132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11130 comm="syz.1.2676" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f44812cd169 code=0x7ffc0000 [ 181.360207][ T29] audit: type=1326 audit(1743389023.243:9133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11130 comm="syz.1.2676" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f44812cd1a3 code=0x7ffc0000 [ 181.396728][T11135] loop6: detected capacity change from 0 to 1024 [ 181.424398][T11131] syz.1.2676: attempt to access beyond end of device [ 181.424398][T11131] loop1: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 181.438684][T11131] syz.1.2676: attempt to access beyond end of device [ 181.438684][T11131] loop1: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 181.459228][T11135] EXT4-fs (loop6): orphan cleanup on readonly fs [ 181.476310][T11135] EXT4-fs error (device loop6): ext4_orphan_get:1416: comm syz.6.2677: bad orphan inode 8 [ 181.491643][T11135] EXT4-fs (loop6): warning: mounting fs with errors, running e2fsck is recommended [ 181.502808][T11135] EXT4-fs (loop6): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 181.513841][T11135] EXT4-fs (loop6): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 181.522510][T11142] loop1: detected capacity change from 0 to 2048 [ 181.550118][T11142] ext4 filesystem being mounted at /480/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 181.859669][ T5182] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm kworker/u8:63: bg 0: block 345: padding at end of block bitmap is not set [ 181.874553][ T5182] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 2048 with error 117 [ 181.887300][ T5182] EXT4-fs (loop1): This should not happen!! Data will be lost [ 181.887300][ T5182] [ 181.913511][ T5144] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 2065 with max blocks 2040 with error 28 [ 181.926360][ T5144] EXT4-fs (loop1): This should not happen!! Data will be lost [ 181.926360][ T5144] [ 181.936106][ T5144] EXT4-fs (loop1): Total free blocks count 0 [ 181.942087][ T5144] EXT4-fs (loop1): Free/Dirty block details [ 181.948010][ T5144] EXT4-fs (loop1): free_blocks=0 [ 181.952952][ T5144] EXT4-fs (loop1): dirty_blocks=2048 [ 181.958263][ T5144] EXT4-fs (loop1): Block reservation details [ 181.964246][ T5144] EXT4-fs (loop1): i_reserved_data_blocks=128 [ 181.999086][T11157] random: crng reseeded on system resumption [ 182.076444][T11160] loop1: detected capacity change from 0 to 2048 [ 182.086273][T11160] ext4 filesystem being mounted at /481/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 182.142409][T11164] loop6: detected capacity change from 0 to 2048 [ 182.160566][T11164] ext4 filesystem being mounted at /494/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 182.333555][T11168] team0: No ports can be present during mode change [ 182.412814][ T5182] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm kworker/u8:63: bg 0: block 345: padding at end of block bitmap is not set [ 182.445994][ T5182] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 2048 with error 117 [ 182.458733][ T5182] EXT4-fs (loop1): This should not happen!! Data will be lost [ 182.458733][ T5182] [ 182.458907][T11174] loop2: detected capacity change from 0 to 2048 [ 182.491888][T11174] binfmt_misc: register: failed to install interpreter file ./file0 [ 182.528460][ T5144] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 2065 with max blocks 2040 with error 28 [ 182.541250][ T5144] EXT4-fs (loop1): This should not happen!! Data will be lost [ 182.541250][ T5144] [ 182.550937][ T5144] EXT4-fs (loop1): Total free blocks count 0 [ 182.556964][ T5144] EXT4-fs (loop1): Free/Dirty block details [ 182.562874][ T5144] EXT4-fs (loop1): free_blocks=0 [ 182.567920][ T5144] EXT4-fs (loop1): dirty_blocks=2048 [ 182.573219][ T5144] EXT4-fs (loop1): Block reservation details [ 182.579262][ T5144] EXT4-fs (loop1): i_reserved_data_blocks=128 [ 182.591673][T11000] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.607275][T11179] netlink: 'syz.4.2693': attribute type 21 has an invalid length. [ 182.618480][T11000] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.638547][T11179] netlink: 'syz.4.2693': attribute type 1 has an invalid length. [ 182.646334][T11179] __nla_validate_parse: 2 callbacks suppressed [ 182.646348][T11179] netlink: 144 bytes leftover after parsing attributes in process `syz.4.2693'. [ 182.666274][T11000] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.677997][T11000] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.687226][ T5144] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm kworker/u8:25: bg 0: block 345: padding at end of block bitmap is not set [ 182.707133][ T5144] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 2048 with error 117 [ 182.719778][ T5144] EXT4-fs (loop6): This should not happen!! Data will be lost [ 182.719778][ T5144] [ 182.771184][ T5182] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 2065 with max blocks 2040 with error 28 [ 182.777118][T11183] loop5: detected capacity change from 0 to 2048 [ 182.783962][ T5182] EXT4-fs (loop6): This should not happen!! Data will be lost [ 182.783962][ T5182] [ 182.800077][ T5182] EXT4-fs (loop6): Total free blocks count 0 [ 182.806111][ T5182] EXT4-fs (loop6): Free/Dirty block details [ 182.812075][ T5182] EXT4-fs (loop6): free_blocks=0 [ 182.817244][ T5182] EXT4-fs (loop6): dirty_blocks=2048 [ 182.822553][ T5182] EXT4-fs (loop6): Block reservation details [ 182.828781][ T5182] EXT4-fs (loop6): i_reserved_data_blocks=128 [ 182.853245][T11183] ext4 filesystem being mounted at /547/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 182.930931][T11192] random: crng reseeded on system resumption [ 182.991331][T11196] loop2: detected capacity change from 0 to 2048 [ 183.012539][T11199] loop4: detected capacity change from 0 to 512 [ 183.019297][T11199] EXT4-fs: Ignoring removed mblk_io_submit option [ 183.029504][T11199] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 183.058202][T11201] loop6: detected capacity change from 0 to 2048 [ 183.059571][T11199] EXT4-fs (loop4): 1 truncate cleaned up [ 183.083690][T11201] ext4 filesystem being mounted at /496/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 183.152971][T11208] loop1: detected capacity change from 0 to 512 [ 183.212816][T11208] EXT4-fs: Ignoring removed mblk_io_submit option [ 183.273294][T11208] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 183.289109][T11214] loop4: detected capacity change from 0 to 1024 [ 183.322298][T11214] EXT4-fs (loop4): orphan cleanup on readonly fs [ 183.339687][T11208] EXT4-fs (loop1): 1 truncate cleaned up [ 183.360803][T11214] EXT4-fs error (device loop4): ext4_orphan_get:1416: comm syz.4.2703: bad orphan inode 8 [ 183.416584][T11214] EXT4-fs (loop4): warning: mounting fs with errors, running e2fsck is recommended [ 183.467632][T11214] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 183.506156][T11214] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 183.556407][ T5125] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm kworker/u8:10: bg 0: block 345: padding at end of block bitmap is not set [ 183.586255][ T5125] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 2048 with error 117 [ 183.599047][ T5125] EXT4-fs (loop6): This should not happen!! Data will be lost [ 183.599047][ T5125] [ 183.638192][ T5144] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm kworker/u8:25: bg 0: block 345: padding at end of block bitmap is not set [ 183.656890][ T5144] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 2048 with error 117 [ 183.660501][ T5125] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 2065 with max blocks 2040 with error 28 [ 183.669584][ T5144] EXT4-fs (loop5): This should not happen!! Data will be lost [ 183.669584][ T5144] [ 183.682286][ T5125] EXT4-fs (loop6): This should not happen!! Data will be lost [ 183.682286][ T5125] [ 183.699114][T11233] loop4: detected capacity change from 0 to 512 [ 183.701564][ T5125] EXT4-fs (loop6): Total free blocks count 0 [ 183.710267][T11233] EXT4-fs: Ignoring removed mblk_io_submit option [ 183.713714][ T5125] EXT4-fs (loop6): Free/Dirty block details [ 183.726225][ T5125] EXT4-fs (loop6): free_blocks=0 [ 183.726880][T11233] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 183.731151][ T5125] EXT4-fs (loop6): dirty_blocks=2048 [ 183.731168][ T5125] EXT4-fs (loop6): Block reservation details [ 183.752313][ T5125] EXT4-fs (loop6): i_reserved_data_blocks=128 [ 183.760005][T11233] EXT4-fs (loop4): 1 truncate cleaned up [ 183.792295][ T51] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 2065 with max blocks 2040 with error 28 [ 183.805103][ T51] EXT4-fs (loop5): This should not happen!! Data will be lost [ 183.805103][ T51] [ 183.814871][ T51] EXT4-fs (loop5): Total free blocks count 0 [ 183.820949][ T51] EXT4-fs (loop5): Free/Dirty block details [ 183.826939][ T51] EXT4-fs (loop5): free_blocks=0 [ 183.831906][ T51] EXT4-fs (loop5): dirty_blocks=2048 [ 183.837253][ T51] EXT4-fs (loop5): Block reservation details [ 183.843245][ T51] EXT4-fs (loop5): i_reserved_data_blocks=128 [ 183.958683][T11242] netlink: 'syz.6.2707': attribute type 21 has an invalid length. [ 183.983169][T11242] netlink: 'syz.6.2707': attribute type 1 has an invalid length. [ 183.990974][T11242] netlink: 144 bytes leftover after parsing attributes in process `syz.6.2707'. [ 184.038723][T11246] loop1: detected capacity change from 0 to 512 [ 184.048693][T11246] EXT4-fs: Ignoring removed mblk_io_submit option [ 184.056454][T11246] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 184.074333][T11246] EXT4-fs (loop1): 1 truncate cleaned up [ 184.115374][T11251] loop4: detected capacity change from 0 to 512 [ 184.148038][T11251] EXT4-fs: Ignoring removed mblk_io_submit option [ 184.170918][T11255] netlink: 'syz.6.2718': attribute type 21 has an invalid length. [ 184.188757][T11253] loop1: detected capacity change from 0 to 512 [ 184.199004][T11255] netlink: 'syz.6.2718': attribute type 1 has an invalid length. [ 184.206902][T11255] netlink: 144 bytes leftover after parsing attributes in process `syz.6.2718'. [ 184.218671][T11251] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 184.236072][T11253] EXT4-fs: Ignoring removed mblk_io_submit option [ 184.260988][T11251] EXT4-fs (loop4): 1 truncate cleaned up [ 184.269192][T11253] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 184.287361][T11253] EXT4-fs (loop1): 1 truncate cleaned up [ 184.398451][T11261] team0: No ports can be present during mode change [ 184.542410][T11263] loop2: detected capacity change from 0 to 2048 [ 184.592439][T11263] ext4 filesystem being mounted at /581/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 184.681894][T11269] team0: Port device geneve1 removed [ 184.736877][T11270] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 184.773536][T11272] loop1: detected capacity change from 0 to 164 [ 184.843642][T11272] syz.1.2719: attempt to access beyond end of device [ 184.843642][T11272] loop1: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 184.861343][T11274] loop4: detected capacity change from 0 to 512 [ 184.870727][T11270] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 184.882039][T11274] EXT4-fs: Ignoring removed mblk_io_submit option [ 184.889201][T11274] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 184.899500][T11272] syz.1.2719: attempt to access beyond end of device [ 184.899500][T11272] loop1: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 184.926023][T11274] EXT4-fs (loop4): 1 truncate cleaned up [ 184.936219][T11270] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 184.988018][T11270] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.002644][T11280] loop4: detected capacity change from 0 to 1024 [ 185.021632][T11280] EXT4-fs (loop4): orphan cleanup on readonly fs [ 185.049170][T11285] loop5: detected capacity change from 0 to 512 [ 185.054165][T11270] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.055789][T11285] EXT4-fs: Ignoring removed mblk_io_submit option [ 185.072236][T11285] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 185.075813][T11270] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.093577][T11280] EXT4-fs error (device loop4): ext4_orphan_get:1416: comm syz.4.2727: bad orphan inode 8 [ 185.106992][T11285] EXT4-fs (loop5): 1 truncate cleaned up [ 185.119034][T11283] loop1: detected capacity change from 0 to 164 [ 185.120804][T11270] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.136805][T11270] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.171612][T11280] EXT4-fs (loop4): warning: mounting fs with errors, running e2fsck is recommended [ 185.183643][T11283] syz.1.2728: attempt to access beyond end of device [ 185.183643][T11283] loop1: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 185.193472][T11280] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 185.206582][T11283] syz.1.2728: attempt to access beyond end of device [ 185.206582][T11283] loop1: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 185.224543][T11280] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 185.250809][T11288] loop5: detected capacity change from 0 to 2048 [ 185.276831][ T5169] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm kworker/u8:50: bg 0: block 345: padding at end of block bitmap is not set [ 185.290626][T11290] loop6: detected capacity change from 0 to 164 [ 185.299781][ T5169] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 2048 with error 117 [ 185.312496][ T5169] EXT4-fs (loop2): This should not happen!! Data will be lost [ 185.312496][ T5169] [ 185.347237][T11290] syz.6.2731: attempt to access beyond end of device [ 185.347237][T11290] loop6: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 185.368833][T11288] binfmt_misc: register: failed to install interpreter file ./file0 [ 185.386803][T11290] syz.6.2731: attempt to access beyond end of device [ 185.386803][T11290] loop6: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 185.389549][T11296] netlink: 'syz.1.2734': attribute type 21 has an invalid length. [ 185.416301][T11296] netlink: 'syz.1.2734': attribute type 1 has an invalid length. [ 185.424080][T11296] netlink: 144 bytes leftover after parsing attributes in process `syz.1.2734'. [ 185.494275][ T51] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 2065 with max blocks 2040 with error 28 [ 185.507074][ T51] EXT4-fs (loop2): This should not happen!! Data will be lost [ 185.507074][ T51] [ 185.516759][ T51] EXT4-fs (loop2): Total free blocks count 0 [ 185.522762][ T51] EXT4-fs (loop2): Free/Dirty block details [ 185.528729][ T51] EXT4-fs (loop2): free_blocks=0 [ 185.533717][ T51] EXT4-fs (loop2): dirty_blocks=2048 [ 185.539071][ T51] EXT4-fs (loop2): Block reservation details [ 185.545112][ T51] EXT4-fs (loop2): i_reserved_data_blocks=128 [ 185.586496][T11305] loop6: detected capacity change from 0 to 1024 [ 185.608507][T11305] EXT4-fs (loop6): orphan cleanup on readonly fs [ 185.619250][T11305] EXT4-fs error (device loop6): ext4_orphan_get:1416: comm syz.6.2738: bad orphan inode 8 [ 185.656961][T11305] EXT4-fs (loop6): warning: mounting fs with errors, running e2fsck is recommended [ 185.657509][T11312] netlink: 'syz.2.2732': attribute type 10 has an invalid length. [ 185.674169][T11312] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2732'. [ 185.678837][T11305] EXT4-fs (loop6): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 185.711189][T11305] EXT4-fs (loop6): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 185.739323][T11317] loop5: detected capacity change from 0 to 512 [ 185.747676][T11318] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 185.755709][T11317] EXT4-fs: Ignoring removed mblk_io_submit option [ 185.782611][T11317] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 185.815999][T11324] loop2: detected capacity change from 0 to 1024 [ 185.832534][T11317] EXT4-fs (loop5): 1 truncate cleaned up [ 185.856475][T11324] EXT4-fs (loop2): orphan cleanup on readonly fs [ 185.863617][T11324] EXT4-fs error (device loop2): ext4_orphan_get:1416: comm syz.2.2745: bad orphan inode 8 [ 185.876759][T11324] EXT4-fs (loop2): warning: mounting fs with errors, running e2fsck is recommended [ 185.887437][T11324] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 185.896873][T11331] loop6: detected capacity change from 0 to 512 [ 185.903290][T11324] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 185.913789][T11331] EXT4-fs: Ignoring removed mblk_io_submit option [ 185.922928][T11331] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 185.951656][T11331] EXT4-fs (loop6): 1 truncate cleaned up [ 185.961683][T11336] netlink: 'syz.5.2748': attribute type 21 has an invalid length. [ 185.969703][T11333] loop4: detected capacity change from 0 to 2048 [ 185.975181][T11336] netlink: 'syz.5.2748': attribute type 1 has an invalid length. [ 185.983799][T11336] netlink: 144 bytes leftover after parsing attributes in process `syz.5.2748'. [ 186.039255][T11333] ext4 filesystem being mounted at /551/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 186.108039][T11348] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 186.141869][ T29] kauditd_printk_skb: 484 callbacks suppressed [ 186.141883][ T29] audit: type=1326 audit(1743389028.113:9618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11349 comm="syz.2.2755" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34d0b3d169 code=0x7ffc0000 [ 186.153923][T11350] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2755'. [ 186.183113][ T29] audit: type=1326 audit(1743389028.113:9619): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11349 comm="syz.2.2755" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34d0b3d169 code=0x7ffc0000 [ 186.206767][ T29] audit: type=1326 audit(1743389028.113:9620): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11349 comm="syz.2.2755" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f34d0b3d169 code=0x7ffc0000 [ 186.230474][ T29] audit: type=1326 audit(1743389028.113:9621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11349 comm="syz.2.2755" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34d0b3d169 code=0x7ffc0000 [ 186.254123][ T29] audit: type=1326 audit(1743389028.113:9622): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11349 comm="syz.2.2755" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34d0b3d169 code=0x7ffc0000 [ 186.277730][ T29] audit: type=1326 audit(1743389028.113:9623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11349 comm="syz.2.2755" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f34d0b3d169 code=0x7ffc0000 [ 186.301390][ T29] audit: type=1326 audit(1743389028.113:9624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11349 comm="syz.2.2755" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34d0b3d169 code=0x7ffc0000 [ 186.324928][ T29] audit: type=1326 audit(1743389028.113:9625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11349 comm="syz.2.2755" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f34d0b3d169 code=0x7ffc0000 [ 186.348418][ T29] audit: type=1326 audit(1743389028.113:9626): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11349 comm="syz.2.2755" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34d0b3d169 code=0x7ffc0000 [ 186.371943][ T29] audit: type=1326 audit(1743389028.113:9627): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11349 comm="syz.2.2755" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f34d0b3d169 code=0x7ffc0000 [ 186.413445][T11360] loop5: detected capacity change from 0 to 512 [ 186.421904][T11360] EXT4-fs (loop5): bad geometry: block count 1024 exceeds size of device (256 blocks) [ 186.436376][T11355] netlink: 68 bytes leftover after parsing attributes in process `syz.6.2758'. [ 186.445935][T11355] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2758'. [ 186.500854][T11362] loop1: detected capacity change from 0 to 1024 [ 186.517437][T11364] loop2: detected capacity change from 0 to 512 [ 186.535758][T11362] EXT4-fs (loop1): orphan cleanup on readonly fs [ 186.547132][T11362] EXT4-fs error (device loop1): ext4_orphan_get:1416: comm syz.1.2760: bad orphan inode 8 [ 186.558799][T11362] EXT4-fs (loop1): warning: mounting fs with errors, running e2fsck is recommended [ 186.570424][T11364] EXT4-fs: Ignoring removed mblk_io_submit option [ 186.612609][T11362] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 186.634652][T11364] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 186.638396][ T5125] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm kworker/u8:10: bg 0: block 345: padding at end of block bitmap is not set [ 186.657531][T11364] EXT4-fs (loop2): 1 truncate cleaned up [ 186.670087][T11362] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 186.685087][ T5125] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 2048 with error 117 [ 186.697715][ T5125] EXT4-fs (loop4): This should not happen!! Data will be lost [ 186.697715][ T5125] [ 186.727675][ T5125] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 2065 with max blocks 2040 with error 28 [ 186.740471][ T5125] EXT4-fs (loop4): This should not happen!! Data will be lost [ 186.740471][ T5125] [ 186.750142][ T5125] EXT4-fs (loop4): Total free blocks count 0 [ 186.756225][ T5125] EXT4-fs (loop4): Free/Dirty block details [ 186.762115][ T5125] EXT4-fs (loop4): free_blocks=0 [ 186.767087][ T5125] EXT4-fs (loop4): dirty_blocks=2048 [ 186.772390][ T5125] EXT4-fs (loop4): Block reservation details [ 186.778375][ T5125] EXT4-fs (loop4): i_reserved_data_blocks=128 [ 186.855143][T11375] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 186.981607][T11394] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 187.019479][T11398] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2774'. [ 187.065311][T11398] team0: No ports can be present during mode change [ 187.099846][T11397] lo speed is unknown, defaulting to 1000 [ 187.150995][T11404] IPVS: set_ctl: invalid protocol: 59 224.0.0.2:20003 [ 187.159209][T11408] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 187.188417][T11404] loop5: detected capacity change from 0 to 512 [ 187.214319][T11416] FAULT_INJECTION: forcing a failure. [ 187.214319][T11416] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 187.227536][T11416] CPU: 1 UID: 0 PID: 11416 Comm: syz.1.2780 Not tainted 6.14.0-syzkaller-10764-gaa918db707fb #0 PREEMPT(voluntary) [ 187.227534][T11415] loop2: detected capacity change from 0 to 2048 [ 187.227596][T11416] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 187.227610][T11416] Call Trace: [ 187.227616][T11416] [ 187.227623][T11416] dump_stack_lvl+0xf6/0x150 [ 187.227649][T11416] dump_stack+0x15/0x1a [ 187.227668][T11416] should_fail_ex+0x261/0x270 [ 187.227732][T11416] should_fail+0xb/0x10 [ 187.227747][T11416] should_fail_usercopy+0x1a/0x20 [ 187.227770][T11416] _copy_to_user+0x20/0xa0 [ 187.227796][T11416] simple_read_from_buffer+0xb2/0x130 [ 187.227902][T11416] proc_fail_nth_read+0x103/0x140 [ 187.227972][T11416] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 187.228059][T11416] vfs_read+0x1b2/0x710 [ 187.228078][T11416] ? __rcu_read_unlock+0x4e/0x70 [ 187.228101][T11416] ? __fget_files+0x186/0x1c0 [ 187.228215][T11416] ksys_read+0xeb/0x1b0 [ 187.228236][T11416] __x64_sys_read+0x42/0x50 [ 187.228256][T11416] x64_sys_call+0x2a3b/0x2e10 [ 187.228280][T11416] do_syscall_64+0xc9/0x1c0 [ 187.228302][T11416] ? clear_bhb_loop+0x25/0x80 [ 187.228327][T11416] ? clear_bhb_loop+0x25/0x80 [ 187.228373][T11416] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 187.228415][T11416] RIP: 0033:0x7f44812cbb7c [ 187.228438][T11416] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 187.228518][T11416] RSP: 002b:00007f447f937030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 187.228568][T11416] RAX: ffffffffffffffda RBX: 00007f44814e5fa0 RCX: 00007f44812cbb7c [ 187.228583][T11416] RDX: 000000000000000f RSI: 00007f447f9370a0 RDI: 0000000000000006 [ 187.228597][T11416] RBP: 00007f447f937090 R08: 0000000000000000 R09: 0000000000000000 [ 187.228612][T11416] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 187.228626][T11416] R13: 0000000000000000 R14: 00007f44814e5fa0 R15: 00007ffdfd7e9118 [ 187.228648][T11416] [ 187.446904][T11404] EXT4-fs (loop5): too many log groups per flexible block group [ 187.454638][T11404] EXT4-fs (loop5): failed to initialize mballoc (-12) [ 187.461521][T11404] EXT4-fs (loop5): mount failed [ 187.480533][T11415] EXT4-fs mount: 198 callbacks suppressed [ 187.480549][T11415] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 187.504614][T11415] binfmt_misc: register: failed to install interpreter file ./file0 [ 187.523685][T11431] loop5: detected capacity change from 0 to 164 [ 187.533041][T11431] syz.5.2785: attempt to access beyond end of device [ 187.533041][T11431] loop5: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 187.548790][T11431] syz.5.2785: attempt to access beyond end of device [ 187.548790][T11431] loop5: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 187.610064][T11434] loop5: detected capacity change from 0 to 2048 [ 187.647144][T11434] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 187.698819][T11443] validate_nla: 4 callbacks suppressed [ 187.698841][T11443] netlink: 'syz.4.2789': attribute type 10 has an invalid length. [ 187.712224][T11443] __nla_validate_parse: 2 callbacks suppressed [ 187.712314][T11443] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2789'. [ 187.729476][T11443] team0: Port device geneve1 added [ 187.811405][ T3302] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 187.846301][T11449] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 187.912385][T11459] team0: Unable to change to the same mode the team is in [ 187.962094][ T3554] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 188.000340][T11464] loop2: detected capacity change from 0 to 164 [ 188.011861][T11462] team0: Port device geneve1 removed [ 188.023240][T11451] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.028977][T11470] netlink: 'syz.6.2799': attribute type 21 has an invalid length. [ 188.036727][T11464] syz.2.2797: attempt to access beyond end of device [ 188.036727][T11464] loop2: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 188.055237][T11464] syz.2.2797: attempt to access beyond end of device [ 188.055237][T11464] loop2: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 188.055751][T11468] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 188.078507][T11468] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.100652][T11470] netlink: 'syz.6.2799': attribute type 1 has an invalid length. [ 188.108437][T11470] netlink: 144 bytes leftover after parsing attributes in process `syz.6.2799'. [ 188.118486][T11451] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.136775][T11472] netlink: 'syz.2.2800': attribute type 10 has an invalid length. [ 188.144670][T11472] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2800'. [ 188.177195][T11476] loop6: detected capacity change from 0 to 512 [ 188.183815][T11476] EXT4-fs: Ignoring removed mblk_io_submit option [ 188.192513][T11476] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 188.210498][T11468] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 188.217289][T11476] EXT4-fs (loop6): 1 truncate cleaned up [ 188.220312][T11468] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.229004][T11476] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 188.277629][T11451] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.294104][ T4278] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 188.313216][T11468] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 188.323063][T11468] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.374510][T11451] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.416945][T11468] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 188.426807][T11468] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.469965][T11491] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 188.486351][T11451] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 188.499548][T11451] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 188.519165][T11451] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 188.545396][T11468] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 188.553611][T11468] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 188.566613][T11468] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 188.575001][T11468] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 188.589485][T11451] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 188.598425][T11497] loop5: detected capacity change from 0 to 2048 [ 188.600597][T11468] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 188.613040][T11468] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 188.627088][T11479] lo speed is unknown, defaulting to 1000 [ 188.640835][T11468] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 188.649183][T11468] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 188.662200][T11497] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 188.692543][T11497] ext4 filesystem being mounted at /565/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 188.715516][T11503] loop1: detected capacity change from 0 to 1024 [ 188.749971][T11503] EXT4-fs (loop1): orphan cleanup on readonly fs [ 188.762289][T11503] EXT4-fs error (device loop1): ext4_orphan_get:1416: comm syz.1.2810: bad orphan inode 8 [ 188.782426][T11479] chnl_net:caif_netlink_parms(): no params data found [ 188.812789][T11503] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 188.828011][T11503] EXT4-fs (loop1): warning: mounting fs with errors, running e2fsck is recommended [ 188.839444][T11510] netlink: 'syz.4.2812': attribute type 10 has an invalid length. [ 188.844899][T11503] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 188.847388][T11510] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2812'. [ 188.867981][T11503] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 188.885646][T11510] team0: Port device geneve1 added [ 188.896903][T11479] bridge0: port 1(bridge_slave_0) entered blocking state [ 188.904050][T11479] bridge0: port 1(bridge_slave_0) entered disabled state [ 188.911848][ T3301] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 188.932391][T11479] bridge_slave_0: entered allmulticast mode [ 188.940859][T11479] bridge_slave_0: entered promiscuous mode [ 188.947756][T11479] bridge0: port 2(bridge_slave_1) entered blocking state [ 188.954917][T11479] bridge0: port 2(bridge_slave_1) entered disabled state [ 188.962135][T11479] bridge_slave_1: entered allmulticast mode [ 188.977996][T11479] bridge_slave_1: entered promiscuous mode [ 189.006978][T11479] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 189.023920][T11518] loop1: detected capacity change from 0 to 2048 [ 189.028371][T11479] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 189.060949][T11518] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 189.082400][T11524] loop4: detected capacity change from 0 to 512 [ 189.091632][T11479] team0: Port device team_slave_0 added [ 189.098197][T11524] EXT4-fs: Ignoring removed mblk_io_submit option [ 189.105783][T11479] team0: Port device team_slave_1 added [ 189.135769][T11479] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 189.142732][T11479] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 189.153868][T11524] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 189.168783][T11479] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 189.195801][T11479] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 189.202760][T11479] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 189.228731][T11479] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 189.262986][T11524] EXT4-fs (loop4): 1 truncate cleaned up [ 189.271517][T11479] hsr_slave_0: entered promiscuous mode [ 189.281521][T11524] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 189.293999][T11479] hsr_slave_1: entered promiscuous mode [ 189.333263][T11528] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 189.340781][T11479] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 189.351318][ T3304] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 189.362372][T11479] Cannot create hsr debugfs directory [ 189.433358][T11533] loop6: detected capacity change from 0 to 2048 [ 189.443836][ T3301] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 189.453777][ T5144] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm kworker/u8:25: bg 0: block 345: padding at end of block bitmap is not set [ 189.470211][ T5144] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 2048 with error 117 [ 189.482997][ T5144] EXT4-fs (loop5): This should not happen!! Data will be lost [ 189.482997][ T5144] [ 189.498209][T11533] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 189.513667][ T5144] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 2065 with max blocks 2040 with error 28 [ 189.526429][ T5144] EXT4-fs (loop5): This should not happen!! Data will be lost [ 189.526429][ T5144] [ 189.536116][ T5144] EXT4-fs (loop5): Total free blocks count 0 [ 189.542115][ T5144] EXT4-fs (loop5): Free/Dirty block details [ 189.546924][T11533] binfmt_misc: register: failed to install interpreter file ./file0 [ 189.548094][ T5144] EXT4-fs (loop5): free_blocks=0 [ 189.561196][ T5144] EXT4-fs (loop5): dirty_blocks=2048 [ 189.566527][ T5144] EXT4-fs (loop5): Block reservation details [ 189.575094][T11531] team0: Port device geneve1 removed [ 189.591878][T11540] random: crng reseeded on system resumption [ 189.666958][T11535] team0: Unable to change to the same mode the team is in [ 189.732478][T11479] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.777708][T11479] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.799317][T11549] loop4: detected capacity change from 0 to 1024 [ 189.824564][T11549] EXT4-fs (loop4): orphan cleanup on readonly fs [ 189.835298][T11549] EXT4-fs error (device loop4): ext4_orphan_get:1416: comm syz.4.2822: bad orphan inode 8 [ 189.836223][T11479] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.861767][T11549] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 189.877033][T11549] EXT4-fs (loop4): warning: mounting fs with errors, running e2fsck is recommended [ 189.877532][T11552] FAULT_INJECTION: forcing a failure. [ 189.877532][T11552] name failslab, interval 1, probability 0, space 0, times 0 [ 189.887067][T11549] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 189.899116][T11552] CPU: 1 UID: 0 PID: 11552 Comm: syz.5.2823 Not tainted 6.14.0-syzkaller-10764-gaa918db707fb #0 PREEMPT(voluntary) [ 189.899221][T11552] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 189.899233][T11552] Call Trace: [ 189.899239][T11552] [ 189.899247][T11552] dump_stack_lvl+0xf6/0x150 [ 189.899270][T11552] dump_stack+0x15/0x1a [ 189.899286][T11552] should_fail_ex+0x261/0x270 [ 189.899307][T11552] should_failslab+0x8f/0xb0 [ 189.899389][T11552] __kmalloc_cache_noprof+0x55/0x320 [ 189.899430][T11552] ? rtnl_newlink+0x5f/0x12d0 [ 189.899508][T11552] rtnl_newlink+0x5f/0x12d0 [ 189.899537][T11552] ? xas_load+0x3ba/0x3d0 [ 189.899588][T11552] ? xas_load+0x3ba/0x3d0 [ 189.899610][T11552] ? __rcu_read_unlock+0x4e/0x70 [ 189.899654][T11552] ? xa_load+0xbd/0xe0 [ 189.899680][T11552] ? memcg_list_lru_alloc+0xd0/0x500 [ 189.899746][T11552] ? avc_has_perm_noaudit+0x18d/0x210 [ 189.899845][T11552] ? __rcu_read_unlock+0x4e/0x70 [ 189.899880][T11552] ? avc_has_perm_noaudit+0x1cc/0x210 [ 189.899909][T11552] ? selinux_capable+0x1f9/0x260 [ 189.899965][T11552] ? security_capable+0x81/0x90 [ 189.899989][T11552] ? ns_capable+0x7d/0xb0 [ 189.900019][T11552] ? __pfx_rtnl_newlink+0x10/0x10 [ 189.900048][T11552] rtnetlink_rcv_msg+0x65a/0x740 [ 189.900077][T11552] ? should_fail_ex+0xd7/0x270 [ 189.900165][T11552] ? ref_tracker_free+0x3b8/0x420 [ 189.900193][T11552] netlink_rcv_skb+0x12f/0x230 [ 189.900231][T11552] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 189.900348][T11552] rtnetlink_rcv+0x1c/0x30 [ 189.900374][T11552] netlink_unicast+0x605/0x6c0 [ 189.900412][T11552] netlink_sendmsg+0x609/0x720 [ 189.900458][T11552] ? __pfx_netlink_sendmsg+0x10/0x10 [ 189.900560][T11552] __sock_sendmsg+0x140/0x180 [ 189.900595][T11552] ____sys_sendmsg+0x350/0x4e0 [ 189.900630][T11552] __sys_sendmsg+0x1a0/0x240 [ 189.900671][T11552] __x64_sys_sendmsg+0x46/0x50 [ 189.900709][T11552] x64_sys_call+0x26f3/0x2e10 [ 189.900762][T11552] do_syscall_64+0xc9/0x1c0 [ 189.900786][T11552] ? clear_bhb_loop+0x25/0x80 [ 189.900814][T11552] ? clear_bhb_loop+0x25/0x80 [ 189.900842][T11552] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 189.900909][T11552] RIP: 0033:0x7f187c1fd169 [ 189.900982][T11552] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 189.901005][T11552] RSP: 002b:00007f187a867038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 189.901029][T11552] RAX: ffffffffffffffda RBX: 00007f187c415fa0 RCX: 00007f187c1fd169 [ 189.901044][T11552] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 189.901060][T11552] RBP: 00007f187a867090 R08: 0000000000000000 R09: 0000000000000000 [ 189.901073][T11552] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 189.901088][T11552] R13: 0000000000000000 R14: 00007f187c415fa0 R15: 00007fff50b2bd28 [ 189.901179][T11552] [ 190.072522][T11557] netlink: 'syz.5.2825': attribute type 21 has an invalid length. [ 190.079816][T11553] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 190.084216][ T4278] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 190.099756][T11557] netlink: 'syz.5.2825': attribute type 1 has an invalid length. [ 190.218410][T11561] loop6: detected capacity change from 0 to 2048 [ 190.222975][T11557] netlink: 144 bytes leftover after parsing attributes in process `syz.5.2825'. [ 190.238996][ T3304] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 190.256672][T11479] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 190.271207][T11561] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 190.297926][T11566] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 190.331325][T11568] loop4: detected capacity change from 0 to 164 [ 190.349888][T11568] syz.4.2827: attempt to access beyond end of device [ 190.349888][T11568] loop4: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 190.362084][T11479] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 190.373604][T11568] syz.4.2827: attempt to access beyond end of device [ 190.373604][T11568] loop4: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 190.391877][T11479] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 190.406382][T11479] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 190.415797][T11479] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 190.458572][T11574] loop1: detected capacity change from 0 to 2048 [ 190.463800][T11479] 8021q: adding VLAN 0 to HW filter on device bond0 [ 190.487697][T11479] 8021q: adding VLAN 0 to HW filter on device team0 [ 190.497878][T11574] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 190.521155][ T5125] bridge0: port 1(bridge_slave_0) entered blocking state [ 190.528393][ T5125] bridge0: port 1(bridge_slave_0) entered forwarding state [ 190.537651][T11574] ext4 filesystem being mounted at /508/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 190.552288][ T5144] bridge0: port 2(bridge_slave_1) entered blocking state [ 190.559380][ T5144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 190.641099][T11479] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 190.648194][T11590] random: crng reseeded on system resumption [ 190.670050][ T4278] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 190.794352][T11479] veth0_vlan: entered promiscuous mode [ 190.813582][T11479] veth1_vlan: entered promiscuous mode [ 190.827912][T11603] loop5: detected capacity change from 0 to 1024 [ 190.840502][T11605] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2838'. [ 190.848285][T11603] EXT4-fs (loop5): orphan cleanup on readonly fs [ 190.857650][T11479] veth0_macvtap: entered promiscuous mode [ 190.874847][T11479] veth1_macvtap: entered promiscuous mode [ 190.881266][T11603] EXT4-fs error (device loop5): ext4_orphan_get:1416: comm syz.5.2837: bad orphan inode 8 [ 190.918541][T11479] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 190.929207][T11479] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 190.967183][T11603] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 190.990765][T11608] FAULT_INJECTION: forcing a failure. [ 190.990765][T11608] name failslab, interval 1, probability 0, space 0, times 0 [ 191.003511][T11608] CPU: 1 UID: 0 PID: 11608 Comm: syz.4.2839 Not tainted 6.14.0-syzkaller-10764-gaa918db707fb #0 PREEMPT(voluntary) [ 191.003557][T11608] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 191.003570][T11608] Call Trace: [ 191.003577][T11608] [ 191.003584][T11608] dump_stack_lvl+0xf6/0x150 [ 191.003609][T11608] dump_stack+0x15/0x1a [ 191.003626][T11608] should_fail_ex+0x261/0x270 [ 191.003647][T11608] should_failslab+0x8f/0xb0 [ 191.003688][T11608] kmem_cache_alloc_noprof+0x59/0x340 [ 191.003722][T11608] ? audit_log_start+0x37f/0x6e0 [ 191.003745][T11608] audit_log_start+0x37f/0x6e0 [ 191.003797][T11608] ? kstrtouint+0x7b/0xc0 [ 191.003876][T11608] audit_seccomp+0x4b/0x130 [ 191.003990][T11608] __seccomp_filter+0x694/0x10e0 [ 191.004026][T11608] ? vfs_write+0x669/0x950 [ 191.004105][T11608] ? putname+0xe1/0x100 [ 191.004208][T11608] __secure_computing+0x7e/0x160 [ 191.004241][T11608] syscall_trace_enter+0xcf/0x1f0 [ 191.004275][T11608] ? fpregs_assert_state_consistent+0x83/0xa0 [ 191.004315][T11608] do_syscall_64+0xaa/0x1c0 [ 191.004338][T11608] ? clear_bhb_loop+0x25/0x80 [ 191.004426][T11608] ? clear_bhb_loop+0x25/0x80 [ 191.004451][T11608] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 191.004499][T11608] RIP: 0033:0x7f4671eed169 [ 191.004515][T11608] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 191.004534][T11608] RSP: 002b:00007f467054f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000065 [ 191.004561][T11608] RAX: ffffffffffffffda RBX: 00007f4672105fa0 RCX: 00007f4671eed169 [ 191.004584][T11608] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000004206 [ 191.004598][T11608] RBP: 00007f467054f090 R08: 0000000000000000 R09: 0000000000000000 [ 191.004612][T11608] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 191.004666][T11608] R13: 0000000000000000 R14: 00007f4672105fa0 R15: 00007ffc80844278 [ 191.004684][T11608] [ 191.006123][T11610] loop6: detected capacity change from 0 to 164 [ 191.020525][T11479] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 191.169596][ T29] kauditd_printk_skb: 538 callbacks suppressed [ 191.169614][ T29] audit: type=1326 audit(1743389033.143:10164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11616 comm="syz.4.2844" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4671eed169 code=0x7ffc0000 [ 191.184113][T11479] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 191.216709][T11603] EXT4-fs (loop5): warning: mounting fs with errors, running e2fsck is recommended [ 191.221144][T11479] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 191.274475][ T29] audit: type=1326 audit(1743389033.223:10165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11611 comm="syz.4.2839" exe="/root/syz-executor" sig=0 arch=c000003e syscall=60 compat=0 ip=0x7f4671eed169 code=0x7ffc0000 [ 191.279472][T11617] netlink: 'syz.4.2844': attribute type 10 has an invalid length. [ 191.302722][T11603] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 191.305923][T11617] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2844'. [ 191.308413][T11479] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 191.336042][T11617] team0: Port device geneve1 added [ 191.352838][ T29] audit: type=1326 audit(1743389033.253:10166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11616 comm="syz.4.2844" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4671eed169 code=0x7ffc0000 [ 191.376523][ T29] audit: type=1326 audit(1743389033.253:10167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11616 comm="syz.4.2844" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4671eed169 code=0x7ffc0000 [ 191.400170][ T29] audit: type=1326 audit(1743389033.253:10168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11616 comm="syz.4.2844" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4671eed169 code=0x7ffc0000 [ 191.401855][T11479] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.423743][ T29] audit: type=1326 audit(1743389033.253:10169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11616 comm="syz.4.2844" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4671eed169 code=0x7ffc0000 [ 191.432446][T11479] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.455992][ T29] audit: type=1326 audit(1743389033.253:10170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11616 comm="syz.4.2844" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4671eed169 code=0x7ffc0000 [ 191.464688][T11479] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.488227][ T29] audit: type=1326 audit(1743389033.253:10171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11616 comm="syz.4.2844" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4671eed169 code=0x7ffc0000 [ 191.497092][T11479] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.520569][ T29] audit: type=1326 audit(1743389033.253:10172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11616 comm="syz.4.2844" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4671eed169 code=0x7ffc0000 [ 191.529826][ T5169] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm kworker/u8:50: bg 0: block 345: padding at end of block bitmap is not set [ 191.552849][ T29] audit: type=1326 audit(1743389033.253:10173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11616 comm="syz.4.2844" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4671eed169 code=0x7ffc0000 [ 191.601484][T11612] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 191.611633][ T5169] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 2048 with error 117 [ 191.624337][ T5169] EXT4-fs (loop1): This should not happen!! Data will be lost [ 191.624337][ T5169] [ 191.634706][T11625] random: crng reseeded on system resumption [ 191.671838][ T5169] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 2065 with max blocks 2040 with error 28 [ 191.684723][ T5169] EXT4-fs (loop1): This should not happen!! Data will be lost [ 191.684723][ T5169] [ 191.694433][ T5169] EXT4-fs (loop1): Total free blocks count 0 [ 191.700516][ T5169] EXT4-fs (loop1): Free/Dirty block details [ 191.706510][ T5169] EXT4-fs (loop1): free_blocks=0 [ 191.711535][ T5169] EXT4-fs (loop1): dirty_blocks=2048 [ 191.716923][ T5169] EXT4-fs (loop1): Block reservation details [ 191.748421][ T3554] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 191.750916][T11629] netlink: 'syz.4.2849': attribute type 21 has an invalid length. [ 191.787553][T11629] netlink: 'syz.4.2849': attribute type 1 has an invalid length. [ 191.795447][T11629] netlink: 144 bytes leftover after parsing attributes in process `syz.4.2849'. [ 191.886549][T11641] FAULT_INJECTION: forcing a failure. [ 191.886549][T11641] name failslab, interval 1, probability 0, space 0, times 0 [ 191.899315][T11641] CPU: 0 UID: 0 PID: 11641 Comm: syz.2.2851 Not tainted 6.14.0-syzkaller-10764-gaa918db707fb #0 PREEMPT(voluntary) [ 191.899346][T11641] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 191.899360][T11641] Call Trace: [ 191.899366][T11641] [ 191.899374][T11641] dump_stack_lvl+0xf6/0x150 [ 191.899400][T11641] dump_stack+0x15/0x1a [ 191.899491][T11641] should_fail_ex+0x261/0x270 [ 191.899514][T11641] should_failslab+0x8f/0xb0 [ 191.899543][T11641] __kmalloc_cache_noprof+0x55/0x320 [ 191.899580][T11641] ? __se_sys_timerfd_create+0xd2/0x260 [ 191.899619][T11641] __se_sys_timerfd_create+0xd2/0x260 [ 191.899724][T11641] __x64_sys_timerfd_create+0x31/0x40 [ 191.899747][T11641] x64_sys_call+0x2865/0x2e10 [ 191.899848][T11641] do_syscall_64+0xc9/0x1c0 [ 191.899913][T11641] ? clear_bhb_loop+0x25/0x80 [ 191.899938][T11641] ? clear_bhb_loop+0x25/0x80 [ 191.899961][T11641] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 191.899983][T11641] RIP: 0033:0x7f2a1c51d169 [ 191.900025][T11641] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 191.900044][T11641] RSP: 002b:00007f2a1ab7f038 EFLAGS: 00000246 ORIG_RAX: 000000000000011b [ 191.900064][T11641] RAX: ffffffffffffffda RBX: 00007f2a1c735fa0 RCX: 00007f2a1c51d169 [ 191.900076][T11641] RDX: 0000000000000000 RSI: 0000000000000800 RDI: 0000000000000009 [ 191.900089][T11641] RBP: 00007f2a1ab7f090 R08: 0000000000000000 R09: 0000000000000000 [ 191.900103][T11641] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 191.900116][T11641] R13: 0000000000000000 R14: 00007f2a1c735fa0 R15: 00007ffd69832ea8 [ 191.900135][T11641] [ 192.086088][T11641] loop2: detected capacity change from 0 to 512 [ 192.102412][T11644] loop4: detected capacity change from 0 to 164 [ 192.140200][T11641] EXT4-fs (loop2): too many log groups per flexible block group [ 192.147918][T11641] EXT4-fs (loop2): failed to initialize mballoc (-12) [ 192.165080][T11648] loop1: detected capacity change from 0 to 512 [ 192.165994][T11641] EXT4-fs (loop2): mount failed [ 192.171542][T11648] EXT4-fs: Ignoring removed mblk_io_submit option [ 192.192787][T11648] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 192.210754][T11648] EXT4-fs (loop1): 1 truncate cleaned up [ 192.215617][T11641] 9pnet_fd: Insufficient options for proto=fd [ 192.217084][T11648] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 192.227607][T11652] loop5: detected capacity change from 0 to 2048 [ 192.240994][T11654] loop4: detected capacity change from 0 to 2048 [ 192.244303][T11648] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 192.272171][T11652] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 192.287421][T11652] ext4 filesystem being mounted at /576/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 192.288231][T11654] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 192.338174][T11654] ext4 filesystem being mounted at /582/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 192.411710][T11666] loop2: detected capacity change from 0 to 2048 [ 192.461707][T11666] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 192.480443][T11675] rdma_op ffff888104e5ed80 conn xmit_rdma 0000000000000000 [ 192.521402][T11666] binfmt_misc: register: failed to install interpreter file ./file0 [ 192.547783][T11679] netlink: 144 bytes leftover after parsing attributes in process `syz.1.2864'. [ 192.775112][T11683] loop6: detected capacity change from 0 to 164 [ 192.798064][T11685] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 192.801160][T11479] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 192.856663][ T51] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm kworker/u8:3: bg 0: block 345: padding at end of block bitmap is not set [ 192.908099][T11688] team0: No ports can be present during mode change [ 192.917719][ T51] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 2048 with error 117 [ 192.930765][ T51] EXT4-fs (loop5): This should not happen!! Data will be lost [ 192.930765][ T51] [ 192.951125][T11688] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 193.051792][ T5169] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 2065 with max blocks 2040 with error 28 [ 193.064680][ T5169] EXT4-fs (loop5): This should not happen!! Data will be lost [ 193.064680][ T5169] [ 193.074407][ T5169] EXT4-fs (loop5): Total free blocks count 0 [ 193.080529][ T5169] EXT4-fs (loop5): Free/Dirty block details [ 193.086613][ T5169] EXT4-fs (loop5): free_blocks=0 [ 193.091569][ T5169] EXT4-fs (loop5): dirty_blocks=2048 [ 193.097075][ T5169] EXT4-fs (loop5): Block reservation details [ 193.122994][ T51] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm kworker/u8:3: bg 0: block 345: padding at end of block bitmap is not set [ 193.155071][ T51] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 2048 with error 117 [ 193.168071][ T51] EXT4-fs (loop4): This should not happen!! Data will be lost [ 193.168071][ T51] [ 193.196528][ T51] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 2065 with max blocks 2040 with error 28 [ 193.209395][ T51] EXT4-fs (loop4): This should not happen!! Data will be lost [ 193.209395][ T51] [ 193.219080][ T51] EXT4-fs (loop4): Total free blocks count 0 [ 193.225256][ T51] EXT4-fs (loop4): Free/Dirty block details [ 193.231382][ T51] EXT4-fs (loop4): free_blocks=0 [ 193.236430][ T51] EXT4-fs (loop4): dirty_blocks=2048 [ 193.241782][ T51] EXT4-fs (loop4): Block reservation details [ 193.348949][T11704] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2876'. [ 193.358164][T11704] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2876'. [ 193.374443][T11704] loop1: detected capacity change from 0 to 256 [ 193.391080][T11704] FAT-fs (loop1): Directory bread(block 64) failed [ 193.397957][T11713] loop5: detected capacity change from 0 to 2048 [ 193.398034][T11704] FAT-fs (loop1): Directory bread(block 65) failed [ 193.411677][T11704] FAT-fs (loop1): Directory bread(block 66) failed [ 193.418341][T11704] FAT-fs (loop1): Directory bread(block 67) failed [ 193.425897][T11704] FAT-fs (loop1): Directory bread(block 68) failed [ 193.432456][T11704] FAT-fs (loop1): Directory bread(block 69) failed [ 193.441086][T11704] FAT-fs (loop1): Directory bread(block 70) failed [ 193.448739][T11713] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 193.449260][T11704] FAT-fs (loop1): Directory bread(block 71) failed [ 193.473125][T11704] FAT-fs (loop1): Directory bread(block 72) failed [ 193.473478][T11717] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 193.487065][T11704] FAT-fs (loop1): Directory bread(block 73) failed [ 193.488956][T11713] ext4 filesystem being mounted at /579/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 193.546439][T11719] loop4: detected capacity change from 0 to 512 [ 193.558820][T11719] EXT4-fs: Ignoring removed mblk_io_submit option [ 193.576593][T11719] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 193.609681][T11719] EXT4-fs (loop4): 1 truncate cleaned up [ 193.621532][T11719] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 193.638103][T11722] loop1: detected capacity change from 0 to 2048 [ 193.660072][ T3304] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 193.687187][T11722] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 193.706957][T11722] binfmt_misc: register: failed to install interpreter file ./file0 [ 193.790762][T11729] loop4: detected capacity change from 0 to 1024 [ 193.813376][T11729] EXT4-fs (loop4): orphan cleanup on readonly fs [ 193.820215][T11729] EXT4-fs error (device loop4): ext4_orphan_get:1416: comm syz.4.2883: bad orphan inode 8 [ 193.845076][T11729] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 193.859839][T11729] EXT4-fs (loop4): warning: mounting fs with errors, running e2fsck is recommended [ 193.876585][T11729] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 193.896663][T11729] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 193.924506][ T3301] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 193.945726][T11733] loop6: detected capacity change from 0 to 2048 [ 193.958012][ T3304] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 193.996877][T11733] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 194.022035][T11742] loop4: detected capacity change from 0 to 1024 [ 194.022814][T11733] ext4 filesystem being mounted at /530/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 194.045494][T11742] EXT4-fs (loop4): orphan cleanup on readonly fs [ 194.082962][ T5182] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm kworker/u8:63: bg 0: block 345: padding at end of block bitmap is not set [ 194.085782][T11742] EXT4-fs error (device loop4): ext4_orphan_get:1416: comm syz.4.2887: bad orphan inode 8 [ 194.100787][ T5182] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 2048 with error 117 [ 194.120165][ T5182] EXT4-fs (loop5): This should not happen!! Data will be lost [ 194.120165][ T5182] [ 194.138718][T11745] loop1: detected capacity change from 0 to 2048 [ 194.148171][T11742] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 194.153414][ T5182] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 2065 with max blocks 2040 with error 28 [ 194.173554][ T5182] EXT4-fs (loop5): This should not happen!! Data will be lost [ 194.173554][ T5182] [ 194.183233][ T5182] EXT4-fs (loop5): Total free blocks count 0 [ 194.189332][ T5182] EXT4-fs (loop5): Free/Dirty block details [ 194.195371][ T5182] EXT4-fs (loop5): free_blocks=0 [ 194.200410][ T5182] EXT4-fs (loop5): dirty_blocks=2048 [ 194.205938][ T5182] EXT4-fs (loop5): Block reservation details [ 194.212272][T11742] EXT4-fs (loop4): warning: mounting fs with errors, running e2fsck is recommended [ 194.215322][T11745] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 194.233916][T11742] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 194.256490][T11742] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 194.274730][T11745] ext4 filesystem being mounted at /523/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 194.296125][ T3304] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 194.384722][T11579] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 345: padding at end of block bitmap is not set [ 194.444231][ T5182] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 2048 with error 117 [ 194.457008][ T5182] EXT4-fs (loop6): This should not happen!! Data will be lost [ 194.457008][ T5182] [ 194.503631][ T5182] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 2065 with max blocks 1183 with error 28 [ 194.506947][T11760] validate_nla: 2 callbacks suppressed [ 194.506964][T11760] netlink: 'syz.5.2894': attribute type 21 has an invalid length. [ 194.516444][ T5182] EXT4-fs (loop6): This should not happen!! Data will be lost [ 194.516444][ T5182] [ 194.539533][ T5182] EXT4-fs (loop6): Total free blocks count 0 [ 194.545558][ T5182] EXT4-fs (loop6): Free/Dirty block details [ 194.545768][T11760] netlink: 'syz.5.2894': attribute type 1 has an invalid length. [ 194.551445][ T5182] EXT4-fs (loop6): free_blocks=0 [ 194.559250][T11760] netlink: 144 bytes leftover after parsing attributes in process `syz.5.2894'. [ 194.564123][ T5182] EXT4-fs (loop6): dirty_blocks=1184 [ 194.578504][ T5182] EXT4-fs (loop6): Block reservation details [ 194.581744][T11761] loop4: detected capacity change from 0 to 2048 [ 194.625503][T11761] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 194.659397][T11761] binfmt_misc: register: failed to install interpreter file ./file0 [ 194.869189][T11772] netlink: 'syz.5.2898': attribute type 10 has an invalid length. [ 194.877079][T11772] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2898'. [ 194.889539][T11772] team0: Port device geneve1 added [ 194.940699][ T51] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm kworker/u8:3: bg 0: block 345: padding at end of block bitmap is not set [ 194.958126][ T51] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 2048 with error 117 [ 194.970885][ T51] EXT4-fs (loop1): This should not happen!! Data will be lost [ 194.970885][ T51] [ 195.002840][ T51] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 2065 with max blocks 2040 with error 28 [ 195.015765][ T51] EXT4-fs (loop1): This should not happen!! Data will be lost [ 195.015765][ T51] [ 195.025442][ T51] EXT4-fs (loop1): Total free blocks count 0 [ 195.031442][ T51] EXT4-fs (loop1): Free/Dirty block details [ 195.037360][ T51] EXT4-fs (loop1): free_blocks=0 [ 195.042369][ T51] EXT4-fs (loop1): dirty_blocks=2048 [ 195.047709][ T51] EXT4-fs (loop1): Block reservation details [ 195.056895][ T3304] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 195.122996][T11781] netlink: 'syz.1.2900': attribute type 21 has an invalid length. [ 195.130986][T11781] netlink: 'syz.1.2900': attribute type 1 has an invalid length. [ 195.138764][T11781] netlink: 144 bytes leftover after parsing attributes in process `syz.1.2900'. [ 195.179317][T11786] random: crng reseeded on system resumption [ 195.200737][T11789] loop1: detected capacity change from 0 to 164 [ 195.210577][T11789] syz.1.2906: attempt to access beyond end of device [ 195.210577][T11789] loop1: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 195.226491][T11789] syz.1.2906: attempt to access beyond end of device [ 195.226491][T11789] loop1: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 195.270661][T11792] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 195.324293][T11794] loop1: detected capacity change from 0 to 2048 [ 195.342207][T11798] netlink: 'syz.4.2910': attribute type 10 has an invalid length. [ 195.350141][T11798] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2910'. [ 195.362413][T11794] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 195.440835][T11796] netlink: 56 bytes leftover after parsing attributes in process `syz.5.2908'. [ 195.450116][T11796] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2908'. [ 195.460852][T11796] loop5: detected capacity change from 0 to 256 [ 195.483251][T11796] FAT-fs (loop5): Directory bread(block 64) failed [ 195.502877][T11806] loop4: detected capacity change from 0 to 2048 [ 195.509688][T11796] FAT-fs (loop5): Directory bread(block 65) failed [ 195.516909][T11796] FAT-fs (loop5): Directory bread(block 66) failed [ 195.523556][T11796] FAT-fs (loop5): Directory bread(block 67) failed [ 195.531059][T11688] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 195.532219][T11796] FAT-fs (loop5): Directory bread(block 68) failed [ 195.548217][T11796] FAT-fs (loop5): Directory bread(block 69) failed [ 195.553440][T11806] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 195.554897][T11796] FAT-fs (loop5): Directory bread(block 70) failed [ 195.573347][T11796] FAT-fs (loop5): Directory bread(block 71) failed [ 195.579987][T11796] FAT-fs (loop5): Directory bread(block 72) failed [ 195.586534][T11796] FAT-fs (loop5): Directory bread(block 73) failed [ 195.602393][T11688] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 195.604643][T11806] binfmt_misc: register: failed to install interpreter file ./file0 [ 195.680243][T11688] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 195.719495][ T3301] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 195.760899][T11688] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 195.816558][T11688] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 195.833940][T11822] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2914'. [ 195.836286][T11688] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 195.854318][T11824] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2917'. [ 195.867418][T11688] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 195.889247][T11824] team0: Unable to change to the same mode the team is in [ 195.929711][ T3304] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 195.948204][T11826] netlink: 'syz.5.2918': attribute type 21 has an invalid length. [ 195.956921][T11826] netlink: 'syz.5.2918': attribute type 1 has an invalid length. [ 195.973219][T11829] random: crng reseeded on system resumption [ 196.093590][T11837] loop6: detected capacity change from 0 to 2048 [ 196.119147][T11840] loop5: detected capacity change from 0 to 2048 [ 196.147588][T11837] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 196.162387][T11840] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 196.208335][T11837] ext4 filesystem being mounted at /535/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 196.221208][T11832] lo speed is unknown, defaulting to 1000 [ 196.243543][ T29] kauditd_printk_skb: 503 callbacks suppressed [ 196.243559][ T29] audit: type=1326 audit(1743389038.213:10677): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11842 comm="syz.1.2922" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44812cd169 code=0x7ffc0000 [ 196.289676][ T29] audit: type=1326 audit(1743389038.243:10678): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11842 comm="syz.1.2922" exe="/root/syz-executor" sig=0 arch=c000003e syscall=218 compat=0 ip=0x7f44812cd169 code=0x7ffc0000 [ 196.313442][ T29] audit: type=1326 audit(1743389038.243:10679): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11842 comm="syz.1.2922" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44812cd169 code=0x7ffc0000 [ 196.337459][ T29] audit: type=1326 audit(1743389038.243:10680): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11842 comm="syz.1.2922" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f44812cd169 code=0x7ffc0000 [ 196.361554][ T29] audit: type=1326 audit(1743389038.243:10681): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11842 comm="syz.1.2922" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44812cd169 code=0x7ffc0000 [ 196.385281][ T29] audit: type=1326 audit(1743389038.243:10682): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11842 comm="syz.1.2922" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f44812cd169 code=0x7ffc0000 [ 196.408856][ T29] audit: type=1326 audit(1743389038.243:10683): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11842 comm="syz.1.2922" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44812cd169 code=0x7ffc0000 [ 196.432920][ T29] audit: type=1326 audit(1743389038.243:10684): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11842 comm="syz.1.2922" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f44812cd169 code=0x7ffc0000 [ 196.456619][ T29] audit: type=1326 audit(1743389038.243:10685): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11842 comm="syz.1.2922" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44812cd169 code=0x7ffc0000 [ 196.480368][ T29] audit: type=1326 audit(1743389038.243:10686): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11842 comm="syz.1.2922" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f44812cd169 code=0x7ffc0000 [ 196.515525][T11854] loop2: detected capacity change from 0 to 256 [ 196.531026][T11832] chnl_net:caif_netlink_parms(): no params data found [ 196.541609][T11854] FAT-fs (loop2): Directory bread(block 64) failed [ 196.553360][ T4278] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 196.553418][T11854] FAT-fs (loop2): Directory bread(block 65) failed [ 196.598743][T11854] FAT-fs (loop2): Directory bread(block 66) failed [ 196.606717][T11854] FAT-fs (loop2): Directory bread(block 67) failed [ 196.613278][T11854] FAT-fs (loop2): Directory bread(block 68) failed [ 196.620282][T11854] FAT-fs (loop2): Directory bread(block 69) failed [ 196.639980][T11854] FAT-fs (loop2): Directory bread(block 70) failed [ 196.669599][T11870] loop1: detected capacity change from 0 to 512 [ 196.679227][T11854] FAT-fs (loop2): Directory bread(block 71) failed [ 196.692534][ T3554] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 196.704250][T11870] EXT4-fs: Ignoring removed mblk_io_submit option [ 196.711121][T11854] FAT-fs (loop2): Directory bread(block 72) failed [ 196.717777][T11870] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 196.728792][T11854] FAT-fs (loop2): Directory bread(block 73) failed [ 196.730994][T11870] EXT4-fs (loop1): 1 truncate cleaned up [ 196.740322][T11873] team0: Unable to change to the same mode the team is in [ 196.744843][T11870] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 196.760267][T11832] bridge0: port 1(bridge_slave_0) entered blocking state [ 196.767693][T11832] bridge0: port 1(bridge_slave_0) entered disabled state [ 196.784622][T11832] bridge_slave_0: entered allmulticast mode [ 196.791247][T11832] bridge_slave_0: entered promiscuous mode [ 196.814990][ T3301] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 196.826897][T11832] bridge0: port 2(bridge_slave_1) entered blocking state [ 196.834047][T11832] bridge0: port 2(bridge_slave_1) entered disabled state [ 196.843729][T11832] bridge_slave_1: entered allmulticast mode [ 196.858046][T11832] bridge_slave_1: entered promiscuous mode [ 196.865443][T11873] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 196.879228][T11880] FAULT_INJECTION: forcing a failure. [ 196.879228][T11880] name failslab, interval 1, probability 0, space 0, times 0 [ 196.892122][T11880] CPU: 1 UID: 0 PID: 11880 Comm: syz.5.2933 Not tainted 6.14.0-syzkaller-10764-gaa918db707fb #0 PREEMPT(voluntary) [ 196.892188][T11880] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 196.892230][T11880] Call Trace: [ 196.892238][T11880] [ 196.892247][T11880] dump_stack_lvl+0xf6/0x150 [ 196.892321][T11880] dump_stack+0x15/0x1a [ 196.892341][T11880] should_fail_ex+0x261/0x270 [ 196.892366][T11880] should_failslab+0x8f/0xb0 [ 196.892396][T11880] __kmalloc_node_track_caller_noprof+0xaa/0x410 [ 196.892530][T11880] ? sidtab_sid2str_get+0xb8/0x140 [ 196.892565][T11880] ? vsnprintf+0x84d/0x8a0 [ 196.892596][T11880] kmemdup_noprof+0x2b/0x70 [ 196.892636][T11880] sidtab_sid2str_get+0xb8/0x140 [ 196.892673][T11880] security_sid_to_context_core+0x1eb/0x2f0 [ 196.892705][T11880] security_sid_to_context+0x27/0x30 [ 196.892765][T11880] selinux_lsmprop_to_secctx+0x6c/0xf0 [ 196.892815][T11880] security_lsmprop_to_secctx+0x40/0x80 [ 196.892847][T11880] audit_log_task_context+0x7a/0x180 [ 196.892878][T11880] audit_log_task+0xfb/0x250 [ 196.892904][T11880] audit_seccomp+0x68/0x130 [ 196.892927][T11880] __seccomp_filter+0x694/0x10e0 [ 196.892966][T11880] ? vfs_write+0x669/0x950 [ 196.893043][T11880] ? putname+0xe1/0x100 [ 196.893081][T11880] __secure_computing+0x7e/0x160 [ 196.893117][T11880] syscall_trace_enter+0xcf/0x1f0 [ 196.893237][T11880] ? fpregs_assert_state_consistent+0x83/0xa0 [ 196.893348][T11880] do_syscall_64+0xaa/0x1c0 [ 196.893427][T11880] ? clear_bhb_loop+0x25/0x80 [ 196.893447][T11880] ? clear_bhb_loop+0x25/0x80 [ 196.893467][T11880] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 196.893492][T11880] RIP: 0033:0x7f187c1fd169 [ 196.893509][T11880] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 196.893527][T11880] RSP: 002b:00007f187a867038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a3 [ 196.893559][T11880] RAX: ffffffffffffffda RBX: 00007f187c415fa0 RCX: 00007f187c1fd169 [ 196.893570][T11880] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 196.893584][T11880] RBP: 00007f187a867090 R08: 0000000000000000 R09: 0000000000000000 [ 196.893599][T11880] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 196.893618][T11880] R13: 0000000000000000 R14: 00007f187c415fa0 R15: 00007fff50b2bd28 [ 196.893639][T11880] [ 197.150067][T11885] loop2: detected capacity change from 0 to 2048 [ 197.188188][T11885] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 197.200627][T11885] ext4 filesystem being mounted at /8/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 197.201383][T11873] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 197.220913][T11892] loop1: detected capacity change from 0 to 512 [ 197.236939][T11893] loop5: detected capacity change from 0 to 2048 [ 197.244961][T11832] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 197.258573][T11832] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 197.268852][T11873] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 197.299639][T11892] EXT4-fs: Ignoring removed mblk_io_submit option [ 197.310067][T11893] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 197.327029][T11893] ext4 filesystem being mounted at /594/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 197.345400][T11892] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 197.359170][T11873] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 197.385544][T11832] team0: Port device team_slave_0 added [ 197.387831][T11892] EXT4-fs (loop1): 1 truncate cleaned up [ 197.395086][T11832] team0: Port device team_slave_1 added [ 197.403883][T11892] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 197.428859][T11892] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 197.441345][T11832] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 197.448365][T11832] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 197.474311][T11832] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 197.488321][T11832] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 197.495315][T11832] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 197.521410][T11832] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 197.563805][T11873] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 197.585107][T11898] random: crng reseeded on system resumption [ 197.610197][T11873] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 197.651739][T11873] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 197.698740][T11873] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 197.710891][T11832] hsr_slave_0: entered promiscuous mode [ 197.717122][T11832] hsr_slave_1: entered promiscuous mode [ 197.736825][T11832] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 197.744600][T11832] Cannot create hsr debugfs directory [ 197.793168][ T5144] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm kworker/u8:25: bg 0: block 345: padding at end of block bitmap is not set [ 197.830530][T11906] loop1: detected capacity change from 0 to 512 [ 197.831496][ T5144] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 2048 with error 117 [ 197.848341][T11906] EXT4-fs: Ignoring removed mblk_io_submit option [ 197.849514][ T5144] EXT4-fs (loop2): This should not happen!! Data will be lost [ 197.849514][ T5144] [ 197.885597][ T5144] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 2065 with max blocks 2040 with error 28 [ 197.897206][T11906] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 197.898350][ T5144] EXT4-fs (loop2): This should not happen!! Data will be lost [ 197.898350][ T5144] [ 197.917982][ T5144] EXT4-fs (loop2): Total free blocks count 0 [ 197.924000][ T5144] EXT4-fs (loop2): Free/Dirty block details [ 197.929956][ T5144] EXT4-fs (loop2): free_blocks=0 [ 197.935016][ T5144] EXT4-fs (loop2): dirty_blocks=2048 [ 197.940355][ T5144] EXT4-fs (loop2): Block reservation details [ 197.958177][T11906] EXT4-fs (loop1): 1 truncate cleaned up [ 197.975071][T11832] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 197.985187][T11832] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 197.995565][T11906] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 198.041366][T11909] loop6: detected capacity change from 0 to 2048 [ 198.067577][T11832] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 198.077458][T11832] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 198.097049][T11912] loop1: detected capacity change from 0 to 2048 [ 198.098130][T11915] loop2: detected capacity change from 0 to 512 [ 198.112204][T11909] binfmt_misc: register: failed to install interpreter file ./file0 [ 198.123383][ T5144] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm kworker/u8:25: bg 0: block 345: padding at end of block bitmap is not set [ 198.142345][T11915] EXT4-fs: Ignoring removed mblk_io_submit option [ 198.144778][ T5144] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 2048 with error 117 [ 198.156478][T11915] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 198.161404][ T5144] EXT4-fs (loop5): This should not happen!! Data will be lost [ 198.161404][ T5144] [ 198.187006][T11915] EXT4-fs (loop2): 1 truncate cleaned up [ 198.209709][ T5125] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 2065 with max blocks 2040 with error 28 [ 198.218410][T11912] binfmt_misc: register: failed to install interpreter file ./file0 [ 198.222466][ T5125] EXT4-fs (loop5): This should not happen!! Data will be lost [ 198.222466][ T5125] [ 198.222480][ T5125] EXT4-fs (loop5): Total free blocks count 0 [ 198.222494][ T5125] EXT4-fs (loop5): Free/Dirty block details [ 198.222508][ T5125] EXT4-fs (loop5): free_blocks=0 [ 198.222522][ T5125] EXT4-fs (loop5): dirty_blocks=2048 [ 198.222535][ T5125] EXT4-fs (loop5): Block reservation details [ 198.269960][T11832] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 198.279796][T11832] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 198.311585][T11832] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 198.321386][T11832] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 198.360741][T11923] netlink: 'syz.2.2945': attribute type 10 has an invalid length. [ 198.368707][T11923] __nla_validate_parse: 3 callbacks suppressed [ 198.368718][T11923] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2945'. [ 198.407184][T11923] team0: Port device geneve1 added [ 198.462085][T11927] loop5: detected capacity change from 0 to 164 [ 198.478386][T11832] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 198.492333][T11927] syz.5.2943: attempt to access beyond end of device [ 198.492333][T11927] loop5: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 198.512328][T11832] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 198.519237][T11927] syz.5.2943: attempt to access beyond end of device [ 198.519237][T11927] loop5: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 198.558836][T11832] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 198.572242][T11832] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 198.601035][T11935] FAULT_INJECTION: forcing a failure. [ 198.601035][T11935] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 198.614277][T11935] CPU: 0 UID: 0 PID: 11935 Comm: syz.1.2948 Not tainted 6.14.0-syzkaller-10764-gaa918db707fb #0 PREEMPT(voluntary) [ 198.614384][T11935] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 198.614399][T11935] Call Trace: [ 198.614406][T11935] [ 198.614415][T11935] dump_stack_lvl+0xf6/0x150 [ 198.614440][T11935] dump_stack+0x15/0x1a [ 198.614459][T11935] should_fail_ex+0x261/0x270 [ 198.614478][T11935] should_fail+0xb/0x10 [ 198.614517][T11935] should_fail_usercopy+0x1a/0x20 [ 198.614544][T11935] _copy_to_user+0x20/0xa0 [ 198.614578][T11935] simple_read_from_buffer+0xb2/0x130 [ 198.614608][T11935] proc_fail_nth_read+0x103/0x140 [ 198.614668][T11935] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 198.614694][T11935] vfs_read+0x1b2/0x710 [ 198.614713][T11935] ? __rcu_read_unlock+0x4e/0x70 [ 198.614793][T11935] ? __fget_files+0x186/0x1c0 [ 198.614830][T11935] ksys_read+0xeb/0x1b0 [ 198.614857][T11935] __x64_sys_read+0x42/0x50 [ 198.614902][T11935] x64_sys_call+0x2a3b/0x2e10 [ 198.614923][T11935] do_syscall_64+0xc9/0x1c0 [ 198.614940][T11935] ? clear_bhb_loop+0x25/0x80 [ 198.614976][T11935] ? clear_bhb_loop+0x25/0x80 [ 198.615001][T11935] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 198.615118][T11935] RIP: 0033:0x7f44812cbb7c [ 198.615135][T11935] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 198.615155][T11935] RSP: 002b:00007f447f937030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 198.615176][T11935] RAX: ffffffffffffffda RBX: 00007f44814e5fa0 RCX: 00007f44812cbb7c [ 198.615204][T11935] RDX: 000000000000000f RSI: 00007f447f9370a0 RDI: 0000000000000004 [ 198.615218][T11935] RBP: 00007f447f937090 R08: 0000000000000000 R09: 0000000000000000 [ 198.615228][T11935] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 198.615239][T11935] R13: 0000000000000000 R14: 00007f44814e5fa0 R15: 00007ffdfd7e9118 [ 198.615255][T11935] [ 198.822589][T11938] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2950'. [ 198.841129][T11936] random: crng reseeded on system resumption [ 198.918970][T11832] 8021q: adding VLAN 0 to HW filter on device bond0 [ 198.930586][T11832] 8021q: adding VLAN 0 to HW filter on device team0 [ 198.949719][ T5169] bridge0: port 1(bridge_slave_0) entered blocking state [ 198.956987][ T5169] bridge0: port 1(bridge_slave_0) entered forwarding state [ 199.000548][ T5169] bridge0: port 2(bridge_slave_1) entered blocking state [ 199.007695][ T5169] bridge0: port 2(bridge_slave_1) entered forwarding state [ 199.017408][T11949] loop1: detected capacity change from 0 to 512 [ 199.025494][T11952] netlink: 'syz.5.2955': attribute type 21 has an invalid length. [ 199.035894][T11938] team0: No ports can be present during mode change [ 199.042674][T11953] loop6: detected capacity change from 0 to 2048 [ 199.042866][T11949] EXT4-fs: Ignoring removed mblk_io_submit option [ 199.058423][T11949] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 199.065081][T11952] netlink: 144 bytes leftover after parsing attributes in process `syz.5.2955'. [ 199.070042][T11949] EXT4-fs (loop1): 1 truncate cleaned up [ 199.085031][T11832] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 199.130374][T11958] netlink: 144 bytes leftover after parsing attributes in process `syz.2.2957'. [ 199.176066][T11963] loop5: detected capacity change from 0 to 2048 [ 199.179301][T11832] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 199.190287][T11953] binfmt_misc: register: failed to install interpreter file ./file0 [ 199.235315][T11963] binfmt_misc: register: failed to install interpreter file ./file0 [ 199.249353][T11972] loop1: detected capacity change from 0 to 164 [ 199.265595][T11972] syz.1.2960: attempt to access beyond end of device [ 199.265595][T11972] loop1: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 199.314517][T11972] syz.1.2960: attempt to access beyond end of device [ 199.314517][T11972] loop1: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 199.391779][T11986] random: crng reseeded on system resumption [ 199.480310][T11980] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2961'. [ 199.489607][T11980] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2961'. [ 199.500558][T11980] loop2: detected capacity change from 0 to 256 [ 199.541836][T11980] FAT-fs (loop2): Directory bread(block 64) failed [ 199.566628][T11980] FAT-fs (loop2): Directory bread(block 65) failed [ 199.580008][T11832] veth0_vlan: entered promiscuous mode [ 199.589810][T11832] veth1_vlan: entered promiscuous mode [ 199.596872][T11980] FAT-fs (loop2): Directory bread(block 66) failed [ 199.605163][T11980] FAT-fs (loop2): Directory bread(block 67) failed [ 199.618803][T11980] FAT-fs (loop2): Directory bread(block 68) failed [ 199.622669][T11832] veth0_macvtap: entered promiscuous mode [ 199.642725][T11832] veth1_macvtap: entered promiscuous mode [ 199.658657][T11832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 199.669297][T11832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 199.671271][T11980] FAT-fs (loop2): Directory bread(block 69) failed [ 199.679396][T11832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 199.696563][T11832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 199.706569][T11980] FAT-fs (loop2): Directory bread(block 70) failed [ 199.714840][T11980] FAT-fs (loop2): Directory bread(block 71) failed [ 199.717775][T11832] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 199.728980][T11980] FAT-fs (loop2): Directory bread(block 72) failed [ 199.736020][T11980] FAT-fs (loop2): Directory bread(block 73) failed [ 199.739267][T11997] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2966'. [ 199.746812][T11832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 199.762071][T11832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 199.771930][T11832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 199.782422][T11832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 199.792978][T11832] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 199.801616][T11832] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.810363][T11832] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.819094][T11832] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.827826][T11832] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.854373][T11997] team0: Unable to change to the same mode the team is in [ 199.956864][T12009] validate_nla: 3 callbacks suppressed [ 199.956881][T12009] netlink: 'syz.1.2967': attribute type 21 has an invalid length. [ 199.984919][T12004] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 199.993640][T12009] netlink: 'syz.1.2967': attribute type 1 has an invalid length. [ 200.001467][T12009] netlink: 144 bytes leftover after parsing attributes in process `syz.1.2967'. [ 200.003319][ T3514] IPVS: starting estimator thread 0... [ 200.031456][T12013] loop6: detected capacity change from 0 to 512 [ 200.046729][T12013] EXT4-fs: Ignoring removed mblk_io_submit option [ 200.092521][T12013] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 200.104709][T12011] IPVS: using max 2736 ests per chain, 136800 per kthread [ 200.128086][T12020] loop1: detected capacity change from 0 to 512 [ 200.159170][T12013] EXT4-fs (loop6): 1 truncate cleaned up [ 200.165421][T12020] EXT4-fs: Ignoring removed mblk_io_submit option [ 200.172764][T12020] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 200.194386][T12024] loop4: detected capacity change from 0 to 2048 [ 200.210548][T12027] loop2: detected capacity change from 0 to 1024 [ 200.227687][T12027] EXT4-fs (loop2): orphan cleanup on readonly fs [ 200.237560][T12027] EXT4-fs error (device loop2): ext4_orphan_get:1416: comm syz.2.2976: bad orphan inode 8 [ 200.253475][T12024] binfmt_misc: register: failed to install interpreter file ./file0 [ 200.269371][T12020] EXT4-fs (loop1): 1 truncate cleaned up [ 200.281274][T12027] EXT4-fs (loop2): warning: mounting fs with errors, running e2fsck is recommended [ 200.312633][T12027] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 200.318968][T12039] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2978'. [ 200.332967][T12027] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 200.378560][T12028] lo speed is unknown, defaulting to 1000 [ 200.379219][T12039] team0: Unable to change to the same mode the team is in [ 200.488381][T12050] netlink: 'syz.1.2980': attribute type 10 has an invalid length. [ 200.496336][T12050] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2980'. [ 200.523652][T12050] team0: Port device geneve1 added [ 200.552655][T12028] chnl_net:caif_netlink_parms(): no params data found [ 200.600664][T12047] loop2: detected capacity change from 0 to 256 [ 200.621287][T12047] FAT-fs (loop2): Directory bread(block 64) failed [ 200.639751][T12028] bridge0: port 1(bridge_slave_0) entered blocking state [ 200.642370][T12047] FAT-fs (loop2): Directory bread(block 65) failed [ 200.646957][T12028] bridge0: port 1(bridge_slave_0) entered disabled state [ 200.657470][T12028] bridge_slave_0: entered allmulticast mode [ 200.661257][T12047] FAT-fs (loop2): Directory bread(block 66) failed [ 200.673188][T12062] loop4: detected capacity change from 0 to 2048 [ 200.673362][T12047] FAT-fs (loop2): Directory bread(block 67) failed [ 200.682552][T12028] bridge_slave_0: entered promiscuous mode [ 200.686484][T12047] FAT-fs (loop2): Directory bread(block 68) failed [ 200.698796][T12047] FAT-fs (loop2): Directory bread(block 69) failed [ 200.705920][T12047] FAT-fs (loop2): Directory bread(block 70) failed [ 200.711148][T12028] bridge0: port 2(bridge_slave_1) entered blocking state [ 200.712504][T12047] FAT-fs (loop2): Directory bread(block 71) failed [ 200.719584][T12028] bridge0: port 2(bridge_slave_1) entered disabled state [ 200.726126][T12047] FAT-fs (loop2): Directory bread(block 72) failed [ 200.739773][T12047] FAT-fs (loop2): Directory bread(block 73) failed [ 200.747346][T12062] binfmt_misc: register: failed to install interpreter file ./file0 [ 200.757764][T12028] bridge_slave_1: entered allmulticast mode [ 200.764284][T12028] bridge_slave_1: entered promiscuous mode [ 200.791090][T12028] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 200.817689][T12028] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 200.847298][T12028] team0: Port device team_slave_0 added [ 200.854282][T12028] team0: Port device team_slave_1 added [ 200.885246][T12028] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 200.892223][T12028] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 200.918324][T12028] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 200.930031][T12069] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 200.930135][ T3377] IPVS: starting estimator thread 0... [ 200.938366][T12028] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 200.949636][T12028] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 200.975731][T12028] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 201.023855][T12028] hsr_slave_0: entered promiscuous mode [ 201.029807][T12071] IPVS: using max 2160 ests per chain, 108000 per kthread [ 201.037822][T12028] hsr_slave_1: entered promiscuous mode [ 201.047487][T12028] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 201.058725][T12075] loop6: detected capacity change from 0 to 1024 [ 201.068060][T12028] Cannot create hsr debugfs directory [ 201.075982][T12073] loop2: detected capacity change from 0 to 2048 [ 201.099062][T12075] EXT4-fs (loop6): orphan cleanup on readonly fs [ 201.107739][T12075] EXT4-fs error (device loop6): ext4_orphan_get:1416: comm syz.6.2986: bad orphan inode 8 [ 201.115548][T12073] ext4 filesystem being mounted at /23/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 201.146865][T12075] 9pnet: Could not find request transport: fdÿÿÿÿÿÿÿÿ<ÄžWͺwfdno=0xffffffffffffffff [ 201.218242][T12028] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.229296][T12084] loop6: detected capacity change from 0 to 2048 [ 201.277212][T12028] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.326216][T12028] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.376342][T12028] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.477736][T12028] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 201.498694][T12091] team0: No ports can be present during mode change [ 201.508044][T12028] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 201.532344][T12028] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 201.561607][T12028] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 201.569746][ T29] kauditd_printk_skb: 310 callbacks suppressed [ 201.569809][ T29] audit: type=1326 audit(1743389043.543:10996): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12094 comm="syz.6.2990" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa99bb4d169 code=0x7ffc0000 [ 201.603562][T12095] loop6: detected capacity change from 0 to 164 [ 201.610809][ T29] audit: type=1326 audit(1743389043.573:10997): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12094 comm="syz.6.2990" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa99bb4d169 code=0x7ffc0000 [ 201.634490][ T29] audit: type=1326 audit(1743389043.573:10998): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12094 comm="syz.6.2990" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa99bb4d169 code=0x7ffc0000 [ 201.641697][T12093] loop1: detected capacity change from 0 to 2048 [ 201.658132][ T29] audit: type=1326 audit(1743389043.573:10999): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12094 comm="syz.6.2990" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa99bb4d169 code=0x7ffc0000 [ 201.658166][ T29] audit: type=1326 audit(1743389043.573:11000): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12094 comm="syz.6.2990" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa99bb4d169 code=0x7ffc0000 [ 201.658203][ T29] audit: type=1326 audit(1743389043.573:11001): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12094 comm="syz.6.2990" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa99bb4d169 code=0x7ffc0000 [ 201.658234][ T29] audit: type=1326 audit(1743389043.573:11002): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12094 comm="syz.6.2990" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa99bb4d169 code=0x7ffc0000 [ 201.658307][ T29] audit: type=1326 audit(1743389043.573:11003): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12094 comm="syz.6.2990" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa99bb4d169 code=0x7ffc0000 [ 201.695289][ T5125] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm kworker/u8:10: bg 0: block 345: padding at end of block bitmap is not set [ 201.711762][ T29] audit: type=1326 audit(1743389043.573:11004): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12094 comm="syz.6.2990" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fa99bb4d169 code=0x7ffc0000 [ 201.770170][T12028] 8021q: adding VLAN 0 to HW filter on device bond0 [ 201.782355][ T29] audit: type=1326 audit(1743389043.573:11005): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12094 comm="syz.6.2990" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fa99bb4d1a3 code=0x7ffc0000 [ 201.805640][T12028] 8021q: adding VLAN 0 to HW filter on device team0 [ 201.849108][T12095] syz.6.2990: attempt to access beyond end of device [ 201.849108][T12095] loop6: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 201.857248][ T5125] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 2048 with error 117 [ 201.873778][T12095] syz.6.2990: attempt to access beyond end of device [ 201.873778][T12095] loop6: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 201.883752][ T5125] EXT4-fs (loop2): This should not happen!! Data will be lost [ 201.883752][ T5125] [ 201.914203][ T5125] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 2065 with max blocks 2040 with error 28 [ 201.918451][T12093] binfmt_misc: register: failed to install interpreter file ./file0 [ 201.927175][ T5125] EXT4-fs (loop2): This should not happen!! Data will be lost [ 201.927175][ T5125] [ 201.927193][ T5125] EXT4-fs (loop2): Total free blocks count 0 [ 201.927206][ T5125] EXT4-fs (loop2): Free/Dirty block details [ 201.927219][ T5125] EXT4-fs (loop2): free_blocks=0 [ 201.927251][ T5125] EXT4-fs (loop2): dirty_blocks=2048 [ 201.927263][ T5125] EXT4-fs (loop2): Block reservation details [ 201.927275][ T5125] EXT4-fs (loop2): i_reserved_data_blocks=128 [ 201.986658][T12028] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 201.997119][T12028] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 202.010803][ T5144] bridge0: port 1(bridge_slave_0) entered blocking state [ 202.017930][ T5144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 202.041744][ T5144] bridge0: port 2(bridge_slave_1) entered blocking state [ 202.048875][ T5144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 202.089253][T12103] netlink: 'syz.2.2992': attribute type 10 has an invalid length. [ 202.176533][T12108] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 202.183947][T12110] random: crng reseeded on system resumption [ 202.321843][T12028] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 202.355672][T12118] loop6: detected capacity change from 0 to 1024 [ 202.390732][T12118] EXT4-fs (loop6): orphan cleanup on readonly fs [ 202.412073][T12118] EXT4-fs error (device loop6): ext4_orphan_get:1416: comm syz.6.2997: bad orphan inode 8 [ 202.440340][T12137] loop1: detected capacity change from 0 to 164 [ 202.458151][T12118] 9pnet: Could not find request transport: fdÿÿÿÿÿÿÿÿ<ÄžWͺwfdno=0xffffffffffffffff [ 202.469368][T12141] loop2: detected capacity change from 0 to 164 [ 202.474676][T12137] syz.1.3002: attempt to access beyond end of device [ 202.474676][T12137] loop1: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 202.490340][T12137] syz.1.3002: attempt to access beyond end of device [ 202.490340][T12137] loop1: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 202.512824][T12141] syz.2.3003: attempt to access beyond end of device [ 202.512824][T12141] loop2: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 202.543467][T12141] syz.2.3003: attempt to access beyond end of device [ 202.543467][T12141] loop2: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 202.566901][T12146] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 202.590459][T12028] veth0_vlan: entered promiscuous mode [ 202.613877][T12028] veth1_vlan: entered promiscuous mode [ 202.650380][T12028] veth0_macvtap: entered promiscuous mode [ 202.661523][T12156] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 202.673912][T12028] veth1_macvtap: entered promiscuous mode [ 202.692004][T12028] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 202.702587][T12028] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 202.712536][T12028] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 202.723036][T12028] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 202.732934][T12028] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 202.743429][T12028] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 202.759451][T12028] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 202.767380][T12163] loop2: detected capacity change from 0 to 2048 [ 202.787933][T12028] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 202.798429][T12028] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 202.808381][T12028] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 202.818862][T12028] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 202.828772][T12028] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 202.829695][T12170] loop6: detected capacity change from 0 to 512 [ 202.839282][T12028] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 202.840453][T12028] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 202.873603][T12170] EXT4-fs: Ignoring removed mblk_io_submit option [ 202.881580][T12028] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.884744][T12170] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 202.890436][T12028] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.909004][T12028] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.911369][T12172] loop1: detected capacity change from 0 to 1024 [ 202.917763][T12028] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.946031][T12170] EXT4-fs (loop6): 1 truncate cleaned up [ 202.947371][T12172] EXT4-fs (loop1): orphan cleanup on readonly fs [ 202.959440][T12172] EXT4-fs error (device loop1): ext4_orphan_get:1416: comm syz.1.3014: bad orphan inode 8 [ 202.972730][T12163] binfmt_misc: register: failed to install interpreter file ./file0 [ 202.988227][T12172] EXT4-fs (loop1): warning: mounting fs with errors, running e2fsck is recommended [ 202.998129][T12172] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 203.062367][T12185] team0: Unable to change to the same mode the team is in [ 203.101799][T12172] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 203.115691][T12190] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 203.168296][T12195] loop5: detected capacity change from 0 to 512 [ 203.187490][T12195] EXT4-fs: Ignoring removed mblk_io_submit option [ 203.228658][T12195] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 203.242054][T12197] loop6: detected capacity change from 0 to 2048 [ 203.281166][T12203] loop4: detected capacity change from 0 to 1024 [ 203.288206][T12195] EXT4-fs (loop5): 1 truncate cleaned up [ 203.316783][T12203] EXT4-fs (loop4): orphan cleanup on readonly fs [ 203.362304][T12203] EXT4-fs error (device loop4): ext4_orphan_get:1416: comm syz.4.3025: bad orphan inode 8 [ 203.407134][T12222] loop1: detected capacity change from 0 to 512 [ 203.411824][T12203] 9pnet: Could not find request transport: fdÿÿÿÿÿÿÿÿ<ÄžWͺwfdno=0xffffffffffffffff [ 203.417481][T12221] loop6: detected capacity change from 0 to 512 [ 203.432612][T12219] loop2: detected capacity change from 0 to 1024 [ 203.433294][T12222] EXT4-fs (loop1): bad geometry: block count 1024 exceeds size of device (256 blocks) [ 203.457239][T12219] EXT4-fs (loop2): orphan cleanup on readonly fs [ 203.476742][T12219] EXT4-fs error (device loop2): ext4_orphan_get:1416: comm syz.2.3029: bad orphan inode 8 [ 203.490885][T12221] ext4 filesystem being mounted at /562/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 203.545722][T12227] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 203.552807][T12219] EXT4-fs (loop2): warning: mounting fs with errors, running e2fsck is recommended [ 203.564527][T12219] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 203.580170][T12229] FAULT_INJECTION: forcing a failure. [ 203.580170][T12229] name failslab, interval 1, probability 0, space 0, times 0 [ 203.592909][T12229] CPU: 0 UID: 0 PID: 12229 Comm: syz.4.3034 Not tainted 6.14.0-syzkaller-10764-gaa918db707fb #0 PREEMPT(voluntary) [ 203.593096][T12229] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 203.593109][T12229] Call Trace: [ 203.593114][T12229] [ 203.593121][T12229] dump_stack_lvl+0xf6/0x150 [ 203.593143][T12229] dump_stack+0x15/0x1a [ 203.593160][T12229] should_fail_ex+0x261/0x270 [ 203.593192][T12229] should_failslab+0x8f/0xb0 [ 203.593218][T12229] __kmalloc_cache_noprof+0x55/0x320 [ 203.593334][T12229] ? ptp_open+0x6f/0x2a0 [ 203.593363][T12229] ? posix_clock_open+0x9d/0x160 [ 203.593434][T12229] ptp_open+0x6f/0x2a0 [ 203.593466][T12229] ? __pfx_ptp_open+0x10/0x10 [ 203.593493][T12229] posix_clock_open+0xef/0x160 [ 203.593545][T12229] chrdev_open+0x2fc/0x380 [ 203.593573][T12229] ? __pfx_chrdev_open+0x10/0x10 [ 203.593607][T12229] do_dentry_open+0x621/0xa20 [ 203.593689][T12229] vfs_open+0x38/0x1e0 [ 203.593719][T12229] path_openat+0x1b1c/0x2000 [ 203.593754][T12229] ? _parse_integer_limit+0x167/0x180 [ 203.593843][T12229] do_filp_open+0x115/0x240 [ 203.593872][T12229] do_sys_openat2+0xaa/0x110 [ 203.593904][T12229] __x64_sys_openat+0xf8/0x120 [ 203.593950][T12229] x64_sys_call+0x1ac/0x2e10 [ 203.593982][T12229] do_syscall_64+0xc9/0x1c0 [ 203.594000][T12229] ? clear_bhb_loop+0x25/0x80 [ 203.594030][T12229] ? clear_bhb_loop+0x25/0x80 [ 203.594051][T12229] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 203.594072][T12229] RIP: 0033:0x7fad7ad7d169 [ 203.594108][T12229] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 203.594137][T12229] RSP: 002b:00007fad793e7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 203.594190][T12229] RAX: ffffffffffffffda RBX: 00007fad7af95fa0 RCX: 00007fad7ad7d169 [ 203.594201][T12229] RDX: 0000000000004000 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 203.594295][T12229] RBP: 00007fad793e7090 R08: 0000000000000000 R09: 0000000000000000 [ 203.594306][T12229] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 203.594317][T12229] R13: 0000000000000000 R14: 00007fad7af95fa0 R15: 00007ffe6d9fb718 [ 203.594336][T12229] [ 203.823182][T12219] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 203.861938][T12234] loop1: detected capacity change from 0 to 1024 [ 203.870759][T12234] journal_path: Lookup failure for './file0' [ 203.876825][T12234] EXT4-fs: error: could not find journal device path [ 203.953136][T12244] loop6: detected capacity change from 0 to 512 [ 203.962067][T12241] loop2: detected capacity change from 0 to 2048 [ 203.969540][T12244] EXT4-fs: Ignoring removed mblk_io_submit option [ 203.977182][T12231] loop5: detected capacity change from 0 to 128 [ 203.986285][T12231] EXT4-fs (loop5): mounting ext2 file system using the ext4 subsystem [ 204.001168][T12244] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 204.011142][T12245] loop4: detected capacity change from 0 to 2048 [ 204.018922][T12231] ext2 filesystem being mounted at /6/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 204.020943][T12244] EXT4-fs (loop6): 1 truncate cleaned up [ 204.063676][T12241] binfmt_misc: register: failed to install interpreter file ./file0 [ 204.084833][T12231] EXT4-fs error (device loop5): htree_dirblock_to_tree:1082: inode #2: block 4: comm syz.5.3035: bad entry in directory: inode out of bounds - offset=1012, inode=128, rec_len=12, size=1024 fake=1 [ 204.187220][T12256] ================================================================== [ 204.193943][T12260] loop4: detected capacity change from 0 to 512 [ 204.195334][T12256] BUG: KCSAN: data-race in __mark_inode_dirty / __writeback_single_inode [ 204.195374][T12256] [ 204.195381][T12256] read-write to 0xffff8881066a7288 of 4 bytes by task 12241 on cpu 1: [ 204.220494][T12256] __writeback_single_inode+0x1f4/0x850 [ 204.226052][T12256] writeback_single_inode+0x16c/0x3f0 [ 204.231448][T12256] sync_inode_metadata+0x60/0x90 [ 204.236411][T12256] generic_buffers_fsync_noflush+0xd8/0x120 [ 204.242321][T12256] ext4_sync_file+0x1c3/0x6c0 [ 204.247003][T12256] vfs_fsync_range+0x116/0x130 [ 204.251790][T12256] ext4_buffered_write_iter+0x358/0x3c0 [ 204.257359][T12256] ext4_file_write_iter+0x3b2/0xf80 [ 204.262578][T12256] iter_file_splice_write+0x5f2/0x980 [ 204.267955][T12256] direct_splice_actor+0x160/0x2c0 [ 204.273074][T12256] splice_direct_to_actor+0x305/0x680 [ 204.278467][T12256] do_splice_direct+0xd9/0x150 [ 204.283237][T12256] do_sendfile+0x40a/0x690 [ 204.287673][T12256] __x64_sys_sendfile64+0x113/0x160 [ 204.292887][T12256] x64_sys_call+0xfc3/0x2e10 [ 204.297484][T12256] do_syscall_64+0xc9/0x1c0 [ 204.301987][T12256] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 204.307883][T12256] [ 204.310224][T12256] read to 0xffff8881066a7288 of 4 bytes by task 12256 on cpu 0: [ 204.317855][T12256] __mark_inode_dirty+0x198/0x7e0 [ 204.322893][T12256] ext4_write_inline_data_end+0x3c6/0x5d0 [ 204.328622][T12256] ext4_write_end+0x3eb/0x770 [ 204.333307][T12256] ext4_da_write_end+0x74/0x810 [ 204.338173][T12256] generic_perform_write+0x31e/0x4b0 [ 204.343468][T12256] ext4_buffered_write_iter+0x1ed/0x3c0 [ 204.349037][T12256] ext4_file_write_iter+0x3b2/0xf80 [ 204.354252][T12256] iter_file_splice_write+0x5f2/0x980 [ 204.359641][T12256] direct_splice_actor+0x160/0x2c0 [ 204.364757][T12256] splice_direct_to_actor+0x305/0x680 [ 204.370137][T12256] do_splice_direct+0xd9/0x150 [ 204.374905][T12256] do_sendfile+0x40a/0x690 [ 204.379335][T12256] __x64_sys_sendfile64+0x113/0x160 [ 204.384541][T12256] x64_sys_call+0xfc3/0x2e10 [ 204.389144][T12256] do_syscall_64+0xc9/0x1c0 [ 204.393677][T12256] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 204.399611][T12256] [ 204.401953][T12256] value changed: 0x0000003a -> 0x00000002 [ 204.407671][T12256] [ 204.409988][T12256] Reported by Kernel Concurrency Sanitizer on: [ 204.416137][T12256] CPU: 0 UID: 0 PID: 12256 Comm: syz.2.3040 Not tainted 6.14.0-syzkaller-10764-gaa918db707fb #0 PREEMPT(voluntary) [ 204.428294][T12256] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 204.438350][T12256] ================================================================== [ 204.474645][T12260] EXT4-fs (loop4): bad geometry: block count 1024 exceeds size of device (256 blocks) [ 204.627257][T12254] __nla_validate_parse: 7 callbacks suppressed [ 204.627274][T12254] netlink: 56 bytes leftover after parsing attributes in process `syz.1.3043'. [ 204.642657][T12254] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3043'.