last executing test programs: 1m23.103733221s ago: executing program 2 (id=49): r0 = socket$kcm(0x29, 0x2, 0x0) prctl$PR_SET_NAME(0xf, &(0x7f00000001c0)='w\xde\xa3\x05\xff\a\x00\x00\x00\x00\x00\x00\x8f\xc0\x9b\x86\xef\\\xc0\x89\av\x9f\xd6\xd1\x98<\xc8\x18E/\x8c\x1a\xe3\xbd') r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000031c0)=ANY=[@ANYBLOB="620af8ffa1dc0021bfa100000000000007010000f8ffffffb702000007000000bd120000000000008500000010000000b70000000000000095000000000000003faf7cf39e3100c8acaa47684f2aa3d9b18ed812a2e2c49e8020a6f4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24561f1b2607995daa56f151905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64b751a0f241b072e90080008002d7559f3b14820ed58b15627c95aa0b784625704f07372c29184ff7f4a7c0000070015006056feb4cc664c0af9360a1f7a5e6b607130c89f18c0c1089d8b8588d72ec29c48b45e000000000000041201baa80b0b8ed8fb1ec577c377f627daaf787a68af2ad0810000000000006fa03c6468978089b302d7ff6023cdcedb5e0125ebbcebdde510cb2364149215108337719acd97cfa107d40224edc5465a932b77a74e802a0dc6bf25d8a242bc6099ad2300000480006ef6c1ff0900ff0000000010c63a949e8b7955394ffaff03000000000000ab87b1bdeda7be586602d985430cea080000000000fb1a26abfb0767192361448279b05d96a703a660587a167ca17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aab926b81e3b59c9b081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632d5933a1c1fa5605bd7603f2ba2a790d62d6faec2fed44da4928b30142ba1fde5c5d50b83bae616b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0cb97fca585ec6bf58351d578be00d952aab9c71764b0a8a7583c90b3433b809bdb155481ef836eb0f8c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223d8d9e86c5ea06d108d8f80a0eb4fa39f6b5c02e6d6d90756ff578f57000000009700cf0b000000000000000003000000000000000000000000001000000000559711e6e8fcffffffffffffffb2d02edc3e01dd271c896249ed85b980680b09000000000f0000169cdcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffffd897ef3b7cda42f93d53046da21b40216e14ba2d6af8656b01e17addaed2b25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccf1f9f3282830689da6b53b263339863297771d74732d400003341bf4a00fc9fec0271ff01589646efd1cf870cd7bb2366fde4a594290c405ff870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d30a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78249788f11f761036eafed1fb2b98b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe760e717a04becff0f719197724f4fce1093b62d7e8c7123d890cec55bf404e4e1f74b7eed82571be54c72d978cf906df08f11f1c4042e36acd37d7f9e109f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2acd1fe514283707c70600000000000000b7561301bb997316db01ee601f2c9659db9bc04f7089a660d8dcc3ae83169cf331efe895ff2e1c5560926e90109b598502d3e959efc71f665c542c9062ece84c99a061887a20639b41c8c12ee86c50804042b3eac1f871b136345cf67ca3fb5aac518a515d83129cd857c775f9e7d6101da841735e186c489b3a06fb99e0347f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af403269b4a39ce40293947d9a631bcbe3583784acbda216550d7aec6b79e30cbd128f91e358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f000000009191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e669261192899d4562e00e22d564ae09bb6d163118e401e024fd452277c3887d6116c6cc9d8046c216c1f895778cb2214209ed2d5d776e22a2a798de44aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b55ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f608ce27defc93871c5f99a3594191e104d417e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250df98674152f94e30400000000000000000000000000a1fec9000000d694210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137ab79a404abde7750898b59270b939b81367ac91bd627e87306703be8672d70d1ab57075228a95d32f46ed9bd1f00fb8191bbab2dc599dda61ee2010000294859323e7a45319f18101288a0268893373750d1a8fe64680b0a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7d58c08acaf30065b928a31d2eca55f74a23641f61f2d5b308cf01cfaed9ef0ce21d69993e9960ff5f76015e6009756237badf4e7965bfe2777e808fcba821a00e8c5c39609ff854256cb490000000000c1fee30a3f7a85d1b2b458c77685efc0ceb1c8e5729c66018d169fc03aa188546bb2e51935ab9067ec3ad2a182068e1e3a0e2505bc7f41019645466ac96e0d0b3bc19faa5449209b085f3c334b47f067bbab40743b2a428f1da1f626602111b40e761fd210819203828b202779d386ed295f023c67d867014d12ca3c471c7868e7da7eaa69eb7f7f80572fdd11bb1d070080fbc22bf73468788df51710eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331ff5e20fa26b8471d42645288d7226bbd9c9e9e1cc9eb3d541e407cc2dae5e690cd628ab84875f2c50ba830d3f474b079b407000000deff00004043060000005dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71b967ce7daac4be290159f6bcd75f0dda9de5532e66ae9e48b0ed1254a81faae79b6af6fbb869604d51de44c4e0973171ad47d6c00ebc7603093f000000fdec743af930cd6db49a47613808bad959719c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f15d6533f78a1f4e2df40600000000000000e9b49a1b36d48a44ba6a4530e59bec53e876dc660dd6d89f80a4377b1b1292a893a516dab183ee65744fb8fc4f9ce2242e0f00000000010000000000000000000057d77480e0345effff6413258d1f6eb190aa28cbb4bafe3436b176c7ed4b0600b805d5edd9d188daf28d89c014c3ecca10ae55704544673e1fb03b84f63e022fe755f4007a4a899eaf52c4f491f1e97c862e29e4570600000091c691faee1e0c8fe056a07474e6e5490a7d3c3402000000b60600d837c6befc63ddf2f594ad7cbc56a1e44d218c956a5392a995f1fae8e9f206efbb33854dc70104d74dc07748f9745cb796da2dfb714a0500000000000000faed94fc39acfb3fd25dfa8116a154cd1202000000b59fed817072a0da60160761fd3dffda0f7c742eabd8ab68334d2a1693cb187539049e331272bf5135044df8161400211b8012b6eb1ed5656e83f65509bb4b323c5bd61bff949d3bade2f6ffda1360c2786e16937ab61d6dcafed319c7000000000000000542954c167dd9b4acd946ffffffffffffffff1389179b025dbe063b7f906217b2cf8410c7023aa3e5cc3ba1000000000000000000000000000000006ae6301a2da44394275c582a6516bb92ea1980a0a659f2f1811c9e281c209647c4241f292b20508b215dde27bb2487a6e2b5e4a8ccfab90c23827ef06cbe364073005f8a6d1456aaeb85ffb7858f24eced67a67ab825e863928ed64c83f62ffdaa997657335b630500163aff094059e626766845fd779c9e6cdbbd64c2499ce3ffe2fef03f7cdd0d90f3a7579579a142c0f7b318264d5c13c31cf475829528267ead38523cab7e1664e8426cfce471fef821c8a02a7e7d954d05b68a9c28f79429b09e2bb3681ae2b831e27c735123361c193d66ed4d71f19b199d371ec6bfada7cd370e3fdd3cd980fa1e145fd3f3e96b1feb53c865e1ada08f5d16ed652ee0c7f45352222692fbd679212c225d097aa90f7e1fb1f983415f43e75a19ecf7fd21bfa150ef563aa72ba3c43c5f3d9be128ec26b691f31f9cab931631606a81622f120675c962be2d3b5e95f74f0b209e42e6bdd76e6e725295b1d78d928f6f63e4581d5cc41cbde2ba66adc1168070c8c6e18a6e452a31bde54ad3e16304d06a234f5f9311ef0f78924b68dbb4712efdb6974667bdb54f16fd2061b9ba93638dd177227e94e4ebd0ec1d437db948062bf41742000000000000000000305f70"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) socket(0x1e, 0x4, 0x0) creat(&(0x7f0000000300)='./file0\x00', 0xe5) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000005c0)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r3 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r3, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x20000811) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000040)={r3, r2}) sendmsg$kcm(r0, &(0x7f0000002080)={0x0, 0x4102, &(0x7f0000002000)=[{&(0x7f0000000880)="1a", 0x100000}], 0x1}, 0x0) 1m22.942297454s ago: executing program 2 (id=52): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="09000000350000eef27f00000100000012000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000080000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000a3850000007000000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x3b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r2, 0x0, 0x6}, 0x18) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001cc0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000ab4000000060a01040000000000000000020000280900010073797a30000000000900020073797a320000000088000480100001800c000100636f756e7465720014000180090001006d6173710000000004000280600001800a0001006c696d6974000000500002800c000140000000000000000808000440000000010c00014000000000000080010c0002"], 0xdc}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x51, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001700)={&(0x7f0000000080)='kmem_cache_free\x00', r4}, 0x10) r5 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r5, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) r6 = dup2(r5, r5) write$tun(r6, 0x0, 0x46) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r7 = memfd_secret(0x80000) fcntl$setlease(r7, 0x400, 0x0) close(r7) 1m22.807700046s ago: executing program 2 (id=54): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000700000000000000000000850000002300000095"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$rds(0x15, 0x5, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r1, 0x0, 0x4000000000002ab}, 0x18) socket$inet_icmp(0x2, 0x2, 0x1) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000300)) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_sctp(0xa, 0x5, 0x84) perf_event_open(&(0x7f0000000040)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x2000000}, 0x0, 0x0, 0xffffffffffffffff, 0x3) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x41, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x61) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x200200, 0x0) socket(0x400000000010, 0x3, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r5) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[], 0x48) sendmsg$ETHTOOL_MSG_COALESCE_SET(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000000000001400000008000f00fc00000018000180140002006e657464657673696d300000000000000800060000fcffff08000900fc000000080011000700000008000e0080000000", @ANYRES64=r7], 0x5c}, 0x1, 0x0, 0x0, 0x4000800}, 0x88010) 1m22.680872699s ago: executing program 2 (id=57): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x9, 0xc, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRESHEX=0x0, @ANYBLOB="0000000000000008b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000003880)=ANY=[@ANYBLOB="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"/4545], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000003c0)={@cgroup, r1, 0x2f, 0x18, 0x4, @void, @value}, 0x20) (async) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000003c0)={@cgroup, r1, 0x2f, 0x18, 0x4, @void, @value}, 0x20) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000a70000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$MAP_CREATE(0x0, &(0x7f0000002080)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000002080)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000001900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffd98, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000001900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffd98, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r4}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='percpu_alloc_percpu\x00', r2}, 0x10) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='percpu_alloc_percpu\x00', r2}, 0x10) syz_io_uring_setup(0x111, &(0x7f0000000340)={0x0, 0x11, 0x8, 0x4}, 0x0, 0x0) (async) syz_io_uring_setup(0x111, &(0x7f0000000340)={0x0, 0x11, 0x8, 0x4}, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000100)={0xffffffffffffffff, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x10, &(0x7f0000002e00), 0x0, 0x0, 0xa0, 0x8, 0x0, 0x0}}, 0x10) syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x10400, &(0x7f00000000c0)={[{@norecovery}, {@grpquota}, {@debug}, {@nombcache}]}, 0xee, 0x4b6, &(0x7f0000000980)="$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") r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x275a, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x12, r5, 0x0) r6 = syz_clone(0x40200, 0x0, 0x49, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x80030, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x10024, 0x9f, 0x0, 0x0, 0xffffffffffffffff, 0xfffffffc, 0xfffe, 0x0, 0x8001, 0x0, 0xffff}, r6, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000340)={0xffffffffffffffff, 0xe8, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000340)={0xffffffffffffffff, 0xe8, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) 1m22.246058775s ago: executing program 2 (id=63): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mount$9p_tcp(0x0, 0x0, 0x0, 0x8, 0x0) io_submit(0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000180)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffefa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x1, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='rss_stat\x00', r0}, 0x10) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000ff0f000007"], 0x50) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000f00)='kfree\x00', r1}, 0x18) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$VT_DISALLOCATE(r2, 0x5608) 1m21.614817875s ago: executing program 2 (id=70): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000600)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0xe, 0x7fff0000}]}) openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0x2040, 0x108) link(&(0x7f0000000200)='./file1\x00', &(0x7f0000000300)='./bus\x00') fcntl$lock(r0, 0x26, &(0x7f0000000000)) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="0200000004000000040000000900000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r0, @ANYBLOB="0000000000000000f6ffffffff0000ff0000004c1a72f0ea279195e7a45acb84a2ab2d5ee1f3713684c8a31601b45e36551656b7d29d2b9603c238fa6275075cd7885c4f96fd31e6e0aa1f7291d35e025198cfb540b5ac7acdac18028ff0d6bfbce24d54616fc0ac77398cf2f64166ac2b6e68c1d0a2877088073b97e6e065a70da8b7c73db8f97fc4f88f54cd19cbe3047ba4c603873be49880880e2b9f04cfd41de4ed1ca4359d7386135b2f89b989eb98d49213614bd60763493745f0ab468a372fdd24ebb02e06fb2a6a448a71a43f424544679aa8268662e67edab40f2d2df2126a7866b61742673d884af0c8e5d78120f1c9f629ebfd9892df8d8e502137124c23c9c3fb48444f231227e67cd8eb7c11d6c70ab466d6639cfdf302928aa6c5752bc18155e69b3a9efeb9ea5c29f18a5798422305def8b79245515b8cefd7b86b113856a158dc5e5356dd8acdac45ee9491de73d57497e34c61ab"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x7, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffe2e, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x6, 0x4, 0xfffffff8, 0x0, r1, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r4 = socket$netlink(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000fbdbdf25250000000e000002006e657464657673696d3000003187c4fdccee1e7ea403448b90"], 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000400)={&(0x7f0000000480)={0x70, r5, 0x8, 0x70bd29, 0x25dfdbff, {}, [@DEVLINK_ATTR_RATE_NODE_NAME={0xe}, @DEVLINK_ATTR_RATE_PARENT_NODE_NAME={0xe}, @DEVLINK_ATTR_RATE_TX_SHARE={0xc, 0xa6, 0x882}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @handle=@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_RATE_TX_MAX={0xc, 0xa7, 0x6}]}, 0x70}, 0x1, 0x0, 0x0, 0x40040000}, 0xc0) r6 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x10200, 0x0) r7 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000740)=@bpf_tracing={0x1a, 0x12, &(0x7f0000000500)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x6}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@map_val={0x18, 0x2, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x6c}, @generic={0x2, 0xe, 0x6, 0xeb94, 0x7}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000380)='GPL\x00', 0x10001, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x1c, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f00000003c0)={0x2, 0x9, 0x9, 0x4}, 0x10, 0x8abd, 0xffffffffffffffff, 0x5, &(0x7f00000005c0)=[r0, r3], &(0x7f0000000640)=[{0x2, 0x2, 0xe, 0x31b8ed34bf941f73}, {0x4, 0x2, 0x1, 0xa}, {0x4, 0x2, 0xa, 0x9}, {0x2, 0x4, 0xa, 0xa}, {0x4, 0x3, 0x5}], 0x10, 0x9, @void, @value}, 0x94) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000008c0)={@cgroup=r0, 0x8, 0x1, 0x2, &(0x7f00000006c0)=[0x0, 0x0, 0x0], 0x3, 0x0, &(0x7f0000000800)=[0x0, 0x0, 0x0], &(0x7f0000000840)=[0x0, 0x0, 0x0], &(0x7f0000000880)=[0x0, 0x0], 0x0}, 0x40) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)=ANY=[@ANYRES16=r7], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000180)={0x0, 0x0}, 0x0) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000)=r10, 0x4) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000940)=ANY=[@ANYRES32=r9, @ANYRES32=r2, @ANYBLOB="00000000000000008f8ec20532aad0d338c87c3a1b3f0ab073c38842c3d4aec448", @ANYRES32=r7, @ANYBLOB, @ANYRES32=r10, @ANYBLOB, @ANYRES64=r8], 0x20) ioctl$AUTOFS_DEV_IOCTL_VERSION(r6, 0xc0189371, &(0x7f0000000300)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r11 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f00000001c0)={'sit0\x00', 0x0}) sendmsg$nl_route_sched(r11, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r12, {0x0, 0x6}, {0xffff, 0xffff}, {0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x10, 0x1}}]}}, @TCA_RATE={0x6}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000801}, 0x0) 1m21.613704945s ago: executing program 32 (id=70): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000600)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0xe, 0x7fff0000}]}) openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0x2040, 0x108) link(&(0x7f0000000200)='./file1\x00', &(0x7f0000000300)='./bus\x00') fcntl$lock(r0, 0x26, &(0x7f0000000000)) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="0200000004000000040000000900000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r0, @ANYBLOB="0000000000000000f6ffffffff0000ff0000004c1a72f0ea279195e7a45acb84a2ab2d5ee1f3713684c8a31601b45e36551656b7d29d2b9603c238fa6275075cd7885c4f96fd31e6e0aa1f7291d35e025198cfb540b5ac7acdac18028ff0d6bfbce24d54616fc0ac77398cf2f64166ac2b6e68c1d0a2877088073b97e6e065a70da8b7c73db8f97fc4f88f54cd19cbe3047ba4c603873be49880880e2b9f04cfd41de4ed1ca4359d7386135b2f89b989eb98d49213614bd60763493745f0ab468a372fdd24ebb02e06fb2a6a448a71a43f424544679aa8268662e67edab40f2d2df2126a7866b61742673d884af0c8e5d78120f1c9f629ebfd9892df8d8e502137124c23c9c3fb48444f231227e67cd8eb7c11d6c70ab466d6639cfdf302928aa6c5752bc18155e69b3a9efeb9ea5c29f18a5798422305def8b79245515b8cefd7b86b113856a158dc5e5356dd8acdac45ee9491de73d57497e34c61ab"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x7, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffe2e, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x6, 0x4, 0xfffffff8, 0x0, r1, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r4 = socket$netlink(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000fbdbdf25250000000e000002006e657464657673696d3000003187c4fdccee1e7ea403448b90"], 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000400)={&(0x7f0000000480)={0x70, r5, 0x8, 0x70bd29, 0x25dfdbff, {}, [@DEVLINK_ATTR_RATE_NODE_NAME={0xe}, @DEVLINK_ATTR_RATE_PARENT_NODE_NAME={0xe}, @DEVLINK_ATTR_RATE_TX_SHARE={0xc, 0xa6, 0x882}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @handle=@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_RATE_TX_MAX={0xc, 0xa7, 0x6}]}, 0x70}, 0x1, 0x0, 0x0, 0x40040000}, 0xc0) r6 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x10200, 0x0) r7 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000740)=@bpf_tracing={0x1a, 0x12, &(0x7f0000000500)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x6}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@map_val={0x18, 0x2, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x6c}, @generic={0x2, 0xe, 0x6, 0xeb94, 0x7}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000380)='GPL\x00', 0x10001, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x1c, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f00000003c0)={0x2, 0x9, 0x9, 0x4}, 0x10, 0x8abd, 0xffffffffffffffff, 0x5, &(0x7f00000005c0)=[r0, r3], &(0x7f0000000640)=[{0x2, 0x2, 0xe, 0x31b8ed34bf941f73}, {0x4, 0x2, 0x1, 0xa}, {0x4, 0x2, 0xa, 0x9}, {0x2, 0x4, 0xa, 0xa}, {0x4, 0x3, 0x5}], 0x10, 0x9, @void, @value}, 0x94) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000008c0)={@cgroup=r0, 0x8, 0x1, 0x2, &(0x7f00000006c0)=[0x0, 0x0, 0x0], 0x3, 0x0, &(0x7f0000000800)=[0x0, 0x0, 0x0], &(0x7f0000000840)=[0x0, 0x0, 0x0], &(0x7f0000000880)=[0x0, 0x0], 0x0}, 0x40) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)=ANY=[@ANYRES16=r7], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000180)={0x0, 0x0}, 0x0) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000)=r10, 0x4) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000940)=ANY=[@ANYRES32=r9, @ANYRES32=r2, @ANYBLOB="00000000000000008f8ec20532aad0d338c87c3a1b3f0ab073c38842c3d4aec448", @ANYRES32=r7, @ANYBLOB, @ANYRES32=r10, @ANYBLOB, @ANYRES64=r8], 0x20) ioctl$AUTOFS_DEV_IOCTL_VERSION(r6, 0xc0189371, &(0x7f0000000300)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r11 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f00000001c0)={'sit0\x00', 0x0}) sendmsg$nl_route_sched(r11, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r12, {0x0, 0x6}, {0xffff, 0xffff}, {0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x10, 0x1}}]}}, @TCA_RATE={0x6}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000801}, 0x0) 30.937756045s ago: executing program 5 (id=983): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000003200)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x1, 0xffffffffffffff33, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='rss_stat\x00', r1}, 0x10) syz_io_uring_setup(0x416f, &(0x7f0000000780)={0x0, 0xfffffffd, 0x10100, 0x200, 0x1}, &(0x7f0000000100), &(0x7f00000000c0)) (fail_nth: 5) 30.63888065s ago: executing program 5 (id=985): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r0}, &(0x7f0000000240), &(0x7f0000000280)=r1}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000ab4000000060a01040000000000000000020000280900010073797a30000000000900020073797a320000000088000480100001800c000100636f756e7465720014000180090001006d6173710000000004000280600001800a0001006c696d6974000000500002800c000140000000000000000808000440000000010c00014000000000000080010c00024000000000000000090800034000000fba0c00024000000000000000000c000140000000000000000714000000110001"], 0xdc}}, 0x0) sendmsg$NFT_MSG_GETRULE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000500)={0x14, 0x19, 0xa, 0x201}, 0x14}}, 0x0) 30.279917346s ago: executing program 5 (id=989): openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x12, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000001"], 0x0, 0x9, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @cgroup_sock_addr=0xf, 0xffffffffffffffff, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xa, @void, @value}, 0x94) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000), 0x8) r1 = socket$packet(0x11, 0x2, 0x300) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r2, 0x0, 0x60, &(0x7f0000000500)={'filter\x00', 0x7, 0x7fffffe, 0x3e8, 0xe8, 0x0, 0x1f8, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@empty, @empty, 0x0, 0xffffffff, 0xa, 0xe, {@empty, {[0xff, 0x0, 0x0, 0x0, 0x0, 0xff]}}, {@empty, {[0x0, 0x0, 0xff]}}, 0x0, 0x401, 0x1, 0x0, 0x6, 0x9, 'syzkaller1\x00', 'ip6gretap0\x00', {0xff}, {}, 0x0, 0xc30184ff0a93acbb}, 0xc0, 0xe8}, @unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x2}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@broadcast, @mac=@remote, @loopback, @local, 0x4, 0xfffffffe}}}, {{@uncond, 0xc0, 0x108}, @unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00', 0x0, 0x2, {0x9d}}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000), 0x8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='kfree\x00'}, 0x18) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r3 = perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec850000007d000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x1) r4 = creat(&(0x7f00000000c0)='./file0\x00', 0x1f4) r5 = dup2(r4, r4) ioctl$BLKTRACESETUP(r5, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x200000a, 0x1, 0x8}) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000000800000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) ioctl$BLKTRACESETUP(r5, 0x1276, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) close(r3) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e00000004000000080000000b"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sendmsg$nl_route_sched(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@newtaction={0x18, 0x30, 0xb, 0x0, 0xfffffffe, {}, [{0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4004000}, 0x10000000) 29.796126834s ago: executing program 5 (id=996): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000c80)={0x0, 0xc, &(0x7f0000000c00)=ANY=[@ANYBLOB="91090000000000d01200000000000000000058353ea080", @ANYRES32=r1, @ANYRESHEX], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x10, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000005c0)={{r1}, &(0x7f0000000040), &(0x7f0000000280)='%+9llu \x00'}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000600)='xen_mmu_flush_tlb_multi\x00', r2, 0x0, 0x40}, 0x18) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0180000000000000000001000000000000000b00000000030014"], 0x28}}, 0x48800) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000c40)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRESDEC=r3, @ANYRESHEX=r0, @ANYRES8=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$TOKEN_CREATE(0x24, &(0x7f00000002c0)={0x0, r0}, 0x8) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r6}, 0x10) syz_mount_image$ext4(&(0x7f0000000640)='ext4\x00', &(0x7f0000000200)='./file2\x00', 0x200000, &(0x7f0000000000)={[{@dioread_lock}, {@noquota}, {@errors_remount}, {@grpquota}]}, 0xfc, 0x579, &(0x7f0000000680)="$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") r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x8042, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r8}, 0x10) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x5, &(0x7f0000000400)=ANY=[@ANYBLOB="1801000000000000000000004b64ffed850000006d000000a50000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) setsockopt$MRT_ASSERT(r7, 0x0, 0xcf, &(0x7f0000000480), 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r9}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) mremap(&(0x7f00001d3000/0x4000)=nil, 0x4000, 0x2000, 0x3, &(0x7f00009ad000/0x2000)=nil) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r10}, 0x10) prlimit64(0x0, 0xe, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), 0xffffffffffffffff) 29.40292382s ago: executing program 5 (id=1005): socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000008000000000000020000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000000085000000"], &(0x7f0000000840)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94) ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000180)={0x3, 'netpci0\x00', {0x1}, 0x4}) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1, 0x0, 0x101}, 0x18) syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{}, 0x0, 0x0}, 0x20) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xee, 0x3, 0x0, 0x0, 0x0, 0x0, 0x2111, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x100}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af9ff0000000007020000f8ffffffb703000008000000b704000085000000010000009500000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000002000000000000000000fc24439"], 0x48) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000180)=0x401) listen(0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x2, &(0x7f00000001c0)=0x7ff, 0x4) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x3}, 0x1c) sendto$inet6(r3, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r3, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090000006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a688138dea09b776cbfa784cbf550bf3074fb0d775da4df5a3f48bbdf452eeb6b923da9d0e25b80f76a873664b5753444fe05f33e5f91045540836c3cd6af10f0cd018f0c6f57f926ac959a5628c45088fbe0c87fbe6cbcda4662d2a12f6d00"/215, 0xd0d0c2ac, 0x1, 0x0, 0x0) splice(r3, 0x0, r2, 0x0, 0x406f413, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x0, 0xc, &(0x7f0000000740)=ANY=[@ANYRES64, @ANYBLOB="eca61811258556f460cf31f89923b67b8b19e14d1403ac798c8236bd486a55c19b6b0e4d62be7eba286c97f7e21b347966e0d130fe8fb4df8f296331e7b1d7ea5eeed6cda01644"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00'}, 0x10) 29.115413704s ago: executing program 5 (id=1009): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x400}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001200)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0b0000001f00000002040000ff03000001"], 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000001c0)={r3, 0x0, 0x0}, 0x20) 29.078818905s ago: executing program 33 (id=1009): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x400}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001200)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0b0000001f00000002040000ff03000001"], 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000001c0)={r3, 0x0, 0x0}, 0x20) 3.142527739s ago: executing program 6 (id=1443): r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x800000000003}, 0x1100, 0x5dd8, 0x0, 0x5, 0x0, 0x8, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="5400000010000104000000000000000100000000", @ANYRES32=0x0, @ANYBLOB="fff00000000000002c0012800e00010069703667726574617000000018000280140007002001001000000000000000000000000208000a00"], 0x54}}, 0x0) socket$tipc(0x1e, 0x5, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x42, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_bp={0x0, 0x2}, 0x1100, 0x5dd9, 0x0, 0x5, 0x0, 0x8, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2042, 0x0) ioctl$AUTOFS_IOC_FAIL(r3, 0x4c80, 0x7000000) 2.881339924s ago: executing program 6 (id=1447): socket$netlink(0x10, 0x3, 0x0) r0 = socket$pppl2tp(0x18, 0x1, 0x1) socket(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x800, &(0x7f0000000280)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRES64=r1, @ANYBLOB='Fsf$no=', @ANYRESHEX=r1, @ANYBLOB=',\x00']) socket$nl_route(0x10, 0x3, 0x0) socket$kcm(0x10, 0x3, 0x10) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='kmem_cache_free\x00', r4}, 0x10) r5 = socket$packet(0x11, 0x2, 0x300) r6 = bpf$MAP_CREATE(0x0, 0x0, 0x48) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) sendto$packet(r5, &(0x7f00000004c0)="23288100", 0x4, 0x0, &(0x7f0000000340)={0x11, 0x5, r7, 0x1, 0x0, 0x6, @local}, 0x14) syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f0000000580)='./file1\x00', 0x800040, &(0x7f0000000740)={[{@usrjquota}], [{@pcr={'pcr', 0x3d, 0x2}}, {@uid_eq={'uid', 0x3d, 0xffffffffffffffff}}, {@fowner_lt}, {@subj_type={'subj_type', 0x3d, 'syVlln\x00\x00\x00\x00Q\xa2Z\xe9#T\xd8\xff\xaf\xb8\r'}}, {@euid_eq}, {@uid_gt}]}, 0x21, 0x593, &(0x7f0000000b80)="$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") socket$netlink(0x10, 0x3, 0x8000000004) socket$packet(0x11, 0x2, 0x300) socket(0x1e, 0x805, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000180)={0x2f, 0x0}, 0x8) r9 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000300)={0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0x1, &(0x7f0000000080)=ANY=[@ANYBLOB="6906180003ffffe8"], &(0x7f00000000c0)='GPL\x00', 0x10001, 0xf5, &(0x7f0000000200)=""/245, 0x0, 0x3a, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x8, &(0x7f0000000100)={0x7, 0x5}, 0x8, 0x10, &(0x7f0000000140)={0x5, 0x7, 0xb988, 0xffffffe0}, 0x10, r8, r9, 0x0, 0x0, 0x0, 0x10, 0x101, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x12, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1838000004000000000000000000000018120000", @ANYRES32=r6, @ANYBLOB="0000000000000000b703000000000000850000000c0000027900000000000000"], &(0x7f00000002c0)='syzkaller\x00', 0x1, 0x91, &(0x7f0000000380)=""/145, 0x41100, 0x30, '\x00', r7, @cgroup_sock_addr=0x35, r2, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000300)={0x4, 0x2, 0x7fff, 0x800}, 0x10, r8, r3, 0x2, &(0x7f0000000440)=[r0, r6, r2], &(0x7f0000000480)=[{0x2, 0x1, 0x9, 0x1}, {0x4, 0x1, 0x4, 0x9}], 0x10, 0x7fff, @void, @value}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) socket$netlink(0x10, 0x3, 0x10) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3c00000010001ffe00989837a182138b00268f1c", @ANYRES32=0x0, @ANYBLOB="ff7f000080000000140012800a00010076786c616e0000000400028008000a00", @ANYRES64=r10], 0x3c}, 0x1, 0x8000a0ffffffff}, 0x0) 2.463172251s ago: executing program 6 (id=1452): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000002e80)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r1}, 0x18) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000e40)="d8000000180081064a81f782db44b904021d080400007c09e8fe55a10a0015c0050014a603600e1208000f0000000401a80016009a00014004000000036010fab94dcf5c0461c1d6900094007134cf6ee080000190d0a2ac922353a606487ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00320db70103000040fad95667dc06dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x48084) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r5 = epoll_create(0x8) bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e000000a50000002a00000095"], &(0x7f0000000b40)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000f40), r7) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r10}, 0x10) sendmsg$IEEE802154_ADD_IFACE(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)={0x34, r8, 0x1, 0x7ffffc, 0x25dfdbfd, {}, [@IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00', r6}, 0x10) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000000000)={0xf6c447fee59251f4}) close_range(r3, r4, 0x0) msync(&(0x7f0000ffb000/0x1000)=nil, 0xffffffffdf004fff, 0x4) 2.393768042s ago: executing program 6 (id=1454): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f0000000200)={[{@lazytime}, {@nomblk_io_submit}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2e}}, {@nombcache}, {@quota}, {@quota}]}, 0xff, 0x443, &(0x7f0000000940)="$eJzs3MtvG0UYAPBv10mgLxJKefQBBMqj4pE0aYEeuIBA4gASEhzKMSRpVeo2qAkSrSoICJUjqsQdcUTiL+BELwg4IXGFAzdUqUK9tHAyWnu3cYztNsbuQv37SevM7I4182V37JmdbAIYWpPZSxKxNSJ+iYjxRnZ9gcnGj6uXz87/efnsfBK12ht/JPVyVy6fnS+KFu/bkmf2pRHpJ0nsblPv8ukzx+eq1cVTeX565cS708unzzx97MTc0cWjiydnDx06eGDmuWdnn+lLnFlcV3Z9sLRn5ytvnX9t/vD5t3/4Oinib4mjTya7HXy0VutzdeXa1pRORkpsCBtSiYjsdI3W+/94VGLt5I3Hyx+X2jhgoGq5DodXa8AtLImyWwCUo/iiz+a/xXbzRh/lu/RCYwKUxX013xpHRiLNy4y2zG/7aTIiDq/+9UW2xWDuQwAArPNtNv55qt34L417msrdka+hTETEnRGxPSLuiogdEXF3RL3svRFx3wbrb10k+ef4J73YU2A3KBv/PZ+vba0f/xWjv5io5Llt9fhHkyPHqov7G8dWs5csP9Oljgsv/fxZp2PN479sy+ovxoJ5Oy6O3Lb+PQtzK3O9xtvq0kcRu0baxZ9cWwlIImJnROzqsY5jT3y1p9Ox68ffRR/WmWpfRjzeOP+r0RJ/Iem+Pjl9e1QX9083XRUtfvzp3Oud6v9X8fdBdv43t73+r8U/kTSv1y5vvI5zv37acU7T6/U/lrxZT4/l+96fW1k5NRMxlrzaaHTz/tm19xb5onwW/7697fv/9lj7TeyOiOwivj8iHoiIB/O2PxQRD0fE3i7xf//iI+/0Hv9gZfEvbOj8ryXGonVP+0Tl+HffrKt0YiPxZ+f/YD21L99T//xLusd1I+3q7WoGAACA/580IrZGkk5dS6fp1FTjb/h3xOa0urS88uSRpfdOLjSeEZiI0bS40zXedD90Jp/WF/nZlvyB/L7x55VN9fzU/FJ1oezgYcht6dD/M79Xym4dMHCe14Lhpf/D8NL/YXjp/zC82vT/TWW0A7j52n3/fxgRFx4roTHATdXS/y37wRAx/4fhpf/D8LqB/v/brfXvqoGIWN4U139IfrCJSpRZu0SPiUj/E82QGFCi7E8mAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA/vg7AAD//9aZ7PU=") r1 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) ftruncate(r1, 0x2007ffc) sendfile(r1, r1, 0x0, 0x800000009) 2.305995543s ago: executing program 6 (id=1456): ioperm(0x6, 0x1, 0x3) prctl$PR_SET_SECCOMP(0x16, 0x3, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0900000004000000e27f000001"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000080000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sys_enter\x00', r3}, 0x18) execve(0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r0}, &(0x7f0000000000), &(0x7f00000005c0)=r1}, 0x20) fspick(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) add_key$keyring(&(0x7f0000000540), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) utimes(&(0x7f0000003040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0x0) 2.246213664s ago: executing program 6 (id=1457): socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000008000000000000020000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000008500"], &(0x7f0000000840)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94) ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000180)={0x3, 'netpci0\x00', {0x1}, 0x4}) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1, 0x0, 0x101}, 0x18) syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{}, 0x0, 0x0}, 0x20) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xee, 0x3, 0x0, 0x0, 0x0, 0x0, 0x2111, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x100}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af9ff0000000007020000f8ffffffb703000008000000b704000085000000010000009500000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000002000000000000000000fc24439"], 0x48) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000180)=0x401) listen(0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x2, &(0x7f00000001c0)=0x7ff, 0x4) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x3}, 0x1c) sendto$inet6(r3, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r3, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090000006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a688138dea09b776cbfa784cbf550bf3074fb0d775da4df5a3f48bbdf452eeb6b923da9d0e25b80f76a873664b5753444fe05f33e5f91045540836c3cd6af10f0cd018f0c6f57f926ac959a5628c45088fbe0c87fbe6cbcda4662d2a12f6d00"/215, 0xd0d0c2ac, 0x1, 0x0, 0x0) splice(r3, 0x0, r2, 0x0, 0x406f413, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x0, 0xc, &(0x7f0000000740)=ANY=[@ANYRES64, @ANYBLOB="eca61811258556f460cf31f89923b67b8b19e14d1403ac798c8236bd486a55c19b6b0e4d62be7eba286c97f7e21b347966e0d130fe8fb4df8f296331e7b1d7ea5eeed6cda01644"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00'}, 0x10) 1.989822128s ago: executing program 4 (id=1461): syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000100)='./file0\x00', 0x1000000, &(0x7f0000000000)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c004845160000000000"], 0x1, 0x2bb, &(0x7f0000000440)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) rename(&(0x7f0000000000)='./file1\x00', &(0x7f0000000080)='./file2\x00') 1.9133217s ago: executing program 4 (id=1462): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b705e9e807000000850000006900000095"], &(0x7f0000000500)='syzkaller\x00', 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='kmem_cache_free\x00', r1, 0x0, 0x5}, 0x18) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000004c0)='./file0\x00', 0x40000, &(0x7f0000000580)={[{@nolazytime}]}, 0xfe, 0x507, &(0x7f0000000f40)="$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") syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x8004, &(0x7f0000000080)={[{@discard}, {@bh}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x1, 0x7b9, &(0x7f00000007c0)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) prctl$PR_SET_KEEPCAPS(0x8, 0x0) pwrite64(r2, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x107842, 0x42) lseek(r3, 0x5, 0x3) chown(&(0x7f0000000040)='./file1\x00', 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000240)='./file1\x00', 0x8, &(0x7f0000000040), 0x9, 0x52e, &(0x7f0000000500)="$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") r4 = open(&(0x7f0000000080)='./file1\x00', 0x64842, 0x86) pwritev2(r4, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x140000}], 0x1, 0x7800, 0x0, 0x3) r5 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffff8) r6 = socket$kcm(0x10, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'veth0_to_hsr\x00', 0x0}) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x5, 0xc, 0x5, 0x40, 0xc0, 0x1, 0x0, '\x00', r7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100), &(0x7f00000001c0)="cdfb329b0afccaf0dc6949a333891f612893f3ec9b9db42ca31dbaacacfbdf3a8997c86f702dd54078b0f7edccd08361ec64012b404ac21234fabe9b55bbb988b7fa325eb67ab52858a867ae6f759e39b1123a2f5a867cb9aeed8aae8a5c3cbee932a1", 0x10f0, r8}, 0x38) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000004c0), &(0x7f0000000640), 0x16c5, r8}, 0x38) recvmsg(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000003540)=""/102, 0x66}, {&(0x7f0000001040)=""/4079, 0xfef}, {&(0x7f0000000440)=""/84, 0x54}, {&(0x7f00000037c0)=""/4080, 0xff0}, {&(0x7f0000000840)=""/225, 0xe1}], 0x5}, 0x0) sendmsg$inet(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000fc0)="5c00000012006bab9a3fe3d86e17aa0a046b4877c4aaf68187bae53dca2ba35bda6a876c1d0048007ea608649e7524765f0ef82e3c0000a705259a3651f60a84c9f4d4938037e70e4509c5bb00000000e513aeac9bf2bee150d5fe86", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) add_key$keyring(&(0x7f0000000000), &(0x7f00000000c0)={'syz', 0x2}, 0x0, 0x0, r5) syz_emit_ethernet(0x105, &(0x7f0000002040)={@multicast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @void, {@llc_tr={0x11, {@llc={0x6, 0x4, "42ef", "ad3e1745a774b2b611de6f8784a6177631e1d5392327c5bff0267338d2ecc63e24900d31e44bd83c002d75eec09623ea3839ebd4ce9ffe7532f7961e1b0ab16502b271ba28c05f1237c1524b006f0e90bc4404705f3e20b690da3607f979adf9c9b3f1b4a7c520ef96f4f6de50a80268db314be61cbe16d3cc88c2cef4644071c4dbd3c3ab6f68f714b1ee7720808f514c02d83c00dc4a756139266d868e6a69cc2f24762eda95de8ab569d342d00d7bbe52c47cb036df1fcd18c814a077be132e28e698ab726e141587923da2d197d924f7059c325270bde8fd607a1c4692aa74c6c9e5d804f1906eb286787d39457587059a"}}}}}, &(0x7f0000000380)={0xfe, 0x1, [0x77a, 0x284, 0x7c2, 0x2fb]}) 1.496670766s ago: executing program 3 (id=1468): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000093850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4b, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x41, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x800000000003}, 0x1100, 0x5dd8, 0x0, 0x3, 0x0, 0x8, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fspick(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x8002, &(0x7f0000000300), 0x1, 0x4a3, &(0x7f00000005c0)="$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") bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) r1 = fsopen(&(0x7f0000000100)='ramfs\x00', 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c0000000014"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r3}, 0x10) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r1, 0x0, 0x0) symlinkat(&(0x7f0000000000)='.\x00', r4, &(0x7f0000000140)='./file0\x00') openat(r4, &(0x7f0000000700)='./file0/../file0\x00', 0x515a02, 0x52abe154ad664f64) 1.364410578s ago: executing program 3 (id=1470): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r0}, &(0x7f0000000240), &(0x7f0000000280)=r1}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000ab4000000060a01040000000000000000020000280900010073797a30000000000900020073797a320000000088000480100001800c000100636f756e7465720014000180090001006d6173710000000004000280600001800a0001006c696d6974000000500002800c000140000000000000000808000440000000010c00014000000000000080010c00024000000000000000090800034000000fba0c00024000000000000000000c0001400000000000000007140000001100"], 0xdc}}, 0x0) sendmsg$NFT_MSG_GETRULE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000500)={0x14, 0x19, 0xa, 0x201}, 0x14}}, 0x0) 1.331021379s ago: executing program 3 (id=1472): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000300)='./file0\x00', 0x40, &(0x7f00000003c0)={[{@nojournal_checksum}]}, 0x20, 0x507, &(0x7f0000000a40)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101042, 0x174) stat(&(0x7f0000000000)='./file1\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}) chown(&(0x7f0000000180)='./file1\x00', r1, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000400)=0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000040000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000180)='sys_enter\x00', r6}, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f0000000a40)='GPL\x00') getgroups(0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000005c0)={r4, r0, 0x1b, 0x0, @val=@uprobe_multi={&(0x7f00000002c0)='./file0\x00', &(0x7f0000000380)=[0x100, 0x7, 0xa, 0x8, 0x38], &(0x7f0000000640)=[0x4, 0x4, 0x4, 0x4, 0x1, 0x3, 0x3, 0x2, 0x2, 0x5], 0x5, 0x5, 0x0, r5}}, 0x40) ioctl$F2FS_IOC_GARBAGE_COLLECT(r3, 0x4004f506, &(0x7f00000006c0)=0x3) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000600)={0xffffffffffffffff}) recvmsg(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/249, 0xf9}], 0x1}, 0x0) r8 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r8, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000140)=[{0x20, 0x0, 0x0, 0xfffff010}, {0x6, 0x0, 0x0, 0x4}]}, 0x10) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x67, &(0x7f0000000080)=0x9, 0x4) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @mcast2, 0x4}, 0x1c) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) 947.653365ms ago: executing program 4 (id=1475): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a000000020000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x7a, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @lirc_mode2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001a40)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c00038008000140000000000800024000000000180003801400010076657468305f746f5f6873720000000058000000160a0101000b000000000000010000000900020073797a32000000000900010073797a30000000002c000380180003801400010076657468305f746f5f687372000000000800024000440000080001"], 0xf8}}, 0x0) 883.347396ms ago: executing program 1 (id=1476): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xd}}, 0x10) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) sendto$inet(r0, 0x0, 0x0, 0xc806, &(0x7f0000000180)={0x2, 0x4e21, @multicast1}, 0x10) sendto$inet(r0, &(0x7f0000000100)='J', 0xfdbe, 0x4004084, 0x0, 0x11000a00) (fail_nth: 1) 601.72427ms ago: executing program 1 (id=1478): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b701000000000000850000006d0000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r0, 0x0, 0x5}, 0x18) syz_read_part_table(0x1050, &(0x7f0000000000)="$eJzsz7sNwkAQBNA5G38IgBacUQEhZVAP/RDRHaGRfSA6AIL3ktOcZlfa8FtNdudkfKXjPaep7bohczKsX4+UNNmXbNc4Ld0xactSSffes6lPqTvnOrvO9CW5flqHpK+hz+X2rTMBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4J89AwAA//9rDgef") 572.127381ms ago: executing program 4 (id=1479): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f0000000200)={[{@lazytime}, {@nomblk_io_submit}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2e}}, {@nombcache}, {@quota}, {@quota}]}, 0xff, 0x443, &(0x7f0000000940)="$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") r1 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) ftruncate(r1, 0x2007ffc) sendfile(r1, r1, 0x0, 0x800000009) 443.377393ms ago: executing program 0 (id=1480): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x18) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r3, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) close_range(r2, 0xffffffffffffffff, 0x0) 442.909993ms ago: executing program 3 (id=1481): pipe2(&(0x7f0000001cc0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',access=', @ANYRESDEC=0x0]) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0700000004000000000800000100008020000000b1eb6874b75b1be129bcacb1343c72be4554521394fa7b11607031976eb209a09e0f84e12c3cfa63f69fa6663a8bea902b76aab34224079aae56e1bde2e50298be930d83fe52ef5d238cd8bb7f0718d3e195a77217393b121e9275cebb91b926a4d5b8ef0eba4f9726a9f22e7b0912cb12a4bb2977bedd2c7e3f92ab052ee84d694afb7f86307ff631794cad", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x808003, &(0x7f0000000000), 0x3, 0x4e9, &(0x7f00000000c0)="$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") getpid() r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$RTC_WKALM_SET(r2, 0x4028700f, &(0x7f0000000080)={0x1, 0x1, {0x21, 0x16, 0x15, 0x0, 0x8, 0x1001, 0xd, 0x16a, 0x1}}) process_madvise(0xffffffffffffffff, 0x0, 0x0, 0x14, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, 0x0, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @void, @value}, 0x94) syz_clone(0x4000, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r6}, 0x10) r7 = inotify_init1(0x0) inotify_add_watch(r7, &(0x7f0000000400)='.\x00', 0xa00000a1) close(r7) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000540)='./bus\x00', 0x8800, &(0x7f00000006c0)={[{@errors_remount}, {@sysvgroups}, {@minixdf}]}, 0x1, 0x50c, &(0x7f0000001000)="$eJzs3c9vG1kdAPCvnThx0uwmu+wBEOyW3YWCqjqJuxut9gDLEaGVEHsEqRsSN4pix1HsLJvQQ3rmikQlTvTIH8C5Jw7cuCC4cSkHJH5EoAaJg9GMJ6mb2o3VJHYUfz7SaObNm/r7fXH8Xuc59gtgZF2PiP2ImIiITyNiNjufy7b4qL0l1z05uLdyeHBvJRet1if/zKX1ybno+DeJa9ljFiPihw8jfpJ7Pm5jd29juVqtbGfl+WZta76xu3drvba8VlmrbJbLS4tLCx/cfr98bm19qzaRHX318R/2v/WzJK2Z7ExnO85Tu+mF4ziJ8Yj4/kUEG4KxrD0Tw06El5KPiNcj4u309T8bY+mzCQBcZa3WbLRmO8sAwFWXT+fAcvlSNhcwE/l8qdSew3sjpvPVeqN58259Z3O1PVc2F4X83fVqZSGbK5yLQi4pL6bHT8vlE+XbEfFaRPxiciotl1bq1dVh/scHAEbYtRPj/38m2+M/AHDFFYedAAAwcD3G//1B5wEADI77fwAYPcZ/ABg97fF/athpAAAD5P4fAEaP8R8ARsoPPv442VqH2fdfr362u7NR/+zWaqWxUartrJRW6ttbpbV6fS39zp7aaY9Xrde3Ft+Lnc/nvr3VaM43dvfu1Oo7m8076fd636kU0qt8sgAAhum1tx79OZeMyB9OpVt0rOVQGGpmwEXLDzsBYGjGhp0AMDRW+4LRdYZ7fNMDcEV0WaL3GcVuHxBqtVqti0sJuGA3vmT+H0ZVx/y/vwKGEWP+H0aX+X8YXa1Wrt81/6PfCwGAy80cP9Dj/f/Xs/1vsjcHfrx68ooHF5kVAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAXG5H6/+WsrXAZyKfL5UiXomIuSjk7q5XKwsR8WpE/GmyMJmUF4ecMwBwVvm/5bL1v27MvjvzTNWb144PJyLip7/65JefLzeb23+MmMj9a/LofPNBdr48+OwBgNMdjdPpvuNG/snBvZWjbZD5/P27EVFsxz88mIjD4/jjMZ7ui1GIiOl/57JyW65j7uIs9u9HxBe7tT8XM+kcSHvl05Pxk9ivDDR+/pn4+bSuvU9+Fl84h1xg1DxK+p+Pur3+8nE93Xd//RfTHurssv4veaiVw7QPfBr/qP8b69H/Xe83xnu/+177aOr5uvsRXx6POIp92NH/HMXP9Yj/bp/x//KVN9/uVdf6dcSN6B6/M9Z8s7Y139jdu7VeW16rrFU2y+WlxaWFD26/X55P56jne48G//jw5qu96pL2T/eIXzyl/V/vs/0P//fpj772gvjffKdb/Hy88YL4yZj4jT7jL0//ttirLom/2qP9pz3/N/uM//ive88tGw4ADE9jd29juVqtbI/kQfR38e+zH9alyHmkD5Jn4RKk0fXgO4OKNRHdq37+TvvXdDKi8xe71XqpWL16jPOYdQMug+MXfUT8d9jJAAAAAAAAAAAAAAAAXQ3iE0vDbiMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABX1/8DAAD//9RMyv0=") openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x107042, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000005c0)=ANY=[@ANYRES8=r8, @ANYRES16=r3, @ANYBLOB="c4017141bc5eb5624d5644bac4f38567ed4987e702248cb0d3b83332ea6e70c9935d38ced8b99eedf87e3f64a1fad6a70672af85182fb91210ac1f873027325da388e213bde5a7bac36363", @ANYRES8=r5], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r10}, 0x10) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x118}}, 0x0) 439.891933ms ago: executing program 0 (id=1482): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000006"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000e00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000440)=@framed, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) r4 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000080)="2e00000038000511d25a80698c63940d0124fc602f6e35400c000200001ec00037153e370a00018025581d00d1bd", 0x2e}], 0x1, 0x0, 0x0, 0x39c}, 0x0) socket$unix(0x1, 0x2, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468"], 0xa8}}, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x8000, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000080)=0xe) ioctl$TIOCSLCKTRMIOS(r5, 0x5457, &(0x7f0000000000)) r6 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f0000000700)={@val={0x8, 0x800}, @val={0x7, 0x0, 0x0, 0x7, 0x14}, @ipv4=@udp={{0x5, 0x4, 0x3, 0x1b, 0xfc0, 0x66, 0x0, 0x40, 0x11, 0x0, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x1a}}, {0x4e23, 0x4e22, 0xfac, 0x0, @gue={{0x2, 0x1, 0x2, 0xe, 0x0, @val=0x80}, "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"}}}}, 0xfce) 417.373893ms ago: executing program 1 (id=1483): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r0}, &(0x7f0000000240), &(0x7f0000000280)=r1}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000ab4000000060a01040000000000000000020000280900010073797a30000000000900020073797a320000000088000480100001800c000100636f756e7465720014000180090001006d6173710000000004000280600001800a0001006c696d6974000000500002800c000140000000000000000808000440000000010c00014000000000000080010c00024000000000000000090800034000000fba0c00024000000000000000000c000140000000000000000714000000110001"], 0xdc}}, 0x0) sendmsg$NFT_MSG_GETRULE(r2, 0x0, 0x0) 409.063013ms ago: executing program 4 (id=1484): bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x12, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000001"], 0x0, 0x9, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @cgroup_sock_addr=0xf, 0xffffffffffffffff, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xa, @void, @value}, 0x94) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000), 0x8) r1 = socket$packet(0x11, 0x2, 0x300) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r2, 0x0, 0x60, &(0x7f0000000500)={'filter\x00', 0x7, 0x7fffffe, 0x3e8, 0xe8, 0x0, 0x1f8, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@empty, @empty, 0x0, 0xffffffff, 0xa, 0xe, {@empty, {[0xff, 0x0, 0x0, 0x0, 0x0, 0xff]}}, {@empty, {[0x0, 0x0, 0xff]}}, 0x0, 0x401, 0x1, 0x0, 0x6, 0x9, 'syzkaller1\x00', 'ip6gretap0\x00', {0xff}, {}, 0x0, 0xc30184ff0a93acbb}, 0xc0, 0xe8}, @unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x2}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@broadcast, @mac=@remote, @loopback, @local, 0x4, 0xfffffffe}}}, {{@uncond, 0xc0, 0x108}, @unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00', 0x0, 0x2, {0x9d}}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000), 0x8) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='kfree\x00', r3}, 0x18) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r4 = perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec850000007d000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x1) r5 = creat(&(0x7f00000000c0)='./file0\x00', 0x1f4) r6 = dup2(r5, r5) ioctl$BLKTRACESETUP(r6, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x200000a, 0x1, 0x8}) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000000800000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x10) ioctl$BLKTRACESETUP(r6, 0x1276, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) close(r4) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e00000004000000080000000b"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sendmsg$nl_route_sched(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@newtaction={0x18, 0x30, 0xb, 0x0, 0xfffffffe, {}, [{0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4004000}, 0x10000000) 328.326945ms ago: executing program 1 (id=1485): r0 = fsopen(&(0x7f0000000440)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0x0) 327.746474ms ago: executing program 1 (id=1486): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000ff0f000007"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000004080)={{r0}, &(0x7f0000004000), &(0x7f0000004040)}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='kfree\x00', r1, 0x0, 0x8000000000000}, 0x18) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000008da4b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000800)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000200)='sys_enter\x00', r2}, 0x10) epoll_create(0x8) r3 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000680), 0x80c02, 0x0) write$cgroup_int(r3, 0x0, 0x2) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000ff0f000007"], 0x50) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000004080)={{r0}, &(0x7f0000004000), &(0x7f0000004040)}, 0x20) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='kfree\x00', r1, 0x0, 0x8000000000000}, 0x18) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000008da4b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000800)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, @void, @value}, 0x94) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000200)='sys_enter\x00', r2}, 0x10) (async) epoll_create(0x8) (async) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000680), 0x80c02, 0x0) (async) write$cgroup_int(r3, 0x0, 0x2) (async) 300.284465ms ago: executing program 1 (id=1487): r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x800000000003}, 0x1100, 0x5dd8, 0x0, 0x5, 0x0, 0x8, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="5400000010000104000000000000000100000000", @ANYRES32=0x0, @ANYBLOB="fff00000000000002c0012800e00010069703667726574617000000018000280140007002001001000000000000000000000000208000a00"], 0x54}}, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x42, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_bp={0x0, 0x2}, 0x1100, 0x5dd9, 0x0, 0x5, 0x0, 0x8, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2042, 0x0) ioctl$AUTOFS_IOC_FAIL(r3, 0x4c80, 0x7000000) 299.361605ms ago: executing program 0 (id=1488): bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000093850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4b, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x41, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x800000000003}, 0x1100, 0x5dd8, 0x0, 0x3, 0x0, 0x8, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fspick(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) r0 = fsopen(&(0x7f0000000100)='ramfs\x00', 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c0000000014"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r0, 0x0, 0x0) symlinkat(&(0x7f0000000000)='.\x00', r3, &(0x7f0000000140)='./file0\x00') openat(r3, &(0x7f0000000700)='./file0/../file0\x00', 0x515a02, 0x52abe154ad664f64) 191.209417ms ago: executing program 0 (id=1489): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001200)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0b0000001f00000002040000ff030000"], 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000001c0)={r2, 0x0, 0x0}, 0x20) 159.903338ms ago: executing program 3 (id=1490): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b70400000000000085"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1, 0x0, 0x101}, 0x18) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x3}, 0x1c) sendto$inet6(r2, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) 139.060638ms ago: executing program 3 (id=1491): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000300)='./file0\x00', 0x40, &(0x7f00000003c0)={[{@nojournal_checksum}]}, 0x20, 0x507, &(0x7f0000000a40)="$eJzs3c9vI1cdAPDvTOJNmk2bFCoVENClFBa0WjvxtlHVC+UCQlUlRMWJQxoSbxTFjqPYKU1Yqcn/gEQlDghOnDkgcajUE0cEN7j1Ug5IBVagzUocjMY/stmNHYdNYnfjz0eanXnzJvN9z9a85/3uxi+AkXUtIvYi4kpEvB0RM+3zSXuL11tbdt29u3eWD+7eWU6i0Xjrn0mzPjsXR34mc7V9z8mI+MF3I36cHI9b29ldXyqXS1vtcqFe2SzUdnZvrlWWVkurpY1icWF+Ye7VW68Uz62vL1R++8l31t744Qe//9LHf9775k+zZk2364724zy1up47jJMZj4g3LiLYEIy1+3Nl2A3hsaQR8ZmIeLH5/M/EWPPdPJ0ujzUA8ARoNGaiMXO0DABcdmkzB5ak+XYuYDrSNJ9v5fCei6m0XK3Vb9yubm+stHJls5FLb6+VS3PtXOFs5JKsPP9edvygXIyHy7ci4tmI+NnEU81yfvn0eQYA4HxdfWT+/89Ea/4HAC65yX4XLA6mHQDA4PSd/wGAS8f8DwCjx/wPAKPH/A8Ao8f8DwCj5qPO/D92rOrq4FsDAFy477/5ZrY1Dtrff73yzs72evWdmyul2nq+sr2cX65ubeZXq9XVcim/XK30u1+5Wt2cfzm23y3US7V6obazu1ipbm/UF5vf671Yyg2kVwDASZ594cO/JhGx99pTzS2OrOVgrobLLR12A4ChOZ7zB0aFb+GG0eXv+EC/tTx7/hfh9x8jWOO9x/gh4Lxd/7z8P4wq+X8YXfL/MLrk/2F0NRpJrzX/08NLAIBLRY4fGOi//wMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMAlMd3cZo+U0zSfj3g6ImYjl9xeK5fmIuKZiPjLRG4iK88PtcUAwNmlf0/a639dn3lp+tHaK8n9ieY+In7yi7d+/u5Svb41n53/1+H5+vvt88VhtB8A6KczT3fm8Y57d+8sd7ZBtueTb7cWF83iHrS3Vs14jGe7P01GLiKm/p20ym3Z55Wxc4i/tx8Rn+vW/6SZG5ltr3z6aPws9tMDjZ8+FD9t1rX22Wvx2WN3nugZs99arzAqPszGn9e7PX9pXGvuJ7sufjzZHKHOrjP+HRwb/zrP+2RzrOk2/l07bYyX//C9nnX7EV8Y7xY/OYyf9Ij/Uv/Q38r++OiLX36x1wWNX0Vcj+7xj8Yq1CubhdrO7s21ytJqabW0USwuzC/MvXrrlWKhmaMudDLVx/3jtRvP9Oz/byKmesSf7NP/r53Y9cbhAPzr/779o6/0ir8f8Y2vdn//nzshfjYnfv3E+A8sTf2u5/LdWfyVVv/3/9/3/8Yp43/8t92VU14KAAxAbWd3falcLm2d60EuzvmGRw6SC2qzgyf14H6jpc/F2efxs8Z6vp0y63rNH3/5wfNZ5afkZTnjwZAHJuDCPXjoh90SAAAAAAAAAAAAAACglwv/daJ02D0EAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgMvtfAAAA///Ias/1") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101042, 0x174) stat(&(0x7f0000000000)='./file1\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}) chown(&(0x7f0000000180)='./file1\x00', r1, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000400)=0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000040000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000180)='sys_enter\x00', r6}, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f0000000a40)='GPL\x00') getgroups(0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000005c0)={r4, r0, 0x1b, 0x0, @val=@uprobe_multi={&(0x7f00000002c0)='./file0\x00', &(0x7f0000000380)=[0x100, 0x7, 0xa, 0x8, 0x38], &(0x7f0000000640)=[0x4, 0x4, 0x4, 0x4, 0x1, 0x3, 0x3, 0x2, 0x2, 0x5], 0x5, 0x5, 0x0, r5}}, 0x40) ioctl$F2FS_IOC_GARBAGE_COLLECT(r3, 0x4004f506, &(0x7f00000006c0)=0x3) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000600)={0xffffffffffffffff}) recvmsg(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/249, 0xf9}], 0x1}, 0x0) r8 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r8, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000140)=[{0x20, 0x0, 0x0, 0xfffff010}, {0x6, 0x0, 0x0, 0x4}]}, 0x10) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x67, &(0x7f0000000080)=0x9, 0x4) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @mcast2, 0x4}, 0x1c) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) 69.140379ms ago: executing program 0 (id=1492): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x18) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r3, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) close_range(r2, 0xffffffffffffffff, 0x0) 68.542239ms ago: executing program 0 (id=1493): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) r1 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3f, 0x1, 0x0, 0x0, 0x0, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, @perf_bp={0x0, 0x13}, 0x400, 0xffffffff, 0x6, 0x7, 0x2, 0x1, 0xfff9, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.avg_queue_size\x00', 0x26e1, 0x0) close(r3) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x8914, &(0x7f0000000080)) write$cgroup_pid(r3, &(0x7f00000005c0), 0x12) (fail_nth: 1) 0s ago: executing program 4 (id=1494): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b701000000000000850000006d0000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r0, 0x0, 0x5}, 0x18) syz_read_part_table(0x1050, &(0x7f0000000000)="$eJzsz7sNwkAQBNA5G38IgBacUQEhZVAP/RDRHaGRfSA6AIL3ktOcZlfa8FtNdudkfKXjPaep7bohczKsX4+UNNmXbNc4Ld0xactSSffes6lPqTvnOrvO9CW5flqHpK+hz+X2rTMBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4J89AwAA//9rDgef") kernel console output (not intermixed with test programs): id=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5974 comm="syz.3.873" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fd461150887 code=0x7ffc0000 [ 85.936885][ T29] audit: type=1326 audit(1747404042.725:3964): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5974 comm="syz.3.873" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7fd4611507fc code=0x7ffc0000 [ 85.962157][ T29] audit: type=1326 audit(1747404042.725:3965): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5974 comm="syz.3.873" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7fd461150734 code=0x7ffc0000 [ 86.024103][ T5983] netlink: 'syz.5.877': attribute type 12 has an invalid length. [ 86.053370][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 86.086784][ T5985] 9pnet_fd: Insufficient options for proto=fd [ 86.098489][ T5983] loop5: detected capacity change from 0 to 8192 [ 86.147302][ T5985] netlink: 52 bytes leftover after parsing attributes in process `syz.4.874'. [ 86.152090][ T5983] loop5: p4 < > [ 86.179947][ T6002] netlink: 8 bytes leftover after parsing attributes in process `syz.3.884'. [ 86.200200][ T5997] loop1: detected capacity change from 0 to 512 [ 86.386726][ T6025] loop0: detected capacity change from 0 to 4096 [ 86.406114][ T6025] EXT4-fs: Ignoring removed nomblk_io_submit option [ 86.417012][ T6025] EXT4-fs (loop0): Invalid log cluster size: 2147483654 [ 86.452386][ T6025] capability: warning: `syz.0.895' uses 32-bit capabilities (legacy support in use) [ 86.466873][ T6024] loop4: detected capacity change from 0 to 8192 [ 86.478447][ T6025] vhci_hcd: invalid port number 65 [ 86.485092][ T6027] loop3: detected capacity change from 0 to 2048 [ 86.492118][ T6030] netlink: 8 bytes leftover after parsing attributes in process `syz.1.897'. [ 86.541290][ T6027] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 86.679266][ T3326] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 86.716514][ T6043] SELinux: security_context_str_to_sid (defcontext) failed with errno=-22 [ 86.757669][ T6041] loop0: detected capacity change from 0 to 512 [ 86.933100][ T6066] loop1: detected capacity change from 0 to 512 [ 86.953909][ T6069] loop5: detected capacity change from 0 to 512 [ 86.990094][ T6069] EXT4-fs (loop5): 1 orphan inode deleted [ 87.001926][ T6071] loop4: detected capacity change from 0 to 512 [ 87.011767][ T6069] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 87.034167][ T5779] EXT4-fs error (device loop5): ext4_release_dquot:6971: comm kworker/u8:47: Failed to release dquot type 1 [ 87.056769][ T6066] EXT4-fs (loop1): 1 orphan inode deleted [ 87.068446][ T6069] ext4 filesystem being mounted at /176/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 87.069824][ T6066] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 87.107600][ T2270] EXT4-fs error (device loop1): ext4_release_dquot:6971: comm kworker/u8:9: Failed to release dquot type 1 [ 87.124748][ T6066] ext4 filesystem being mounted at /188/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 87.161654][ T6077] netlink: 'syz.0.916': attribute type 4 has an invalid length. [ 87.241034][ T6083] SELinux: Context system_u:object_r:fsadm_exec_t:s0 is not valid (left unmapped). [ 87.438014][ T3677] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 87.542427][ T6100] loop5: detected capacity change from 0 to 512 [ 87.564088][ T6100] EXT4-fs: Ignoring removed nomblk_io_submit option [ 87.572356][ T6100] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 87.588424][ T6100] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 87.682465][ T6100] EXT4-fs (loop5): 1 truncate cleaned up [ 87.764061][ T6100] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 87.827494][ T3325] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 87.841750][ T3677] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 87.888734][ T6118] netlink: 12 bytes leftover after parsing attributes in process `syz.5.931'. [ 87.901418][ T6113] loop4: detected capacity change from 0 to 8192 [ 87.919527][ T6116] loop1: detected capacity change from 0 to 512 [ 87.930516][ T6116] EXT4-fs (loop1): mounted filesystem 00800000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 87.982414][ T6125] netlink: 24 bytes leftover after parsing attributes in process `syz.0.933'. [ 88.146844][ T6116] EXT4-fs error (device loop1): ext4_ext_check_inode:524: inode #15: comm syz.1.930: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 88.200310][ T3325] EXT4-fs (loop1): unmounting filesystem 00800000-0000-0000-0000-000000000000. [ 88.281615][ T6144] loop5: detected capacity change from 0 to 512 [ 88.302708][ T6144] EXT4-fs (loop5): 1 orphan inode deleted [ 88.309939][ T6144] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 88.323531][ T5759] EXT4-fs error (device loop5): ext4_release_dquot:6971: comm kworker/u8:27: Failed to release dquot type 1 [ 88.323981][ T6144] ext4 filesystem being mounted at /182/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 88.338844][ T6149] usb usb2: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 88.355119][ T6149] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 88.532400][ T6149] vhci_hcd: default hub control req: 6314 v0008 i0002 l0 [ 89.059190][ T3677] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 89.083873][ T6175] netdevsim netdevsim4 ªªªªªª: renamed from netdevsim0 [ 89.181927][ T6183] loop5: detected capacity change from 0 to 512 [ 89.200182][ T6183] EXT4-fs (loop5): mounted filesystem 00800000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 89.223865][ T6188] netlink: 4 bytes leftover after parsing attributes in process `syz.0.955'. [ 89.400938][ T6183] EXT4-fs error (device loop5): ext4_ext_check_inode:524: inode #15: comm syz.5.952: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 89.691666][ T6208] loop0: detected capacity change from 0 to 512 [ 89.760178][ T3677] EXT4-fs (loop5): unmounting filesystem 00800000-0000-0000-0000-000000000000. [ 89.830391][ T6208] EXT4-fs (loop0): 1 orphan inode deleted [ 89.843865][ T6208] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 89.863841][ T6219] loop4: detected capacity change from 0 to 512 [ 89.874534][ T6208] ext4 filesystem being mounted at /185/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 89.886760][ T5779] EXT4-fs error (device loop0): ext4_release_dquot:6971: comm kworker/u8:47: Failed to release dquot type 1 [ 90.099004][ T6219] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 90.200056][ T6219] ext4 filesystem being mounted at /206/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 90.448019][ T3319] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 90.512014][ T6239] netlink: 'syz.4.971': attribute type 12 has an invalid length. [ 90.586053][ T6239] loop4: detected capacity change from 0 to 8192 [ 90.597051][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 90.619180][ T6245] loop1: detected capacity change from 0 to 512 [ 90.627707][ T6239] loop4: p4 < > [ 90.633843][ T6245] EXT4-fs (loop1): mounted filesystem 00800000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 90.702691][ T6259] loop3: detected capacity change from 0 to 1024 [ 90.711247][ T6259] EXT4-fs (loop3): couldn't mount as ext2 due to feature incompatibilities [ 90.724561][ T6260] EXT4-fs error (device loop1): ext4_ext_check_inode:524: inode #15: comm syz.1.976: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 90.758393][ T6263] FAULT_INJECTION: forcing a failure. [ 90.758393][ T6263] name failslab, interval 1, probability 0, space 0, times 0 [ 90.771149][ T6263] CPU: 1 UID: 0 PID: 6263 Comm: syz.5.983 Not tainted 6.15.0-rc6-syzkaller-00188-gfee3e843b309 #0 PREEMPT(voluntary) [ 90.771178][ T6263] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 90.771233][ T6263] Call Trace: [ 90.771242][ T6263] [ 90.771251][ T6263] __dump_stack+0x1d/0x30 [ 90.771277][ T6263] dump_stack_lvl+0xe8/0x140 [ 90.771302][ T6263] dump_stack+0x15/0x1b [ 90.771324][ T6263] should_fail_ex+0x265/0x280 [ 90.771383][ T6263] should_failslab+0x8c/0xb0 [ 90.771423][ T6263] __kvmalloc_node_noprof+0x126/0x4d0 [ 90.771450][ T6263] ? io_alloc_cache_init+0x31/0xa0 [ 90.771488][ T6263] io_alloc_cache_init+0x31/0xa0 [ 90.771559][ T6263] io_ring_ctx_alloc+0x299/0x650 [ 90.771615][ T6263] io_uring_create+0x10f/0x610 [ 90.771696][ T6263] __se_sys_io_uring_setup+0x1f7/0x210 [ 90.771782][ T6263] __x64_sys_io_uring_setup+0x31/0x40 [ 90.771821][ T6263] x64_sys_call+0x184b/0x2fb0 [ 90.771848][ T6263] do_syscall_64+0xd0/0x1a0 [ 90.771936][ T6263] ? clear_bhb_loop+0x40/0x90 [ 90.771965][ T6263] ? clear_bhb_loop+0x40/0x90 [ 90.771991][ T6263] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 90.772076][ T6263] RIP: 0033:0x7fe5c01ee969 [ 90.772093][ T6263] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 90.772111][ T6263] RSP: 002b:00007fe5be856fc8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9 [ 90.772137][ T6263] RAX: ffffffffffffffda RBX: 00007fe5c0415fa0 RCX: 00007fe5c01ee969 [ 90.772153][ T6263] RDX: 00002000000000c0 RSI: 0000200000000780 RDI: 000000000000416f [ 90.772169][ T6263] RBP: 0000200000000780 R08: 0000000000000000 R09: 00002000000000c0 [ 90.772211][ T6263] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000001 [ 90.772226][ T6263] R13: 0000200000000100 R14: 000000000000416f R15: 00002000000000c0 [ 90.772250][ T6263] [ 91.018485][ T3325] EXT4-fs (loop1): unmounting filesystem 00800000-0000-0000-0000-000000000000. [ 91.041297][ T29] kauditd_printk_skb: 68 callbacks suppressed [ 91.041337][ T29] audit: type=1326 audit(1747404047.955:4030): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6269 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd46114e969 code=0x7ffc0000 [ 91.082106][ T6270] FAULT_INJECTION: forcing a failure. [ 91.082106][ T6270] name failslab, interval 1, probability 0, space 0, times 0 [ 91.095155][ T6270] CPU: 1 UID: 0 PID: 6270 Comm: +}[@ Not tainted 6.15.0-rc6-syzkaller-00188-gfee3e843b309 #0 PREEMPT(voluntary) [ 91.095235][ T6270] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 91.095251][ T6270] Call Trace: [ 91.095260][ T6270] [ 91.095269][ T6270] __dump_stack+0x1d/0x30 [ 91.095294][ T6270] dump_stack_lvl+0xe8/0x140 [ 91.095313][ T6270] dump_stack+0x15/0x1b [ 91.095359][ T6270] should_fail_ex+0x265/0x280 [ 91.095399][ T6270] should_failslab+0x8c/0xb0 [ 91.095504][ T6270] kmem_cache_alloc_noprof+0x50/0x310 [ 91.095526][ T6270] ? security_inode_alloc+0x37/0x100 [ 91.095576][ T6270] security_inode_alloc+0x37/0x100 [ 91.095608][ T6270] inode_init_always_gfp+0x4b7/0x500 [ 91.095642][ T6270] ? __pfx_shmem_alloc_inode+0x10/0x10 [ 91.095671][ T6270] alloc_inode+0x58/0x170 [ 91.095698][ T6270] new_inode+0x1d/0xe0 [ 91.095796][ T6270] shmem_get_inode+0x244/0x750 [ 91.095827][ T6270] __shmem_file_setup+0x122/0x1f0 [ 91.095861][ T6270] shmem_file_setup+0x3b/0x50 [ 91.095887][ T6270] __se_sys_memfd_create+0x2c3/0x590 [ 91.095965][ T6270] __x64_sys_memfd_create+0x31/0x40 [ 91.096054][ T6270] x64_sys_call+0x122f/0x2fb0 [ 91.096077][ T6270] do_syscall_64+0xd0/0x1a0 [ 91.096108][ T6270] ? clear_bhb_loop+0x40/0x90 [ 91.096135][ T6270] ? clear_bhb_loop+0x40/0x90 [ 91.096215][ T6270] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 91.096236][ T6270] RIP: 0033:0x7fd46114e969 [ 91.096250][ T6270] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 91.096268][ T6270] RSP: 002b:00007fd45f7b6d68 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 91.096321][ T6270] RAX: ffffffffffffffda RBX: 000000000000060f RCX: 00007fd46114e969 [ 91.096336][ T6270] RDX: 00007fd45f7b6dec RSI: 0000000000000000 RDI: 00007fd4611d1444 [ 91.096351][ T6270] RBP: 0000200000000740 R08: 00007fd45f7b6b07 R09: 0000000000000000 [ 91.096365][ T6270] R10: 000000000000000a R11: 0000000000000202 R12: 0000000000000001 [ 91.096380][ T6270] R13: 00007fd45f7b6dec R14: 00007fd45f7b6df0 R15: 00007ffe12cf0e28 [ 91.096401][ T6270] [ 91.323578][ T29] audit: type=1326 audit(1747404047.995:4031): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6269 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fd46114d2d0 code=0x7ffc0000 [ 91.347765][ T29] audit: type=1326 audit(1747404047.995:4032): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6269 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fd46114d41f code=0x7ffc0000 [ 91.372062][ T29] audit: type=1326 audit(1747404047.995:4033): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6269 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fd46114e969 code=0x7ffc0000 [ 91.405213][ T6262] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=32768 sclass=netlink_route_socket pid=6262 comm=syz.0.981 [ 91.405457][ T29] audit: type=1326 audit(1747404048.295:4034): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6269 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7fd46114d37c code=0x7ffc0000 [ 91.443494][ T29] audit: type=1326 audit(1747404048.295:4035): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6269 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fd46114d41f code=0x7ffc0000 [ 91.470239][ T29] audit: type=1326 audit(1747404048.295:4036): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6269 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fd46114d5ca code=0x7ffc0000 [ 91.495547][ T29] audit: type=1326 audit(1747404048.295:4037): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6269 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd46114e969 code=0x7ffc0000 [ 91.520943][ T29] audit: type=1326 audit(1747404048.295:4038): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6269 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd46114e969 code=0x7ffc0000 [ 91.562531][ T29] audit: type=1400 audit(1747404048.395:4039): avc: denied { read write } for pid=6256 comm="syz.0.981" name="loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 91.721177][ T6295] loop3: detected capacity change from 0 to 8192 [ 91.775949][ T6295] loop3: p4 < > [ 91.802896][ T6298] Cannot find add_set index 3 as target [ 91.863707][ T6301] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 91.874823][ T6300] loop5: detected capacity change from 0 to 1024 [ 91.887762][ T6300] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 92.144486][ T6320] loop3: detected capacity change from 0 to 512 [ 92.157487][ T6320] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.1004: bg 0: block 393: padding at end of block bitmap is not set [ 92.175010][ T3677] EXT4-fs error (device loop5): ext4_readdir:264: inode #11: block 32: comm syz-executor: path /192/file2/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 92.175207][ T6320] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 92.203185][ T3677] EXT4-fs (loop5): Remounting filesystem read-only [ 92.209368][ T6320] EXT4-fs (loop3): 2 truncates cleaned up [ 92.222524][ T6320] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 92.251474][ T6320] wireguard1: entered promiscuous mode [ 92.257579][ T6320] wireguard1: entered allmulticast mode [ 92.536275][ T5779] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.561618][ T6334] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1008'. [ 92.648813][ T5779] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.710590][ T5779] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.760250][ T5779] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.931106][ T6360] loop4: detected capacity change from 0 to 512 [ 92.942795][ T6360] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.1017: bg 0: block 393: padding at end of block bitmap is not set [ 92.959404][ T6360] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 92.969203][ T6360] EXT4-fs (loop4): 2 truncates cleaned up [ 92.989959][ T5779] bond0 (unregistering): Released all slaves [ 93.007655][ T6360] wireguard2: entered promiscuous mode [ 93.013632][ T6360] wireguard2: entered allmulticast mode [ 93.049567][ T6367] loop0: detected capacity change from 0 to 512 [ 93.058986][ T6367] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.1018: bg 0: block 393: padding at end of block bitmap is not set [ 93.076970][ T6367] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 93.087525][ T5779] hsr_slave_0: left promiscuous mode [ 93.088333][ T6367] EXT4-fs (loop0): 2 truncates cleaned up [ 93.101157][ T5779] hsr_slave_1: left promiscuous mode [ 93.110623][ T5779] veth1_macvtap: left promiscuous mode [ 93.116809][ T5779] veth0_macvtap: left promiscuous mode [ 93.127234][ T6360] infiniband syz!: set down [ 93.132308][ T6360] infiniband syz!: added team_slave_0 [ 93.146763][ T6360] RDS/IB: syz!: added [ 93.151529][ T6360] smc: adding ib device syz! with port count 1 [ 93.168978][ T6360] smc: ib device syz! port 1 has pnetid [ 93.267190][ T6338] chnl_net:caif_netlink_parms(): no params data found [ 93.355490][ T6379] loop0: detected capacity change from 0 to 8192 [ 93.394255][ T6338] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.402284][ T6338] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.411262][ T6338] bridge_slave_0: entered allmulticast mode [ 93.419169][ T6338] bridge_slave_0: entered promiscuous mode [ 93.442250][ T6338] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.451028][ T6338] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.464040][ T6338] bridge_slave_1: entered allmulticast mode [ 93.473368][ T6338] bridge_slave_1: entered promiscuous mode [ 93.497492][ T6338] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 93.509786][ T6338] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 93.542646][ T6338] team0: Port device team_slave_0 added [ 93.552066][ T6338] team0: Port device team_slave_1 added [ 93.574442][ T6338] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 93.581996][ T6338] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 93.610761][ T6338] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 93.624057][ T6388] Cannot find add_set index 3 as target [ 93.632410][ T6338] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 93.639807][ T6338] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 93.667839][ T6338] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 93.683543][ T6388] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 93.759199][ T6338] hsr_slave_0: entered promiscuous mode [ 93.768200][ T6338] hsr_slave_1: entered promiscuous mode [ 93.777923][ T6338] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 93.788837][ T6338] Cannot create hsr debugfs directory [ 93.851166][ T6406] loop0: detected capacity change from 0 to 512 [ 93.863439][ T6406] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.1031: bg 0: block 393: padding at end of block bitmap is not set [ 93.880271][ T6338] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 93.882005][ T6406] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 93.898043][ T6406] EXT4-fs (loop0): 2 truncates cleaned up [ 93.899802][ T6338] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 93.918218][ T6406] wireguard1: entered promiscuous mode [ 93.924615][ T6406] wireguard1: entered allmulticast mode [ 93.932429][ T6338] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 93.951406][ T6338] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 93.994314][ T6406] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 93.994710][ T6338] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.013226][ T6338] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.024288][ T6338] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.032771][ T6338] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.069922][ T6338] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.082222][ T2270] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.091404][ T2270] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.110068][ T6338] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.122993][ T5759] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.132325][ T5759] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.138008][ T6413] loop0: detected capacity change from 0 to 512 [ 94.148679][ T5778] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.156531][ T5778] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.192057][ T6413] EXT4-fs (loop0): 1 orphan inode deleted [ 94.255742][ T6413] ext4 filesystem being mounted at /203/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 94.274909][ T6338] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.301789][ T2270] EXT4-fs error (device loop0): ext4_release_dquot:6971: comm kworker/u8:9: Failed to release dquot type 1 [ 94.527002][ T6437] loop0: detected capacity change from 0 to 2048 [ 94.586216][ T6437] loop0: p1 < > p4 [ 94.601334][ T6437] loop0: p4 size 8388608 extends beyond EOD, truncated [ 94.994895][ T6338] veth0_vlan: entered promiscuous mode [ 95.026835][ T6338] veth1_vlan: entered promiscuous mode [ 95.049699][ T6338] veth0_macvtap: entered promiscuous mode [ 95.058460][ T6338] veth1_macvtap: entered promiscuous mode [ 95.072680][ T6338] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.084294][ T6457] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1039'. [ 95.087433][ T6338] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.105040][ T6338] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.114285][ T6338] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.123929][ T6338] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.133396][ T6338] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.233972][ T6464] loop6: detected capacity change from 0 to 8192 [ 95.296052][ T6464] loop6: p4 < > [ 95.308646][ T6462] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=32768 sclass=netlink_route_socket pid=6462 comm=syz.0.1043 [ 95.355550][ T6471] loop3: detected capacity change from 0 to 1024 [ 95.371416][ T6471] EXT4-fs: inline encryption not supported [ 95.381190][ T6471] EXT4-fs: Ignoring removed bh option [ 95.392714][ T6471] EXT4-fs (loop3): blocks per group (131072) and clusters per group (8192) inconsistent [ 95.464922][ T6477] loop4: detected capacity change from 0 to 512 [ 95.475322][ T6477] EXT4-fs: Ignoring removed nomblk_io_submit option [ 95.485226][ T6477] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 95.503701][ T6474] loop3: detected capacity change from 0 to 8192 [ 95.510775][ T6477] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 95.534444][ T6477] EXT4-fs (loop4): 1 truncate cleaned up [ 95.590622][ T6488] loop6: detected capacity change from 0 to 512 [ 95.644478][ T6488] EXT4-fs (loop6): 1 orphan inode deleted [ 95.652163][ T6488] ext4 filesystem being mounted at /4/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 95.688030][ T5759] EXT4-fs error (device loop6): ext4_release_dquot:6971: comm kworker/u8:27: Failed to release dquot type 1 [ 95.764482][ T6497] loop0: detected capacity change from 0 to 512 [ 95.766574][ T6503] loop3: detected capacity change from 0 to 512 [ 95.784368][ T6497] EXT4-fs: Ignoring removed i_version option [ 95.790925][ T6497] EXT4-fs: Ignoring removed mblk_io_submit option [ 95.804973][ T6497] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 95.815988][ T6497] EXT4-fs (loop0): can't mount with data_err=abort, fs mounted w/o journal [ 95.826168][ T6506] netlink: 96 bytes leftover after parsing attributes in process `syz.4.1060'. [ 95.840074][ T6507] lo: entered promiscuous mode [ 95.845326][ T6507] lo: entered allmulticast mode [ 95.852272][ T6503] EXT4-fs (loop3): 1 orphan inode deleted [ 95.859760][ T6503] ext4 filesystem being mounted at /195/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 95.872024][ T5759] EXT4-fs error (device loop3): ext4_release_dquot:6971: comm kworker/u8:27: Failed to release dquot type 1 [ 96.005858][ T6524] loop4: detected capacity change from 0 to 512 [ 96.025264][ T6524] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 96.049043][ T6524] ext4 filesystem being mounted at /225/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 96.084233][ T6526] loop0: detected capacity change from 0 to 512 [ 96.133357][ T6532] loop3: detected capacity change from 0 to 512 [ 96.154838][ T6545] EXT4-fs error (device loop0): ext4_ext_check_inode:524: inode #15: comm syz.0.1068: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 96.205070][ T6546] EXT4-fs error (device loop3): ext4_ext_check_inode:524: inode #15: comm syz.3.1071: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 96.316715][ T3326] EXT4-fs error (device loop3): ext4_readdir:264: inode #2: block 3: comm syz-executor: path /197/file0: bad entry in directory: rec_len is too small for name_len - offset=24, inode=11, rec_len=20, size=4096 fake=0 [ 96.426743][ T6559] loop0: detected capacity change from 0 to 8192 [ 96.442087][ T29] kauditd_printk_skb: 683 callbacks suppressed [ 96.442105][ T29] audit: type=1326 audit(1747404053.355:4720): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6554 comm="syz.3.1077" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd46114e969 code=0x7ffc0000 [ 96.483358][ T29] audit: type=1326 audit(1747404053.395:4721): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6554 comm="syz.3.1077" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd46114e969 code=0x7ffc0000 [ 96.508608][ T29] audit: type=1326 audit(1747404053.395:4722): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6554 comm="syz.3.1077" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd46114e969 code=0x7ffc0000 [ 96.534523][ T29] audit: type=1326 audit(1747404053.395:4723): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6554 comm="syz.3.1077" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd46114e969 code=0x7ffc0000 [ 96.583374][ T6555] loop3: detected capacity change from 0 to 512 [ 96.590821][ T6555] EXT4-fs: Ignoring removed i_version option [ 96.597799][ T6555] EXT4-fs: Ignoring removed mblk_io_submit option [ 96.608235][ T6555] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 96.620614][ T6555] EXT4-fs (loop3): can't mount with data_err=abort, fs mounted w/o journal [ 96.635241][ T29] audit: type=1400 audit(1747404053.545:4724): avc: denied { associate } for pid=6554 comm="syz.3.1077" name="198" dev="tmpfs" ino=1083 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:fsadm_exec_t:s0" [ 96.693492][ T6571] loop0: detected capacity change from 0 to 512 [ 96.709884][ T6571] EXT4-fs (loop0): 1 orphan inode deleted [ 96.718720][ T6571] ext4 filesystem being mounted at /222/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 96.732631][ T5769] Quota error (device loop0): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 96.743800][ T5769] EXT4-fs error (device loop0): ext4_release_dquot:6971: comm kworker/u8:37: Failed to release dquot type 1 [ 96.744030][ T6570] loop4: detected capacity change from 0 to 512 [ 96.839261][ T6586] EXT4-fs error (device loop4): ext4_ext_check_inode:524: inode #15: comm syz.4.1085: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 96.867622][ T6588] loop1: detected capacity change from 0 to 512 [ 96.874714][ T6588] EXT4-fs: Ignoring removed nomblk_io_submit option [ 96.891321][ T6588] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 96.921411][ T6588] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 96.964164][ T6588] EXT4-fs (loop1): 1 truncate cleaned up [ 97.080265][ T6603] vlan2: entered allmulticast mode [ 97.085766][ T6603] bond0: entered allmulticast mode [ 97.210583][ T6608] loop4: detected capacity change from 0 to 512 [ 97.352770][ T6614] loop0: detected capacity change from 0 to 512 [ 97.387849][ T6602] loop1: detected capacity change from 0 to 8192 [ 97.402430][ T6614] EXT4-fs: Ignoring removed nomblk_io_submit option [ 97.489784][ T6614] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 97.510618][ T6608] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.1098: bg 0: block 393: padding at end of block bitmap is not set [ 97.527490][ T6608] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 97.536604][ T6614] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 97.561616][ T6608] EXT4-fs (loop4): 2 truncates cleaned up [ 97.568920][ T6608] EXT4-fs mount: 28 callbacks suppressed [ 97.568934][ T6608] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 97.592444][ T6614] EXT4-fs (loop0): 1 truncate cleaned up [ 97.599427][ T6614] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 97.661500][ T6624] netlink: 'syz.6.1100': attribute type 7 has an invalid length. [ 97.669848][ T6624] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1100'. [ 97.690007][ T6623] syz!: rxe_newlink: already configured on team_slave_0 [ 97.701153][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 97.713117][ T6608] wireguard3: entered promiscuous mode [ 97.719629][ T6608] wireguard3: entered allmulticast mode [ 97.845327][ T3319] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.008772][ T6637] loop6: detected capacity change from 0 to 512 [ 98.016101][ T6637] EXT4-fs: Ignoring removed nomblk_io_submit option [ 98.023765][ T6637] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 98.044351][ T6637] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 98.061292][ T6637] EXT4-fs (loop6): 1 truncate cleaned up [ 98.067812][ T6637] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 98.089601][ T6643] loop0: detected capacity change from 0 to 512 [ 98.102098][ T6643] EXT4-fs (loop0): mounted filesystem 00800000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 98.139781][ T6338] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.177945][ T29] audit: type=1326 audit(1747404055.095:4725): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6658 comm="syz.1.1113" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c1daee969 code=0x7ffc0000 [ 98.203376][ T29] audit: type=1326 audit(1747404055.095:4726): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6658 comm="syz.1.1113" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c1daee969 code=0x7ffc0000 [ 98.240721][ T6643] EXT4-fs error (device loop0): ext4_ext_check_inode:524: inode #15: comm syz.0.1105: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 98.280622][ T29] audit: type=1326 audit(1747404055.145:4727): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6658 comm="syz.1.1113" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6c1daee969 code=0x7ffc0000 [ 98.305700][ T29] audit: type=1326 audit(1747404055.145:4728): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6658 comm="syz.1.1113" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c1daee969 code=0x7ffc0000 [ 98.314233][ T6655] loop4: detected capacity change from 0 to 8192 [ 98.333528][ T6663] Cannot find add_set index 3 as target [ 98.355632][ T3317] EXT4-fs (loop0): unmounting filesystem 00800000-0000-0000-0000-000000000000. [ 98.434973][ T6663] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 98.639897][ T6683] Cannot find add_set index 3 as target [ 98.690314][ T6685] loop3: detected capacity change from 0 to 512 [ 98.697650][ T6685] EXT4-fs: Ignoring removed nomblk_io_submit option [ 98.706203][ T6685] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 98.717910][ T6683] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 98.720303][ T6685] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 98.745080][ T6685] EXT4-fs (loop3): 1 truncate cleaned up [ 98.752074][ T6685] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 98.780166][ T3326] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.802514][ T6689] loop3: detected capacity change from 0 to 512 [ 98.810217][ T6689] EXT4-fs: Ignoring removed nomblk_io_submit option [ 98.817902][ T6689] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 98.830721][ T6689] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 98.847861][ T6689] EXT4-fs (loop3): 1 truncate cleaned up [ 98.854546][ T6689] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 98.888032][ T3326] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.927668][ T6694] loop3: detected capacity change from 0 to 512 [ 98.936120][ T6694] EXT4-fs: Ignoring removed nomblk_io_submit option [ 98.944131][ T6694] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 98.959517][ T6694] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 98.976406][ T6694] EXT4-fs (loop3): 1 truncate cleaned up [ 98.983507][ T6694] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 99.013812][ T3326] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.082484][ T6699] loop1: detected capacity change from 0 to 512 [ 99.102624][ T6699] EXT4-fs (loop1): mounted filesystem 00800000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 99.178122][ T6704] EXT4-fs error (device loop1): ext4_ext_check_inode:524: inode #15: comm syz.1.1125: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 99.298020][ T3325] EXT4-fs (loop1): unmounting filesystem 00800000-0000-0000-0000-000000000000. [ 99.487020][ T6721] loop4: detected capacity change from 0 to 512 [ 99.495184][ T6721] EXT4-fs: Ignoring removed nomblk_io_submit option [ 99.503206][ T6721] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 99.537759][ T6723] FAULT_INJECTION: forcing a failure. [ 99.537759][ T6723] name failslab, interval 1, probability 0, space 0, times 0 [ 99.552474][ T6723] CPU: 0 UID: 0 PID: 6723 Comm: syz.0.1133 Not tainted 6.15.0-rc6-syzkaller-00188-gfee3e843b309 #0 PREEMPT(voluntary) [ 99.552566][ T6723] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 99.552579][ T6723] Call Trace: [ 99.552588][ T6723] [ 99.552598][ T6723] __dump_stack+0x1d/0x30 [ 99.552625][ T6723] dump_stack_lvl+0xe8/0x140 [ 99.552651][ T6723] dump_stack+0x15/0x1b [ 99.552672][ T6723] should_fail_ex+0x265/0x280 [ 99.552755][ T6723] should_failslab+0x8c/0xb0 [ 99.552795][ T6723] kmem_cache_alloc_lru_noprof+0x55/0x310 [ 99.552821][ T6723] ? __d_alloc+0x3d/0x350 [ 99.552844][ T6723] __d_alloc+0x3d/0x350 [ 99.552870][ T6723] d_alloc_pseudo+0x1e/0x80 [ 99.552887][ T6723] alloc_file_pseudo+0x71/0x160 [ 99.552906][ T6723] ? alloc_fd+0x38a/0x3c0 [ 99.552938][ T6723] anon_inode_getfile_fmode+0xa5/0x140 [ 99.552981][ T6723] do_eventfd+0x116/0x1b0 [ 99.553078][ T6723] __x64_sys_eventfd2+0x2d/0x40 [ 99.553100][ T6723] x64_sys_call+0x1284/0x2fb0 [ 99.553121][ T6723] do_syscall_64+0xd0/0x1a0 [ 99.553145][ T6723] ? clear_bhb_loop+0x40/0x90 [ 99.553223][ T6723] ? clear_bhb_loop+0x40/0x90 [ 99.553256][ T6723] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 99.553283][ T6723] RIP: 0033:0x7f73ef26e969 [ 99.553302][ T6723] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 99.553325][ T6723] RSP: 002b:00007f73ed8d7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000122 [ 99.553345][ T6723] RAX: ffffffffffffffda RBX: 00007f73ef495fa0 RCX: 00007f73ef26e969 [ 99.553360][ T6723] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 99.553420][ T6723] RBP: 00007f73ed8d7090 R08: 0000000000000000 R09: 0000000000000000 [ 99.553435][ T6723] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 99.553468][ T6723] R13: 0000000000000000 R14: 00007f73ef495fa0 R15: 00007ffcab9e5b28 [ 99.553491][ T6723] [ 99.787232][ T6724] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=32768 sclass=netlink_route_socket pid=6724 comm=syz.1.1129 [ 99.821302][ T6721] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 99.839527][ T6721] EXT4-fs (loop4): 1 truncate cleaned up [ 99.847193][ T6721] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 99.883507][ T6727] SELinux: syz.0.1134 (6727) set checkreqprot to 1. This is no longer supported. [ 99.909886][ T3319] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.192875][ T6742] loop3: detected capacity change from 0 to 512 [ 100.209069][ T6742] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.1140: bg 0: block 393: padding at end of block bitmap is not set [ 100.228687][ T6744] loop1: detected capacity change from 0 to 512 [ 100.239118][ T6742] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 100.252126][ T6744] EXT4-fs (loop1): mounted filesystem 00800000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 100.261805][ T6742] EXT4-fs (loop3): 2 truncates cleaned up [ 100.274631][ T6742] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 100.304585][ T6742] wireguard2: entered promiscuous mode [ 100.311078][ T6742] wireguard2: entered allmulticast mode [ 100.352737][ T6744] EXT4-fs error (device loop1): ext4_ext_check_inode:524: inode #15: comm syz.1.1138: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 100.377014][ T3326] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.470638][ T3325] EXT4-fs (loop1): unmounting filesystem 00800000-0000-0000-0000-000000000000. [ 100.530020][ T6755] loop1: detected capacity change from 0 to 8192 [ 100.586701][ T6755] loop1: p4 < > [ 100.712739][ T6758] loop1: detected capacity change from 0 to 2048 [ 100.728256][ T6758] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 100.752965][ T6758] EXT4-fs: Ignoring removed orlov option [ 100.759667][ T6758] EXT4-fs (loop1): can't enable nombcache during remount [ 100.770923][ T6769] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=32768 sclass=netlink_route_socket pid=6769 comm=syz.3.1146 [ 100.786604][ T3325] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.804110][ T6770] block device autoloading is deprecated and will be removed. [ 100.812524][ T6770] syz.0.1149: attempt to access beyond end of device [ 100.812524][ T6770] md30: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 100.872337][ T6776] loop1: detected capacity change from 0 to 512 [ 100.879341][ T6776] EXT4-fs: Ignoring removed nomblk_io_submit option [ 100.886992][ T6776] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 100.909920][ T6776] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 100.928030][ T6776] EXT4-fs (loop1): 1 truncate cleaned up [ 100.940525][ T6776] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 100.972842][ T3325] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.049102][ T6783] loop3: detected capacity change from 0 to 512 [ 101.058260][ T6783] EXT4-fs (loop3): mounted filesystem 00800000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 101.128763][ T6790] EXT4-fs error (device loop3): ext4_ext_check_inode:524: inode #15: comm syz.3.1154: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 101.172313][ T6792] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1157'. [ 101.186688][ T6796] FAULT_INJECTION: forcing a failure. [ 101.186688][ T6796] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 101.200748][ T6796] CPU: 1 UID: 0 PID: 6796 Comm: syz.4.1159 Not tainted 6.15.0-rc6-syzkaller-00188-gfee3e843b309 #0 PREEMPT(voluntary) [ 101.200801][ T6796] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 101.200847][ T6796] Call Trace: [ 101.200855][ T6796] [ 101.200865][ T6796] __dump_stack+0x1d/0x30 [ 101.200891][ T6796] dump_stack_lvl+0xe8/0x140 [ 101.200913][ T6796] dump_stack+0x15/0x1b [ 101.200932][ T6796] should_fail_ex+0x265/0x280 [ 101.201044][ T6796] should_fail+0xb/0x20 [ 101.201081][ T6796] should_fail_usercopy+0x1a/0x20 [ 101.201105][ T6796] _copy_from_user+0x1c/0xb0 [ 101.201208][ T6796] bpf_test_init+0xdf/0x160 [ 101.201239][ T6796] bpf_prog_test_run_xdp+0x274/0x8f0 [ 101.201327][ T6796] ? kstrtouint+0x76/0xc0 [ 101.201434][ T6796] ? __rcu_read_unlock+0x4f/0x70 [ 101.201480][ T6796] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 101.201520][ T6796] bpf_prog_test_run+0x20a/0x390 [ 101.201564][ T6796] __sys_bpf+0x3dc/0x790 [ 101.201606][ T6796] __x64_sys_bpf+0x41/0x50 [ 101.201700][ T6796] x64_sys_call+0x2478/0x2fb0 [ 101.201725][ T6796] do_syscall_64+0xd0/0x1a0 [ 101.201754][ T6796] ? clear_bhb_loop+0x40/0x90 [ 101.201809][ T6796] ? clear_bhb_loop+0x40/0x90 [ 101.201835][ T6796] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 101.201862][ T6796] RIP: 0033:0x7f215535e969 [ 101.201891][ T6796] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 101.201914][ T6796] RSP: 002b:00007f21539c7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 101.201938][ T6796] RAX: ffffffffffffffda RBX: 00007f2155585fa0 RCX: 00007f215535e969 [ 101.201954][ T6796] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 101.202010][ T6796] RBP: 00007f21539c7090 R08: 0000000000000000 R09: 0000000000000000 [ 101.202025][ T6796] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 101.202041][ T6796] R13: 0000000000000000 R14: 00007f2155585fa0 R15: 00007fff318b4938 [ 101.202064][ T6796] [ 101.426335][ T6798] FAULT_INJECTION: forcing a failure. [ 101.426335][ T6798] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 101.440898][ T6798] CPU: 1 UID: 0 PID: 6798 Comm: syz.0.1160 Not tainted 6.15.0-rc6-syzkaller-00188-gfee3e843b309 #0 PREEMPT(voluntary) [ 101.440933][ T6798] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 101.441005][ T6798] Call Trace: [ 101.441014][ T6798] [ 101.441025][ T6798] __dump_stack+0x1d/0x30 [ 101.441053][ T6798] dump_stack_lvl+0xe8/0x140 [ 101.441077][ T6798] dump_stack+0x15/0x1b [ 101.441095][ T6798] should_fail_ex+0x265/0x280 [ 101.441136][ T6798] should_fail+0xb/0x20 [ 101.441218][ T6798] should_fail_usercopy+0x1a/0x20 [ 101.441289][ T6798] _copy_from_iter+0xcf/0xdd0 [ 101.441310][ T6798] ? alloc_pages_mpol+0x202/0x250 [ 101.441336][ T6798] copy_page_from_iter+0x15a/0x290 [ 101.441407][ T6798] tun_get_user+0x5c7/0x24d0 [ 101.441439][ T6798] ? ref_tracker_alloc+0x1f2/0x2f0 [ 101.441477][ T6798] tun_chr_write_iter+0x15e/0x210 [ 101.441549][ T6798] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 101.441573][ T6798] vfs_write+0x49d/0x8d0 [ 101.441604][ T6798] ksys_write+0xda/0x1a0 [ 101.441632][ T6798] __x64_sys_write+0x40/0x50 [ 101.441686][ T6798] x64_sys_call+0x2cdd/0x2fb0 [ 101.441733][ T6798] do_syscall_64+0xd0/0x1a0 [ 101.441758][ T6798] ? clear_bhb_loop+0x40/0x90 [ 101.441780][ T6798] ? clear_bhb_loop+0x40/0x90 [ 101.441801][ T6798] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 101.441862][ T6798] RIP: 0033:0x7f73ef26d41f [ 101.441877][ T6798] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 101.441896][ T6798] RSP: 002b:00007f73ed8d7000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 101.441969][ T6798] RAX: ffffffffffffffda RBX: 00007f73ef495fa0 RCX: 00007f73ef26d41f [ 101.441981][ T6798] RDX: 0000000000000083 RSI: 0000200000000240 RDI: 00000000000000c8 [ 101.441993][ T6798] RBP: 00007f73ed8d7090 R08: 0000000000000000 R09: 0000000000000000 [ 101.442005][ T6798] R10: 0000000000000083 R11: 0000000000000293 R12: 0000000000000001 [ 101.442021][ T6798] R13: 0000000000000000 R14: 00007f73ef495fa0 R15: 00007ffcab9e5b28 [ 101.442040][ T6798] [ 101.675618][ T3326] EXT4-fs (loop3): unmounting filesystem 00800000-0000-0000-0000-000000000000. [ 101.687181][ T6796] loop4: detected capacity change from 0 to 1024 [ 101.703559][ T6796] EXT4-fs: Ignoring removed nomblk_io_submit option [ 101.711141][ T6796] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 101.723627][ T6796] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 101.755028][ T29] kauditd_printk_skb: 515 callbacks suppressed [ 101.755049][ T29] audit: type=1326 audit(1747404058.655:5244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6804 comm="syz.0.1163" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73ef26e969 code=0x7ffc0000 [ 101.787779][ T29] audit: type=1326 audit(1747404058.655:5245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6804 comm="syz.0.1163" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f73ef26e969 code=0x7ffc0000 [ 101.814304][ T29] audit: type=1326 audit(1747404058.655:5246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6804 comm="syz.0.1163" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73ef26e969 code=0x7ffc0000 [ 101.839999][ T29] audit: type=1326 audit(1747404058.655:5247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6804 comm="syz.0.1163" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f73ef26e969 code=0x7ffc0000 [ 101.865874][ T29] audit: type=1326 audit(1747404058.655:5248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6804 comm="syz.0.1163" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73ef26e969 code=0x7ffc0000 [ 101.892453][ T29] audit: type=1326 audit(1747404058.655:5249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6804 comm="syz.0.1163" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f73ef26e969 code=0x7ffc0000 [ 101.896589][ T3319] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.918157][ T29] audit: type=1326 audit(1747404058.655:5250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6804 comm="syz.0.1163" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73ef26e969 code=0x7ffc0000 [ 101.918196][ T29] audit: type=1326 audit(1747404058.655:5251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6804 comm="syz.0.1163" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f73ef26e969 code=0x7ffc0000 [ 101.955751][ T6809] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 101.979976][ T29] audit: type=1326 audit(1747404058.655:5252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6804 comm="syz.0.1163" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73ef26e969 code=0x7ffc0000 [ 102.017556][ T29] audit: type=1326 audit(1747404058.655:5253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6804 comm="syz.0.1163" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f73ef26e969 code=0x7ffc0000 [ 102.072881][ T6818] loop3: detected capacity change from 0 to 512 [ 102.099261][ T6818] EXT4-fs (loop3): 1 orphan inode deleted [ 102.107623][ T6818] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 102.124555][ T5769] EXT4-fs error (device loop3): ext4_release_dquot:6971: comm kworker/u8:37: Failed to release dquot type 1 [ 102.135532][ T6818] ext4 filesystem being mounted at /218/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 102.175909][ T6830] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=32768 sclass=netlink_route_socket pid=6830 comm=syz.6.1166 [ 102.217402][ T3326] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.288033][ T6828] xt_hashlimit: max too large, truncated to 1048576 [ 102.300112][ T6828] 9pnet_fd: Insufficient options for proto=fd [ 102.354611][ T6844] loop1: detected capacity change from 0 to 512 [ 102.370421][ T6844] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 102.423826][ T6844] ext4 filesystem being mounted at /228/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 102.452495][ T6851] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 102.499099][ T6849] loop6: detected capacity change from 0 to 1024 [ 102.545268][ T6849] EXT4-fs: Ignoring removed nomblk_io_submit option [ 102.563089][ T6861] loop3: detected capacity change from 0 to 512 [ 102.566532][ T3325] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.573710][ T6861] EXT4-fs: Ignoring removed mblk_io_submit option [ 102.590287][ T6849] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 102.617151][ T6861] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 102.650890][ T6861] EXT4-fs (loop3): 1 truncate cleaned up [ 102.675640][ T6861] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 102.695818][ T6849] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 102.786682][ T6861] netlink: 'syz.3.1184': attribute type 1 has an invalid length. [ 102.818178][ T6869] loop0: detected capacity change from 0 to 8192 [ 102.859482][ T6861] 8021q: adding VLAN 0 to HW filter on device bond3 [ 102.876173][ T6338] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.884961][ T6861] bond2: (slave bond3): making interface the new active one [ 102.896064][ T6869] loop0: p4 < > [ 102.925665][ T6861] bond2: (slave bond3): Enslaving as an active interface with an up link [ 103.017849][ T6875] loop4: detected capacity change from 0 to 512 [ 103.028111][ T6879] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1189'. [ 103.031445][ T6880] loop1: detected capacity change from 0 to 512 [ 103.050670][ T6879] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1189'. [ 103.062345][ T6880] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.1190: bg 0: block 393: padding at end of block bitmap is not set [ 103.063265][ T6875] EXT4-fs (loop4): 1 orphan inode deleted [ 103.088676][ T6880] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 103.098382][ T5779] EXT4-fs error (device loop4): ext4_release_dquot:6971: comm kworker/u8:47: Failed to release dquot type 1 [ 103.114284][ T6875] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 103.144419][ T6880] EXT4-fs (loop1): 2 truncates cleaned up [ 103.149492][ T3326] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.155316][ T6880] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 103.176811][ T6875] ext4 filesystem being mounted at /253/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 103.220889][ T6880] wireguard0: entered promiscuous mode [ 103.226801][ T6880] wireguard0: entered allmulticast mode [ 103.242873][ T3319] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.348300][ T6903] Cannot find add_set index 3 as target [ 103.358241][ T3325] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.380624][ T6905] loop0: detected capacity change from 0 to 2048 [ 103.411210][ T6912] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 103.438404][ T6911] loop1: detected capacity change from 0 to 8192 [ 103.489102][ T6911] loop1: p4 < > [ 103.552634][ T6920] xt_l2tp: v2 doesn't support IP mode [ 103.601347][ T6924] loop0: detected capacity change from 0 to 512 [ 103.619453][ T6924] EXT4-fs (loop0): 1 orphan inode deleted [ 103.627595][ T6924] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 103.642557][ T5743] EXT4-fs error (device loop0): ext4_release_dquot:6971: comm kworker/u8:14: Failed to release dquot type 1 [ 103.655407][ T6924] ext4 filesystem being mounted at /252/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 103.674532][ T6932] loop1: detected capacity change from 0 to 512 [ 103.685051][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.685755][ T6932] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.1209: bg 0: block 393: padding at end of block bitmap is not set [ 103.711512][ T6932] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 103.721411][ T6932] EXT4-fs (loop1): 2 truncates cleaned up [ 103.727967][ T6932] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 103.748634][ T6932] wireguard1: entered promiscuous mode [ 103.754719][ T6932] wireguard1: entered allmulticast mode [ 103.839049][ T3325] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.878444][ T6939] loop1: detected capacity change from 0 to 512 [ 103.897164][ T6939] EXT4-fs error (device loop1): ext4_iget_extra_inode:4693: inode #15: comm syz.1.1211: corrupted in-inode xattr: invalid ea_ino [ 103.912252][ T6939] EXT4-fs error (device loop1): ext4_orphan_get:1396: comm syz.1.1211: couldn't read orphan inode 15 (err -117) [ 103.927244][ T6939] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 103.947323][ T6939] EXT4-fs error (device loop1): ext4_lookup:1789: inode #14: comm syz.1.1211: invalid fast symlink length 39 [ 103.962897][ T6941] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1210'. [ 103.987026][ T3325] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.119128][ T6947] loop1: detected capacity change from 0 to 8192 [ 104.136180][ T6951] FAULT_INJECTION: forcing a failure. [ 104.136180][ T6951] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 104.150153][ T6951] CPU: 1 UID: 0 PID: 6951 Comm: syz.3.1216 Not tainted 6.15.0-rc6-syzkaller-00188-gfee3e843b309 #0 PREEMPT(voluntary) [ 104.150188][ T6951] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 104.150203][ T6951] Call Trace: [ 104.150211][ T6951] [ 104.150220][ T6951] __dump_stack+0x1d/0x30 [ 104.150303][ T6951] dump_stack_lvl+0xe8/0x140 [ 104.150327][ T6951] dump_stack+0x15/0x1b [ 104.150348][ T6951] should_fail_ex+0x265/0x280 [ 104.150387][ T6951] should_fail+0xb/0x20 [ 104.150449][ T6951] should_fail_usercopy+0x1a/0x20 [ 104.150474][ T6951] _copy_from_user+0x1c/0xb0 [ 104.150504][ T6951] ip_set_mcast_msfilter+0x11c/0x2a0 [ 104.150534][ T6951] do_ip_setsockopt+0x16ca/0x2240 [ 104.150592][ T6951] ip_setsockopt+0x58/0x110 [ 104.150686][ T6951] udp_setsockopt+0x99/0xb0 [ 104.150711][ T6951] sock_common_setsockopt+0x69/0x80 [ 104.150741][ T6951] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 104.150790][ T6951] __sys_setsockopt+0x184/0x200 [ 104.150817][ T6951] __x64_sys_setsockopt+0x64/0x80 [ 104.150837][ T6951] x64_sys_call+0x2bd5/0x2fb0 [ 104.150920][ T6951] do_syscall_64+0xd0/0x1a0 [ 104.150950][ T6951] ? clear_bhb_loop+0x40/0x90 [ 104.151037][ T6951] ? clear_bhb_loop+0x40/0x90 [ 104.151058][ T6951] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 104.151085][ T6951] RIP: 0033:0x7fd46114e969 [ 104.151103][ T6951] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 104.151156][ T6951] RSP: 002b:00007fd45f7b7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 104.151178][ T6951] RAX: ffffffffffffffda RBX: 00007fd461375fa0 RCX: 00007fd46114e969 [ 104.151195][ T6951] RDX: 0000000000000030 RSI: 0000000000000000 RDI: 0000000000000003 [ 104.151211][ T6951] RBP: 00007fd45f7b7090 R08: 0000000000000110 R09: 0000000000000000 [ 104.151227][ T6951] R10: 0000200000000400 R11: 0000000000000246 R12: 0000000000000001 [ 104.151243][ T6951] R13: 0000000000000000 R14: 00007fd461375fa0 R15: 00007ffe12cf0e28 [ 104.151267][ T6951] [ 104.405890][ T6947] loop1: p4 < > [ 104.489240][ T6961] loop3: detected capacity change from 0 to 512 [ 104.500028][ T6961] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.1221: bg 0: block 393: padding at end of block bitmap is not set [ 104.517483][ T6961] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 104.527426][ T6961] EXT4-fs (loop3): 2 truncates cleaned up [ 104.533972][ T6961] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 104.695318][ T6961] wireguard3: entered promiscuous mode [ 104.701355][ T6961] wireguard3: entered allmulticast mode [ 104.714185][ T6971] loop1: detected capacity change from 0 to 512 [ 104.747118][ T6971] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 104.765372][ T6971] ext4 filesystem being mounted at /243/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 104.803214][ T3326] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.974215][ T3325] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.187354][ T6992] loop0: detected capacity change from 0 to 8192 [ 105.225994][ T6992] loop0: p4 < > [ 105.509586][ T7003] loop0: detected capacity change from 0 to 512 [ 105.562102][ T7003] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.1236: bg 0: block 393: padding at end of block bitmap is not set [ 105.580889][ T7003] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 105.590536][ T7003] EXT4-fs (loop0): 2 truncates cleaned up [ 105.600117][ T7003] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 105.622615][ T7003] wireguard2: entered promiscuous mode [ 105.629098][ T7003] wireguard2: entered allmulticast mode [ 105.815894][ T7015] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1240'. [ 105.827978][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.843224][ T7015] 8021q: adding VLAN 0 to HW filter on device team1 [ 105.910179][ T7021] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1238'. [ 105.973901][ T7030] Cannot find add_set index 3 as target [ 106.017455][ T7025] loop3: detected capacity change from 0 to 8192 [ 106.043299][ T7032] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 106.076383][ T7025] loop3: p4 < > [ 106.163651][ T7039] FAULT_INJECTION: forcing a failure. [ 106.163651][ T7039] name failslab, interval 1, probability 0, space 0, times 0 [ 106.177999][ T7039] CPU: 0 UID: 0 PID: 7039 Comm: syz.0.1248 Not tainted 6.15.0-rc6-syzkaller-00188-gfee3e843b309 #0 PREEMPT(voluntary) [ 106.178027][ T7039] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 106.178039][ T7039] Call Trace: [ 106.178055][ T7039] [ 106.178142][ T7039] __dump_stack+0x1d/0x30 [ 106.178216][ T7039] dump_stack_lvl+0xe8/0x140 [ 106.178241][ T7039] dump_stack+0x15/0x1b [ 106.178262][ T7039] should_fail_ex+0x265/0x280 [ 106.178345][ T7039] should_failslab+0x8c/0xb0 [ 106.178376][ T7039] kmem_cache_alloc_node_noprof+0x57/0x320 [ 106.178482][ T7039] ? __alloc_skb+0x101/0x320 [ 106.178521][ T7039] __alloc_skb+0x101/0x320 [ 106.178549][ T7039] ? __rtnl_unlock+0x95/0xb0 [ 106.178623][ T7039] ? __pfx_fib4_rule_nlmsg_payload+0x10/0x10 [ 106.178658][ T7039] notify_rule_change+0x82/0x160 [ 106.178725][ T7039] fib_newrule+0x8bb/0x920 [ 106.178763][ T7039] fib_nl_newrule+0x46/0x60 [ 106.178787][ T7039] ? __pfx_fib_nl_newrule+0x10/0x10 [ 106.178822][ T7039] rtnetlink_rcv_msg+0x5fb/0x6d0 [ 106.178858][ T7039] netlink_rcv_skb+0x120/0x220 [ 106.178915][ T7039] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 106.178947][ T7039] rtnetlink_rcv+0x1c/0x30 [ 106.179026][ T7039] netlink_unicast+0x5a1/0x670 [ 106.179072][ T7039] netlink_sendmsg+0x58b/0x6b0 [ 106.179093][ T7039] ? __pfx_netlink_sendmsg+0x10/0x10 [ 106.179118][ T7039] __sock_sendmsg+0x145/0x180 [ 106.179152][ T7039] ____sys_sendmsg+0x31e/0x4e0 [ 106.179247][ T7039] ___sys_sendmsg+0x17b/0x1d0 [ 106.179283][ T7039] __x64_sys_sendmsg+0xd4/0x160 [ 106.179334][ T7039] x64_sys_call+0x2999/0x2fb0 [ 106.179359][ T7039] do_syscall_64+0xd0/0x1a0 [ 106.179385][ T7039] ? clear_bhb_loop+0x40/0x90 [ 106.179471][ T7039] ? clear_bhb_loop+0x40/0x90 [ 106.179567][ T7039] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 106.179594][ T7039] RIP: 0033:0x7f73ef26e969 [ 106.179611][ T7039] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 106.179634][ T7039] RSP: 002b:00007f73ed8d7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 106.179658][ T7039] RAX: ffffffffffffffda RBX: 00007f73ef495fa0 RCX: 00007f73ef26e969 [ 106.179685][ T7039] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000000000000008 [ 106.179720][ T7039] RBP: 00007f73ed8d7090 R08: 0000000000000000 R09: 0000000000000000 [ 106.179736][ T7039] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 106.179751][ T7039] R13: 0000000000000000 R14: 00007f73ef495fa0 R15: 00007ffcab9e5b28 [ 106.179775][ T7039] [ 107.040571][ T7050] loop6: detected capacity change from 0 to 512 [ 107.074043][ T7050] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.1251: bg 0: block 393: padding at end of block bitmap is not set [ 107.099264][ T7050] EXT4-fs error (device loop6) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 107.119069][ T7054] loop3: detected capacity change from 0 to 512 [ 107.127121][ T7050] EXT4-fs (loop6): 2 truncates cleaned up [ 107.133682][ T7050] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 107.158906][ T7050] wireguard0: entered promiscuous mode [ 107.164950][ T7050] wireguard0: entered allmulticast mode [ 107.178793][ T7054] EXT4-fs (loop3): 1 orphan inode deleted [ 107.180386][ T7059] loop4: detected capacity change from 0 to 512 [ 107.188604][ T7054] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 107.206486][ T5779] __quota_error: 769 callbacks suppressed [ 107.206519][ T5779] Quota error (device loop3): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 107.206578][ T5779] EXT4-fs error (device loop3): ext4_release_dquot:6971: comm kworker/u8:47: Failed to release dquot type 1 [ 107.227192][ T7054] ext4 filesystem being mounted at /236/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 107.268901][ T7059] EXT4-fs (loop4): 1 orphan inode deleted [ 107.278510][ T7059] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 107.293828][ T5779] Quota error (device loop4): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 107.297816][ T7059] ext4 filesystem being mounted at /259/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 107.306522][ T5779] EXT4-fs error (device loop4): ext4_release_dquot:6971: comm kworker/u8:47: Failed to release dquot type 1 [ 107.383189][ T6338] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.420448][ T7069] netlink: 'syz.1.1254': attribute type 298 has an invalid length. [ 107.430063][ T7065] netlink: 'syz.1.1254': attribute type 10 has an invalid length. [ 107.497698][ T7074] Cannot find del_set index 4 as target [ 107.530038][ T7074] loop1: detected capacity change from 0 to 2048 [ 107.559974][ T7074] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 107.745271][ T7079] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1257'. [ 107.863083][ T7079] loop6: detected capacity change from 0 to 512 [ 107.870308][ T7082] loop0: detected capacity change from 0 to 8192 [ 107.936560][ T7082] loop0: p4 < > [ 107.944384][ T7079] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 108.034283][ T7079] ext4 filesystem being mounted at /33/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 108.111447][ T3319] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.137882][ T3326] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.251015][ T7078] EXT4-fs error (device loop6): ext4_get_first_dir_block:3535: inode #12: block 32: comm syz.6.1257: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 108.252804][ T29] audit: type=1400 audit(1747404065.165:6020): avc: denied { write } for pid=7077 comm="syz.6.1257" name="bus" dev="loop6" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 108.299830][ T29] audit: type=1400 audit(1747404065.165:6021): avc: denied { rename } for pid=7077 comm="syz.6.1257" name="file0" dev="loop6" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 108.312432][ T7078] EXT4-fs (loop6): Remounting filesystem read-only [ 108.323712][ T29] audit: type=1400 audit(1747404065.165:6022): avc: denied { reparent } for pid=7077 comm="syz.6.1257" name="file0" dev="loop6" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 108.323750][ T29] audit: type=1400 audit(1747404065.165:6023): avc: denied { add_name } for pid=7077 comm="syz.6.1257" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 108.358114][ T7091] loop4: detected capacity change from 0 to 2048 [ 108.429074][ T29] audit: type=1326 audit(1747404065.335:6024): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7093 comm="syz.3.1261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd46114e969 code=0x7ffc0000 [ 108.455472][ T29] audit: type=1326 audit(1747404065.335:6025): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7093 comm="syz.3.1261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd46114e969 code=0x7ffc0000 [ 108.481311][ T29] audit: type=1326 audit(1747404065.345:6026): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7093 comm="syz.3.1261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd46114e969 code=0x7ffc0000 [ 108.507518][ T29] audit: type=1326 audit(1747404065.345:6027): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7093 comm="syz.3.1261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd46114e969 code=0x7ffc0000 [ 108.509686][ T5769] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 108.553538][ T7091] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 108.566005][ T5769] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 108.580403][ T5769] EXT4-fs (loop1): This should not happen!! Data will be lost [ 108.580403][ T5769] [ 108.592594][ T5769] EXT4-fs (loop1): Total free blocks count 0 [ 108.599305][ T5769] EXT4-fs (loop1): Free/Dirty block details [ 108.606243][ T5769] EXT4-fs (loop1): free_blocks=2415919504 [ 108.612701][ T5769] EXT4-fs (loop1): dirty_blocks=16400 [ 108.619063][ T5769] EXT4-fs (loop1): Block reservation details [ 108.626162][ T5769] EXT4-fs (loop1): i_reserved_data_blocks=1025 [ 108.640985][ T7089] FAULT_INJECTION: forcing a failure. [ 108.640985][ T7089] name failslab, interval 1, probability 0, space 0, times 0 [ 108.644119][ T7096] Cannot find add_set index 3 as target [ 108.654706][ T7089] CPU: 0 UID: 0 PID: 7089 Comm: syz.4.1260 Not tainted 6.15.0-rc6-syzkaller-00188-gfee3e843b309 #0 PREEMPT(voluntary) [ 108.654747][ T7089] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 108.654779][ T7089] Call Trace: [ 108.654786][ T7089] [ 108.654797][ T7089] __dump_stack+0x1d/0x30 [ 108.654901][ T7089] dump_stack_lvl+0xe8/0x140 [ 108.654927][ T7089] dump_stack+0x15/0x1b [ 108.654948][ T7089] should_fail_ex+0x265/0x280 [ 108.654993][ T7089] should_failslab+0x8c/0xb0 [ 108.655073][ T7089] kmem_cache_alloc_noprof+0x50/0x310 [ 108.655098][ T7089] ? audit_log_start+0x365/0x6c0 [ 108.655181][ T7089] audit_log_start+0x365/0x6c0 [ 108.655225][ T7089] audit_seccomp+0x48/0x100 [ 108.655258][ T7089] ? __seccomp_filter+0x68c/0x10d0 [ 108.655287][ T7089] __seccomp_filter+0x69d/0x10d0 [ 108.655316][ T7089] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 108.655412][ T7089] ? vfs_write+0x75e/0x8d0 [ 108.655442][ T7089] ? __rcu_read_unlock+0x4f/0x70 [ 108.655472][ T7089] ? __fget_files+0x184/0x1c0 [ 108.655513][ T7089] __secure_computing+0x82/0x150 [ 108.655570][ T7089] syscall_trace_enter+0xcf/0x1e0 [ 108.655602][ T7089] do_syscall_64+0xaa/0x1a0 [ 108.655634][ T7089] ? clear_bhb_loop+0x40/0x90 [ 108.655680][ T7089] ? clear_bhb_loop+0x40/0x90 [ 108.655709][ T7089] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 108.655737][ T7089] RIP: 0033:0x7f215535e969 [ 108.655756][ T7089] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 108.655780][ T7089] RSP: 002b:00007f21539c7038 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 108.655806][ T7089] RAX: ffffffffffffffda RBX: 00007f2155585fa0 RCX: 00007f215535e969 [ 108.656344][ T7089] RDX: 00002000000000c0 RSI: 0000000000000000 RDI: 0000200000000040 [ 108.656362][ T7089] RBP: 00007f21539c7090 R08: fffffffffffffffd R09: 0000000000000000 [ 108.656426][ T7089] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000001 [ 108.656442][ T7089] R13: 0000000000000000 R14: 00007f2155585fa0 R15: 00007fff318b4938 [ 108.656470][ T7089] [ 108.664521][ T5778] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 2050 with max blocks 2048 with error 28 [ 108.777510][ T7096] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 108.924313][ T3319] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.035322][ T7111] netlink: 'syz.1.1267': attribute type 1 has an invalid length. [ 109.043582][ T7111] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1267'. [ 109.058458][ T7111] bridge0: port 1(gretap0) entered blocking state [ 109.065754][ T7111] bridge0: port 1(gretap0) entered disabled state [ 109.074427][ T7111] gretap0: entered allmulticast mode [ 109.080735][ T7115] loop0: detected capacity change from 0 to 512 [ 109.087238][ T7111] gretap0: entered promiscuous mode [ 109.094380][ T7111] bridge0: port 1(gretap0) entered blocking state [ 109.101838][ T7111] bridge0: port 1(gretap0) entered forwarding state [ 109.111820][ T7117] gretap0: left allmulticast mode [ 109.117709][ T7117] gretap0: left promiscuous mode [ 109.123209][ T7117] bridge0: port 1(gretap0) entered disabled state [ 109.139576][ T7111] loop1: detected capacity change from 0 to 128 [ 109.162755][ T7111] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 109.178088][ T7111] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 109.217126][ T7115] EXT4-fs error (device loop0): ext4_ext_check_inode:524: inode #15: comm syz.0.1265: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 109.274271][ T7131] loop4: detected capacity change from 0 to 2048 [ 109.404063][ T7138] loop0: detected capacity change from 0 to 512 [ 109.551288][ T7138] EXT4-fs: Ignoring removed nomblk_io_submit option [ 109.609720][ T7142] ALSA: seq fatal error: cannot create timer (-19) [ 109.641483][ T7138] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 109.734315][ T7145] FAULT_INJECTION: forcing a failure. [ 109.734315][ T7145] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 109.749184][ T7145] CPU: 1 UID: 0 PID: 7145 Comm: syz.4.1277 Not tainted 6.15.0-rc6-syzkaller-00188-gfee3e843b309 #0 PREEMPT(voluntary) [ 109.749213][ T7145] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 109.749229][ T7145] Call Trace: [ 109.749239][ T7145] [ 109.749249][ T7145] __dump_stack+0x1d/0x30 [ 109.749275][ T7145] dump_stack_lvl+0xe8/0x140 [ 109.749306][ T7145] dump_stack+0x15/0x1b [ 109.749321][ T7145] should_fail_ex+0x265/0x280 [ 109.749355][ T7145] should_fail+0xb/0x20 [ 109.749415][ T7145] should_fail_usercopy+0x1a/0x20 [ 109.749440][ T7145] strncpy_from_user+0x25/0x230 [ 109.749513][ T7145] ? kmem_cache_alloc_noprof+0x186/0x310 [ 109.749541][ T7145] ? getname_flags+0x80/0x3b0 [ 109.749579][ T7145] getname_flags+0xae/0x3b0 [ 109.749616][ T7145] __se_sys_quotactl+0x16a/0x670 [ 109.749635][ T7145] ? fput+0x8f/0xc0 [ 109.749714][ T7145] __x64_sys_quotactl+0x55/0x70 [ 109.749738][ T7145] x64_sys_call+0x2886/0x2fb0 [ 109.749762][ T7145] do_syscall_64+0xd0/0x1a0 [ 109.749785][ T7145] ? clear_bhb_loop+0x40/0x90 [ 109.749805][ T7145] ? clear_bhb_loop+0x40/0x90 [ 109.749831][ T7145] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 109.749905][ T7145] RIP: 0033:0x7f215535e969 [ 109.749925][ T7145] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 109.749948][ T7145] RSP: 002b:00007f21539c7038 EFLAGS: 00000246 ORIG_RAX: 00000000000000b3 [ 109.750014][ T7145] RAX: ffffffffffffffda RBX: 00007f2155585fa0 RCX: 00007f215535e969 [ 109.750030][ T7145] RDX: 0000000000000000 RSI: 0000200000000000 RDI: ffffffff80000800 [ 109.750047][ T7145] RBP: 00007f21539c7090 R08: 0000000000000000 R09: 0000000000000000 [ 109.750063][ T7145] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 109.750079][ T7145] R13: 0000000000000000 R14: 00007f2155585fa0 R15: 00007fff318b4938 [ 109.750105][ T7145] [ 109.980912][ T7138] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 109.999564][ T7138] EXT4-fs (loop0): 1 truncate cleaned up [ 110.142260][ T7154] loop1: detected capacity change from 0 to 512 [ 110.242011][ T7164] loop3: detected capacity change from 0 to 1024 [ 110.243396][ T7162] EXT4-fs error (device loop1): ext4_ext_check_inode:524: inode #15: comm syz.1.1280: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 110.250209][ T7164] ext4: Unknown parameter 'dont_hash' [ 110.363723][ T7171] Cannot find add_set index 3 as target [ 110.460332][ T7171] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 110.606206][ T7188] SELinux: failed to load policy [ 110.615935][ T7188] xt_hashlimit: size too large, truncated to 1048576 [ 110.879638][ T7201] loop3: detected capacity change from 0 to 164 [ 111.004921][ T7203] loop6: detected capacity change from 0 to 512 [ 111.044662][ T7201] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 111.056670][ T7201] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 111.103705][ T7201] FAULT_INJECTION: forcing a failure. [ 111.103705][ T7201] name failslab, interval 1, probability 0, space 0, times 0 [ 111.117615][ T7201] CPU: 1 UID: 0 PID: 7201 Comm: syz.3.1296 Not tainted 6.15.0-rc6-syzkaller-00188-gfee3e843b309 #0 PREEMPT(voluntary) [ 111.117651][ T7201] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 111.117668][ T7201] Call Trace: [ 111.117677][ T7201] [ 111.117687][ T7201] __dump_stack+0x1d/0x30 [ 111.117720][ T7201] dump_stack_lvl+0xe8/0x140 [ 111.117739][ T7201] dump_stack+0x15/0x1b [ 111.117766][ T7201] should_fail_ex+0x265/0x280 [ 111.117809][ T7201] should_failslab+0x8c/0xb0 [ 111.117848][ T7201] kmem_cache_alloc_noprof+0x50/0x310 [ 111.117916][ T7201] ? security_inode_alloc+0x37/0x100 [ 111.117946][ T7201] security_inode_alloc+0x37/0x100 [ 111.117974][ T7201] inode_init_always_gfp+0x4b7/0x500 [ 111.118008][ T7201] ? __pfx_isofs_iget5_test+0x10/0x10 [ 111.118162][ T7201] ? __pfx_isofs_alloc_inode+0x10/0x10 [ 111.118261][ T7201] alloc_inode+0x58/0x170 [ 111.118292][ T7201] ? __pfx_isofs_iget5_set+0x10/0x10 [ 111.118327][ T7201] iget5_locked+0x4a/0xa0 [ 111.118365][ T7201] __isofs_iget+0xe0/0x10a0 [ 111.118447][ T7201] ? kfree+0x26f/0x310 [ 111.118469][ T7201] ? rock_continue+0x2a4/0x2e0 [ 111.118509][ T7201] ? free_frozen_page_commit+0x6e/0x2a0 [ 111.118538][ T7201] ? _raw_spin_unlock+0x26/0x50 [ 111.118571][ T7201] isofs_lookup+0x7b8/0x8f0 [ 111.118709][ T7201] __lookup_slow+0x193/0x250 [ 111.118730][ T7201] lookup_slow+0x3c/0x60 [ 111.118750][ T7201] walk_component+0x1ec/0x220 [ 111.118820][ T7201] path_lookupat+0xfe/0x2a0 [ 111.118839][ T7201] filename_lookup+0x147/0x340 [ 111.118867][ T7201] user_path_at+0x3e/0x130 [ 111.118893][ T7201] do_utimes+0xd9/0x210 [ 111.118939][ T7201] __x64_sys_futimesat+0xd2/0x1a0 [ 111.119023][ T7201] x64_sys_call+0x11da/0x2fb0 [ 111.119052][ T7201] do_syscall_64+0xd0/0x1a0 [ 111.119078][ T7201] ? clear_bhb_loop+0x40/0x90 [ 111.119099][ T7201] ? clear_bhb_loop+0x40/0x90 [ 111.119239][ T7201] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 111.119268][ T7201] RIP: 0033:0x7fd46114e969 [ 111.119285][ T7201] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 111.119305][ T7201] RSP: 002b:00007fd45f7b7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000105 [ 111.119348][ T7201] RAX: ffffffffffffffda RBX: 00007fd461375fa0 RCX: 00007fd46114e969 [ 111.119365][ T7201] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 111.119382][ T7201] RBP: 00007fd45f7b7090 R08: 0000000000000000 R09: 0000000000000000 [ 111.119397][ T7201] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 111.119484][ T7201] R13: 0000000000000000 R14: 00007fd461375fa0 R15: 00007ffe12cf0e28 [ 111.119504][ T7201] [ 111.533950][ T7203] EXT4-fs (loop6): 1 orphan inode deleted [ 111.542623][ T7210] netlink: 'syz.0.1299': attribute type 1 has an invalid length. [ 111.552137][ T5779] EXT4-fs error (device loop6): ext4_release_dquot:6971: comm kworker/u8:47: Failed to release dquot type 1 [ 111.570802][ T7210] FAULT_INJECTION: forcing a failure. [ 111.570802][ T7210] name failslab, interval 1, probability 0, space 0, times 0 [ 111.584619][ T7210] CPU: 1 UID: 0 PID: 7210 Comm: syz.0.1299 Not tainted 6.15.0-rc6-syzkaller-00188-gfee3e843b309 #0 PREEMPT(voluntary) [ 111.584711][ T7210] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 111.584723][ T7210] Call Trace: [ 111.584730][ T7210] [ 111.584737][ T7210] __dump_stack+0x1d/0x30 [ 111.584762][ T7210] dump_stack_lvl+0xe8/0x140 [ 111.584781][ T7210] dump_stack+0x15/0x1b [ 111.584875][ T7210] should_fail_ex+0x265/0x280 [ 111.584916][ T7210] should_failslab+0x8c/0xb0 [ 111.584954][ T7210] kmem_cache_alloc_node_noprof+0x57/0x320 [ 111.585019][ T7210] ? __alloc_skb+0x101/0x320 [ 111.585054][ T7210] __alloc_skb+0x101/0x320 [ 111.585093][ T7210] netlink_ack+0xfd/0x500 [ 111.585134][ T7210] ? __pfx_ioam6_genl_delns+0x10/0x10 [ 111.585202][ T7210] netlink_rcv_skb+0x192/0x220 [ 111.585309][ T7210] ? __pfx_genl_rcv_msg+0x10/0x10 [ 111.585351][ T7210] genl_rcv+0x28/0x40 [ 111.585377][ T7210] netlink_unicast+0x5a1/0x670 [ 111.585465][ T7210] netlink_sendmsg+0x58b/0x6b0 [ 111.585494][ T7210] ? __pfx_netlink_sendmsg+0x10/0x10 [ 111.585519][ T7210] __sock_sendmsg+0x145/0x180 [ 111.585554][ T7210] ____sys_sendmsg+0x31e/0x4e0 [ 111.585582][ T7210] ___sys_sendmsg+0x17b/0x1d0 [ 111.585682][ T7210] __x64_sys_sendmsg+0xd4/0x160 [ 111.585714][ T7210] x64_sys_call+0x2999/0x2fb0 [ 111.585739][ T7210] do_syscall_64+0xd0/0x1a0 [ 111.585831][ T7210] ? clear_bhb_loop+0x40/0x90 [ 111.585887][ T7210] ? clear_bhb_loop+0x40/0x90 [ 111.585912][ T7210] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 111.585939][ T7210] RIP: 0033:0x7f73ef26e969 [ 111.585958][ T7210] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 111.585975][ T7210] RSP: 002b:00007f73ed8d7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 111.585995][ T7210] RAX: ffffffffffffffda RBX: 00007f73ef495fa0 RCX: 00007f73ef26e969 [ 111.586053][ T7210] RDX: 0000000000008000 RSI: 0000200000000100 RDI: 0000000000000003 [ 111.586141][ T7210] RBP: 00007f73ed8d7090 R08: 0000000000000000 R09: 0000000000000000 [ 111.586156][ T7210] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 111.586171][ T7210] R13: 0000000000000000 R14: 00007f73ef495fa0 R15: 00007ffcab9e5b28 [ 111.586193][ T7210] [ 111.835733][ T7203] ext4 filesystem being mounted at /38/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 111.881119][ T7221] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1302'. [ 111.921865][ T7223] loop0: detected capacity change from 0 to 512 [ 111.948631][ T7228] loop3: detected capacity change from 0 to 512 [ 111.977900][ T7223] EXT4-fs (loop0): 1 orphan inode deleted [ 111.987591][ T7223] ext4 filesystem being mounted at /278/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 112.009474][ T7228] EXT4-fs (loop3): 1 orphan inode deleted [ 112.016814][ T7228] ext4 filesystem being mounted at /244/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 112.029266][ T5769] EXT4-fs error (device loop3): ext4_release_dquot:6971: comm kworker/u8:37: Failed to release dquot type 1 [ 112.200644][ T7244] loop0: detected capacity change from 0 to 1024 [ 112.268522][ T7261] loop6: detected capacity change from 0 to 2048 [ 112.276715][ T7261] ext4: Unknown parameter 'nouser_xattr' [ 112.486173][ T7269] loop3: detected capacity change from 0 to 512 [ 112.657825][ T7273] netlink: 'syz.6.1320': attribute type 13 has an invalid length. [ 112.689045][ T7244] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000. [ 112.702364][ T29] kauditd_printk_skb: 544 callbacks suppressed [ 112.702380][ T29] audit: type=1400 audit(1747404069.615:6568): avc: denied { lock } for pid=7243 comm="syz.0.1308" path="/279/file1/file1" dev="loop0" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 112.736162][ T7244] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 112.754375][ T7269] EXT4-fs (loop3): 1 orphan inode deleted [ 112.761980][ T7269] ext4 filesystem being mounted at /249/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 112.866606][ T7290] loop1: detected capacity change from 0 to 512 [ 112.874462][ T7290] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 112.884383][ T7290] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 112.904479][ T7290] EXT4-fs (loop1): warning: checktime reached, running e2fsck is recommended [ 112.917694][ T29] audit: type=1400 audit(1747404069.835:6569): avc: denied { create } for pid=7287 comm="syz.3.1322" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 112.921678][ T7290] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 112.948017][ T29] audit: type=1400 audit(1747404069.835:6570): avc: denied { bind } for pid=7287 comm="syz.3.1322" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 112.971784][ T7290] System zones: 0-2, 18-18, 34-34 [ 112.978824][ T7290] EXT4-fs warning (device loop1): ext4_update_dynamic_rev:1132: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 112.995201][ T7296] Illegal XDP return value 4294967262 on prog (id 1020) dev N/A, expect packet loss! [ 112.998637][ T7290] EXT4-fs (loop1): 1 truncate cleaned up [ 113.074990][ T7302] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1328'. [ 113.173983][ T7310] loop6: detected capacity change from 0 to 512 [ 113.218604][ T7310] EXT4-fs (loop6): 1 orphan inode deleted [ 113.236175][ T5779] Quota error (device loop6): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 113.247452][ T5779] EXT4-fs error (device loop6): ext4_release_dquot:6971: comm kworker/u8:47: Failed to release dquot type 1 [ 113.276846][ T7310] ext4 filesystem being mounted at /48/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 113.321691][ T7324] loop0: detected capacity change from 0 to 512 [ 113.326897][ T7326] loop4: detected capacity change from 0 to 512 [ 113.362494][ T7324] EXT4-fs (loop0): 1 orphan inode deleted [ 113.372634][ T7326] ext4 filesystem being mounted at /282/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 113.384490][ T5779] Quota error (device loop0): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 113.395187][ T5779] EXT4-fs error (device loop0): ext4_release_dquot:6971: comm kworker/u8:47: Failed to release dquot type 1 [ 113.395621][ T7324] ext4 filesystem being mounted at /283/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 113.501390][ T7346] loop3: detected capacity change from 0 to 164 [ 113.512260][ T7346] FAULT_INJECTION: forcing a failure. [ 113.512260][ T7346] name failslab, interval 1, probability 0, space 0, times 0 [ 113.526791][ T7346] CPU: 1 UID: 0 PID: 7346 Comm: syz.3.1344 Not tainted 6.15.0-rc6-syzkaller-00188-gfee3e843b309 #0 PREEMPT(voluntary) [ 113.526829][ T7346] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 113.526924][ T7346] Call Trace: [ 113.526932][ T7346] [ 113.526940][ T7346] __dump_stack+0x1d/0x30 [ 113.526962][ T7346] dump_stack_lvl+0xe8/0x140 [ 113.526981][ T7346] dump_stack+0x15/0x1b [ 113.527000][ T7346] should_fail_ex+0x265/0x280 [ 113.527095][ T7346] ? nft_delflowtable+0x37/0x200 [ 113.527120][ T7346] should_failslab+0x8c/0xb0 [ 113.527197][ T7346] __kmalloc_cache_noprof+0x4c/0x320 [ 113.527220][ T7346] nft_delflowtable+0x37/0x200 [ 113.527306][ T7346] nf_tables_delflowtable+0xacf/0xce0 [ 113.527371][ T7346] nfnetlink_rcv+0xb99/0x1690 [ 113.527426][ T7346] netlink_unicast+0x5a1/0x670 [ 113.527458][ T7346] netlink_sendmsg+0x58b/0x6b0 [ 113.527506][ T7346] ? __pfx_netlink_sendmsg+0x10/0x10 [ 113.527538][ T7346] __sock_sendmsg+0x145/0x180 [ 113.527572][ T7346] ____sys_sendmsg+0x31e/0x4e0 [ 113.527595][ T7346] ___sys_sendmsg+0x17b/0x1d0 [ 113.527683][ T7346] __x64_sys_sendmsg+0xd4/0x160 [ 113.527722][ T7346] x64_sys_call+0x2999/0x2fb0 [ 113.527748][ T7346] do_syscall_64+0xd0/0x1a0 [ 113.527779][ T7346] ? clear_bhb_loop+0x40/0x90 [ 113.527843][ T7346] ? clear_bhb_loop+0x40/0x90 [ 113.527866][ T7346] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 113.527893][ T7346] RIP: 0033:0x7fd46114e969 [ 113.527907][ T7346] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 113.527923][ T7346] RSP: 002b:00007fd45f7b7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 113.527940][ T7346] RAX: ffffffffffffffda RBX: 00007fd461375fa0 RCX: 00007fd46114e969 [ 113.527951][ T7346] RDX: 0000000020008000 RSI: 0000200000000500 RDI: 0000000000000005 [ 113.527978][ T7346] RBP: 00007fd45f7b7090 R08: 0000000000000000 R09: 0000000000000000 [ 113.527988][ T7346] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 113.527999][ T7346] R13: 0000000000000000 R14: 00007fd461375fa0 R15: 00007ffe12cf0e28 [ 113.528016][ T7346] [ 113.528535][ T29] audit: type=1400 audit(1747404070.445:6571): avc: denied { ioctl } for pid=7345 comm="syz.3.1344" path="socket:[17711]" dev="sockfs" ino=17711 ioctlcmd=0x8903 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 113.530352][ T7346] netlink: 'syz.3.1344': attribute type 10 has an invalid length. [ 113.805040][ T7346] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 113.863407][ T29] audit: type=1326 audit(1747404070.775:6572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7350 comm="syz.3.1346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd46114e969 code=0x7ffc0000 [ 113.891192][ T29] audit: type=1326 audit(1747404070.805:6573): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7350 comm="syz.3.1346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fd46114e969 code=0x7ffc0000 [ 113.916440][ T29] audit: type=1326 audit(1747404070.805:6574): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7350 comm="syz.3.1346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd46114e969 code=0x7ffc0000 [ 113.941120][ T29] audit: type=1326 audit(1747404070.805:6575): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7350 comm="syz.3.1346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd46114e969 code=0x7ffc0000 [ 114.001803][ T7361] loop6: detected capacity change from 0 to 512 [ 114.034897][ T7359] loop0: detected capacity change from 0 to 512 [ 114.048796][ T7359] EXT4-fs: Ignoring removed nomblk_io_submit option [ 114.058344][ T7361] EXT4-fs (loop6): 1 orphan inode deleted [ 114.071853][ T7361] ext4 filesystem being mounted at /52/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 114.083610][ T5759] EXT4-fs error (device loop6): ext4_release_dquot:6971: comm kworker/u8:27: Failed to release dquot type 1 [ 114.083896][ T7359] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 114.129242][ T7359] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 114.147228][ T7359] EXT4-fs (loop0): 1 truncate cleaned up [ 114.169522][ T7367] smc: net device bond0 applied user defined pnetid SYZ0 [ 114.200321][ T7374] smc: net device bond0 erased user defined pnetid SYZ0 [ 114.264208][ T7382] loop1: detected capacity change from 0 to 2048 [ 114.273925][ T7385] ref_ctr increment failed for inode: 0x57d offset: 0x9 ref_ctr_offset: 0x82 of mm: 0xffff8881047cd280 [ 114.287256][ T7385] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1360'. [ 114.302392][ T7383] uprobe: syz.3.1360:7383 failed to unregister, leaking uprobe [ 114.306070][ T7386] FAULT_INJECTION: forcing a failure. [ 114.306070][ T7386] name failslab, interval 1, probability 0, space 0, times 0 [ 114.324780][ T7386] CPU: 0 UID: 0 PID: 7386 Comm: syz.6.1359 Not tainted 6.15.0-rc6-syzkaller-00188-gfee3e843b309 #0 PREEMPT(voluntary) [ 114.324874][ T7386] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 114.324890][ T7386] Call Trace: [ 114.324899][ T7386] [ 114.324909][ T7386] __dump_stack+0x1d/0x30 [ 114.324935][ T7386] dump_stack_lvl+0xe8/0x140 [ 114.324959][ T7386] dump_stack+0x15/0x1b [ 114.325008][ T7386] should_fail_ex+0x265/0x280 [ 114.325041][ T7386] ? proc_do_submiturb+0x83e/0x1db0 [ 114.325145][ T7386] should_failslab+0x8c/0xb0 [ 114.325184][ T7386] __kmalloc_cache_noprof+0x4c/0x320 [ 114.325213][ T7386] proc_do_submiturb+0x83e/0x1db0 [ 114.325314][ T7386] ? proc_do_submiturb+0x111/0x1db0 [ 114.325358][ T7386] ? should_fail_ex+0xdb/0x280 [ 114.325401][ T7386] proc_submiturb+0x7b/0xa0 [ 114.325476][ T7386] usbdev_ioctl+0xcc2/0x1710 [ 114.325512][ T7386] ? __pfx_usbdev_ioctl+0x10/0x10 [ 114.325540][ T7386] __se_sys_ioctl+0xcb/0x140 [ 114.325561][ T7386] __x64_sys_ioctl+0x43/0x50 [ 114.325588][ T7386] x64_sys_call+0x19a8/0x2fb0 [ 114.325624][ T7386] do_syscall_64+0xd0/0x1a0 [ 114.325654][ T7386] ? clear_bhb_loop+0x40/0x90 [ 114.325675][ T7386] ? clear_bhb_loop+0x40/0x90 [ 114.325736][ T7386] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 114.325763][ T7386] RIP: 0033:0x7f5dcd26e969 [ 114.325781][ T7386] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 114.325805][ T7386] RSP: 002b:00007f5dcb8d7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 114.325827][ T7386] RAX: ffffffffffffffda RBX: 00007f5dcd495fa0 RCX: 00007f5dcd26e969 [ 114.325839][ T7386] RDX: 0000200000000140 RSI: 000000008038550a RDI: 0000000000000003 [ 114.325859][ T7386] RBP: 00007f5dcb8d7090 R08: 0000000000000000 R09: 0000000000000000 [ 114.325873][ T7386] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 114.325889][ T7386] R13: 0000000000000000 R14: 00007f5dcd495fa0 R15: 00007ffd572f9708 [ 114.325911][ T7386] [ 114.326249][ T7376] loop4: detected capacity change from 0 to 8192 [ 114.399259][ T7391] loop6: detected capacity change from 0 to 512 [ 114.560991][ T7382] sctp: [Deprecated]: syz.1.1358 (pid 7382) Use of int in max_burst socket option deprecated. [ 114.560991][ T7382] Use struct sctp_assoc_value instead [ 114.585761][ T7382] hub 9-0:1.0: USB hub found [ 114.591405][ T7382] hub 9-0:1.0: 8 ports detected [ 114.601918][ T7376] loop4: p4 < > [ 114.619449][ T7391] EXT4-fs (loop6): 1 orphan inode deleted [ 114.627314][ T7391] ext4 filesystem being mounted at /56/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 114.644477][ T5779] EXT4-fs error (device loop6): ext4_release_dquot:6971: comm kworker/u8:47: Failed to release dquot type 1 [ 114.693051][ T7400] loop6: detected capacity change from 0 to 512 [ 114.701947][ T7398] loop1: detected capacity change from 0 to 512 [ 114.712969][ T7398] EXT4-fs: Ignoring removed nomblk_io_submit option [ 114.722790][ T7398] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 114.752022][ T7398] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 114.770195][ T7400] ext4 filesystem being mounted at /57/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 114.783769][ T7398] EXT4-fs (loop1): 1 truncate cleaned up [ 114.836931][ T7410] vhci_hcd: invalid port number 96 [ 114.842469][ T7410] vhci_hcd: default hub control req: 0000 vfffc i0060 l0 [ 115.342051][ T7426] bridge_slave_0: left allmulticast mode [ 115.349508][ T7426] bridge_slave_0: left promiscuous mode [ 115.359698][ T7426] bridge0: port 1(bridge_slave_0) entered disabled state [ 115.473580][ T7445] loop3: detected capacity change from 0 to 512 [ 115.490664][ T7445] EXT4-fs: Ignoring removed nomblk_io_submit option [ 115.509969][ T7445] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 115.546064][ T7426] bond0: (slave bond_slave_0): Releasing backup interface [ 115.594897][ T7445] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 115.639846][ T7445] EXT4-fs (loop3): 1 truncate cleaned up [ 115.700730][ T7455] loop6: detected capacity change from 0 to 512 [ 115.711412][ T7426] bond0: (slave bond_slave_1): Releasing backup interface [ 115.764035][ T7463] netlink: 'syz.1.1388': attribute type 21 has an invalid length. [ 115.803499][ T7455] EXT4-fs error (device loop6): ext4_ext_check_inode:524: inode #15: comm syz.6.1383: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 115.835439][ T7426] team0: Port device team_slave_0 removed [ 115.854330][ T7426] team0: Port device team_slave_1 removed [ 115.874548][ T7426] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 115.883110][ T7426] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 115.899410][ T7426] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 115.907621][ T7426] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 115.943033][ T7463] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1388'. [ 116.018882][ T7479] loop1: detected capacity change from 0 to 512 [ 116.122081][ T7479] ext4 filesystem being mounted at /273/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 116.326219][ T7498] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1389'. [ 116.857545][ T7503] loop3: detected capacity change from 0 to 8192 [ 116.891158][ T7503] loop3: p4 < > [ 117.050092][ T7532] loop0: detected capacity change from 0 to 512 [ 117.078874][ T7532] EXT4-fs: Ignoring removed nomblk_io_submit option [ 117.095759][ T7532] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 117.138371][ T7532] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 117.175607][ T7532] EXT4-fs (loop0): 1 truncate cleaned up [ 117.274649][ T7537] loop3: detected capacity change from 0 to 512 [ 117.276374][ T7541] FAULT_INJECTION: forcing a failure. [ 117.276374][ T7541] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 117.295963][ T7541] CPU: 1 UID: 0 PID: 7541 Comm: syz.6.1416 Not tainted 6.15.0-rc6-syzkaller-00188-gfee3e843b309 #0 PREEMPT(voluntary) [ 117.295999][ T7541] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 117.296015][ T7541] Call Trace: [ 117.296024][ T7541] [ 117.296097][ T7541] __dump_stack+0x1d/0x30 [ 117.296135][ T7541] dump_stack_lvl+0xe8/0x140 [ 117.296219][ T7541] dump_stack+0x15/0x1b [ 117.296241][ T7541] should_fail_ex+0x265/0x280 [ 117.296283][ T7541] should_fail+0xb/0x20 [ 117.296376][ T7541] should_fail_usercopy+0x1a/0x20 [ 117.296400][ T7541] _copy_from_user+0x1c/0xb0 [ 117.296428][ T7541] get_timespec64+0x4c/0x100 [ 117.296509][ T7541] __x64_sys_recvmmsg+0xa3/0x170 [ 117.296541][ T7541] x64_sys_call+0x1c6a/0x2fb0 [ 117.296568][ T7541] do_syscall_64+0xd0/0x1a0 [ 117.296599][ T7541] ? clear_bhb_loop+0x40/0x90 [ 117.296673][ T7541] ? clear_bhb_loop+0x40/0x90 [ 117.296735][ T7541] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 117.296761][ T7541] RIP: 0033:0x7f5dcd26e969 [ 117.296780][ T7541] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 117.296818][ T7541] RSP: 002b:00007f5dcb8d7038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 117.296842][ T7541] RAX: ffffffffffffffda RBX: 00007f5dcd495fa0 RCX: 00007f5dcd26e969 [ 117.296858][ T7541] RDX: 04000000000003b4 RSI: 00002000000037c0 RDI: 0000000000000005 [ 117.296874][ T7541] RBP: 00007f5dcb8d7090 R08: 0000200000003700 R09: 0000000000000000 [ 117.296981][ T7541] R10: 0000000002040000 R11: 0000000000000246 R12: 0000000000000001 [ 117.297008][ T7541] R13: 0000000000000000 R14: 00007f5dcd495fa0 R15: 00007ffd572f9708 [ 117.297033][ T7541] [ 117.507383][ T7537] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.1415: bg 0: block 393: padding at end of block bitmap is not set [ 117.537149][ T7537] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 117.542251][ T7547] loop0: detected capacity change from 0 to 1024 [ 117.559311][ T7553] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1418'. [ 117.572059][ T7547] ext4 filesystem being mounted at /302/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 117.573648][ T7537] EXT4-fs (loop3): 2 truncates cleaned up [ 117.642005][ T7545] loop4: detected capacity change from 0 to 8192 [ 117.649332][ T7537] wireguard4: entered promiscuous mode [ 117.655523][ T7537] wireguard4: entered allmulticast mode [ 117.662369][ T7545] vfat: Unknown parameter 'GPL' [ 117.685946][ T7561] pim6reg1: entered promiscuous mode [ 117.692339][ T7561] pim6reg1: entered allmulticast mode [ 117.708967][ T29] kauditd_printk_skb: 113 callbacks suppressed [ 117.708988][ T29] audit: type=1326 audit(1747404074.625:6687): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7562 comm="syz.0.1422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73ef26e969 code=0x7ffc0000 [ 117.742464][ T29] audit: type=1326 audit(1747404074.635:6688): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7562 comm="syz.0.1422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73ef26e969 code=0x7ffc0000 [ 117.768004][ T29] audit: type=1326 audit(1747404074.635:6689): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7562 comm="syz.0.1422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f73ef26e969 code=0x7ffc0000 [ 117.793647][ T29] audit: type=1326 audit(1747404074.635:6690): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7562 comm="syz.0.1422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73ef26e969 code=0x7ffc0000 [ 117.820220][ T29] audit: type=1326 audit(1747404074.635:6691): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7562 comm="syz.0.1422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f73ef26e969 code=0x7ffc0000 [ 117.846230][ T29] audit: type=1326 audit(1747404074.635:6692): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7562 comm="syz.0.1422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73ef26e969 code=0x7ffc0000 [ 117.873977][ T29] audit: type=1326 audit(1747404074.635:6693): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7562 comm="syz.0.1422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7f73ef26e969 code=0x7ffc0000 [ 117.899476][ T29] audit: type=1326 audit(1747404074.635:6694): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7562 comm="syz.0.1422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73ef26e969 code=0x7ffc0000 [ 117.925621][ T29] audit: type=1326 audit(1747404074.635:6695): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7562 comm="syz.0.1422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f73ef26e969 code=0x7ffc0000 [ 117.952442][ T29] audit: type=1326 audit(1747404074.635:6696): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7562 comm="syz.0.1422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73ef26e969 code=0x7ffc0000 [ 118.052214][ T7567] loop4: detected capacity change from 0 to 512 [ 118.061244][ T7567] EXT4-fs: Ignoring removed nomblk_io_submit option [ 118.079993][ T7569] loop3: detected capacity change from 0 to 1024 [ 118.098869][ T7567] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 118.117554][ T7569] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 118.135651][ T7567] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 118.156303][ T7567] EXT4-fs (loop4): 1 truncate cleaned up [ 118.254918][ T7590] netlink: 'syz.4.1435': attribute type 21 has an invalid length. [ 118.269205][ T7592] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=41664 sclass=netlink_route_socket pid=7592 comm=syz.6.1436 [ 118.284712][ T7590] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1435'. [ 118.299014][ T7594] loop1: detected capacity change from 0 to 512 [ 118.301730][ T7595] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1427'. [ 118.346964][ T7594] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.1434: bg 0: block 393: padding at end of block bitmap is not set [ 118.415137][ T7594] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 118.427761][ T7607] netlink: 'syz.6.1436': attribute type 2 has an invalid length. [ 118.488951][ T7611] openvswitch: netlink: Message has 6 unknown bytes. [ 118.513993][ T7594] EXT4-fs (loop1): 2 truncates cleaned up [ 118.521849][ T7613] loop3: detected capacity change from 0 to 512 [ 118.530656][ T7613] EXT4-fs: Ignoring removed nomblk_io_submit option [ 118.539414][ T7613] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 118.556255][ T7594] wireguard2: entered promiscuous mode [ 118.562521][ T7594] wireguard2: entered allmulticast mode [ 118.571885][ T7613] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 118.589937][ T7613] EXT4-fs (loop3): 1 truncate cleaned up [ 118.631000][ T7619] syzkaller1: entered promiscuous mode [ 118.636892][ T7619] syzkaller1: entered allmulticast mode [ 118.685732][ T7624] loop3: detected capacity change from 0 to 512 [ 118.694490][ T7624] EXT4-fs (loop3): Invalid log cluster size: 4294967295 [ 118.707256][ T7624] x_tables: ip6_tables: tcpmss match: only valid for protocol 6 [ 118.741042][ T7628] loop1: detected capacity change from 0 to 512 [ 118.773669][ T7630] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1444'. [ 118.776221][ T7631] 9pnet_fd: Insufficient options for proto=fd [ 118.804491][ T7628] EXT4-fs (loop1): 1 orphan inode deleted [ 118.812577][ T7628] ext4 filesystem being mounted at /280/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 118.823663][ T5778] EXT4-fs error (device loop1): ext4_release_dquot:6971: comm kworker/u8:46: Failed to release dquot type 1 [ 118.841424][ T7631] loop6: detected capacity change from 0 to 1024 [ 118.851881][ T7636] FAULT_INJECTION: forcing a failure. [ 118.851881][ T7636] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 118.867038][ T7636] CPU: 1 UID: 0 PID: 7636 Comm: syz.4.1448 Not tainted 6.15.0-rc6-syzkaller-00188-gfee3e843b309 #0 PREEMPT(voluntary) [ 118.867154][ T7636] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 118.867171][ T7636] Call Trace: [ 118.867180][ T7636] [ 118.867190][ T7636] __dump_stack+0x1d/0x30 [ 118.867252][ T7636] dump_stack_lvl+0xe8/0x140 [ 118.867278][ T7636] dump_stack+0x15/0x1b [ 118.867299][ T7636] should_fail_ex+0x265/0x280 [ 118.867342][ T7636] should_fail+0xb/0x20 [ 118.867374][ T7636] should_fail_usercopy+0x1a/0x20 [ 118.867477][ T7636] _copy_from_user+0x1c/0xb0 [ 118.867505][ T7636] get_itimerspec64+0x4c/0x1a0 [ 118.867539][ T7636] __x64_sys_timer_settime+0x9a/0x160 [ 118.867691][ T7636] x64_sys_call+0x29e6/0x2fb0 [ 118.867720][ T7636] do_syscall_64+0xd0/0x1a0 [ 118.867749][ T7636] ? clear_bhb_loop+0x40/0x90 [ 118.867798][ T7636] ? clear_bhb_loop+0x40/0x90 [ 118.867862][ T7636] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 118.867883][ T7636] RIP: 0033:0x7f215535e969 [ 118.867995][ T7636] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 118.868018][ T7636] RSP: 002b:00007f21539a6038 EFLAGS: 00000246 ORIG_RAX: 00000000000000df [ 118.868047][ T7636] RAX: ffffffffffffffda RBX: 00007f2155586080 RCX: 00007f215535e969 [ 118.868061][ T7636] RDX: 00002000000000c0 RSI: 0000000000000001 RDI: 0000000000000000 [ 118.868075][ T7636] RBP: 00007f21539a6090 R08: 0000000000000000 R09: 0000000000000000 [ 118.868088][ T7636] R10: 0000200000000240 R11: 0000000000000246 R12: 0000000000000001 [ 118.868103][ T7636] R13: 0000000000000000 R14: 00007f2155586080 R15: 00007fff318b4938 [ 118.868248][ T7636] [ 118.872042][ T7631] ext2: Unknown parameter 'pcr' [ 119.089360][ T7638] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1449'. [ 119.157717][ T7647] netlink: 'syz.6.1452': attribute type 21 has an invalid length. [ 119.168202][ T7647] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1452'. [ 119.267892][ T7654] loop6: detected capacity change from 0 to 512 [ 119.275423][ T7654] EXT4-fs: Ignoring removed nomblk_io_submit option [ 119.283833][ T7654] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 119.297699][ T7654] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 119.314415][ T7654] EXT4-fs (loop6): 1 truncate cleaned up [ 119.660359][ T7673] loop0: detected capacity change from 0 to 128 [ 119.667585][ T7675] loop4: detected capacity change from 0 to 128 [ 119.668111][ T7673] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 119.674673][ T7675] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 119.689461][ T7673] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 119.701263][ T7675] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 119.736549][ T5778] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 119.749498][ T5757] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 119.762946][ T7677] loop3: detected capacity change from 0 to 128 [ 119.771340][ T7677] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 119.785194][ T7677] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 119.800860][ T7679] loop4: detected capacity change from 0 to 512 [ 119.802509][ T7677] FAULT_INJECTION: forcing a failure. [ 119.802509][ T7677] name failslab, interval 1, probability 0, space 0, times 0 [ 119.821786][ T7677] CPU: 0 UID: 0 PID: 7677 Comm: syz.3.1463 Not tainted 6.15.0-rc6-syzkaller-00188-gfee3e843b309 #0 PREEMPT(voluntary) [ 119.821823][ T7677] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 119.821865][ T7677] Call Trace: [ 119.821873][ T7677] [ 119.821883][ T7677] __dump_stack+0x1d/0x30 [ 119.821911][ T7677] dump_stack_lvl+0xe8/0x140 [ 119.821935][ T7677] dump_stack+0x15/0x1b [ 119.821999][ T7677] should_fail_ex+0x265/0x280 [ 119.822091][ T7677] should_failslab+0x8c/0xb0 [ 119.822130][ T7677] kmem_cache_alloc_noprof+0x50/0x310 [ 119.822155][ T7677] ? getname_flags+0x80/0x3b0 [ 119.822196][ T7677] getname_flags+0x80/0x3b0 [ 119.822232][ T7677] __x64_sys_rename+0x33/0x70 [ 119.822267][ T7677] x64_sys_call+0x2aee/0x2fb0 [ 119.822292][ T7677] do_syscall_64+0xd0/0x1a0 [ 119.822365][ T7677] ? clear_bhb_loop+0x40/0x90 [ 119.822385][ T7677] ? clear_bhb_loop+0x40/0x90 [ 119.822405][ T7677] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 119.822454][ T7677] RIP: 0033:0x7fd46114e969 [ 119.822475][ T7677] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 119.822498][ T7677] RSP: 002b:00007fd45f7b7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000052 [ 119.822521][ T7677] RAX: ffffffffffffffda RBX: 00007fd461375fa0 RCX: 00007fd46114e969 [ 119.822535][ T7677] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000200000000000 [ 119.822548][ T7677] RBP: 00007fd45f7b7090 R08: 0000000000000000 R09: 0000000000000000 [ 119.822622][ T7677] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 119.822638][ T7677] R13: 0000000000000000 R14: 00007fd461375fa0 R15: 00007ffe12cf0e28 [ 119.822661][ T7677] [ 120.023872][ T5757] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 120.040741][ T7679] loop4: detected capacity change from 0 to 2048 [ 120.048541][ T7679] EXT4-fs: Ignoring removed bh option [ 120.058755][ T7685] loop3: detected capacity change from 0 to 512 [ 120.066817][ T7685] EXT4-fs: Ignoring removed nomblk_io_submit option [ 120.075179][ T7685] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 120.089045][ T7685] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 120.104919][ T7685] EXT4-fs (loop3): 1 truncate cleaned up [ 120.120010][ T7691] loop1: detected capacity change from 0 to 512 [ 120.178939][ T7696] loop3: detected capacity change from 0 to 512 [ 120.199513][ T7687] EXT4-fs error (device loop1): ext4_ext_check_inode:524: inode #15: comm syz.1.1467: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 120.207129][ T7696] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.1468: bg 0: block 393: padding at end of block bitmap is not set [ 120.236852][ T7696] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 120.247609][ T7696] EXT4-fs (loop3): 2 truncates cleaned up [ 120.336150][ T7708] loop3: detected capacity change from 0 to 512 [ 120.388817][ T7708] ext4 filesystem being mounted at /282/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 120.431778][ T7715] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1462'. [ 120.442552][ T7710] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1462'. [ 120.588609][ T7701] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 120.613326][ T7701] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 15 with max blocks 641 with error 28 [ 120.627430][ T7701] EXT4-fs (loop4): This should not happen!! Data will be lost [ 120.627430][ T7701] [ 120.638171][ T7701] EXT4-fs (loop4): Total free blocks count 0 [ 120.645095][ T7701] EXT4-fs (loop4): Free/Dirty block details [ 120.651821][ T7701] EXT4-fs (loop4): free_blocks=2415919104 [ 120.658049][ T7701] EXT4-fs (loop4): dirty_blocks=8224 [ 120.663984][ T7701] EXT4-fs (loop4): Block reservation details [ 120.670604][ T7701] EXT4-fs (loop4): i_reserved_data_blocks=514 [ 120.704599][ T5759] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 120.717508][ T5759] EXT4-fs (loop4): This should not happen!! Data will be lost [ 120.717508][ T5759] [ 120.728983][ T7721] FAULT_INJECTION: forcing a failure. [ 120.728983][ T7721] name failslab, interval 1, probability 0, space 0, times 0 [ 120.742861][ T7721] CPU: 0 UID: 0 PID: 7721 Comm: syz.1.1476 Not tainted 6.15.0-rc6-syzkaller-00188-gfee3e843b309 #0 PREEMPT(voluntary) [ 120.742900][ T7721] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 120.742995][ T7721] Call Trace: [ 120.743004][ T7721] [ 120.743014][ T7721] __dump_stack+0x1d/0x30 [ 120.743042][ T7721] dump_stack_lvl+0xe8/0x140 [ 120.743065][ T7721] dump_stack+0x15/0x1b [ 120.743085][ T7721] should_fail_ex+0x265/0x280 [ 120.743147][ T7721] should_failslab+0x8c/0xb0 [ 120.743256][ T7721] kmem_cache_alloc_node_noprof+0x57/0x320 [ 120.743281][ T7721] ? __alloc_skb+0x101/0x320 [ 120.743375][ T7721] ? mod_objcg_state+0x40e/0x530 [ 120.743477][ T7721] __alloc_skb+0x101/0x320 [ 120.743516][ T7721] sock_omalloc+0x81/0xf0 [ 120.743537][ T7721] msg_zerocopy_realloc+0x7f/0x3c0 [ 120.743560][ T7721] __ip_append_data+0x860/0x2490 [ 120.743616][ T7721] ? memcg_list_lru_alloc+0xc2/0x490 [ 120.743669][ T7721] ? mod_objcg_state+0x40e/0x530 [ 120.743697][ T7721] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 120.743783][ T7721] ? avc_has_perm+0xd3/0x150 [ 120.743822][ T7721] ip_append_data+0xd6/0x130 [ 120.743850][ T7721] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 120.743879][ T7721] udp_sendmsg+0x36e/0x13a0 [ 120.743899][ T7721] ? rep_movs_alternative+0xf/0x90 [ 120.743993][ T7721] ? rep_movs_alternative+0xf/0x90 [ 120.744024][ T7721] ? __rcu_read_unlock+0x4f/0x70 [ 120.744051][ T7721] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 120.744154][ T7721] ? avc_has_perm+0xd3/0x150 [ 120.744259][ T7721] ? __pfx_udp_sendmsg+0x10/0x10 [ 120.744281][ T7721] inet_sendmsg+0xac/0xd0 [ 120.744369][ T7721] __sock_sendmsg+0x102/0x180 [ 120.744398][ T7721] __sys_sendto+0x268/0x330 [ 120.744506][ T7721] __x64_sys_sendto+0x76/0x90 [ 120.744557][ T7721] x64_sys_call+0x2eb6/0x2fb0 [ 120.744632][ T7721] do_syscall_64+0xd0/0x1a0 [ 120.744661][ T7721] ? clear_bhb_loop+0x40/0x90 [ 120.744687][ T7721] ? clear_bhb_loop+0x40/0x90 [ 120.744710][ T7721] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 120.744729][ T7721] RIP: 0033:0x7f6c1daee969 [ 120.744806][ T7721] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 120.744829][ T7721] RSP: 002b:00007f6c1c157038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 120.744914][ T7721] RAX: ffffffffffffffda RBX: 00007f6c1dd15fa0 RCX: 00007f6c1daee969 [ 120.744953][ T7721] RDX: 000000000000fdbe RSI: 0000200000000100 RDI: 0000000000000003 [ 120.744968][ T7721] RBP: 00007f6c1c157090 R08: 0000000000000000 R09: 0000000011000a00 [ 120.744982][ T7721] R10: 0000000004004084 R11: 0000000000000246 R12: 0000000000000001 [ 120.744994][ T7721] R13: 0000000000000000 R14: 00007f6c1dd15fa0 R15: 00007fffdeb45f38 [ 120.745032][ T7721] [ 121.052588][ T7723] loop0: detected capacity change from 0 to 512 [ 121.087924][ T7723] EXT4-fs (loop0): 1 orphan inode deleted [ 121.088810][ T7731] loop4: detected capacity change from 0 to 512 [ 121.102340][ T7731] EXT4-fs: Ignoring removed nomblk_io_submit option [ 121.110903][ T7723] ext4 filesystem being mounted at /313/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 121.111124][ T7731] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 121.123175][ T7726] loop1: detected capacity change from 0 to 8192 [ 121.142113][ T5753] EXT4-fs error (device loop0): ext4_release_dquot:6971: comm kworker/u8:24: Failed to release dquot type 1 [ 121.158514][ T7731] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 121.174794][ T7731] EXT4-fs (loop4): 1 truncate cleaned up [ 121.196054][ T7726] loop1: p4 < > [ 121.219693][ T7736] openvswitch: netlink: Message has 6 unknown bytes. [ 121.251416][ T7736] syzkaller1: entered promiscuous mode [ 121.257537][ T7736] syzkaller1: entered allmulticast mode [ 121.290852][ T7738] loop3: detected capacity change from 0 to 512 [ 121.376417][ T7743] EXT4-fs error (device loop3): ext4_ext_check_inode:524: inode #15: comm syz.3.1481: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 121.527090][ T7765] loop3: detected capacity change from 0 to 512 [ 121.569625][ T7765] ext4 filesystem being mounted at /285/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 121.668468][ T7773] syzkaller0: entered promiscuous mode [ 121.674521][ T7773] syzkaller0: entered allmulticast mode [ 121.682060][ T7773] FAULT_INJECTION: forcing a failure. [ 121.682060][ T7773] name failslab, interval 1, probability 0, space 0, times 0 [ 121.696667][ T7773] CPU: 0 UID: 0 PID: 7773 Comm: syz.0.1493 Not tainted 6.15.0-rc6-syzkaller-00188-gfee3e843b309 #0 PREEMPT(voluntary) [ 121.696767][ T7773] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 121.696782][ T7773] Call Trace: [ 121.696791][ T7773] [ 121.696800][ T7773] __dump_stack+0x1d/0x30 [ 121.696823][ T7773] dump_stack_lvl+0xe8/0x140 [ 121.696841][ T7773] dump_stack+0x15/0x1b [ 121.696857][ T7773] should_fail_ex+0x265/0x280 [ 121.696901][ T7773] should_failslab+0x8c/0xb0 [ 121.697065][ T7773] kmem_cache_alloc_node_noprof+0x57/0x320 [ 121.697155][ T7773] ? __alloc_skb+0x101/0x320 [ 121.697198][ T7773] __alloc_skb+0x101/0x320 [ 121.697230][ T7773] alloc_skb_with_frags+0x7d/0x470 [ 121.697253][ T7773] ? selinux_file_open+0x31c/0x370 [ 121.697324][ T7773] ? __rcu_read_unlock+0x4f/0x70 [ 121.697347][ T7773] sock_alloc_send_pskb+0x43a/0x4f0 [ 121.697390][ T7773] tun_get_user+0x8c0/0x24d0 [ 121.697468][ T7773] ? ref_tracker_alloc+0x1f2/0x2f0 [ 121.697504][ T7773] ? avc_policy_seqno+0x15/0x30 [ 121.697531][ T7773] tun_chr_write_iter+0x15e/0x210 [ 121.697566][ T7773] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 121.697608][ T7773] vfs_write+0x49d/0x8d0 [ 121.697645][ T7773] ksys_write+0xda/0x1a0 [ 121.697681][ T7773] __x64_sys_write+0x40/0x50 [ 121.697714][ T7773] x64_sys_call+0x2cdd/0x2fb0 [ 121.697814][ T7773] do_syscall_64+0xd0/0x1a0 [ 121.697887][ T7773] ? clear_bhb_loop+0x40/0x90 [ 121.697913][ T7773] ? clear_bhb_loop+0x40/0x90 [ 121.697939][ T7773] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 121.697966][ T7773] RIP: 0033:0x7f73ef26e969 [ 121.697982][ T7776] loop4: detected capacity change from 0 to 8192 [ 121.698131][ T7773] ================================================================== [ 121.698178][ T7773] BUG: KCSAN: data-race in data_push_tail / vsnprintf [ 121.698238][ T7773] [ 121.698244][ T7773] write to 0xffffffff88e2b2df of 32 bytes by task 7776 on cpu 1: [ 121.698265][ T7773] vsnprintf+0x2ce/0x890 [ 121.698299][ T7773] vscnprintf+0x41/0x90 [ 121.698335][ T7773] printk_sprint+0x30/0x2d0 [ 121.698356][ T7773] vprintk_store+0x599/0x860 [ 121.698376][ T7773] vprintk_emit+0x178/0x650 [ 121.698397][ T7773] vprintk_default+0x26/0x30 [ 121.698421][ T7773] vprintk+0x1d/0x30 [ 121.698450][ T7773] _printk+0x79/0xa0 [ 121.698484][ T7773] set_capacity_and_notify+0x14c/0x1f0 [ 121.698508][ T7773] loop_set_size+0x2e/0x70 [ 121.698548][ T7773] loop_configure+0x7ec/0x970 [ 121.698603][ T7773] lo_ioctl+0x559/0x15d0 [ 121.698638][ T7773] blkdev_ioctl+0x352/0x440 [ 121.698657][ T7773] __se_sys_ioctl+0xcb/0x140 [ 121.698684][ T7773] __x64_sys_ioctl+0x43/0x50 [ 121.698709][ T7773] x64_sys_call+0x19a8/0x2fb0 [ 121.698734][ T7773] do_syscall_64+0xd0/0x1a0 [ 121.698763][ T7773] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 121.698788][ T7773] [ 121.698795][ T7773] read to 0xffffffff88e2b2e0 of 8 bytes by task 7773 on cpu 0: [ 121.698815][ T7773] data_push_tail+0xfd/0x420 [ 121.698862][ T7773] data_alloc+0xbf/0x2b0 [ 121.698897][ T7773] prb_reserve+0x808/0xaf0 [ 121.698933][ T7773] vprintk_store+0x56d/0x860 [ 121.698952][ T7773] vprintk_emit+0x178/0x650 [ 121.698974][ T7773] vprintk_default+0x26/0x30 [ 121.698997][ T7773] vprintk+0x1d/0x30 [ 121.699026][ T7773] _printk+0x79/0xa0 [ 121.699060][ T7773] show_ip+0x27/0x40 [ 121.699084][ T7773] show_iret_regs+0x12/0x40 [ 121.699112][ T7773] __show_regs+0x2a/0x440 [ 121.699138][ T7773] show_trace_log_lvl+0x423/0x560 [ 121.699167][ T7773] __dump_stack+0x1d/0x30 [ 121.699187][ T7773] dump_stack_lvl+0xe8/0x140 [ 121.699208][ T7773] dump_stack+0x15/0x1b [ 121.699228][ T7773] should_fail_ex+0x265/0x280 [ 121.699266][ T7773] should_failslab+0x8c/0xb0 [ 121.699312][ T7773] kmem_cache_alloc_node_noprof+0x57/0x320 [ 121.699337][ T7773] __alloc_skb+0x101/0x320 [ 121.699374][ T7773] alloc_skb_with_frags+0x7d/0x470 [ 121.699394][ T7773] sock_alloc_send_pskb+0x43a/0x4f0 [ 121.699420][ T7773] tun_get_user+0x8c0/0x24d0 [ 121.699450][ T7773] tun_chr_write_iter+0x15e/0x210 [ 121.699478][ T7773] vfs_write+0x49d/0x8d0 [ 121.699514][ T7773] ksys_write+0xda/0x1a0 [ 121.699546][ T7773] __x64_sys_write+0x40/0x50 [ 121.699579][ T7773] x64_sys_call+0x2cdd/0x2fb0 [ 121.699605][ T7773] do_syscall_64+0xd0/0x1a0 [ 121.699634][ T7773] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 121.699659][ T7773] [ 121.699663][ T7773] value changed: 0x00000000ffffe660 -> 0x2064657463657465 [ 121.699677][ T7773] [ 121.699681][ T7773] Reported by Kernel Concurrency Sanitizer on: [ 121.699694][ T7773] CPU: 0 UID: 0 PID: 7773 Comm: syz.0.1493 Not tainted 6.15.0-rc6-syzkaller-00188-gfee3e843b309 #0 PREEMPT(voluntary) [ 121.699729][ T7773] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 121.699745][ T7773] ================================================================== [ 121.699785][ T7773] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 121.699838][ T7773] RSP: 002b:00007f73ed8b6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 121.699863][ T7773] RAX: ffffffffffffffda RBX: 00007f73ef496080 RCX: 00007f73ef26e969 [ 121.699879][ T7773] RDX: 0000000000000012 RSI: 00002000000005c0 RDI: 0000000000000006 [ 121.699895][ T7773] RBP: 00007f73ed8b6090 R08: 0000000000000000 R09: 0000000000000000 [ 121.699911][ T7773] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 121.699926][ T7773] R13: 0000000000000000 R14: 00007f73ef496080 R15: 00007ffcab9e5b28 [ 121.699952][ T7773] [ 122.305868][ T7776] loop4: p4 < >