last executing test programs: 2.354605902s ago: executing program 4 (id=2472): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000060000", @ANYBLOB], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x41, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x8, &(0x7f0000000c00)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x3}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = fsmount(0xffffffffffffffff, 0x1, 0x0) openat$cgroup_procs(r1, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000640)=ANY=[], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r2}, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x10, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000510700140000000000000001b7080000000000007b8af8ff00000000b7080000fcffffff7b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x70, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0xfff, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, 0x0, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xcb3a, @void, @value}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb0100180000000000000034000000340000000600000004008bcba143000e04"], 0x0, 0x52, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000040)="2e00000011008188040f80ec59acbc0413a1f8480b0000005e140602000000000e0027001000000002800000121f", 0x2e}], 0x1}, 0x0) 2.188306584s ago: executing program 2 (id=2477): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b00000005000000020000000400000005"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r1}, 0x38) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000080)='kfree\x00', r2}, 0x18) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000900850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kfree\x00', r6}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="b70000001a000000bca300000000000024030000c0feffff620af0fff8ffffff71a4f2ff000000001f03000000000000e5000200000000002604fdffff02000014010000030000001d130000000000007a0a00fe0000001f0f14000000000000b503f7fff80000009500000000000000033bc065b78111c6dfa041b63af4a3912435f1a864a7aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168e5181554a090f300020000fe275daf51efd601b6bf01c8e8b1b526375ee4dd6fcd82e4fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e65440000000000000000028610643a98d9ec21ead2ed51b104d4d91af25b845b9f7d08d123deda88c658d42ecbf28bf7076c15b463bebc72f526dd70252e79166d858fcd0e06dd31af9612fa402d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff61623604000000000000006a89adaf17b0a6041bdeebdfd1f5089048ddff6da40f9411fe7226a40409d6e37c4f46756d31cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564163427afea62d84f3a10076443d643649393bf52d2105bd901128c7e0ec82701c8204a1deeed4155617572652d950ad31928b0b036dc2869f478341d02d0f5ad94b081fcd507acb4b9c67382f13d000000225d85ae49cee383dc5049076b98fb6853ab39a21514da60d2ae20cfb91d6a49964757cdf538f9ce2bdbb9893a5de817101a3062cd54f9ff51d355d84ce97bb0c6b6a595e487a2cc47c0efbb2d71cde2c10f0bc6980fe78683ac5c0c31032599dd273863be9261eee52216d009f4c52048ef8c126aeef5f510a8f1aded94a129e4aec6e8d9ab06faffc3a15d91c2ea3e2e04cfe031b287539d0540059fe6c7fe7cd8697502c7596566d674e425da5e7f009602a9f61d3804b3e0a1053abdc31282dfb15eb6841bb64a1b3045024a982f3c48153baae244e7bf573eac34b781337ad5905c6bbf1137548c7f1a4cad2422ee965a38f7defbd2960242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a90144022a579dfc0229cc0dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc48899b212c55318294270a1ad10c80fef7c24d47afcc829ba0f85da6d888f18ea40ab959f6074ab2a40d85d1501783a7ab540b8d7b4ead35a385e0b4a26b702396df7e0c1e02b88c114f244a9bf93f04bf072f0861f5c0b000000000000eedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba3401e6a52acb11883ad2a3b1832371fe5bc621426d1ed01b389708165b9cdbae2ed9dc7358f0ebadde0b727f27feeb7464dcd857ab15e355713767c536cbae2f5c7d951680f6f2f9a6a8346962a350845ffa0d82884f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010ae20e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d64a532869d701723fedcbada1ee7baa19faf67256b56a41fd355b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ced301efeb6dc5f6a9037d2283c42efc54fa84323afc4c10eff462c8843187f1dd48ef0981000000000000ff0f40b1888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538c6ee6ba65893ff1f908ba7554ba583ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738612e4fee18a22da19fc08001011e32f80fb60e14b9eee094277bbc170882c8890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f62e3f753b639a924599c1f69219927ea5301fff0a6063d427180d61542c2571f983e96635600000554f327a3535e7c7542799493c31ac05a7b57f03ca91a01ba2a30ca99e969d6fd09dc28ebc15edb4d91675767999d146aef7799738b292fd64bb25b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a794963342aece449a0d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b6ef9d12096833d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e1661261173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ec035d232f89fe0120f64c62e8e3ed8bcb45202c204bbec8d722824c0ebca8db1ea4a05e41f6016ab5bbe4fe7ff5d785d0128171c90d9900ca2532b0f9d01c4b45294fbba468df3e1b393cb4e62e753b4172ba7ac1f2b51c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd849904568916694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a881192292ffff5392ab3d1311b82432662806add87047f601fa888400000000000000000000000000006acc19808d7cf29bc974b0ea92499a41b9b9a7c2bca311a28ee4952f2d325a56397c78f12205db653a536f9f3322405d1efd78e578dc6b3fb84f3738a4b6caa800000087efa51c5d95ecba4e50e529d1e8c89600e809dc3d0a2f65579e23457949a50f2d0455cf79a43746979f99f6a1527f004f1e37a3926937e84fb478199dc1020f4beb98b8074bf7df8b5e783637da740800000000000000c55a4385e9a617aa6c8e10d4202c5afeb06e2f9115558ea12f92d7ae633d44086b3f03b20d546fa66a72e38207c9d20035abc46271a30f1240de52536941242d23896ab74a3c6670fdc49c14f34fc4eadd6db8d80eba439772bf60a1db18c472dafc5569adc282928d2a1ffe29f1a57d3f18f4edaeb5d37918e6fddcd821da67a0785585a4443440dc65600e64a6a2740000000000000000000000000000000000000000000a0009dd14b38f2f4426d7cf5075047c31f6ce6adddfe3ac649c0643c8bfbeb14ba1fd7a485aa893915cf81e29aaf375e904bbe52691a4100260ffcd8f1d04166d291ebcef893e1b9ccb6797d0646fe0e7274434f28efb43e06e64f0698caca42f4e6018a455736c482a017e2b13dac4a90faa109f0e87cc94e3efb649692456463ca74aa6ad4bf50c1acb0000000000000005375e528285544d0064b98646f3109e9a4942ce42c6e7ec84b664f6c2770803f10baa804a707f0a1fcbfc309381aeba191950bae71f37f1eb7ceeffb3c0547ac6571603adbfde4c8b5f8d7f4b854441613633b48865b65bdc415e1e0dcf672d68cf4cebf04f4bc1eebf560a26d34d3757b1450fdb0a9a69f432e277f3a0386eb2bd3305c821c64757f786b79fef54dbe64c67d73934bc80b2133fb3c04cc7ea48bf97a6243c9f95dcbddecf45f008f1822c7868e1ff5a3cff5d6b6898335792749df7b1f51e91f8c1c3b1b93b33aaa3fab69cef08a9f6f6cf39dea3d878b2ed42545421970cc426e644332bc956d1c6adefdf0ede2c5c94aa632646ae225accdf031f611d01622921f1b922a5ac887cca3136133dce8d9f5f4da7bed2ea5d94362200000000000000000000f296b0c1484e5f781ad26bff696b05ff0a5e2270e07618b04273bd4075ea38ab463bfa6a38e7c537498ba3e4df8dfc9e040000003c3ffad44d2a376def42e41e9fc31678257e040fa7cf32c221aaac08000000000000001a00000000000000000000173570f0c11ae694b0f7a4f9c2f6790044a357e785af6e153d5f1ea460af92c7cbbd6295afe740f5e154346d483e0d641ef02e4d5295d756e110522a7a945b93fb705b95b6aae27a8fb33732ce1da1c0b1af8eb9222a06e984ab1e6984c8bdc12360627137ab67b6b68ab08acb29a74dc36b51209cfbc87f61182bbeb2772e9d5a1ffc477179be481efe46a4ce86be0b1d8eee42a611a3d44ca450b14586ed63dd92005c79e4a8ab8a94f0c6cb4bed8594a39bd76d3ef8a7ab014e787596db796bd93a36c2880423291e3bccc86f66ba792ff4d87b3f80e5908779e51c5e9055fc5b23605cd000c723187ef09dcf4b07b06a9342f3f62ee7acddff292082c1f4d8eb9561f80873a09a1ae0c9af1121175e5600f43a1179484502009759264a5729f07c2b218fa36ba2316a99aaad0130df83d0bda1e711290f78c143ea143967b00adcd77e6ad5e48d839ea61aadb83e4d071c54691924a3830d3e7b5c198bb0ed623153590000000000000000004b985ea1702f34f2f85b168c083e810ed567e3f1979b9ed1a4bf6a10dac825c96a0828b335de445a4880bb6474157efd1a72ca46ae4cbe3ab648c9bc4867a5a4cb87d7d6d55475b34b3cb6aa9e2337d4e04a37e35109752522ac9b186ddd80c47da6a2f4ef7bb909c975520000000000000000000000219cf5c1376ab33786f6b856d354e90a2733f78f2d188057cead3480eade49d55b770fad7fa000d23da6275768810b6b2df91d3a991ea98d929d271696c258d5b735d5db11df434e7dd1b7c1ca05cea3977df564115f4ec6ffab1d2ff8a642ca50934b3fbe44b0abeba9df209566984a29dfc0466e439a94e177b3c4d5f6e92b8176b9d6ddeeeb196fa964217f88e1acc180aaa4"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xfffffffffffffd27, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) sendmsg$NL80211_CMD_SET_TID_CONFIG(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="8b33000000000000000005"], 0x28}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x50) pipe2$9p(&(0x7f0000000040), 0x880) r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYRES32=0x0, @ANYRES32=r7, @ANYRESOCT=r8, @ANYRES32=r7, @ANYRES64, @ANYRES64=r8], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r9}, 0x18) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000780)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000000000c02000000000000000000000d0000000000005f"], 0x0, 0x34, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001100)={{r0, 0xffffffffffffffff}, &(0x7f0000001080), &(0x7f00000010c0)='%-5lx \x00'}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r10, 0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000300)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000067dfb4a518110000", @ANYRES32=r11, @ANYBLOB="0000000000000000b7080000060000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) openat$random(0xffffffffffffff9c, 0x0, 0x20000, 0x0) open(0x0, 0x400, 0xc0) r12 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r12}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r13 = eventfd2(0x0, 0x0) read$eventfd(r13, &(0x7f0000000400), 0x8) r14 = socket$inet6(0xa, 0x800000000000002, 0x0) getsockopt$inet6_buf(r14, 0x29, 0x3d, 0x0, &(0x7f0000000240)) 1.869731999s ago: executing program 3 (id=2482): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002002000850000008200000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x41100, 0x24, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001600000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_deliver\x00', r1}, 0x10) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) r2 = syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581) r3 = fcntl$dupfd(r2, 0x0, r2) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1600000000000000040000000100efe2405b00005c7c58b9fb49f421b7ec3b1d89738de5445d748463c2ee6284d8312ca857d653abe08e8f79a8d241661e33bb36a08ba3fe5271ad86c422543fc5a163a2d37960166bc682135e6e9df447ff553f746f23a247dd05a7a544c986ce35f7418f6bf6f896bd182ad791c40f3a47474725aa21ff7dfbda58d12a4789949cff7c24fb15023a551a3459e315d9b43236e9fddfd332242b086862fee1e519683ba5a13621577c6eaf41c1352e3d9b948b7f2c9a6203", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001bc0)=ANY=[@ANYBLOB="5c0000000206010100000000000000000000000005000100070000000900020073797a32000000000500050000000000050004000000000014000780080008400000009008000640000600000d0003006c6973743a736574"], 0x5c}}, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0100000004000000e27f000001"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000700)=ANY=[@ANYBLOB="180000000000000000000000000000001811000088b38e", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000040)='kmem_cache_free\x00', r7}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r8, &(0x7f0000000040)={0x0, 0x18, &(0x7f00000009c0)=[{&(0x7f0000000140)="d800000018007b29e00212ba0d8105040a601800fe0f040b067c55a1bc000900b80006990600000015000500fe800000000000000300014002000c0901ac04000bd67f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1d9d322fe04fb95cae8c9010000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad8ffd5e1cace81ccd40dd601edef3d93452a92307ff0ff0e97031e9f05e9f16e9cb500"/216, 0xd8}], 0x1, 0x0, 0x0, 0x2663}, 0x0) sendmsg$IPSET_CMD_DESTROY(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)=ANY=[@ANYBLOB="280000000306012400000000000000000a00000505000100070000000900020073797a"], 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x8010) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r9}, 0x10) setxattr$incfs_metadata(&(0x7f0000000800)='./cgroup\x00', &(0x7f0000000840), 0x0, 0x0, 0x1) removexattr(&(0x7f0000000200)='./cgroup\x00', &(0x7f0000000240)=@known='user.incfs.metadata\x00') r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000020000000000000000085000000ae00000095"], &(0x7f0000001b80)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x41, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r10, 0x0, 0x1000}, 0x18) ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x80, 0x0, 0x0, 0x0, 0x7995}, 0xfff7, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) 1.82226966s ago: executing program 3 (id=2483): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000000000000000000200009500"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'veth1_to_hsr\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRESDEC, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffba, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=@base={0xb, 0x5, 0x400, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000001b40)='sched_switch\x00', r6}, 0x10) socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x13, 0x1c, &(0x7f0000000100)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x5992a015}, {{0x18, 0x1, 0x1, 0x0, r4}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1b}}, {}, [@snprintf={{}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x5}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5, 0x1, 0xb, 0x8, 0xa, 0x4}, {0x7, 0x0, 0x0, 0x8}, {}, {0x7, 0x0, 0x0, 0x0}, {}, {0x18, 0x2}, {}, {0x46, 0x0, 0x0, 0x76}}], {{}, {0x6, 0x0, 0xb, 0x8}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000000)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], &(0x7f0000000280)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x11, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) name_to_handle_at(0xffffffffffffff9c, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="14"], 0x0, 0x0) open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r7}, 0x10) socket$netlink(0x10, 0x3, 0x0) mq_timedsend(0xffffffffffffffff, &(0x7f00000004c0)="8c955cdea6f91ab466340aa0fa3a2c34ad16fd89c07cc0a928253e6ec674dfea3f9cf07f6ed0b6895bc7ad675f299c43866298aa3e410a8649a9c79b7f103f6f887458d7f6bc42bb1085c6c7b932024a788771cd757b59fbba2791bb6c2b3ec227ecee3a0a7cf416f1ed22568ea021b987a3921a67c3a79210a3a3425ef83896d129f4323ca4052862643c", 0x8b, 0xc, &(0x7f0000000580)={0x0, 0x3938700}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r1, r2, 0x25, 0x0, @val=@netfilter}, 0x40) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x74, r2}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) 1.668467653s ago: executing program 3 (id=2485): r0 = socket$inet(0xa, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f00000002c0)=@mangle={'mangle\x00', 0x44, 0x6, 0x3c8, 0x238, 0x238, 0x238, 0x98, 0x98, 0x378, 0x378, 0x378, 0x378, 0x378, 0x6, 0x0, {[{{@ip={@loopback, @multicast1=0xe0007600, 0x0, 0x0, 'gre0\x00', 'ip6gre0\x00', {}, {}, 0x0, 0x0, 0x11}, 0x7a00, 0x70, 0x98}, @inet=@DSCP={0x28}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0x0, 0x0, 'wg1\x00', 'nicvf0\x00', {}, {}, 0x11}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @local}}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'vlan1\x00', 'nr0\x00'}, 0x0, 0x70, 0xb8}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@dev={0xfe, 0x80, '\x00', 0x18}, 'veth0_virt_wifi\x00', {0x7}}}}, {{@ip={@rand_addr, @private, 0xffffffff, 0xff, 'syzkaller0\x00', 'veth1_to_team\x00', {}, {0xff}}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @empty}}}, {{@ip={@empty, @empty, 0xff000000, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x4, 0x0, @loopback}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x428) ioctl$sock_SIOCDELRT(r0, 0x890c, &(0x7f00000004c0)={0x0, @phonet={0x23, 0x8, 0x5}, @l2={0x1f, 0x7, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xd1a9}, @hci={0x1f, 0x1, 0x3}, 0x7, 0x0, 0x0, 0x0, 0x9329, 0x0, 0x45c, 0x4, 0x3}) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x4) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000480)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB, @ANYRES32=r4, @ANYBLOB="01980000000000002000128008000100677265001400028008000100", @ANYRES32=r4], 0x40}, 0x1, 0x0, 0x0, 0x4014}, 0x0) r6 = socket(0x10, 0x3, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route_sched(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x44, 0x24, 0x5820a61ca228659, 0x0, 0xfffffffe, {0x0, 0x0, 0x0, r7, {0x0, 0x9}, {0xffff, 0xffff}, {0x5, 0x7}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x6, 0x2}}}}]}, 0x79}}, 0x800) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001540)=@newtfilter={0x68, 0x28, 0xd27, 0x1004001, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0xffff, 0x9}, {}, {0x2, 0xb}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x38, 0x2, [@TCA_CGROUP_ACT={0x34, 0x1, [@m_sample={0x30, 0x215, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x68}, 0x1, 0x0, 0x0, 0x8810}, 0x404c0c0) sendmsg$nl_route(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x20088814}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@delchain={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r8}}, 0x24}}, 0x10) 1.630917383s ago: executing program 3 (id=2486): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000003c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0xffffffffffffffff, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r2, 0x402, 0x8000003d) mknod(&(0x7f0000000000)='./bus\x00', 0x1000, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=@framed={{}, [@ringbuf_output={{0x18, 0x2, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x43}}]}, 0x0, 0x4, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sys_enter\x00', r3}, 0x10) lsetxattr$system_posix_acl(&(0x7f0000000000)='./file1\x00', &(0x7f0000000080)='system.posix_acl_access\x00', &(0x7f0000000100)={{}, {0x1, 0x2}, [{0x2, 0x5}, {0x2, 0x4}, {0x2, 0x2}], {}, [], {0x10, 0x5}}, 0x3c, 0x2) 1.602027744s ago: executing program 3 (id=2488): r0 = openat$selinux_relabel(0xffffffffffffff9c, &(0x7f00000008c0), 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="1801000000bae3000000000000000000850000007b00000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000300000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000640)='kfree\x00', r1}, 0x10) write$selinux_access(r0, &(0x7f0000000a00)=ANY=[@ANYBLOB='system_u:object_r:systemd_8Agind_sessions_t:s0 /usr/lib/telepathy/mission-contrkl-5 00000000000000000004\x00'], 0x69) 1.580856074s ago: executing program 3 (id=2489): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r3, 0x0, 0x1, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000740)={0x5, 0xb, &(0x7f0000000180)=ANY=[], 0x0, 0x3, 0x0, 0x0, 0x41000, 0x78, '\x00', 0x0, 0x25, r3, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) vmsplice(r3, &(0x7f0000000380)=[{&(0x7f0000000180)="04", 0x1}, {&(0x7f00000004c0)="7f", 0x1}], 0x2, 0x6) ioctl$sock_inet_udp_SIOCINQ(r3, 0x541b, 0x0) write(r1, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000f80)=ANY=[@ANYBLOB="0500000004000000080000000b"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000480)='kfree\x00', r4, 0x0, 0x7fffffffffffffff}, 0x18) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) close(r3) write$selinux_validatetrans(0xffffffffffffffff, &(0x7f0000000180)=ANY=[@ANYBLOB='system_u:object_r:semanage_t system_u:object_r:fixed_disk_device_t:s0 00'], 0x79) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r6, &(0x7f0000004cc0)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000380)="a1", 0x1}], 0x1, &(0x7f0000000200)=ANY=[@ANYBLOB="140000000000000001000000010000", @ANYRES32=r5, @ANYBLOB], 0x30, 0x40400d1}}], 0x1, 0x20000010) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r5, 0x0, r7, 0x0, 0x400000, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000080), 0xffffffffffffffff) 1.177590481s ago: executing program 2 (id=2492): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB], 0x48) r1 = accept$unix(0xffffffffffffffff, &(0x7f0000000000)=@abs, &(0x7f0000000080)=0x6e) recvfrom$unix(r1, &(0x7f0000000180)=""/78, 0x4e, 0x40002020, &(0x7f0000000280)=@file={0x0, './file0\x00'}, 0x6e) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r0}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008bd6000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = syz_io_uring_setup(0x762f, &(0x7f0000000140)={0x0, 0x114dd, 0x10, 0xffffffff, 0x320}, &(0x7f00000004c0)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_LINKAT={0x27, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000380)='./file0/../file0\x00', 0xffffffffffffffff, 0x1000, 0x1}) io_uring_enter(r3, 0x3516, 0xaddf, 0x2, 0x0, 0x1517f) r6 = socket$inet(0x2, 0x1, 0x0) sendto$inet(r6, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) ppoll(&(0x7f0000000040)=[{r6, 0x603a}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000400)='io_uring_create\x00', r2}, 0x18) io_uring_setup(0x6778, &(0x7f00000000c0)={0x0, 0x45d6, 0x4}) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl802154(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CHANNEL(r8, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="01002cbd7000fddbdf2508000500000000000000000500080012000000"], 0x38}, 0x1, 0x0, 0x0, 0x8080}, 0x0) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000001000000000000000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000100006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000a80)='kfree\x00', r10, 0x0, 0xfffffffffffffffd}, 0x18) r11 = socket$igmp(0x2, 0x3, 0x2) setsockopt$EBT_SO_SET_ENTRIES(r11, 0x0, 0x80, &(0x7f0000000080)=@broute={'broute\x00', 0x70, 0x0, 0x90, [0x0, 0x0, 0x0, 0x0, 0x200000001300, 0x200000001330], 0x0, 0x0, &(0x7f0000001300)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff000000000000000000000000000000000000000000000000000000f0ffffff00000000000000000000000000ffffffff0000000000000000000000002000000000000000000000000000000000000000000000000000000000000000fcffffff00000000"]}, 0x108) r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r12, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r12, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000200)=ANY=[@ANYBLOB='h\x00', @ANYRES16=r13, @ANYBLOB="3f9d00000000fedbdf000800000008000300", @ANYRES32=r14], 0x68}}, 0x10) sendmsg$NL802154_CMD_NEW_INTERFACE(r7, &(0x7f0000000500)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x3c, r9, 0x100, 0x70bd29, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r14}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}, @NL802154_ATTR_EXTENDED_ADDR={0xc, 0x17, {0xaaaaaaaaaaaa0002}}, @NL802154_ATTR_EXTENDED_ADDR={0xc, 0x17, {0xaaaaaaaaaaaa0302}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4008000}, 0x8011) 1.072475522s ago: executing program 0 (id=2494): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000003c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0xffffffffffffffff, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r3 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r3, 0x402, 0x8000003d) mknod(&(0x7f0000000000)='./bus\x00', 0x1000, 0x1) r4 = open(&(0x7f0000000100)='./bus\x00', 0x143142, 0xe0) read(r4, &(0x7f0000000040)=""/69, 0x45) write$UHID_INPUT(r4, &(0x7f0000000fc0)={0x8, {"b93037d242cda22c923cd91687ef6a971e18a2d8a80b7667f214496a798894075b839aaec9bd8e78ff9636d7ffc2b031d876596008e4853e6c615ff46a87a39518da73186122a5dc256e13b85c9227da594135f194272465163eb775ffbee3f8a44fcb3fb2beb53fd636f0d4d7826326cc9576c213a249b44ebd2d529b32c38fcd368570f738405a5139e19a0c6337e2ee01c0898251c41846bbb7f950af9ccb95381d9b17699bc2c770e62b7f368ec86c6d44f382194e97d54d45e9ad5428d12222c1af47609856192c0e69327d69b133d7b91df3b51f81d690e8557c7dd06d133df7727e403560b227d1e603e70e44c4c3790949fafa7ba189a05ad51575d851e97fa1a676758606f27c3fd83e63b552c090f45cc3dddc44646c1ade70760c3ee2e700701fd412be1ea95453f9ab9cc405def2bb295377d5ef13818f5442bc2d4fc61741b255ac4d30be5dcca784f51a60287d005ffd2882002cf1eae8e60e0475ecd1ee6180b9362f905dca23574d12ac093d1ea6daa52636501327c6d2563a32e5f797f2ec0d8fad661cc34de4954ab9dcca6cf4fa47f25ae839d21b91abc887939713937339eb8dce9f7016915eb3ad86777155909f3a2ae5d12645d1e74e0d0bdc11e1db97345c183282b53df67ef30e5f8a356774f990d46786bf42fc80dac90f842204182a242e731731812d3e45268e91eec3ba887f694e6b9a5822db8ad66b5648466443d11d63f0a1f2a65c2588f2e53a7e008527f95d3910e99d333eece27c7a18945cb709e6480d4761d4389164a8f1b1c4f9cee41d2f9067e41bc029ac2c3cdca3ef4f3a26d4b3a4375d77e89aa49eabe14620b929248b853d2552326b4aa28b90655b16b3e055800427a74d95dc64c972cd809a0ae65f2bb2d1ad5ad3fbac1ed93c5d0e4fd5d7f7aacc9492eedb1c31596feea2d0a466e2fc6fbdd23ded12d120b5061344cbfaf5eaedfe7827bf37f98a78a302cd5e540f36ae7fec3836279466d62bffbc54896b9e7dc5cf1f7f5a96295462aeb46545440b2c03630597cb8fb8aedb2be1cbbda130fe40644c61483b4ad4e11d7f22b3fd17655be13df72db08b2a6faae884f962c58f207d5984a5e01cb289bacab7197215c81dd5d0537e91982d93902cdaa3c21d75ed5ce0989bfbef24450c8564187b5b9ecbaa10a5de5163eccbb5e8053ed52ba895ca73a727b77e2d90a90f3b498bf620dc198e111924b2d4c26092688840d8feb6468f2f277fd0f4d276f4245761bee60fa7bdb4b077889177d5ed0391fbefb8b09f15fc4f24f3c84fde9da3189325fa92abd4a031c87e892d4c6e77285cfd5d983ad29dea3a5320e1f7fd2db109fa5fdacf67883ff02fb90801cdf1b5a221e2b8bd0ade10cdbb9d263f268226dfa5d062bc67116c6825d6bb7e710149da8ec409cecffa921282139614fefc5c696ab891d777dfd58226d8a2818e95b412b0c4ecd3539288ccebb50f41d12d55e0b1d29bfc8e3b5f3c1578cbbc3d7ff50ff108d67d5f06baf28b2901fa17ec1ca042f73efde0039cb4251353b824b7e645b9a1c5593cfe6898d9e3551920835d61b0b67f0021bbed8cfb4f4af39ab02ef0e81ca9cffec9901aa9d9cd1f9aa251267316eb99c30947bcdc87fdb8be016cb935f7787350ae657470567595057e6b7616b0e15dcc51d9f214420376b351484ff19de22d4f724c120f9f425770f9fc66824f90038575297ba0af3695d852adb531a2ad6fabcc51b2bdb05312e72c1c6873cf3c8bb8b7fce90918ac7514fd7ad1ac3a6350988342c5d814788b22d8e4464a4b9647bbe1cbb2c88826dbdff9f246576831b896aed85ffacadb70e0e2a4eac130b124097a27eea216b4cc955a99f45d77a2bb7be9d1889177277f2182c4003cf56cdc142b9572a16654e2c5d48d4d9e825c8b5e293ee7880730d3dad7b4fdab1582025169aff4c3488d3e9d19e622f0d133d985c79b0a3f840a15aab32344b805f179227d5a29473d6afafa3d646e9b6072cb315f0536e02294831dd77cc75800a189182effc8603b0b5d9a4353971eab7b5404f4095720a4ec12b2fddd3f70cdb6713f6997fee7d1ffd4c0f93ad46538962033acf5f96f72252bba30b46b9c40496a235b43d9433586401679270c20236e528807dbefb259f749192d919fcb3fe537f1c94cc14e0660e6034b35e1a3e28669e4a61c1fd3a98023089002eda631379841d69e081903cba8629584c6cc79edbc031a48e28cc855db4ebb3a3fc4c03309cde851f75f4df599816b5d52c445c33cd6a63d1885387a53df213ef805305ad36a33ab65c02b89be698fea65c197e8d595d9369aaad2895f6cf3fa97f58ccdc214e403b0820a404894a0c3144c8f82517fdd6fe552483781e617dda766da5e53cece132b4934dab83a031d36681d5ade8781c7d9acb6552be1f8a4044d9eac9c10f28005a76a9886c3e0edc55b1a9db53bd08341d8b5f19a77121fadeb50d15a297a68d2816d2be42d26e9ea6214b49a1889d0b430b8ca8bbf81ef3dbc02813ba461faf032b5cfaa9b627c823dae6d35aa3edc5b60905dd1e000b2b73133e60bdf0d21bdcf0a3f5876b546348f53a1e36593885cb86c16b3d47ffdf7950904a673000351fa383e6ad8c88de7792710cb8d10ad2a0bd7d8177165b1a79e5b8d7e1da25905a0ac13594cd168956037e9f1814293a52f9b9b69a10d79ab9672bcf250bdc8d8b05f9e1fb905e7570e984849ace66d9527aa8a62ca58a0ff09b96c977c154f114ba72bfd5674647c2ac365bc7c0db69c337a08b590ee00c84beb20ab4836768a223af4f245c71b95d581773163abfcbf89b27f4339e724a6cb4c93c03296f9cb7e42afebd7dc81ba0e5e1b03b92fb149f415f049bbaaee41ea049dcdc9185230f03c1664ce12180de93757852faeb91a951fc881a778a1ed50f320ad9f423cc32d60651eca1ad517f0c85319b8d406912ff435f9882b21e275d9bdc43ea96dcb913ead2c2cfb8b1e1b045b8cae4ff0b6abf18258976a6858275e5f0294dad1fb306cbedc62a746558924c471243ac22caf21d01cea4fbe0fc698d02ac7204aaca9fa43fdff25d44624832fbf0c989f54a1063aeddbf444ac1742a11531fedecde21c430bce27ab6445ccf5433eba2dd549c6fa0a1f946d6aac8496cff0277276c7bc3971447a54c26033c0b5847ed1205dab9960e63f5e1022a3448c16675b7fcacafa14e3fcfc71364e9e139da27b4c14b6c39602b583e8946cb1ead1cd5afb7ecece2a4cd9e0565e45e3254e90f1fee64567f75c731765ab96d46877afb361852da58c62953efd07eea85b7d228414781efadd30eac8c067c2227d9421a688fe5bd96320711584f72974d64d0e5d9d845bca6cae1b3948219c4000eea83f226c7a9c1dbb14eda50794940a407035318c8e3e9fdc145f78896f30a47e45f89136ef7946d231834e62687b35bd4f7d0319bfae187cfd1d6a50282aa2bf10ea9a8de07112b668dbbdd3280d2e25df28eaa5bb34b57080ce4ac0d24b13e598bfce815d2047dc8729cda19575181283cda1116226da7fbe25ea351c2611724d57817ffcca5266ce976da86aedf07384fd8329542dc56d83fc062aa2e51a28edb3c7f43fb3190b6731adabfa292ef7876a8e7586845f194da22b417ef02b5cc41a1338db37adbe7709ede723c73813736f3c140570df74863b094a9baedbf176ee03572709d1b9b2a4d61f83c5dcad456b9a9eeea4950d0eb3008995f63defa03f4dd99bc0997fc629237f79226faea8c3d44135fc44965c023e992741334d7d346392f2ac09bab12c4f40dd89e87885d727866ce80272f414f828202cb9de2a1b0e42c7ecda14081b396facb5d8f2afc7958c0f38097c1ec0021c332aa208f7da58576397975cb7d5586f85446f4ea7c46ff051790b969b97f06572bf3d395d30779c556025005404496e64dc32a912a1f988b9e9a646aa7aaeaf4a7f1fee5151e0a06c5ffbed19e842d320e524d456c2fd8eef4ad2ae78d2dd3241c9195669fe314aaff7c8d96e10025f023475a92de577bfd13b1eed1d882b902bafdda06ff239070f1954dc70f87157e8ae4b7d6dc302b91abe0c863c9a3943d16d97aa0840e9696d19f16eed6411456cbb45cde19e269241921d0c962cd5b954e1991f61094802e7c25ed9d459092c4282bf55d191ac818ccfddf382729312625b1d0a1f0ed5835fcf097487780c229cf77ac83cc89f6a0d349bf64e503dd6afaca48031d23310282df31e6ac4c897b03d6b133e2867e7950374acbb2f5ec89f29c2b54639fb5e6a984c3c19e9f958e0a77d8db66049374a6ddd221dbe547298079c4293ad2ed9facb9f0e22684ed7bd78a5fe173cf69cd421d07bbc63a9151e33cbbc9425445bae36265ad8467372a75adb9d230b0f94718a7786ff58461f8513a7c201af64738a24a1ed848b31957d1b22619ef31b8e34d487d8d97622143d03d7383135b7416d34c974b8ea45336cff651f1496b670edcc333e1019a6903697180ae7f5d601caef5194168313f8818df50d8e9d1e4e73c736e515dda3a4db1d743643d4e8d48b5e888f97599116d83f086375b9acc427f4dc17278702a118d9e61a0889a23a2aa6b3611f71cfb6f81f5a4c440614690c6cc45020a85defd8e38ae847a1ba59949fbd25d80b703b5288a2488c6ebf67476c0a405112121a859a86a8a8c4a310242481e53e562e002870f94c0a29393e120348becf248481025f819cd870935a346c7d885114d22e598e817381041595d5b9ccc1f1c8abe632e59338cd9ba764f5978acb8b49c6aafcb8bdba64fa381d5d306a4c67323a7b149c0a74b27e9388ee2fc2a0c01b4942fa61d72efb2fc3a68c40e24246951c87fc8655cf1d46e16568b6a6a14f1278a9c5ac4146ef5eb4a83de9dc6f1d41143ea85f2d6500c8a52d67c7a4a7dd87358c52279be2f9468e039297e4c429d19c628470e910a35f2319de1862ca7c39cd6f5d5ea6c7b92f1ce4cd47b34a8ef42b2498923ebb568d08fb2b6b4698aa2ad4a07298395c7af4234728719240976c1dd3966f92c15662f11f3650e192b95d34ae110062c270482fb044bf1bcf357b2cdeadccf12b1e3d39626c0621b28397bb35bf6d73c0c54057295da81839b7afdd71571b43c7ac7c637f2e21f6e6abeb218c8daf72499916d2f1d2d2baa88ae0bb5fb298fb506793d332e9fd3e8db4b50af7f4ba9a22b0a91a68a9beab7e0369316876c51e6c533f8a72ddb39aba88ba08c4e1d82379da2dda53f0df3ca5fa9532febc6d6f42f554d23fccdfd660fa4ed6925acbc0cb581c56d902ef9f7d1d009b728f2a60cc17b188fc385c0b9caf6f040962e98ffda759cf10e6115773e323c9040675698ebc8f31e7d31fdcc9cea2edacb18d9fcc5974db7cc262505b764eceb0bde6ce7d3163c8aea5b0012a992982f6129fd2077a022719141368081abcff4d88f81b6b4c13835957f8213b41053225fd0718353132a745cf3057425be18694184956ba628099ebc81bcef04428eb2ffaf964d0356ce3abec396248f8be05a72614581b0d3d27f61654b7f8feb8e1e4cfabe40579a1d2e63632bb0eb139370c577556739243034fd42746fc93d6988af6f738a07169d55f2ca9758c8334a03aa97411f1158192cfea7baac8eec0402eb77927d33c2e712f6f372c3d9335c9eb2e653f734aeba44409c48f6099674295d467585bfbdb58143c1b9f5232cbf60190b7b8ad4388bf38c68cb3a6865ccc8fb048bb59ed71376ed0af8ffa0ae3e095", 0x1000}}, 0x1006) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=@framed={{}, [@ringbuf_output={{0x18, 0x2, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x43}}]}, 0x0, 0x4, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000200)={[{@errors_remount}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x7}}, {@dioread_lock}, {@data_err_ignore}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4007b1}}, {@data_err_ignore}, {@grpquota}, {@nobh}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000001080)="$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") lsetxattr$system_posix_acl(&(0x7f0000000000)='./file1\x00', &(0x7f0000000080)='system.posix_acl_access\x00', &(0x7f0000000100)={{}, {0x1, 0x2}, [{0x2, 0x5}, {0x2, 0x4}, {0x2, 0x2}], {}, [], {0x10, 0x5}}, 0x3c, 0x2) 1.015690213s ago: executing program 2 (id=2495): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0xb, 0x4f, 0x200cc, 0x6, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)='T', &(0x7f0000000240), 0x4af, r0}, 0x38) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000001c0)={0x0, &(0x7f0000000740)=""/4096, &(0x7f00000000c0), &(0x7f00000003c0), 0x2, r0, 0x54}, 0x38) 896.151196ms ago: executing program 0 (id=2497): r0 = socket$inet(0xa, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f00000002c0)=@mangle={'mangle\x00', 0x44, 0x6, 0x3c8, 0x238, 0x238, 0x238, 0x98, 0x98, 0x378, 0x378, 0x378, 0x378, 0x378, 0x6, 0x0, {[{{@ip={@loopback, @multicast1=0xe0007600, 0x0, 0x0, 'gre0\x00', 'ip6gre0\x00', {}, {}, 0x0, 0x0, 0x11}, 0x7a00, 0x70, 0x98}, @inet=@DSCP={0x28}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0x0, 0x0, 'wg1\x00', 'nicvf0\x00', {}, {}, 0x11}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @local}}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'vlan1\x00', 'nr0\x00'}, 0x0, 0x70, 0xb8}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@dev={0xfe, 0x80, '\x00', 0x18}, 'veth0_virt_wifi\x00', {0x7}}}}, {{@ip={@rand_addr, @private, 0xffffffff, 0xff, 'syzkaller0\x00', 'veth1_to_team\x00', {}, {0xff}}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @empty}}}, {{@ip={@empty, @empty, 0xff000000, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x4, 0x0, @loopback}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x428) ioctl$sock_SIOCDELRT(r0, 0x890c, &(0x7f00000004c0)={0x0, @phonet={0x23, 0x8, 0x5}, @l2={0x1f, 0x7, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xd1a9}, @hci={0x1f, 0x1, 0x3}, 0x7, 0x0, 0x0, 0x0, 0x9329, 0x0, 0x45c, 0x4, 0x3}) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x4) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000480)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="40000000100039040000", @ANYRES32=r4, @ANYBLOB="01980000000000002000128008000100677265001400028008000100", @ANYRES32=r4], 0x40}, 0x1, 0x0, 0x0, 0x4014}, 0x0) r6 = socket(0x10, 0x3, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route_sched(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x44, 0x24, 0x5820a61ca228659, 0x0, 0xfffffffe, {0x0, 0x0, 0x0, r7, {0x0, 0x9}, {0xffff, 0xffff}, {0x5, 0x7}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x6, 0x2}}}}]}, 0x79}}, 0x800) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001540)=@newtfilter={0x68, 0x28, 0xd27, 0x1004001, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0xffff, 0x9}, {}, {0x2, 0xb}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x38, 0x2, [@TCA_CGROUP_ACT={0x34, 0x1, [@m_sample={0x30, 0x215, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x68}, 0x1, 0x0, 0x0, 0x8810}, 0x404c0c0) sendmsg$nl_route(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x20088814}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@delchain={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r8}}, 0x24}}, 0x10) 889.191025ms ago: executing program 2 (id=2498): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r0, &(0x7f00000003c0)={&(0x7f0000000180), 0x10, &(0x7f0000000380)=[{&(0x7f0000000480)="c3e972bd85a6d84136d6dd55048d3593a74f338ce6772ab9a6f64041c2f6fbbecdc08ebcd3192b6a53662dae7c8e9c665e80a5d0925f728dcac30c29793992e588952653d414cb8ccdabc38767fee819ec5af0c5ee936880fe8549b4ed347779cab4ffd4e0b62c53a1c01db28f2b3f91c34211c9353bc1dece61511917c2245fd66cb8dffeacb4d46d627c97b498bf1ff6b313bfbc9765457c831771d5eec7997ec242e4505f01c1bb3e069b2e630f42a2be86598a61", 0x64}, {&(0x7f0000000300)='V', 0x1}, {&(0x7f0000001600)="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", 0x1000}, {&(0x7f0000000340)="b768eb20304f2fdc5a9694a4867840d93170ca1a86406f", 0xfffffec0}], 0x4, 0x0, 0x0, 0x8010}, 0x0) dup2(r1, r0) setsockopt$sock_attach_bpf(r1, 0x1, 0x21, &(0x7f0000000040), 0x4) sendmmsg(r0, &(0x7f0000004b00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x5, 0x200040d1) 845.022706ms ago: executing program 1 (id=2499): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000003c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0xffffffffffffffff, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r2, 0x402, 0x8000003d) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=@framed={{}, [@ringbuf_output={{0x18, 0x2, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x43}}]}, 0x0, 0x4, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sys_enter\x00', r3}, 0x10) lsetxattr$system_posix_acl(&(0x7f0000000000)='./file1\x00', &(0x7f0000000080)='system.posix_acl_access\x00', &(0x7f0000000100)={{}, {0x1, 0x2}, [{0x2, 0x5}, {0x2, 0x4}, {0x2, 0x2}], {}, [], {0x10, 0x5}}, 0x3c, 0x2) 816.886537ms ago: executing program 1 (id=2500): perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x68, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0, 0x1}, 0x10, 0x0, 0x800000, 0x0, 0x1, 0x20000002, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socket$nl_generic(0x10, 0x3, 0x10) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r1}, 0x10) r2 = socket(0xa, 0x2400000001, 0x0) setsockopt$inet6_MCAST_MSFILTER(r2, 0x29, 0x30, 0x0, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000180000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000f0850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r3}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file2\x00', 0x105042, 0x189) pwrite64(r5, &(0x7f00000003c0)='\x00\x00', 0xfffffe97, 0x1) 796.562927ms ago: executing program 2 (id=2501): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000006c59850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x18) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="4400000010000104a5270b7357000000925e4a44", @ANYRES32, @ANYBLOB="0dfa130016000000240012000c00010000000000000000000c0002f60800000001180000080001"], 0x44}}, 0x0) r1 = socket(0x10, 0x803, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000280)={0xffffffffffffffff, 0x53, 0xd, 0x9}) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB], 0x48}}, 0x0) 780.371607ms ago: executing program 0 (id=2502): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000030000000"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x9, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000000040), 0x10) r2 = memfd_create(&(0x7f0000000bc0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85Q\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~Mx\x02\x00(v\xe6`\x026\xfcgC\xb5\xf0\x13.zb\xc5bj+@\x00\x00\x00\x00\x00\x00\x00.\xd4`=z\xd1n\x8d\x8f\xa5hS\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{\'\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x80\x1ch\x89\xe7\xdd]q,\xec\xc4\xa5\x93\xe5,\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+}5dy\xb1\xef\xf1m\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc00xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='freezer.self_freezing\x00', 0x275a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002e00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)=ANY=[@ANYRES32=r2, @ANYRES32=r3], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r2}, &(0x7f00000006c0), &(0x7f0000000700)=r1}, 0x20) sendmsg$inet(r0, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3) 666.030199ms ago: executing program 0 (id=2504): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002002000850000008200000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x41100, 0x24, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001600000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_deliver\x00', r1}, 0x10) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) r2 = syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581) r3 = fcntl$dupfd(r2, 0x0, r2) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1600000000000000040000000100efe2405b00005c7c58b9fb49f421b7ec3b1d89738de5445d748463c2ee6284d8312ca857d653abe08e8f79a8d241661e33bb36a08ba3fe5271ad86c422543fc5a163a2d37960166bc682135e6e9df447ff553f746f23a247dd05a7a544c986ce35f7418f6bf6f896bd182ad791c40f3a47474725aa21ff7dfbda58d12a4789949cff7c24fb15023a551a3459e315d9b43236e9fddfd332242b086862fee1e519683ba5a13621577c6eaf41c1352e3d9b948b7f2c9a6203", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001bc0)=ANY=[@ANYBLOB="5c0000000206010100000000000000000000000005000100070000000900020073797a32000000000500050000000000050004000000000014000780080008400000009008000640000600000d0003006c6973743a736574"], 0x5c}}, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0100000004000000e27f000001"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000700)=ANY=[@ANYBLOB="180000000000000000000000000000001811000088b38e", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000040)='kmem_cache_free\x00', r7}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r8, &(0x7f0000000040)={0x0, 0x18, &(0x7f00000009c0)=[{&(0x7f0000000140)="d800000018007b29e00212ba0d8105040a601800fe0f040b067c55a1bc000900b80006990600000015000500fe800000000000000300014002000c0901ac04000bd67f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1d9d322fe04fb95cae8c9010000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad8ffd5e1cace81ccd40dd601edef3d93452a92307ff0ff0e97031e9f05e9f16e9cb500"/216, 0xd8}], 0x1, 0x0, 0x0, 0x2663}, 0x0) sendmsg$IPSET_CMD_DESTROY(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)=ANY=[@ANYBLOB="280000000306012400000000000000000a00000505000100070000000900020073797a"], 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x8010) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r9}, 0x10) setxattr$incfs_metadata(&(0x7f0000000800)='./cgroup\x00', &(0x7f0000000840), 0x0, 0x0, 0x1) removexattr(&(0x7f0000000200)='./cgroup\x00', &(0x7f0000000240)=@known='user.incfs.metadata\x00') r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000020000000000000000085000000ae00000095"], &(0x7f0000001b80)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x41, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r10, 0x0, 0x1000}, 0x18) ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x80, 0x0, 0x0, 0x0, 0x7995}, 0xfff7, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) 627.58844ms ago: executing program 0 (id=2505): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0xc8101339d8526c63}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001200)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000040)='sys_enter\x00', r2}, 0x10) mount_setattr(0xffffffffffffffff, &(0x7f0000000000)='.\x00', 0x0, &(0x7f0000000200)={0x5}, 0x20) 562.827871ms ago: executing program 0 (id=2506): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3fffd, 0x2, @perf_bp={&(0x7f0000000400), 0x1}, 0x11108, 0x5dd8, 0x3a65, 0x5, 0x0, 0x8, 0xfffb, 0x0, 0x3, 0x0, 0x5}, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x8) sendmsg(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="e8000000000000000b210000ff3f7c081e0f315b91fcaec7bf495d5c618332756cbb1bb9ce6d12b9d976d1f33aca41e50a3342bcd67c311f7885a05c3fcf2ae21f1498ec481e7ca2c3ca4c7b3bf94448f62e111e5a79929b9182cc977ba6ae766ce37bdaac6da997fbc15f0c79f42155b99a280667b51fdc7902d7be5ef41f953fedb32aceeada13250626957eff13d5b12cc916541ccbeb0d4060a4dd89664eaba2f6b4ede0c9e3dc1c9446d9284ebe0e46eee7bc145ff0a2779c025553298812978ea53a8c60f254f23344a80a0aac7b141787bad6b0ba090000005f2f3158f0d200000000000070000000000000000701000040000000afbb30c2946e41ef3167d1f6ed47aa1f52bad114a89dbed741f74a23cd8d915e2dcc74a4932646b90f90a9d3956d5cadb642ac79fcb0aae3654482188263abd27e9d57cc28032453dc75f333e1f367ab38b7e7719805a454e79802d07ec60c00b0000000000000000100000001"], 0x208}, 0x0) socketpair(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg(r0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[], 0x208}, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x1000000, &(0x7f0000000280)={[{@errors_remount}, {@nodiscard}, {@noquota}, {@init_itable}, {@stripe={'stripe', 0x3d, 0x79}}, {@resgid}, {@sysvgroups}, {@delalloc}, {@errors_continue}]}, 0x14, 0x4d6, &(0x7f0000000880)="$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") recvmmsg(r1, &(0x7f0000003f00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x60, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) r4 = socket$netlink(0x10, 0x3, 0xf) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, &(0x7f00000003c0)=0x6, 0xdc) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = fsopen(&(0x7f0000000000)='securityfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) r7 = fsmount(r6, 0x0, 0x5) r8 = openat(r7, &(0x7f0000002240)='.\x00', 0x0, 0x0) lseek(r8, 0x4, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000006c0)=@newlink={0x34, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x0) r9 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r9, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}]}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r9, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f00000004c0)=0x27) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, &(0x7f00000000c0)={r10, 0x4}, 0x8) getsockopt$inet_sctp6_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000340)={r10, 0x8, 0x6, 0x81}, &(0x7f0000000380)=0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x89a0, &(0x7f0000000040)={'syzkaller0\x00'}) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r11, 0x0, 0xfc}, 0x18) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 513.445321ms ago: executing program 1 (id=2507): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) syz_open_dev$usbfs(&(0x7f0000000080), 0x77, 0x101301) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x48) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000000100000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x41}, {{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x2, 0x3}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x2, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {0x7, 0x0, 0x0, 0x9}, {0x7, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r1}, {}, {0x46, 0x8, 0xfff1, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = syz_io_uring_setup(0x44cd, &(0x7f00000004c0)={0x0, 0xfffffffc, 0x10100, 0x4, 0xfffefffe}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='8'], 0x38}}, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r7, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r7, 0x0) setresuid(0xee00, 0xee01, 0x0) syz_clone(0x498144eedbea24c9, 0x0, 0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r4, 0x2d3e, 0x0, 0x0, 0x0, 0x0) accept(r3, &(0x7f0000000340)=@hci, &(0x7f00000003c0)=0x80) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r9 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r8}, 0x10) signalfd(r9, 0x0, 0x0) 503.317722ms ago: executing program 4 (id=2508): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000003c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0xffffffffffffffff, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r3 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r3, 0x402, 0x8000003d) mknod(&(0x7f0000000000)='./bus\x00', 0x1000, 0x1) r4 = open(&(0x7f0000000100)='./bus\x00', 0x143142, 0xe0) read(r4, &(0x7f0000000040)=""/69, 0x45) write$UHID_INPUT(r4, &(0x7f0000000fc0)={0x8, {"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", 0x1000}}, 0x1006) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=@framed={{}, [@ringbuf_output={{0x18, 0x2, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x43}}]}, 0x0, 0x4, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000200)={[{@errors_remount}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x7}}, {@dioread_lock}, {@data_err_ignore}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4007b1}}, {@data_err_ignore}, {@grpquota}, {@nobh}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000001080)="$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") lsetxattr$system_posix_acl(&(0x7f0000000000)='./file1\x00', &(0x7f0000000080)='system.posix_acl_access\x00', &(0x7f0000000100)={{}, {0x1, 0x2}, [{0x2, 0x5}, {0x2, 0x4}, {0x2, 0x2}], {}, [], {0x10, 0x5}}, 0x3c, 0x2) 394.763583ms ago: executing program 1 (id=2509): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'veth1_to_hsr\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRESDEC, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffba, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=@base={0xb, 0x5, 0x400, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000001b40)='sched_switch\x00', r6}, 0x10) socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x13, 0x1c, &(0x7f0000000100)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x5992a015}, {{0x18, 0x1, 0x1, 0x0, r4}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1b}}, {}, [@snprintf={{}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x5}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5, 0x1, 0xb, 0x8, 0xa, 0x4}, {0x7, 0x0, 0x0, 0x8}, {}, {0x7, 0x0, 0x0, 0x0}, {}, {0x18, 0x2}, {}, {0x46, 0x0, 0x0, 0x76}}], {{}, {0x6, 0x0, 0xb, 0x8}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000000)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], &(0x7f0000000280)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x11, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) name_to_handle_at(0xffffffffffffff9c, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="14"], 0x0, 0x0) open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r7}, 0x10) socket$netlink(0x10, 0x3, 0x0) mq_timedsend(0xffffffffffffffff, &(0x7f00000004c0)="8c955cdea6f91ab466340aa0fa3a2c34ad16fd89c07cc0a928253e6ec674dfea3f9cf07f6ed0b6895bc7ad675f299c43866298aa3e410a8649a9c79b7f103f6f887458d7f6bc42bb1085c6c7b932024a788771cd757b59fbba2791bb6c2b3ec227ecee3a0a7cf416f1ed22568ea021b987a3921a67c3a79210a3a3425ef83896d129f4323ca4052862643c", 0x8b, 0xc, &(0x7f0000000580)={0x0, 0x3938700}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={0xffffffffffffffff, r2, 0x25, 0x0, @val=@netfilter}, 0x40) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x74, r2}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) 376.386804ms ago: executing program 4 (id=2510): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000003c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0xffffffffffffffff, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) open(&(0x7f0000000280)='.\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=@framed={{}, [@ringbuf_output={{0x18, 0x2, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x43}}]}, 0x0, 0x4, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sys_enter\x00', r2}, 0x10) lsetxattr$system_posix_acl(&(0x7f0000000000)='./file1\x00', &(0x7f0000000080)='system.posix_acl_access\x00', &(0x7f0000000100)={{}, {0x1, 0x2}, [{0x2, 0x5}, {0x2, 0x4}, {0x2, 0x2}], {}, [], {0x10, 0x5}}, 0x3c, 0x2) 353.156934ms ago: executing program 1 (id=2511): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001200)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r2}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x8, &(0x7f00000001c0)=@framed={{}, [@tail_call]}, 0x0, 0x9, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, 0x0, &(0x7f00000002c0)) r3 = openat$ppp(0xffffffffffffff9c, 0x0, 0x8a40, 0x0) ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000340)={'veth0_to_batadv\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x50, 0x20}]}, 0x10) sendmsg$nl_route_sched(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@getchain={0x24, 0x11, 0x839, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0xc}, {0xfff1}}}, 0x24}}, 0x20040000) (fail_nth: 2) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r8}, 0x10) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB], 0x5c}}, 0x0) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x24040800}, 0x8d0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x100, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 318.283255ms ago: executing program 4 (id=2512): r0 = socket$inet(0xa, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f00000002c0)=@mangle={'mangle\x00', 0x44, 0x6, 0x3c8, 0x238, 0x238, 0x238, 0x98, 0x98, 0x378, 0x378, 0x378, 0x378, 0x378, 0x6, 0x0, {[{{@ip={@loopback, @multicast1=0xe0007600, 0x0, 0x0, 'gre0\x00', 'ip6gre0\x00', {}, {}, 0x0, 0x0, 0x11}, 0x7a00, 0x70, 0x98}, @inet=@DSCP={0x28}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0x0, 0x0, 'wg1\x00', 'nicvf0\x00', {}, {}, 0x11}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @local}}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'vlan1\x00', 'nr0\x00'}, 0x0, 0x70, 0xb8}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@dev={0xfe, 0x80, '\x00', 0x18}, 'veth0_virt_wifi\x00', {0x7}}}}, {{@ip={@rand_addr, @private, 0xffffffff, 0xff, 'syzkaller0\x00', 'veth1_to_team\x00', {}, {0xff}}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @empty}}}, {{@ip={@empty, @empty, 0xff000000, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x4, 0x0, @loopback}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x428) ioctl$sock_SIOCDELRT(r0, 0x890c, &(0x7f00000004c0)={0x0, @phonet={0x23, 0x8, 0x5}, @l2={0x1f, 0x7, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xd1a9}, @hci={0x1f, 0x1, 0x3}, 0x7, 0x0, 0x0, 0x0, 0x9329, 0x0, 0x45c, 0x4, 0x3}) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x4) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000480)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="40000000100039040000", @ANYRES32=r4, @ANYBLOB="01980000000000002000128008000100677265001400028008000100", @ANYRES32=r4], 0x40}, 0x1, 0x0, 0x0, 0x4014}, 0x0) r6 = socket(0x10, 0x3, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route_sched(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x44, 0x24, 0x5820a61ca228659, 0x0, 0xfffffffe, {0x0, 0x0, 0x0, r7, {0x0, 0x9}, {0xffff, 0xffff}, {0x5, 0x7}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x6, 0x2}}}}]}, 0x79}}, 0x800) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001540)=@newtfilter={0x68, 0x28, 0xd27, 0x1004001, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0xffff, 0x9}, {}, {0x2, 0xb}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x38, 0x2, [@TCA_CGROUP_ACT={0x34, 0x1, [@m_sample={0x30, 0x215, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x68}, 0x1, 0x0, 0x0, 0x8810}, 0x404c0c0) sendmsg$nl_route(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x20088814}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@delchain={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r8}}, 0x24}}, 0x10) 276.468295ms ago: executing program 4 (id=2513): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000006c59850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x18) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="4400000010000104a5270b7357000000925e4a44", @ANYRES32, @ANYBLOB="0dfa130016000000240012000c00010000000000000000000c0002f60800000001180000080001"], 0x44}}, 0x0) r1 = socket(0x10, 0x803, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000280)={0xffffffffffffffff, 0x53, 0xd, 0x9}) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB], 0x48}}, 0x0) 254.675616ms ago: executing program 4 (id=2514): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0xb, 0x4f, 0x200cc, 0x6, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3f, 0x1, 0x0, 0x0, 0x0, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, @perf_bp={0x0, 0x13}, 0x2800, 0xffffffff, 0x6, 0x2, 0x0, 0x1, 0x3}, 0xffffffffffffffff, 0x0, r1, 0x8) io_uring_enter(0xffffffffffffffff, 0x47f8, 0x0, 0x0, 0x0, 0x0) accept$unix(0xffffffffffffffff, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a90000000030a0300000000000000000002e000000c00020000000000000000010900010073797a30"], 0xb8}}, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)='T', &(0x7f0000000240), 0x4af, r0}, 0x38) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000001c0)={0x0, &(0x7f0000000740)=""/4096, &(0x7f00000000c0), &(0x7f00000003c0), 0x2, r0}, 0x38) 0s ago: executing program 1 (id=2515): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="01000000060000000800000009"], 0x48) r0 = fsopen(&(0x7f0000000040)='sysfs\x00', 0x0) r1 = fsmount(r0, 0x0, 0x5) mount_setattr(r1, &(0x7f0000000000)='.\x00', 0x0, &(0x7f0000000200)={0x5}, 0x20) r2 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0xc8101339d8526c63}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001200)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r3}, &(0x7f0000000180), &(0x7f00000001c0)=r2}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000040)='sys_enter\x00', r4}, 0x10) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000040)={'syztnl0\x00', &(0x7f00000000c0)={'syztnl1\x00', 0x0, 0x2f, 0x6, 0xb, 0x6, 0x20, @local, @mcast1, 0x1, 0x0, 0x3, 0xffffffff}}) r5 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000340)='thermal_power_cpu_get_power\x00', 0xffffffffffffffff, 0x0, 0xffffffff}, 0xffffffffffffffb4) r6 = fcntl$dupfd(r5, 0x0, r5) ioctl$SG_SET_RESERVED_SIZE(r6, 0x2275, &(0x7f0000000000)=0x6) mount_setattr(0xffffffffffffffff, &(0x7f0000000000)='.\x00', 0x0, &(0x7f0000000200)={0x5}, 0x20) kernel console output (not intermixed with test programs): 4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 118.178196][ T4914] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 118.190812][ T4914] EXT4-fs (loop2): This should not happen!! Data will be lost [ 118.190812][ T4914] [ 118.200511][ T4914] EXT4-fs (loop2): Total free blocks count 0 [ 118.206502][ T4914] EXT4-fs (loop2): Free/Dirty block details [ 118.212469][ T4914] EXT4-fs (loop2): free_blocks=2415919504 [ 118.218229][ T4914] EXT4-fs (loop2): dirty_blocks=16400 [ 118.223658][ T4914] EXT4-fs (loop2): Block reservation details [ 118.229649][ T4914] EXT4-fs (loop2): i_reserved_data_blocks=1025 [ 118.249474][ T4914] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 2050 with max blocks 2048 with error 28 [ 118.303427][ T8311] xt_hashlimit: max too large, truncated to 1048576 [ 118.335852][ T8313] 8021q: adding VLAN 0 to HW filter on device team2 [ 118.539740][ T8327] 1X: renamed from 60X [ 118.560203][ T8327] A link change request failed with some changes committed already. Interface 61X may have been left with an inconsistent configuration, please check. [ 118.613394][ T8327] loop2: detected capacity change from 0 to 512 [ 118.654994][ T8327] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 118.673237][ T8327] ext4 filesystem being mounted at /377/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 118.693947][ T8347] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 118.706797][ T3310] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 118.762209][ T8351] 0X: renamed from 61X [ 118.769095][ T8351] A link change request failed with some changes committed already. Interface 60X may have been left with an inconsistent configuration, please check. [ 118.821719][ T8351] loop2: detected capacity change from 0 to 512 [ 118.843222][ T8351] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 118.856686][ T8351] ext4 filesystem being mounted at /379/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 118.882622][ T3310] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 118.917983][ T8363] 8021q: adding VLAN 0 to HW filter on device team8 [ 118.965200][ T8367] 8021q: adding VLAN 0 to HW filter on device team9 [ 119.022143][ T8372] 1X: renamed from 60X [ 119.029340][ T8372] A link change request failed with some changes committed already. Interface 61X may have been left with an inconsistent configuration, please check. [ 119.065168][ T8372] loop2: detected capacity change from 0 to 512 [ 119.082471][ T8372] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 119.095206][ T8372] ext4 filesystem being mounted at /383/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 119.116526][ T3310] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 119.155495][ T8385] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 119.311907][ T8395] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 119.341752][ T8396] loop2: detected capacity change from 0 to 2048 [ 119.372288][ T8396] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 119.415038][ T3310] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 119.484478][ T8408] netlink: 'syz.2.1798': attribute type 39 has an invalid length. [ 119.594247][ T8417] xt_hashlimit: max too large, truncated to 1048576 [ 119.668963][ T8423] loop3: detected capacity change from 0 to 2048 [ 119.697385][ T8423] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 119.720596][ T8426] 0X: renamed from 61X [ 119.727781][ T8426] A link change request failed with some changes committed already. Interface 60X may have been left with an inconsistent configuration, please check. [ 119.727860][ T3311] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 119.783691][ T8426] loop2: detected capacity change from 0 to 512 [ 119.813219][ T8426] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 119.826715][ T8426] ext4 filesystem being mounted at /394/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 119.839398][ T8434] loop3: detected capacity change from 0 to 2048 [ 119.853220][ T8434] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 119.867131][ T3310] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 119.893009][ T8439] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 119.902971][ T8439] SELinux: failed to load policy [ 119.909926][ T8439] loop2: detected capacity change from 0 to 164 [ 119.915401][ T3311] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 119.964421][ T8439] syz.2.1808: attempt to access beyond end of device [ 119.964421][ T8439] loop2: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 119.978498][ T8439] syz.2.1808: attempt to access beyond end of device [ 119.978498][ T8439] loop2: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 120.302766][ T8471] loop3: detected capacity change from 0 to 2048 [ 120.394145][ T8477] lo speed is unknown, defaulting to 1000 [ 120.624318][ T8471] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 120.792607][ T3311] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 120.938957][ T8492] xt_hashlimit: max too large, truncated to 1048576 [ 121.069448][ T29] kauditd_printk_skb: 180 callbacks suppressed [ 121.069465][ T29] audit: type=1326 audit(1745376882.194:8995): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8502 comm="syz.2.1833" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3f575e169 code=0x7ffc0000 [ 121.101604][ T29] audit: type=1326 audit(1745376882.214:8996): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8502 comm="syz.2.1833" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3f575e169 code=0x7ffc0000 [ 121.125311][ T29] audit: type=1326 audit(1745376882.214:8997): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8502 comm="syz.2.1833" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7ff3f575e169 code=0x7ffc0000 [ 121.148994][ T29] audit: type=1326 audit(1745376882.234:8998): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8502 comm="syz.2.1833" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3f575e169 code=0x7ffc0000 [ 121.172572][ T29] audit: type=1326 audit(1745376882.234:8999): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8502 comm="syz.2.1833" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3f575e169 code=0x7ffc0000 [ 121.198916][ T29] audit: type=1326 audit(1745376882.264:9000): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8502 comm="syz.2.1833" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ff3f575e169 code=0x7ffc0000 [ 121.222390][ T29] audit: type=1326 audit(1745376882.264:9001): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8502 comm="syz.2.1833" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3f575e169 code=0x7ffc0000 [ 121.223467][ T8507] 0X: renamed from 61X [ 121.245897][ T29] audit: type=1326 audit(1745376882.264:9002): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8502 comm="syz.2.1833" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3f575e169 code=0x7ffc0000 [ 121.274362][ T29] audit: type=1326 audit(1745376882.264:9003): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8502 comm="syz.2.1833" exe="/root/syz-executor" sig=0 arch=c000003e syscall=81 compat=0 ip=0x7ff3f575e169 code=0x7ffc0000 [ 121.297829][ T29] audit: type=1326 audit(1745376882.264:9004): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8502 comm="syz.2.1833" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3f575e169 code=0x7ffc0000 [ 121.323570][ T8507] A link change request failed with some changes committed already. Interface 60X may have been left with an inconsistent configuration, please check. [ 121.341883][ T8511] loop4: detected capacity change from 0 to 512 [ 121.374624][ T8511] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 121.387886][ T8511] ext4 filesystem being mounted at /454/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 121.422778][ T3301] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 121.497654][ T8520] loop2: detected capacity change from 0 to 2048 [ 121.549883][ T8520] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 121.568144][ T8526] loop4: detected capacity change from 0 to 2048 [ 121.585182][ T3310] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 121.649360][ T8534] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 121.669390][ T8534] SELinux: failed to load policy [ 121.678797][ T8534] loop2: detected capacity change from 0 to 164 [ 121.687499][ T8536] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 121.710204][ T8536] SELinux: failed to load policy [ 121.724933][ T8536] loop1: detected capacity change from 0 to 164 [ 121.800988][ T8534] syz.2.1841: attempt to access beyond end of device [ 121.800988][ T8534] loop2: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 121.816074][ T8534] syz.2.1841: attempt to access beyond end of device [ 121.816074][ T8534] loop2: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 121.844661][ T8536] syz.1.1842: attempt to access beyond end of device [ 121.844661][ T8536] loop1: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 121.877152][ T8536] syz.1.1842: attempt to access beyond end of device [ 121.877152][ T8536] loop1: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 122.023370][ T4914] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 122.042262][ T4914] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 122.054861][ T4914] EXT4-fs (loop4): This should not happen!! Data will be lost [ 122.054861][ T4914] [ 122.064765][ T4914] EXT4-fs (loop4): Total free blocks count 0 [ 122.070937][ T4914] EXT4-fs (loop4): Free/Dirty block details [ 122.076864][ T4914] EXT4-fs (loop4): free_blocks=2415919504 [ 122.082669][ T4914] EXT4-fs (loop4): dirty_blocks=16400 [ 122.088099][ T4914] EXT4-fs (loop4): Block reservation details [ 122.094134][ T4914] EXT4-fs (loop4): i_reserved_data_blocks=1025 [ 122.159477][ T4910] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 2050 with max blocks 2048 with error 28 [ 122.172446][ T4910] EXT4-fs (loop4): This should not happen!! Data will be lost [ 122.172446][ T4910] [ 122.194997][ T8563] loop1: detected capacity change from 0 to 2048 [ 122.340624][ T8572] loop1: detected capacity change from 0 to 2048 [ 122.420259][ T8581] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8581 comm=syz.4.1855 [ 122.840241][ T4921] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 122.856437][ T8599] FAULT_INJECTION: forcing a failure. [ 122.856437][ T8599] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 122.862895][ T4921] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 122.869575][ T8599] CPU: 0 UID: 0 PID: 8599 Comm: syz.4.1864 Not tainted 6.15.0-rc3-syzkaller-00019-gbc3372351d0c #0 PREEMPT(voluntary) [ 122.869610][ T8599] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 122.869630][ T8599] Call Trace: [ 122.869647][ T8599] [ 122.869658][ T8599] dump_stack_lvl+0xf6/0x150 [ 122.869689][ T8599] dump_stack+0x15/0x1a [ 122.869711][ T8599] should_fail_ex+0x261/0x270 [ 122.869742][ T8599] should_fail+0xb/0x10 [ 122.869767][ T8599] should_fail_usercopy+0x1a/0x20 [ 122.869864][ T8599] _copy_from_user+0x1c/0xa0 [ 122.869900][ T8599] ucma_write+0xdc/0x250 [ 122.869930][ T8599] ? __pfx_ucma_write+0x10/0x10 [ 122.869959][ T8599] vfs_write+0x295/0x950 [ 122.869982][ T8599] ? putname+0xe1/0x100 [ 122.870025][ T8599] ? __fget_files+0x186/0x1c0 [ 122.870054][ T8599] ksys_write+0xeb/0x1b0 [ 122.870078][ T8599] __x64_sys_write+0x42/0x50 [ 122.870162][ T8599] x64_sys_call+0x2a45/0x2e10 [ 122.870190][ T8599] do_syscall_64+0xc9/0x1a0 [ 122.870222][ T8599] ? clear_bhb_loop+0x25/0x80 [ 122.870249][ T8599] ? clear_bhb_loop+0x25/0x80 [ 122.870349][ T8599] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 122.870381][ T8599] RIP: 0033:0x7fde61fae169 [ 122.870400][ T8599] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 122.870423][ T8599] RSP: 002b:00007fde60617038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 122.870502][ T8599] RAX: ffffffffffffffda RBX: 00007fde621d5fa0 RCX: 00007fde61fae169 [ 122.870518][ T8599] RDX: 0000000000000048 RSI: 0000200000000280 RDI: 0000000000000007 [ 122.870533][ T8599] RBP: 00007fde60617090 R08: 0000000000000000 R09: 0000000000000000 [ 122.870553][ T8599] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 122.870568][ T8599] R13: 0000000000000000 R14: 00007fde621d5fa0 R15: 00007fffbd8ee898 [ 122.870591][ T8599] [ 123.071019][ T4921] EXT4-fs (loop1): This should not happen!! Data will be lost [ 123.071019][ T4921] [ 123.080892][ T4921] EXT4-fs (loop1): Total free blocks count 0 [ 123.086892][ T4921] EXT4-fs (loop1): Free/Dirty block details [ 123.092845][ T4921] EXT4-fs (loop1): free_blocks=2415919504 [ 123.098594][ T4921] EXT4-fs (loop1): dirty_blocks=16400 [ 123.104054][ T4921] EXT4-fs (loop1): Block reservation details [ 123.110038][ T4921] EXT4-fs (loop1): i_reserved_data_blocks=1025 [ 123.128620][ T4907] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 2050 with max blocks 2048 with error 28 [ 123.141393][ T4907] EXT4-fs (loop1): This should not happen!! Data will be lost [ 123.141393][ T4907] [ 123.237774][ T8610] xt_hashlimit: max too large, truncated to 1048576 [ 123.367709][ T8622] loop1: detected capacity change from 0 to 2048 [ 123.465456][ T8629] loop1: detected capacity change from 0 to 512 [ 123.475226][ T8629] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 123.484710][ T8629] EXT4-fs (loop1): invalid journal inode [ 123.490741][ T8629] EXT4-fs (loop1): can't get journal size [ 123.497270][ T8629] EXT4-fs (loop1): 1 truncate cleaned up [ 123.802135][ T8651] loop4: detected capacity change from 0 to 2048 [ 123.845046][ T8651] IPv6: Can't replace route, no match found [ 123.892836][ T8660] loop4: detected capacity change from 0 to 128 [ 123.905128][ T8660] ext4 filesystem being mounted at /476/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 124.239317][ T8680] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 124.249235][ T8680] SELinux: failed to load policy [ 124.256000][ T8680] loop1: detected capacity change from 0 to 164 [ 124.296407][ T8680] syz.1.1894: attempt to access beyond end of device [ 124.296407][ T8680] loop1: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 124.311174][ T8680] syz.1.1894: attempt to access beyond end of device [ 124.311174][ T8680] loop1: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 124.426046][ T8690] loop1: detected capacity change from 0 to 2048 [ 125.184069][ T8720] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 125.193988][ T8720] SELinux: failed to load policy [ 125.201095][ T8720] loop2: detected capacity change from 0 to 164 [ 125.262372][ T8720] syz.2.1906: attempt to access beyond end of device [ 125.262372][ T8720] loop2: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 125.276368][ T8720] syz.2.1906: attempt to access beyond end of device [ 125.276368][ T8720] loop2: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 125.297558][ T8727] loop3: detected capacity change from 0 to 2048 [ 125.571636][ T8752] vhci_hcd: invalid port number 224 [ 125.600114][ T8754] __nla_validate_parse: 24 callbacks suppressed [ 125.600134][ T8754] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1919'. [ 125.615470][ T8754] hsr_slave_0: left promiscuous mode [ 125.655876][ T8755] futex_wake_op: syz.2.1919 tries to shift op by -1; fix this program [ 125.702577][ T8759] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8759 comm=syz.2.1921 [ 125.888100][ T8766] loop2: detected capacity change from 0 to 2048 [ 126.141762][ T8780] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1929'. [ 126.154234][ T8780] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1929'. [ 126.231764][ T8782] netlink: 3 bytes leftover after parsing attributes in process `syz.2.1930'. [ 126.241043][ T8782] 1X: renamed from 60X [ 126.247644][ T8782] A link change request failed with some changes committed already. Interface 61X may have been left with an inconsistent configuration, please check. [ 126.279508][ T8782] loop2: detected capacity change from 0 to 512 [ 126.292011][ T8782] ext4 filesystem being mounted at /434/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 126.303485][ T8782] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1930'. [ 126.354665][ T8790] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8790 comm=syz.0.1932 [ 126.373874][ T29] kauditd_printk_skb: 198 callbacks suppressed [ 126.373890][ T29] audit: type=1326 audit(1745376887.504:9203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8791 comm="syz.2.1933" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3f575e169 code=0x7ffc0000 [ 126.403733][ T29] audit: type=1326 audit(1745376887.504:9204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8791 comm="syz.2.1933" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3f575e169 code=0x7ffc0000 [ 126.427412][ T29] audit: type=1326 audit(1745376887.504:9205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8791 comm="syz.2.1933" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7ff3f575e169 code=0x7ffc0000 [ 126.450979][ T29] audit: type=1326 audit(1745376887.504:9206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8791 comm="syz.2.1933" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3f575e169 code=0x7ffc0000 [ 126.474439][ T29] audit: type=1326 audit(1745376887.504:9207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8791 comm="syz.2.1933" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3f575e169 code=0x7ffc0000 [ 126.497891][ T29] audit: type=1326 audit(1745376887.504:9208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8791 comm="syz.2.1933" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ff3f575e169 code=0x7ffc0000 [ 126.521279][ T29] audit: type=1326 audit(1745376887.504:9209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8791 comm="syz.2.1933" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3f575e169 code=0x7ffc0000 [ 126.544842][ T29] audit: type=1326 audit(1745376887.504:9210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8791 comm="syz.2.1933" exe="/root/syz-executor" sig=0 arch=c000003e syscall=81 compat=0 ip=0x7ff3f575e169 code=0x7ffc0000 [ 126.568233][ T29] audit: type=1326 audit(1745376887.504:9211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8791 comm="syz.2.1933" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3f575e169 code=0x7ffc0000 [ 126.591748][ T29] audit: type=1326 audit(1745376887.504:9212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8791 comm="syz.2.1933" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff3f575e169 code=0x7ffc0000 [ 126.644960][ T8797] loop2: detected capacity change from 0 to 128 [ 126.668037][ T8797] ext4 filesystem being mounted at /437/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 126.845100][ T8809] xt_hashlimit: max too large, truncated to 1048576 [ 126.878892][ T8813] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1940'. [ 126.888103][ T8813] hsr_slave_0: left promiscuous mode [ 126.900226][ T8811] netlink: 3 bytes leftover after parsing attributes in process `syz.2.1941'. [ 126.909332][ T8811] 0X: renamed from 61X [ 126.915927][ T8811] A link change request failed with some changes committed already. Interface 60X may have been left with an inconsistent configuration, please check. [ 126.935003][ T8816] futex_wake_op: syz.0.1940 tries to shift op by -1; fix this program [ 126.950965][ T8811] loop2: detected capacity change from 0 to 512 [ 126.963293][ T8811] ext4 filesystem being mounted at /439/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 126.974675][ T8811] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1941'. [ 127.034403][ T8824] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8824 comm=syz.0.1944 [ 127.385824][ T8840] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=179 sclass=netlink_route_socket pid=8840 comm=syz.4.1950 [ 127.407223][ T8840] wireguard1: entered promiscuous mode [ 127.413006][ T8840] wireguard1: entered allmulticast mode [ 127.613582][ T8855] netlink: 3 bytes leftover after parsing attributes in process `syz.2.1954'. [ 127.623180][ T8855] 1X: renamed from 60X [ 127.635957][ T8855] A link change request failed with some changes committed already. Interface 61X may have been left with an inconsistent configuration, please check. [ 127.669424][ T8855] loop2: detected capacity change from 0 to 512 [ 127.704346][ T8855] ext4 filesystem being mounted at /448/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 127.716692][ T8855] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1954'. [ 127.819281][ T8879] FAULT_INJECTION: forcing a failure. [ 127.819281][ T8879] name failslab, interval 1, probability 0, space 0, times 0 [ 127.832103][ T8879] CPU: 1 UID: 0 PID: 8879 Comm: syz.2.1964 Not tainted 6.15.0-rc3-syzkaller-00019-gbc3372351d0c #0 PREEMPT(voluntary) [ 127.832146][ T8879] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 127.832163][ T8879] Call Trace: [ 127.832171][ T8879] [ 127.832180][ T8879] dump_stack_lvl+0xf6/0x150 [ 127.832206][ T8879] dump_stack+0x15/0x1a [ 127.832264][ T8879] should_fail_ex+0x261/0x270 [ 127.832288][ T8879] should_failslab+0x8f/0xb0 [ 127.832313][ T8879] __kmalloc_node_track_caller_noprof+0xaa/0x410 [ 127.832421][ T8879] ? sidtab_sid2str_get+0xb8/0x140 [ 127.832439][ T8879] ? vsnprintf+0x84d/0x8a0 [ 127.832499][ T8879] kmemdup_noprof+0x2b/0x70 [ 127.832653][ T8879] sidtab_sid2str_get+0xb8/0x140 [ 127.832678][ T8879] security_sid_to_context_core+0x1eb/0x2f0 [ 127.832756][ T8879] security_sid_to_context+0x27/0x30 [ 127.832855][ T8879] selinux_lsmprop_to_secctx+0x6c/0xf0 [ 127.832874][ T8879] security_lsmprop_to_secctx+0x40/0x80 [ 127.832906][ T8879] audit_log_task_context+0x7a/0x180 [ 127.832946][ T8879] audit_log_task+0xfb/0x250 [ 127.833025][ T8879] ? kstrtouint+0x7b/0xc0 [ 127.833050][ T8879] audit_seccomp+0x62/0x100 [ 127.833081][ T8879] __seccomp_filter+0x694/0x10e0 [ 127.833107][ T8879] ? vfs_write+0x669/0x950 [ 127.833135][ T8879] __secure_computing+0x7e/0x150 [ 127.833158][ T8879] syscall_trace_enter+0xcf/0x1f0 [ 127.833259][ T8879] do_syscall_64+0xaa/0x1a0 [ 127.833287][ T8879] ? clear_bhb_loop+0x25/0x80 [ 127.833310][ T8879] ? clear_bhb_loop+0x25/0x80 [ 127.833413][ T8879] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 127.833436][ T8879] RIP: 0033:0x7ff3f575e169 [ 127.833453][ T8879] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 127.833525][ T8879] RSP: 002b:00007ff3f3dc7038 EFLAGS: 00000246 ORIG_RAX: 000000000000009e [ 127.833547][ T8879] RAX: ffffffffffffffda RBX: 00007ff3f5985fa0 RCX: 00007ff3f575e169 [ 127.833561][ T8879] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000001004 [ 127.833574][ T8879] RBP: 00007ff3f3dc7090 R08: 0000000000000000 R09: 0000000000000000 [ 127.833587][ T8879] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 127.833600][ T8879] R13: 0000000000000000 R14: 00007ff3f5985fa0 R15: 00007fff90b375b8 [ 127.833622][ T8879] [ 128.507856][ T8905] netlink: 'syz.3.1975': attribute type 39 has an invalid length. [ 128.726400][ T8917] loop3: detected capacity change from 0 to 2048 [ 128.742344][ T8917] EXT4-fs mount: 28 callbacks suppressed [ 128.742357][ T8917] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 129.089291][ T4907] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 129.105592][ T4907] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 129.118191][ T4907] EXT4-fs (loop3): This should not happen!! Data will be lost [ 129.118191][ T4907] [ 129.127950][ T4907] EXT4-fs (loop3): Total free blocks count 0 [ 129.133991][ T4907] EXT4-fs (loop3): Free/Dirty block details [ 129.140019][ T4907] EXT4-fs (loop3): free_blocks=2415919504 [ 129.145808][ T4907] EXT4-fs (loop3): dirty_blocks=16400 [ 129.151298][ T4907] EXT4-fs (loop3): Block reservation details [ 129.157289][ T4907] EXT4-fs (loop3): i_reserved_data_blocks=1025 [ 129.176099][ T4921] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 2050 with max blocks 2048 with error 28 [ 131.247617][ T8959] __nla_validate_parse: 5 callbacks suppressed [ 131.247635][ T8959] netlink: 3 bytes leftover after parsing attributes in process `syz.2.1997'. [ 131.263389][ T8959] 0X: renamed from 61X [ 131.269998][ T8959] A link change request failed with some changes committed already. Interface 60X may have been left with an inconsistent configuration, please check. [ 131.303438][ T8959] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1997'. [ 131.390286][ T8969] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2001'. [ 131.399572][ T8969] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2001'. [ 131.433453][ T8973] loop0: detected capacity change from 0 to 128 [ 131.443347][ T8973] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 131.456821][ T8973] ext4 filesystem being mounted at /306/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 131.530744][ T29] kauditd_printk_skb: 215 callbacks suppressed [ 131.530763][ T29] audit: type=1326 audit(1745376892.664:9427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8966 comm="syz.2.2000" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3f575e169 code=0x7ffc0000 [ 131.562324][ T29] audit: type=1326 audit(1745376892.664:9428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8966 comm="syz.2.2000" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7ff3f575e169 code=0x7ffc0000 [ 131.586002][ T29] audit: type=1326 audit(1745376892.664:9429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8966 comm="syz.2.2000" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3f575e169 code=0x7ffc0000 [ 131.609446][ T29] audit: type=1326 audit(1745376892.664:9430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8966 comm="syz.2.2000" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3f575e169 code=0x7ffc0000 [ 131.632960][ T29] audit: type=1326 audit(1745376892.664:9431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8966 comm="syz.2.2000" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7ff3f575e169 code=0x7ffc0000 [ 131.656439][ T29] audit: type=1326 audit(1745376892.664:9432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8966 comm="syz.2.2000" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3f575e169 code=0x7ffc0000 [ 131.679915][ T29] audit: type=1326 audit(1745376892.664:9433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8966 comm="syz.2.2000" exe="/root/syz-executor" sig=0 arch=c000003e syscall=22 compat=0 ip=0x7ff3f575e169 code=0x7ffc0000 [ 131.703247][ T29] audit: type=1326 audit(1745376892.664:9434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8966 comm="syz.2.2000" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3f575e169 code=0x7ffc0000 [ 131.726658][ T29] audit: type=1326 audit(1745376892.664:9435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8966 comm="syz.2.2000" exe="/root/syz-executor" sig=0 arch=c000003e syscall=275 compat=0 ip=0x7ff3f575e169 code=0x7ffc0000 [ 131.791684][ T3314] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 131.980776][ T29] audit: type=1326 audit(1745376893.114:9436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8980 comm="syz.1.2005" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f69efa1e169 code=0x7ffc0000 [ 132.324813][ T8998] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 132.335006][ T8998] SELinux: failed to load policy [ 132.342349][ T8998] loop3: detected capacity change from 0 to 164 [ 132.380929][ T8998] syz.3.2010: attempt to access beyond end of device [ 132.380929][ T8998] loop3: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 132.395053][ T8998] syz.3.2010: attempt to access beyond end of device [ 132.395053][ T8998] loop3: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 132.439521][ T9004] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2012'. [ 132.448607][ T9004] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2012'. [ 132.634988][ T9014] loop4: detected capacity change from 0 to 2048 [ 132.651829][ T9014] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 132.717912][ T9018] IPv6: Can't replace route, no match found [ 132.765679][ T3301] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 132.787876][ T9020] xt_hashlimit: max too large, truncated to 1048576 [ 132.896739][ T9028] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 132.906750][ T9028] SELinux: failed to load policy [ 132.914137][ T9028] loop4: detected capacity change from 0 to 164 [ 132.953585][ T9028] syz.4.2020: attempt to access beyond end of device [ 132.953585][ T9028] loop4: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 132.967591][ T9028] syz.4.2020: attempt to access beyond end of device [ 132.967591][ T9028] loop4: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 133.000282][ T9034] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 133.010152][ T9034] SELinux: failed to load policy [ 133.017148][ T9034] loop4: detected capacity change from 0 to 164 [ 133.054717][ T9034] syz.4.2021: attempt to access beyond end of device [ 133.054717][ T9034] loop4: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 133.068871][ T9034] syz.4.2021: attempt to access beyond end of device [ 133.068871][ T9034] loop4: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 133.099008][ T9040] xt_hashlimit: max too large, truncated to 1048576 [ 133.124480][ T9042] netlink: 'syz.4.2023': attribute type 39 has an invalid length. [ 133.152960][ T9044] binfmt_misc: register: failed to install interpreter file ./file2 [ 133.249383][ T9050] loop4: detected capacity change from 0 to 2048 [ 133.262889][ T9050] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 133.287528][ T3301] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 133.402911][ T9062] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 133.413846][ T9062] SELinux: failed to load policy [ 133.424246][ T9062] loop3: detected capacity change from 0 to 164 [ 133.467902][ T9062] syz.3.2032: attempt to access beyond end of device [ 133.467902][ T9062] loop3: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 133.482948][ T9062] syz.3.2032: attempt to access beyond end of device [ 133.482948][ T9062] loop3: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 133.525858][ T9073] netlink: 'syz.3.2034': attribute type 39 has an invalid length. [ 133.570680][ T9077] loop4: detected capacity change from 0 to 512 [ 133.577376][ T9077] EXT4-fs: Ignoring removed nomblk_io_submit option [ 133.595139][ T9077] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 133.603307][ T9077] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8842c01d, mo2=0102] [ 133.611753][ T9077] EXT4-fs (loop4): couldn't mount RDWR because of unsupported optional features (80) [ 133.621362][ T9077] EXT4-fs (loop4): Skipping orphan cleanup due to unknown ROCOMPAT features [ 133.630771][ T9077] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 133.643995][ T9077] EXT4-fs (loop4): couldn't mount RDWR because of unsupported optional features (80) [ 133.656328][ T9077] EXT4-fs warning (device loop4): dx_probe:863: inode #2: comm syz.4.2035: dx entry: limit 65535 != root limit 120 [ 133.668499][ T9077] EXT4-fs warning (device loop4): dx_probe:936: inode #2: comm syz.4.2035: Corrupt directory, running e2fsck is recommended [ 133.687577][ T9082] loop3: detected capacity change from 0 to 2048 [ 133.704986][ T9082] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 133.718601][ T3301] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 133.747892][ T3311] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 133.769874][ T9089] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2040'. [ 133.779157][ T9089] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2040'. [ 133.917423][ T9099] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 133.927171][ T9099] SELinux: failed to load policy [ 133.934619][ T9099] loop3: detected capacity change from 0 to 164 [ 134.083047][ T9110] xt_hashlimit: max too large, truncated to 1048576 [ 134.179304][ T9115] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2048'. [ 134.211081][ T9115] netlink: 76 bytes leftover after parsing attributes in process `syz.3.2048'. [ 134.569539][ T9131] netem: change failed [ 134.573938][ T9131] FAULT_INJECTION: forcing a failure. [ 134.573938][ T9131] name failslab, interval 1, probability 0, space 0, times 0 [ 134.586707][ T9131] CPU: 1 UID: 0 PID: 9131 Comm: syz.2.2053 Not tainted 6.15.0-rc3-syzkaller-00019-gbc3372351d0c #0 PREEMPT(voluntary) [ 134.586740][ T9131] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 134.586753][ T9131] Call Trace: [ 134.586760][ T9131] [ 134.586769][ T9131] dump_stack_lvl+0xf6/0x150 [ 134.586859][ T9131] dump_stack+0x15/0x1a [ 134.586875][ T9131] should_fail_ex+0x261/0x270 [ 134.586905][ T9131] should_failslab+0x8f/0xb0 [ 134.586986][ T9131] kmem_cache_alloc_node_noprof+0x5c/0x340 [ 134.587074][ T9131] ? __alloc_skb+0x10d/0x320 [ 134.587096][ T9131] ? __rtnl_unlock+0x99/0xb0 [ 134.587120][ T9131] __alloc_skb+0x10d/0x320 [ 134.587144][ T9131] netlink_ack+0xf1/0x4f0 [ 134.587167][ T9131] ? avc_has_perm_noaudit+0x1cc/0x210 [ 134.587199][ T9131] netlink_rcv_skb+0x19f/0x230 [ 134.587275][ T9131] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 134.587318][ T9131] rtnetlink_rcv+0x1c/0x30 [ 134.587360][ T9131] netlink_unicast+0x605/0x6c0 [ 134.587403][ T9131] netlink_sendmsg+0x609/0x720 [ 134.587433][ T9131] ? __pfx_netlink_sendmsg+0x10/0x10 [ 134.587457][ T9131] __sock_sendmsg+0x140/0x180 [ 134.587540][ T9131] ____sys_sendmsg+0x350/0x4e0 [ 134.587568][ T9131] __sys_sendmsg+0x1a0/0x240 [ 134.587612][ T9131] __x64_sys_sendmsg+0x46/0x50 [ 134.587712][ T9131] x64_sys_call+0x26f3/0x2e10 [ 134.587818][ T9131] do_syscall_64+0xc9/0x1a0 [ 134.587846][ T9131] ? clear_bhb_loop+0x25/0x80 [ 134.587869][ T9131] ? clear_bhb_loop+0x25/0x80 [ 134.587888][ T9131] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 134.587913][ T9131] RIP: 0033:0x7ff3f575e169 [ 134.587929][ T9131] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 134.587949][ T9131] RSP: 002b:00007ff3f3dc7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 134.587971][ T9131] RAX: ffffffffffffffda RBX: 00007ff3f5985fa0 RCX: 00007ff3f575e169 [ 134.587986][ T9131] RDX: 0000000000008840 RSI: 0000200000000740 RDI: 0000000000000006 [ 134.588041][ T9131] RBP: 00007ff3f3dc7090 R08: 0000000000000000 R09: 0000000000000000 [ 134.588055][ T9131] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 134.588070][ T9131] R13: 0000000000000000 R14: 00007ff3f5985fa0 R15: 00007fff90b375b8 [ 134.588094][ T9131] [ 134.838379][ T9135] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 134.848302][ T9135] SELinux: failed to load policy [ 134.855271][ T9135] loop2: detected capacity change from 0 to 164 [ 134.984696][ T9145] 1X: renamed from 60X [ 134.998806][ T9145] A link change request failed with some changes committed already. Interface 61X may have been left with an inconsistent configuration, please check. [ 135.298444][ T9181] loop3: detected capacity change from 0 to 1024 [ 135.333585][ T9181] EXT4-fs: Ignoring removed nobh option [ 135.339273][ T9181] EXT4-fs: Ignoring removed bh option [ 135.431078][ T9181] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 135.480300][ T3311] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 135.557816][ T9213] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 135.568917][ T9213] SELinux: failed to load policy [ 135.576188][ T9213] loop1: detected capacity change from 0 to 164 [ 135.643517][ T9224] FAULT_INJECTION: forcing a failure. [ 135.643517][ T9224] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 135.645204][ T9213] syz.1.2085: attempt to access beyond end of device [ 135.645204][ T9213] loop1: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 135.656646][ T9224] CPU: 1 UID: 0 PID: 9224 Comm: syz.3.2087 Not tainted 6.15.0-rc3-syzkaller-00019-gbc3372351d0c #0 PREEMPT(voluntary) [ 135.656762][ T9224] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 135.656778][ T9224] Call Trace: [ 135.656786][ T9224] [ 135.656796][ T9224] dump_stack_lvl+0xf6/0x150 [ 135.656892][ T9224] dump_stack+0x15/0x1a [ 135.656914][ T9224] should_fail_ex+0x261/0x270 [ 135.656945][ T9224] should_fail+0xb/0x10 [ 135.656970][ T9224] should_fail_usercopy+0x1a/0x20 [ 135.657003][ T9224] _copy_from_user+0x1c/0xa0 [ 135.657045][ T9224] copy_msghdr_from_user+0x54/0x2b0 [ 135.657084][ T9224] ? __fget_files+0x186/0x1c0 [ 135.657114][ T9224] __sys_sendmsg+0x141/0x240 [ 135.657167][ T9224] __x64_sys_sendmsg+0x46/0x50 [ 135.657196][ T9224] x64_sys_call+0x26f3/0x2e10 [ 135.657224][ T9224] do_syscall_64+0xc9/0x1a0 [ 135.657321][ T9224] ? clear_bhb_loop+0x25/0x80 [ 135.657348][ T9224] ? clear_bhb_loop+0x25/0x80 [ 135.657375][ T9224] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 135.657401][ T9224] RIP: 0033:0x7fa3b8cbe169 [ 135.657421][ T9224] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 135.657524][ T9224] RSP: 002b:00007fa3b7327038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 135.657548][ T9224] RAX: ffffffffffffffda RBX: 00007fa3b8ee5fa0 RCX: 00007fa3b8cbe169 [ 135.657563][ T9224] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000004 [ 135.657578][ T9224] RBP: 00007fa3b7327090 R08: 0000000000000000 R09: 0000000000000000 [ 135.657592][ T9224] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 135.657607][ T9224] R13: 0000000000000000 R14: 00007fa3b8ee5fa0 R15: 00007ffe6bef07c8 [ 135.657644][ T9224] [ 135.864127][ T9213] syz.1.2085: attempt to access beyond end of device [ 135.864127][ T9213] loop1: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 136.007567][ T9249] loop2: detected capacity change from 0 to 512 [ 136.014660][ T9249] EXT4-fs: Ignoring removed nomblk_io_submit option [ 136.038149][ T9249] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 136.046221][ T9249] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8842c01d, mo2=0102] [ 136.060121][ T9252] loop0: detected capacity change from 0 to 1024 [ 136.068807][ T9249] EXT4-fs (loop2): couldn't mount RDWR because of unsupported optional features (80) [ 136.076733][ T9252] EXT4-fs: Ignoring removed bh option [ 136.078392][ T9249] EXT4-fs (loop2): Skipping orphan cleanup due to unknown ROCOMPAT features [ 136.099522][ T9249] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 136.126491][ T9249] EXT4-fs (loop2): couldn't mount RDWR because of unsupported optional features (80) [ 136.137006][ T9252] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 136.168842][ T9252] EXT4-fs error (device loop0): mb_free_blocks:1948: group 0, inode 18: block 241:freeing already freed block (bit 15); block bitmap corrupt. [ 136.186829][ T9252] EXT4-fs (loop0): Remounting filesystem read-only [ 136.194450][ T3310] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 136.230750][ T9259] 1X: renamed from 60X [ 136.238391][ T3314] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 136.248374][ T9259] A link change request failed with some changes committed already. Interface 61X may have been left with an inconsistent configuration, please check. [ 136.290792][ T9259] __nla_validate_parse: 6 callbacks suppressed [ 136.290809][ T9259] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2102'. [ 136.347187][ T9267] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 136.367186][ T9267] SELinux: failed to load policy [ 136.375781][ T9267] loop2: detected capacity change from 0 to 164 [ 136.496757][ T9283] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2111'. [ 136.512148][ T9283] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2111'. [ 136.567704][ T29] kauditd_printk_skb: 20 callbacks suppressed [ 136.567780][ T29] audit: type=1326 audit(1745376897.694:9457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9288 comm="syz.2.2115" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff3f575e169 code=0x0 [ 136.625246][ T9297] netlink: 'syz.2.2117': attribute type 39 has an invalid length. [ 136.683195][ T9303] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2118'. [ 136.725234][ T9307] FAULT_INJECTION: forcing a failure. [ 136.725234][ T9307] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 136.738409][ T9307] CPU: 0 UID: 0 PID: 9307 Comm: syz.2.2120 Not tainted 6.15.0-rc3-syzkaller-00019-gbc3372351d0c #0 PREEMPT(voluntary) [ 136.738442][ T9307] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 136.738494][ T9307] Call Trace: [ 136.738500][ T9307] [ 136.738507][ T9307] dump_stack_lvl+0xf6/0x150 [ 136.738527][ T9307] dump_stack+0x15/0x1a [ 136.738541][ T9307] should_fail_ex+0x261/0x270 [ 136.738562][ T9307] should_fail+0xb/0x10 [ 136.738627][ T9307] should_fail_usercopy+0x1a/0x20 [ 136.738649][ T9307] _copy_from_user+0x1c/0xa0 [ 136.738675][ T9307] do_seccomp+0x11c/0xa10 [ 136.738700][ T9307] __x64_sys_seccomp+0x40/0x50 [ 136.738717][ T9307] x64_sys_call+0x2152/0x2e10 [ 136.738735][ T9307] do_syscall_64+0xc9/0x1a0 [ 136.738756][ T9307] ? clear_bhb_loop+0x25/0x80 [ 136.738868][ T9307] ? clear_bhb_loop+0x25/0x80 [ 136.738887][ T9307] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 136.738905][ T9307] RIP: 0033:0x7ff3f575e169 [ 136.738918][ T9307] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 136.738934][ T9307] RSP: 002b:00007ff3f3dc7038 EFLAGS: 00000246 ORIG_RAX: 000000000000013d [ 136.738974][ T9307] RAX: ffffffffffffffda RBX: 00007ff3f5985fa0 RCX: 00007ff3f575e169 [ 136.739030][ T9307] RDX: 0000200000000040 RSI: 000000000000000c RDI: 0000000000000001 [ 136.739040][ T9307] RBP: 00007ff3f3dc7090 R08: 0000000000000000 R09: 0000000000000000 [ 136.739050][ T9307] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 136.739060][ T9307] R13: 0000000000000001 R14: 00007ff3f5985fa0 R15: 00007fff90b375b8 [ 136.739077][ T9307] [ 136.990748][ T9311] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 137.000622][ T9311] SELinux: failed to load policy [ 137.007714][ T9311] loop2: detected capacity change from 0 to 164 [ 137.320397][ T29] audit: type=1326 audit(1745376898.444:9458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9328 comm="syz.3.2128" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa3b8cbe169 code=0x0 [ 137.624163][ T9334] loop3: detected capacity change from 0 to 512 [ 137.636286][ T9334] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 137.680784][ T9334] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842e12c, mo2=0002] [ 137.689279][ T9334] System zones: 1-12 [ 137.694976][ T9334] EXT4-fs (loop3): orphan cleanup on readonly fs [ 137.702644][ T9334] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.2128: bg 0: block 361: padding at end of block bitmap is not set [ 137.719271][ T9334] EXT4-fs (loop3): Remounting filesystem read-only [ 137.727412][ T9334] EXT4-fs (loop3): 1 truncate cleaned up [ 137.735838][ T9334] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 137.749156][ T9334] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 138.018593][ T9337] loop4: detected capacity change from 0 to 2048 [ 138.033112][ T9337] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 138.148059][ T29] audit: type=1400 audit(1745376899.274:9459): avc: denied { remount } for pid=9341 comm="syz.2.2131" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 138.238208][ T29] audit: type=1400 audit(1745376899.364:9460): avc: denied { watch_reads } for pid=9346 comm="syz.3.2133" path="/452" dev="tmpfs" ino=2373 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 138.300063][ T9347] loop3: detected capacity change from 0 to 1024 [ 138.311799][ T9347] EXT4-fs: Ignoring removed nobh option [ 138.317527][ T9347] EXT4-fs: Ignoring removed bh option [ 138.347226][ T9347] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 138.368274][ T9347] EXT4-fs error (device loop3): ext4_xattr_inode_iget:437: comm syz.3.2133: inode #327696: comm syz.3.2133: iget: illegal inode # [ 138.382354][ T9347] EXT4-fs (loop3): Remounting filesystem read-only [ 138.388999][ T9347] EXT4-fs warning (device loop3): ext4_xattr_inode_inc_ref_all:1129: inode #18: comm syz.3.2133: cleanup dec ref error -30 [ 138.402665][ T9347] EXT4-fs warning (device loop3): ext4_xattr_block_set:2190: inode #18: comm syz.3.2133: dec ref error=-30 [ 138.416274][ T9352] netlink: 3 bytes leftover after parsing attributes in process `syz.2.2134'. [ 138.425246][ T9352] 1X: renamed from 60X [ 138.433078][ T9352] A link change request failed with some changes committed already. Interface 61X may have been left with an inconsistent configuration, please check. [ 138.487534][ T9352] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2134'. [ 138.519596][ T3311] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 138.568533][ T4907] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 138.584827][ T4907] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 138.597366][ T4907] EXT4-fs (loop4): This should not happen!! Data will be lost [ 138.597366][ T4907] [ 138.607035][ T4907] EXT4-fs (loop4): Total free blocks count 0 [ 138.613188][ T4907] EXT4-fs (loop4): Free/Dirty block details [ 138.619119][ T4907] EXT4-fs (loop4): free_blocks=2415919504 [ 138.624891][ T4907] EXT4-fs (loop4): dirty_blocks=16400 [ 138.630286][ T4907] EXT4-fs (loop4): Block reservation details [ 138.636436][ T4907] EXT4-fs (loop4): i_reserved_data_blocks=1025 [ 138.666939][ T4907] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 2050 with max blocks 2048 with error 28 [ 138.910511][ T9379] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2139'. [ 139.039459][ T9393] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2158'. [ 139.048686][ T9391] loop4: detected capacity change from 0 to 1024 [ 139.056513][ T9391] EXT4-fs: Ignoring removed nobh option [ 139.062837][ T9391] EXT4-fs: Ignoring removed bh option [ 139.081928][ T9391] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 139.098641][ T9391] EXT4-fs error (device loop4): ext4_xattr_inode_iget:437: comm syz.4.2147: inode #327696: comm syz.4.2147: iget: illegal inode # [ 139.112568][ T9391] EXT4-fs (loop4): Remounting filesystem read-only [ 139.119253][ T9391] EXT4-fs warning (device loop4): ext4_xattr_inode_inc_ref_all:1129: inode #18: comm syz.4.2147: cleanup dec ref error -30 [ 139.132216][ T9391] EXT4-fs warning (device loop4): ext4_xattr_block_set:2190: inode #18: comm syz.4.2147: dec ref error=-30 [ 139.156443][ T3301] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 139.482322][ T9404] loop1: detected capacity change from 0 to 2048 [ 139.497484][ T9404] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 139.545605][ T9409] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2151'. [ 139.583208][ T9411] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2152'. [ 139.712608][ T9421] atomic_op ffff888117dec928 conn xmit_atomic 0000000000000000 [ 139.721648][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 140.033168][ T9450] loop2: detected capacity change from 0 to 128 [ 140.046799][ T9450] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 140.104689][ T9450] ext4 filesystem being mounted at /508/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 140.157952][ T9454] loop3: detected capacity change from 0 to 2048 [ 140.187381][ T9454] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 140.286528][ T9460] netem: change failed [ 140.301604][ T3310] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 140.419165][ T3311] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 140.463564][ T9476] netlink: 'syz.1.2180': attribute type 39 has an invalid length. [ 140.523469][ T9482] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 140.544930][ T9482] SELinux: failed to load policy [ 140.552334][ T9482] loop1: detected capacity change from 0 to 164 [ 140.574302][ T9487] loop3: detected capacity change from 0 to 128 [ 140.582993][ T9484] loop2: detected capacity change from 0 to 164 [ 140.595198][ T9487] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 140.615953][ T9487] ext4 filesystem being mounted at /463/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 140.637879][ T9482] bio_check_eod: 4 callbacks suppressed [ 140.637896][ T9482] syz.1.2182: attempt to access beyond end of device [ 140.637896][ T9482] loop1: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 140.659410][ T9484] syz.2.2183: attempt to access beyond end of device [ 140.659410][ T9484] loop2: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 140.676623][ T9482] syz.1.2182: attempt to access beyond end of device [ 140.676623][ T9482] loop1: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 140.690213][ T9484] syz.2.2183: attempt to access beyond end of device [ 140.690213][ T9484] loop2: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 140.718728][ T29] audit: type=1400 audit(1745376901.844:9461): avc: denied { block_suspend } for pid=9496 comm="syz.4.2185" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 140.795335][ T29] audit: type=1400 audit(1745376901.924:9462): avc: denied { listen } for pid=9504 comm="syz.1.2188" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 140.815061][ T29] audit: type=1400 audit(1745376901.924:9463): avc: denied { write } for pid=9504 comm="syz.1.2188" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 140.851767][ T3311] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 140.874177][ T29] audit: type=1400 audit(1745376902.004:9464): avc: denied { read } for pid=9511 comm="syz.3.2190" name="event0" dev="devtmpfs" ino=242 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 140.912833][ T9515] netlink: 'syz.1.2192': attribute type 39 has an invalid length. [ 140.984453][ T9524] loop1: detected capacity change from 0 to 512 [ 140.993774][ T9524] EXT4-fs: Ignoring removed nomblk_io_submit option [ 141.004880][ T9524] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 141.012911][ T9524] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8842c01d, mo2=0102] [ 141.022826][ T9524] EXT4-fs (loop1): couldn't mount RDWR because of unsupported optional features (80) [ 141.032427][ T9524] EXT4-fs (loop1): Skipping orphan cleanup due to unknown ROCOMPAT features [ 141.042862][ T9524] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 141.056622][ T9524] EXT4-fs (loop1): couldn't mount RDWR because of unsupported optional features (80) [ 141.079984][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 141.130691][ T9528] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 141.140851][ T9528] SELinux: failed to load policy [ 141.147417][ T9528] loop1: detected capacity change from 0 to 164 [ 141.186413][ T9528] syz.1.2196: attempt to access beyond end of device [ 141.186413][ T9528] loop1: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 141.200589][ T9528] syz.1.2196: attempt to access beyond end of device [ 141.200589][ T9528] loop1: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 141.381047][ T9545] loop1: detected capacity change from 0 to 128 [ 141.399575][ T9545] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 141.412554][ T9545] ext4 filesystem being mounted at /354/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 141.564462][ T3315] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 141.568030][ T9550] __nla_validate_parse: 4 callbacks suppressed [ 141.568059][ T9550] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2203'. [ 141.597666][ T9550] hsr0: entered promiscuous mode [ 141.615131][ T9553] netlink: 'syz.1.2204': attribute type 39 has an invalid length. [ 141.663575][ T9558] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 141.674362][ T9558] SELinux: failed to load policy [ 141.681058][ T9558] loop3: detected capacity change from 0 to 164 [ 141.731258][ T9565] loop1: detected capacity change from 0 to 512 [ 141.739639][ T9565] EXT4-fs: Ignoring removed nomblk_io_submit option [ 141.752196][ T9565] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 141.760160][ T9565] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8842c01d, mo2=0102] [ 141.775512][ T9565] EXT4-fs (loop1): couldn't mount RDWR because of unsupported optional features (80) [ 141.779401][ T9558] syz.3.2207: attempt to access beyond end of device [ 141.779401][ T9558] loop3: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 141.785175][ T9565] EXT4-fs (loop1): Skipping orphan cleanup due to unknown ROCOMPAT features [ 141.792701][ T9565] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 141.801626][ T9558] syz.3.2207: attempt to access beyond end of device [ 141.801626][ T9558] loop3: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 141.833749][ T9565] EXT4-fs (loop1): couldn't mount RDWR because of unsupported optional features (80) [ 141.856483][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 141.894960][ T9574] loop4: detected capacity change from 0 to 1024 [ 141.905882][ T9574] EXT4-fs: Ignoring removed nobh option [ 141.911599][ T9574] EXT4-fs: Ignoring removed bh option [ 141.946073][ T9574] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 141.990111][ T9581] loop1: detected capacity change from 0 to 2048 [ 141.997620][ T9574] EXT4-fs error (device loop4): ext4_xattr_inode_iget:437: comm syz.4.2214: inode #327696: comm syz.4.2214: iget: illegal inode # [ 142.006761][ T9584] loop3: detected capacity change from 0 to 164 [ 142.027354][ T9574] EXT4-fs (loop4): Remounting filesystem read-only [ 142.036308][ T9581] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 142.049000][ T9574] EXT4-fs warning (device loop4): ext4_xattr_inode_inc_ref_all:1129: inode #18: comm syz.4.2214: cleanup dec ref error -30 [ 142.068754][ T9574] EXT4-fs warning (device loop4): ext4_xattr_block_set:2190: inode #18: comm syz.4.2214: dec ref error=-30 [ 142.081468][ T9584] syz.3.2216: attempt to access beyond end of device [ 142.081468][ T9584] loop3: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 142.107669][ T29] audit: type=1326 audit(1745376903.234:9465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9576 comm="syz.2.2215" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3f575e169 code=0x7ffc0000 [ 142.132099][ T29] audit: type=1326 audit(1745376903.234:9466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9576 comm="syz.2.2215" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7ff3f575e169 code=0x7ffc0000 [ 142.151043][ T9584] syz.3.2216: attempt to access beyond end of device [ 142.151043][ T9584] loop3: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 142.155490][ T29] audit: type=1326 audit(1745376903.234:9467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9576 comm="syz.2.2215" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3f575e169 code=0x7ffc0000 [ 142.192343][ T29] audit: type=1326 audit(1745376903.234:9468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9576 comm="syz.2.2215" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7ff3f575e169 code=0x7ffc0000 [ 142.215786][ T29] audit: type=1326 audit(1745376903.234:9469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9576 comm="syz.2.2215" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3f575e169 code=0x7ffc0000 [ 142.239236][ T29] audit: type=1326 audit(1745376903.234:9470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9576 comm="syz.2.2215" exe="/root/syz-executor" sig=0 arch=c000003e syscall=22 compat=0 ip=0x7ff3f575e169 code=0x7ffc0000 [ 142.262618][ T29] audit: type=1326 audit(1745376903.234:9471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9576 comm="syz.2.2215" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3f575e169 code=0x7ffc0000 [ 142.286253][ T29] audit: type=1326 audit(1745376903.234:9472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9576 comm="syz.2.2215" exe="/root/syz-executor" sig=0 arch=c000003e syscall=275 compat=0 ip=0x7ff3f575e169 code=0x7ffc0000 [ 142.310609][ T3301] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 142.359003][ T9596] netlink: 'syz.4.2218': attribute type 39 has an invalid length. [ 142.375483][ T9598] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=64013 sclass=netlink_route_socket pid=9598 comm=syz.3.2219 [ 142.526334][ T9607] loop4: detected capacity change from 0 to 512 [ 142.527763][ T9608] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 142.541181][ T9607] EXT4-fs: Ignoring removed nomblk_io_submit option [ 142.550844][ T9607] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 142.558376][ T9608] SELinux: failed to load policy [ 142.558777][ T9607] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8842c01d, mo2=0102] [ 142.575936][ T9608] loop3: detected capacity change from 0 to 164 [ 142.590133][ T9607] EXT4-fs (loop4): couldn't mount RDWR because of unsupported optional features (80) [ 142.599740][ T9607] EXT4-fs (loop4): Skipping orphan cleanup due to unknown ROCOMPAT features [ 142.623063][ T9607] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 142.692925][ T4913] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 142.709429][ T4913] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 142.710469][ T9607] EXT4-fs (loop4): couldn't mount RDWR because of unsupported optional features (80) [ 142.721948][ T4913] EXT4-fs (loop1): This should not happen!! Data will be lost [ 142.721948][ T4913] [ 142.741143][ T4913] EXT4-fs (loop1): Total free blocks count 0 [ 142.747200][ T4913] EXT4-fs (loop1): Free/Dirty block details [ 142.753164][ T4913] EXT4-fs (loop1): free_blocks=2415919504 [ 142.758906][ T4913] EXT4-fs (loop1): dirty_blocks=16400 [ 142.764389][ T4913] EXT4-fs (loop1): Block reservation details [ 142.770415][ T4913] EXT4-fs (loop1): i_reserved_data_blocks=1025 [ 142.796977][ T4907] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 2050 with max blocks 2048 with error 28 [ 142.811511][ T3301] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 142.934911][ T9627] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=64013 sclass=netlink_route_socket pid=9627 comm=syz.0.2232 [ 142.984862][ T9633] FAULT_INJECTION: forcing a failure. [ 142.984862][ T9633] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 142.998038][ T9633] CPU: 0 UID: 0 PID: 9633 Comm: syz.0.2234 Not tainted 6.15.0-rc3-syzkaller-00019-gbc3372351d0c #0 PREEMPT(voluntary) [ 142.998191][ T9633] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 142.998205][ T9633] Call Trace: [ 142.998212][ T9633] [ 142.998219][ T9633] dump_stack_lvl+0xf6/0x150 [ 142.998241][ T9633] dump_stack+0x15/0x1a [ 142.998258][ T9633] should_fail_ex+0x261/0x270 [ 142.998284][ T9633] should_fail+0xb/0x10 [ 142.998360][ T9633] should_fail_usercopy+0x1a/0x20 [ 142.998441][ T9633] _copy_from_user+0x1c/0xa0 [ 142.998474][ T9633] __sys_bpf+0x16a/0x800 [ 142.998547][ T9633] __x64_sys_bpf+0x43/0x50 [ 142.998584][ T9633] x64_sys_call+0x23da/0x2e10 [ 142.998623][ T9633] do_syscall_64+0xc9/0x1a0 [ 142.998654][ T9633] ? clear_bhb_loop+0x25/0x80 [ 142.998680][ T9633] ? clear_bhb_loop+0x25/0x80 [ 142.998748][ T9633] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 142.998773][ T9633] RIP: 0033:0x7fa4a197e169 [ 142.998791][ T9633] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 142.998811][ T9633] RSP: 002b:00007fa49ffe7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 142.998833][ T9633] RAX: ffffffffffffffda RBX: 00007fa4a1ba5fa0 RCX: 00007fa4a197e169 [ 142.998848][ T9633] RDX: 0000000000000048 RSI: 00002000000005c0 RDI: 0000000000000000 [ 142.998862][ T9633] RBP: 00007fa49ffe7090 R08: 0000000000000000 R09: 0000000000000000 [ 142.998916][ T9633] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 142.998929][ T9633] R13: 0000000000000000 R14: 00007fa4a1ba5fa0 R15: 00007fff0a92da48 [ 142.998951][ T9633] [ 143.191054][ T9637] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 143.200969][ T9637] SELinux: failed to load policy [ 143.208500][ T9637] loop0: detected capacity change from 0 to 164 [ 143.283743][ T9645] loop0: detected capacity change from 0 to 128 [ 143.303365][ T9645] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 143.316232][ T9645] ext4 filesystem being mounted at /334/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 143.339077][ T9649] IPv6: Can't replace route, no match found [ 143.348610][ T29] audit: type=1326 audit(1745376904.484:9473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9634 comm="syz.1.2226" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f69efa1e169 code=0x7ffc0000 [ 143.373610][ T29] audit: type=1326 audit(1745376904.504:9474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9634 comm="syz.1.2226" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f69efa1e169 code=0x7ffc0000 [ 143.401412][ T9653] loop4: detected capacity change from 0 to 128 [ 143.412863][ T9653] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 143.425611][ T9653] ext4 filesystem being mounted at /544/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 143.448642][ T3314] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 143.526886][ T9656] loop0: detected capacity change from 0 to 1024 [ 143.533919][ T9656] EXT4-fs: Ignoring removed nobh option [ 143.539541][ T9656] EXT4-fs: Ignoring removed bh option [ 143.552757][ T3301] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 143.564475][ T9656] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 143.584541][ T9656] EXT4-fs error (device loop0): ext4_xattr_inode_iget:437: comm syz.0.2239: inode #327696: comm syz.0.2239: iget: illegal inode # [ 143.603865][ T9656] EXT4-fs (loop0): Remounting filesystem read-only [ 143.610944][ T9656] EXT4-fs warning (device loop0): ext4_xattr_inode_inc_ref_all:1129: inode #18: comm syz.0.2239: cleanup dec ref error -30 [ 143.624800][ T9656] EXT4-fs warning (device loop0): ext4_xattr_block_set:2190: inode #18: comm syz.0.2239: dec ref error=-30 [ 143.649790][ T3314] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 143.723484][ T9668] loop4: detected capacity change from 0 to 1024 [ 143.735424][ T9668] EXT4-fs: Ignoring removed nobh option [ 143.741213][ T9668] EXT4-fs: Ignoring removed bh option [ 143.762479][ T9670] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=64013 sclass=netlink_route_socket pid=9670 comm=syz.0.2244 [ 143.776661][ T9668] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 143.793768][ T9668] EXT4-fs error (device loop4): ext4_xattr_inode_iget:437: comm syz.4.2243: inode #327696: comm syz.4.2243: iget: illegal inode # [ 143.807496][ T9668] EXT4-fs (loop4): Remounting filesystem read-only [ 143.814196][ T9668] EXT4-fs warning (device loop4): ext4_xattr_inode_inc_ref_all:1129: inode #18: comm syz.4.2243: cleanup dec ref error -30 [ 143.827235][ T9668] EXT4-fs warning (device loop4): ext4_xattr_block_set:2190: inode #18: comm syz.4.2243: dec ref error=-30 [ 143.846002][ T9674] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2245'. [ 143.856480][ T3301] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 143.882658][ T9680] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 143.892650][ T9680] SELinux: failed to load policy [ 143.899412][ T9680] loop4: detected capacity change from 0 to 164 [ 143.960506][ T9687] IPv6: Can't replace route, no match found [ 143.985870][ T9689] loop4: detected capacity change from 0 to 128 [ 144.007330][ T9689] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 144.020306][ T9689] ext4 filesystem being mounted at /550/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 144.191476][ T3301] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 144.294344][ T9697] capability: warning: `syz.4.2252' uses deprecated v2 capabilities in a way that may be insecure [ 144.306779][ T9697] 9pnet_fd: Insufficient options for proto=fd [ 144.433138][ T9707] loop4: detected capacity change from 0 to 512 [ 144.439937][ T9707] EXT4-fs: Ignoring removed nomblk_io_submit option [ 144.448354][ T9707] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 144.456490][ T9707] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8842c01d, mo2=0102] [ 144.464682][ T9707] EXT4-fs (loop4): couldn't mount RDWR because of unsupported optional features (80) [ 144.474209][ T9707] EXT4-fs (loop4): Skipping orphan cleanup due to unknown ROCOMPAT features [ 144.483491][ T9707] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 144.496611][ T9707] EXT4-fs (loop4): couldn't mount RDWR because of unsupported optional features (80) [ 144.515638][ T3301] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 144.607702][ T9710] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2257'. [ 144.691196][ T9714] loop4: detected capacity change from 0 to 1024 [ 144.698137][ T9714] EXT4-fs: Ignoring removed nobh option [ 144.703825][ T9714] EXT4-fs: Ignoring removed bh option [ 144.732357][ T9714] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 144.759303][ T3301] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 144.777535][ T9724] loop0: detected capacity change from 0 to 128 [ 144.789914][ T9724] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 144.809822][ T9724] ext4 filesystem being mounted at /341/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 144.899232][ T9732] netlink: 'syz.4.2263': attribute type 3 has an invalid length. [ 144.931436][ T3314] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 144.983402][ T9736] loop0: detected capacity change from 0 to 1024 [ 144.994177][ T9736] EXT4-fs: Ignoring removed nobh option [ 144.999891][ T9736] EXT4-fs: Ignoring removed bh option [ 145.037236][ T9736] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 145.052175][ T9742] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2268'. [ 145.062721][ T9736] EXT4-fs error (device loop0): ext4_xattr_inode_iget:437: comm syz.0.2264: inode #327696: comm syz.0.2264: iget: illegal inode # [ 145.078603][ T9748] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 145.088546][ T9736] EXT4-fs (loop0): Remounting filesystem read-only [ 145.088587][ T9748] SELinux: failed to load policy [ 145.103151][ T9748] loop4: detected capacity change from 0 to 164 [ 145.104676][ T9736] EXT4-fs warning (device loop0): ext4_xattr_inode_inc_ref_all:1129: inode #18: comm syz.0.2264: cleanup dec ref error -30 [ 145.126385][ T9736] EXT4-fs warning (device loop0): ext4_xattr_block_set:2190: inode #18: comm syz.0.2264: dec ref error=-30 [ 145.156948][ T3314] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 145.363740][ T9774] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 145.404144][ T9778] loop2: detected capacity change from 0 to 128 [ 145.478024][ T9785] loop2: detected capacity change from 0 to 128 [ 145.512424][ T9788] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 145.522249][ T9788] SELinux: failed to load policy [ 145.529063][ T9788] loop2: detected capacity change from 0 to 164 [ 145.820690][ T9803] loop2: detected capacity change from 0 to 736 [ 145.827444][ T9803] iso9660: Unknown parameter 'Q{UaND?sM00000000000000000000' [ 145.858733][ T9803] loop2: detected capacity change from 0 to 1764 [ 145.866666][ T9803] iso9660: Unknown parameter '' [ 145.912976][ T9807] loop2: detected capacity change from 0 to 128 [ 145.928757][ T9807] FAULT_INJECTION: forcing a failure. [ 145.928757][ T9807] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 145.941998][ T9807] CPU: 0 UID: 0 PID: 9807 Comm: syz.2.2289 Not tainted 6.15.0-rc3-syzkaller-00019-gbc3372351d0c #0 PREEMPT(voluntary) [ 145.942032][ T9807] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 145.942047][ T9807] Call Trace: [ 145.942062][ T9807] [ 145.942072][ T9807] dump_stack_lvl+0xf6/0x150 [ 145.942100][ T9807] dump_stack+0x15/0x1a [ 145.942181][ T9807] should_fail_ex+0x261/0x270 [ 145.942210][ T9807] should_fail+0xb/0x10 [ 145.942234][ T9807] should_fail_usercopy+0x1a/0x20 [ 145.942322][ T9807] _copy_to_user+0x20/0xa0 [ 145.942353][ T9807] simple_read_from_buffer+0xb2/0x130 [ 145.942385][ T9807] proc_fail_nth_read+0x103/0x140 [ 145.942420][ T9807] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 145.942476][ T9807] vfs_read+0x1b2/0x710 [ 145.942495][ T9807] ? __rcu_read_unlock+0x4e/0x70 [ 145.942518][ T9807] ? __fget_files+0x186/0x1c0 [ 145.942544][ T9807] ksys_read+0xeb/0x1b0 [ 145.942589][ T9807] __x64_sys_read+0x42/0x50 [ 145.942679][ T9807] x64_sys_call+0x2a3b/0x2e10 [ 145.942704][ T9807] do_syscall_64+0xc9/0x1a0 [ 145.942734][ T9807] ? clear_bhb_loop+0x25/0x80 [ 145.942758][ T9807] ? clear_bhb_loop+0x25/0x80 [ 145.942784][ T9807] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 145.942827][ T9807] RIP: 0033:0x7ff3f575cb7c [ 145.942844][ T9807] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 145.942860][ T9807] RSP: 002b:00007ff3f3dc7030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 145.942881][ T9807] RAX: ffffffffffffffda RBX: 00007ff3f5985fa0 RCX: 00007ff3f575cb7c [ 145.942896][ T9807] RDX: 000000000000000f RSI: 00007ff3f3dc70a0 RDI: 0000000000000005 [ 145.942909][ T9807] RBP: 00007ff3f3dc7090 R08: 0000000000000000 R09: 0000000000000000 [ 145.942922][ T9807] R10: 00000000000002c2 R11: 0000000000000246 R12: 0000000000000001 [ 145.942984][ T9807] R13: 0000000000000000 R14: 00007ff3f5985fa0 R15: 00007fff90b375b8 [ 145.943008][ T9807] [ 146.148661][ T9809] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2291'. [ 146.191330][ T9813] loop3: detected capacity change from 0 to 512 [ 146.198200][ T9813] EXT4-fs: Ignoring removed nomblk_io_submit option [ 146.208933][ T9815] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 146.218971][ T9815] SELinux: failed to load policy [ 146.224181][ T9813] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 146.232190][ T9813] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8842c01d, mo2=0102] [ 146.243236][ T9815] loop2: detected capacity change from 0 to 164 [ 146.272468][ T9813] EXT4-fs (loop3): couldn't mount RDWR because of unsupported optional features (80) [ 146.282149][ T9813] EXT4-fs (loop3): Skipping orphan cleanup due to unknown ROCOMPAT features [ 146.301778][ T9815] bio_check_eod: 10 callbacks suppressed [ 146.301798][ T9815] syz.2.2294: attempt to access beyond end of device [ 146.301798][ T9815] loop2: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 146.321897][ T9813] EXT4-fs (loop3): couldn't mount RDWR because of unsupported optional features (80) [ 146.322389][ T9815] syz.2.2294: attempt to access beyond end of device [ 146.322389][ T9815] loop2: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 146.426819][ T9830] loop3: detected capacity change from 0 to 256 [ 146.444732][ T9832] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 146.459640][ T9832] SELinux: failed to load policy [ 146.467254][ T9832] loop2: detected capacity change from 0 to 164 [ 146.513080][ T9832] syz.2.2300: attempt to access beyond end of device [ 146.513080][ T9832] loop2: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 146.527247][ T9832] syz.2.2300: attempt to access beyond end of device [ 146.527247][ T9832] loop2: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 146.601158][ T9841] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2301'. [ 146.608065][ T9846] IPVS: sync thread started: state = BACKUP, mcast_ifn = sit0, syncid = 0, id = 0 [ 146.619525][ T9845] IPVS: stopping backup sync thread 9846 ... [ 146.627057][ T9845] loop3: detected capacity change from 0 to 128 [ 146.660025][ T9849] loop3: detected capacity change from 0 to 128 [ 146.669312][ T9850] loop2: detected capacity change from 0 to 128 [ 146.689610][ T9849] ext4 filesystem being mounted at /484/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 146.700993][ T9850] ext4 filesystem being mounted at /541/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 147.013257][ T9865] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 147.023111][ T9865] SELinux: failed to load policy [ 147.029829][ T9865] loop3: detected capacity change from 0 to 164 [ 147.069627][ T9865] syz.3.2308: attempt to access beyond end of device [ 147.069627][ T9865] loop3: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 147.083677][ T9865] syz.3.2308: attempt to access beyond end of device [ 147.083677][ T9865] loop3: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 147.119975][ T9871] loop3: detected capacity change from 0 to 512 [ 147.126866][ T9871] EXT4-fs: Ignoring removed nomblk_io_submit option [ 147.134654][ T9871] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 147.142911][ T9871] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8842c01d, mo2=0102] [ 147.151249][ T9871] EXT4-fs (loop3): couldn't mount RDWR because of unsupported optional features (80) [ 147.160824][ T9871] EXT4-fs (loop3): Skipping orphan cleanup due to unknown ROCOMPAT features [ 147.171373][ T9871] EXT4-fs (loop3): couldn't mount RDWR because of unsupported optional features (80) [ 148.350164][ T9883] loop3: detected capacity change from 0 to 1024 [ 148.364404][ T9883] EXT4-fs: Ignoring removed nobh option [ 148.370230][ T9883] EXT4-fs: Ignoring removed bh option [ 148.381200][ T9887] loop4: detected capacity change from 0 to 128 [ 148.383135][ T9890] IPVS: sync thread started: state = BACKUP, mcast_ifn = sit0, syncid = 0, id = 0 [ 148.390895][ T9885] IPVS: stopping backup sync thread 9890 ... [ 148.412761][ T9887] ext4 filesystem being mounted at /569/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 148.423490][ T9885] loop0: detected capacity change from 0 to 128 [ 148.515832][ T9898] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2317'. [ 148.541104][ T9900] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 148.550922][ T9900] SELinux: failed to load policy [ 148.557912][ T9900] loop0: detected capacity change from 0 to 164 [ 148.573373][ T9898] netlink: 84 bytes leftover after parsing attributes in process `syz.3.2317'. [ 148.615993][ T9900] syz.0.2319: attempt to access beyond end of device [ 148.615993][ T9900] loop0: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 148.630762][ T9900] syz.0.2319: attempt to access beyond end of device [ 148.630762][ T9900] loop0: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 148.648404][ T9910] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2321'. [ 148.659367][ T9910] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2321'. [ 148.946659][ T29] kauditd_printk_skb: 240 callbacks suppressed [ 148.946676][ T29] audit: type=1326 audit(1745376910.074:9715): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9920 comm="syz.0.2326" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4a197e169 code=0x7ffc0000 [ 148.976558][ T29] audit: type=1326 audit(1745376910.074:9716): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9920 comm="syz.0.2326" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4a197e169 code=0x7ffc0000 [ 148.999998][ T29] audit: type=1326 audit(1745376910.074:9717): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9920 comm="syz.0.2326" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7fa4a197e169 code=0x7ffc0000 [ 149.023367][ T29] audit: type=1326 audit(1745376910.074:9718): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9920 comm="syz.0.2326" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4a197e169 code=0x7ffc0000 [ 149.046879][ T29] audit: type=1326 audit(1745376910.074:9719): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9920 comm="syz.0.2326" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7fa4a197e169 code=0x7ffc0000 [ 149.070329][ T29] audit: type=1326 audit(1745376910.074:9720): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9920 comm="syz.0.2326" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4a197e169 code=0x7ffc0000 [ 149.093786][ T29] audit: type=1326 audit(1745376910.074:9721): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9920 comm="syz.0.2326" exe="/root/syz-executor" sig=0 arch=c000003e syscall=22 compat=0 ip=0x7fa4a197e169 code=0x7ffc0000 [ 149.117369][ T29] audit: type=1326 audit(1745376910.074:9722): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9920 comm="syz.0.2326" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa4a197e169 code=0x7ffc0000 [ 149.140972][ T29] audit: type=1326 audit(1745376910.074:9723): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9920 comm="syz.0.2326" exe="/root/syz-executor" sig=0 arch=c000003e syscall=275 compat=0 ip=0x7fa4a197e169 code=0x7ffc0000 [ 149.310162][ T9926] loop3: detected capacity change from 0 to 2048 [ 149.570983][ T9939] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 149.587273][ T9939] SELinux: failed to load policy [ 149.594658][ T9939] loop1: detected capacity change from 0 to 164 [ 149.655824][ T9939] syz.1.2332: attempt to access beyond end of device [ 149.655824][ T9939] loop1: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 149.680750][ T9939] syz.1.2332: attempt to access beyond end of device [ 149.680750][ T9939] loop1: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 149.760995][ T9953] netlink: 'syz.4.2336': attribute type 21 has an invalid length. [ 149.777122][ T9949] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2335'. [ 149.817226][ T9956] netlink: 'syz.1.2337': attribute type 39 has an invalid length. [ 149.851852][ T4916] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 149.873497][ T4916] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 149.874488][ T9958] loop4: detected capacity change from 0 to 512 [ 149.886122][ T4916] EXT4-fs (loop3): This should not happen!! Data will be lost [ 149.886122][ T4916] [ 149.902223][ T4916] EXT4-fs (loop3): Total free blocks count 0 [ 149.908213][ T9958] EXT4-fs: Ignoring removed nomblk_io_submit option [ 149.908231][ T4916] EXT4-fs (loop3): Free/Dirty block details [ 149.908246][ T4916] EXT4-fs (loop3): free_blocks=2415919504 [ 149.908260][ T4916] EXT4-fs (loop3): dirty_blocks=16400 [ 149.932259][ T4916] EXT4-fs (loop3): Block reservation details [ 149.938284][ T4916] EXT4-fs (loop3): i_reserved_data_blocks=1025 [ 149.938462][ T9958] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 149.952546][ T9958] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8842c01d, mo2=0102] [ 149.963208][ T9958] EXT4-fs (loop4): couldn't mount RDWR because of unsupported optional features (80) [ 149.972792][ T9958] EXT4-fs (loop4): Skipping orphan cleanup due to unknown ROCOMPAT features [ 149.989025][ T9958] EXT4-fs (loop4): couldn't mount RDWR because of unsupported optional features (80) [ 149.996025][ T4910] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 2050 with max blocks 2048 with error 28 [ 150.011436][ T4910] EXT4-fs (loop3): This should not happen!! Data will be lost [ 150.011436][ T4910] [ 150.048179][ T9968] loop1: detected capacity change from 0 to 1024 [ 150.094803][ T9972] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2343'. [ 150.106811][ T9972] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2343'. [ 150.134693][ T9975] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 150.144720][ T9975] SELinux: failed to load policy [ 150.171478][ T9975] loop4: detected capacity change from 0 to 164 [ 150.277423][ T9985] IPv6: Can't replace route, no match found [ 150.378024][ T9990] netlink: 'syz.4.2350': attribute type 39 has an invalid length. [ 150.383630][ T9992] netlink: 'syz.3.2349': attribute type 21 has an invalid length. [ 150.509360][T10001] loop3: detected capacity change from 0 to 512 [ 150.516663][T10001] EXT4-fs: Ignoring removed nomblk_io_submit option [ 150.524719][T10001] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 150.532801][T10001] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8842c01d, mo2=0102] [ 150.541160][T10001] EXT4-fs (loop3): couldn't mount RDWR because of unsupported optional features (80) [ 150.550757][T10001] EXT4-fs (loop3): Skipping orphan cleanup due to unknown ROCOMPAT features [ 150.560745][T10001] EXT4-fs (loop3): couldn't mount RDWR because of unsupported optional features (80) [ 150.586670][ T29] audit: type=1326 audit(1745376911.714:9724): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9994 comm="syz.4.2351" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde61fae169 code=0x7ffc0000 [ 150.707697][T10006] loop3: detected capacity change from 0 to 1024 [ 150.714619][T10006] EXT4-fs: Ignoring removed nobh option [ 150.720316][T10006] EXT4-fs: Ignoring removed bh option [ 150.771647][T10011] loop3: detected capacity change from 0 to 2048 [ 150.794945][T10013] loop2: detected capacity change from 0 to 256 [ 150.933208][T10019] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 150.943282][T10019] SELinux: failed to load policy [ 150.952311][T10019] loop2: detected capacity change from 0 to 164 [ 151.111313][T10028] IPVS: sync thread started: state = BACKUP, mcast_ifn = sit0, syncid = 0, id = 0 [ 151.120768][T10027] IPVS: stopping backup sync thread 10028 ... [ 151.156674][T10030] netlink: 'syz.1.2361': attribute type 39 has an invalid length. [ 151.212009][T10036] loop1: detected capacity change from 0 to 512 [ 151.225595][T10036] EXT4-fs: Ignoring removed nomblk_io_submit option [ 151.249024][T10036] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 151.257128][T10036] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8842c01d, mo2=0102] [ 151.281691][T10036] EXT4-fs (loop1): couldn't mount RDWR because of unsupported optional features (80) [ 151.291392][T10036] EXT4-fs (loop1): Skipping orphan cleanup due to unknown ROCOMPAT features [ 151.317314][T10036] EXT4-fs (loop1): couldn't mount RDWR because of unsupported optional features (80) [ 151.341096][ T4921] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 151.363883][ T4921] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 151.376556][ T4921] EXT4-fs (loop3): This should not happen!! Data will be lost [ 151.376556][ T4921] [ 151.386522][ T4921] EXT4-fs (loop3): Total free blocks count 0 [ 151.392589][ T4921] EXT4-fs (loop3): Free/Dirty block details [ 151.398494][ T4921] EXT4-fs (loop3): free_blocks=2415919504 [ 151.404380][ T4921] EXT4-fs (loop3): dirty_blocks=16400 [ 151.409844][ T4921] EXT4-fs (loop3): Block reservation details [ 151.416086][ T4921] EXT4-fs (loop3): i_reserved_data_blocks=1025 [ 151.452686][ T4921] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 2050 with max blocks 2048 with error 28 [ 151.465742][ T4921] EXT4-fs (loop3): This should not happen!! Data will be lost [ 151.465742][ T4921] [ 151.630945][T10047] IPVS: stopping backup sync thread 10048 ... [ 151.795485][T10061] IPVS: sync thread started: state = BACKUP, mcast_ifn = sit0, syncid = 0, id = 0 [ 151.906111][T10067] loop0: detected capacity change from 0 to 512 [ 151.914959][T10067] EXT4-fs: Ignoring removed nomblk_io_submit option [ 151.923163][T10067] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 151.931121][T10067] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8842c01d, mo2=0102] [ 151.939236][T10067] EXT4-fs (loop0): couldn't mount RDWR because of unsupported optional features (80) [ 151.948847][T10067] EXT4-fs (loop0): Skipping orphan cleanup due to unknown ROCOMPAT features [ 151.960042][T10067] EXT4-fs (loop0): couldn't mount RDWR because of unsupported optional features (80) [ 152.015211][T10072] loop1: detected capacity change from 0 to 2048 [ 152.178106][T10078] loop0: detected capacity change from 0 to 1024 [ 152.185618][T10078] EXT4-fs: Ignoring removed nobh option [ 152.191410][T10078] EXT4-fs: Ignoring removed bh option [ 152.516222][ T4907] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 152.531583][ T4907] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 152.544160][ T4907] EXT4-fs (loop1): This should not happen!! Data will be lost [ 152.544160][ T4907] [ 152.553852][ T4907] EXT4-fs (loop1): Total free blocks count 0 [ 152.559980][ T4907] EXT4-fs (loop1): Free/Dirty block details [ 152.566022][ T4907] EXT4-fs (loop1): free_blocks=2415919504 [ 152.571870][ T4907] EXT4-fs (loop1): dirty_blocks=16400 [ 152.577278][ T4907] EXT4-fs (loop1): Block reservation details [ 152.583421][ T4907] EXT4-fs (loop1): i_reserved_data_blocks=1025 [ 152.615049][ T4921] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 2050 with max blocks 2048 with error 28 [ 152.627844][ T4921] EXT4-fs (loop1): This should not happen!! Data will be lost [ 152.627844][ T4921] [ 152.743540][T10103] loop2: detected capacity change from 0 to 512 [ 152.751697][T10103] EXT4-fs: Ignoring removed nomblk_io_submit option [ 152.775294][T10103] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 152.783313][T10103] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8842c01d, mo2=0102] [ 152.795720][T10103] EXT4-fs (loop2): couldn't mount RDWR because of unsupported optional features (80) [ 152.805535][T10103] EXT4-fs (loop2): Skipping orphan cleanup due to unknown ROCOMPAT features [ 152.819081][T10103] EXT4-fs (loop2): couldn't mount RDWR because of unsupported optional features (80) [ 152.886902][T10111] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2390'. [ 152.937310][T10115] loop2: detected capacity change from 0 to 1024 [ 152.944388][T10115] EXT4-fs: Ignoring removed nobh option [ 152.950189][T10115] EXT4-fs: Ignoring removed bh option [ 152.997292][T10126] loop1: detected capacity change from 0 to 512 [ 153.011569][T10126] EXT4-fs: Ignoring removed nomblk_io_submit option [ 153.019427][T10126] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 153.027444][T10126] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8842c01d, mo2=0102] [ 153.037346][T10126] EXT4-fs (loop1): couldn't mount RDWR because of unsupported optional features (80) [ 153.046870][T10126] EXT4-fs (loop1): Skipping orphan cleanup due to unknown ROCOMPAT features [ 153.058535][T10126] EXT4-fs (loop1): couldn't mount RDWR because of unsupported optional features (80) [ 153.096725][T10132] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 153.106701][T10132] SELinux: failed to load policy [ 153.131714][T10132] loop2: detected capacity change from 0 to 164 [ 153.147521][T10136] loop1: detected capacity change from 0 to 256 [ 153.194362][T10132] bio_check_eod: 4 callbacks suppressed [ 153.194380][T10132] syz.2.2396: attempt to access beyond end of device [ 153.194380][T10132] loop2: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 153.214283][T10132] syz.2.2396: attempt to access beyond end of device [ 153.214283][T10132] loop2: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 153.245160][T10144] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2400'. [ 153.255188][T10144] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2400'. [ 153.351467][T10153] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2403'. [ 153.494071][T10165] loop1: detected capacity change from 0 to 1024 [ 153.517784][T10165] EXT4-fs: Ignoring removed nobh option [ 153.523475][T10165] EXT4-fs: Ignoring removed bh option [ 153.541146][T10175] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 153.550946][T10175] SELinux: failed to load policy [ 153.562268][T10175] loop4: detected capacity change from 0 to 164 [ 153.631334][T10175] syz.4.2410: attempt to access beyond end of device [ 153.631334][T10175] loop4: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 153.646580][T10175] syz.4.2410: attempt to access beyond end of device [ 153.646580][T10175] loop4: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 153.781780][T10193] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2415'. [ 153.994713][ T29] kauditd_printk_skb: 134 callbacks suppressed [ 153.994808][ T29] audit: type=1326 audit(1745376915.124:9859): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10190 comm="syz.4.2414" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde61fae169 code=0x7ffc0000 [ 154.090214][ T29] audit: type=1326 audit(1745376915.124:9860): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10190 comm="syz.4.2414" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde61fae169 code=0x7ffc0000 [ 154.279745][T10209] netlink: 'syz.4.2420': attribute type 39 has an invalid length. [ 154.331760][ T29] audit: type=1326 audit(1745376915.454:9861): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10204 comm="syz.2.2419" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3f575e169 code=0x7ffc0000 [ 154.355358][ T29] audit: type=1326 audit(1745376915.454:9862): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10204 comm="syz.2.2419" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3f575e169 code=0x7ffc0000 [ 154.378908][ T29] audit: type=1326 audit(1745376915.454:9863): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10204 comm="syz.2.2419" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7ff3f575e169 code=0x7ffc0000 [ 154.402367][ T29] audit: type=1326 audit(1745376915.454:9864): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10204 comm="syz.2.2419" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3f575e169 code=0x7ffc0000 [ 154.425910][ T29] audit: type=1326 audit(1745376915.454:9865): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10204 comm="syz.2.2419" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3f575e169 code=0x7ffc0000 [ 154.449684][ T29] audit: type=1326 audit(1745376915.454:9866): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10204 comm="syz.2.2419" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7ff3f575e169 code=0x7ffc0000 [ 154.473212][ T29] audit: type=1326 audit(1745376915.454:9867): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10204 comm="syz.2.2419" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3f575e169 code=0x7ffc0000 [ 154.496786][ T29] audit: type=1326 audit(1745376915.464:9868): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10204 comm="syz.2.2419" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3f575e169 code=0x7ffc0000 [ 154.582549][T10214] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2422'. [ 154.591698][T10214] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2422'. [ 154.716162][T10219] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 154.726551][T10219] SELinux: failed to load policy [ 154.734303][T10219] loop4: detected capacity change from 0 to 164 [ 154.746226][T10221] loop1: detected capacity change from 0 to 512 [ 154.753554][T10221] EXT4-fs: Ignoring removed nomblk_io_submit option [ 154.762378][T10221] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 154.770345][T10221] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8842c01d, mo2=0102] [ 154.779132][T10221] EXT4-fs (loop1): couldn't mount RDWR because of unsupported optional features (80) [ 154.788727][T10221] EXT4-fs (loop1): Skipping orphan cleanup due to unknown ROCOMPAT features [ 154.792045][T10219] syz.4.2424: attempt to access beyond end of device [ 154.792045][T10219] loop4: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 154.811520][T10219] syz.4.2424: attempt to access beyond end of device [ 154.811520][T10219] loop4: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 154.811984][T10221] EXT4-fs (loop1): couldn't mount RDWR because of unsupported optional features (80) [ 154.866675][T10228] lo speed is unknown, defaulting to 1000 [ 155.327976][T10242] loop4: detected capacity change from 0 to 1024 [ 155.335815][T10242] EXT4-fs: Ignoring removed nobh option [ 155.341494][T10242] EXT4-fs: Ignoring removed bh option [ 155.446736][T10250] loop4: detected capacity change from 0 to 512 [ 155.473317][T10250] EXT4-fs: Ignoring removed nomblk_io_submit option [ 155.517618][T10250] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 155.525685][T10250] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8842c01d, mo2=0102] [ 155.535384][T10250] EXT4-fs (loop4): couldn't mount RDWR because of unsupported optional features (80) [ 155.545019][T10250] EXT4-fs (loop4): Skipping orphan cleanup due to unknown ROCOMPAT features [ 155.580140][T10250] EXT4-fs (loop4): couldn't mount RDWR because of unsupported optional features (80) [ 155.642813][T10253] loop1: detected capacity change from 0 to 512 [ 155.649522][T10253] EXT4-fs: Ignoring removed nomblk_io_submit option [ 155.657682][T10253] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 155.665776][T10253] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8842c01d, mo2=0102] [ 155.674012][T10253] EXT4-fs (loop1): couldn't mount RDWR because of unsupported optional features (80) [ 155.683665][T10253] EXT4-fs (loop1): Skipping orphan cleanup due to unknown ROCOMPAT features [ 155.695509][T10253] EXT4-fs (loop1): couldn't mount RDWR because of unsupported optional features (80) [ 155.817052][T10267] 9pnet_fd: Insufficient options for proto=fd [ 155.939277][T10277] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2443'. [ 156.158040][T10287] loop0: detected capacity change from 0 to 512 [ 156.166306][T10287] EXT4-fs: Ignoring removed nomblk_io_submit option [ 156.174067][T10287] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 156.182070][T10287] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8842c01d, mo2=0102] [ 156.191891][T10287] EXT4-fs (loop0): couldn't mount RDWR because of unsupported optional features (80) [ 156.201460][T10287] EXT4-fs (loop0): Skipping orphan cleanup due to unknown ROCOMPAT features [ 156.215708][T10287] EXT4-fs (loop0): couldn't mount RDWR because of unsupported optional features (80) [ 156.353984][T10307] netlink: 'syz.0.2452': attribute type 39 has an invalid length. [ 156.397758][T10297] lo speed is unknown, defaulting to 1000 [ 156.428612][T10303] loop3: detected capacity change from 0 to 1024 [ 156.452573][T10303] EXT4-fs: Ignoring removed nobh option [ 156.458289][T10303] EXT4-fs: Ignoring removed bh option [ 156.601464][T10319] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2455'. [ 156.623331][T10297] chnl_net:caif_netlink_parms(): no params data found [ 156.649418][T10323] FAULT_INJECTION: forcing a failure. [ 156.649418][T10323] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 156.662596][T10323] CPU: 1 UID: 0 PID: 10323 Comm: syz.0.2456 Not tainted 6.15.0-rc3-syzkaller-00019-gbc3372351d0c #0 PREEMPT(voluntary) [ 156.662628][T10323] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 156.662640][T10323] Call Trace: [ 156.662647][T10323] [ 156.662654][T10323] dump_stack_lvl+0xf6/0x150 [ 156.662682][T10323] dump_stack+0x15/0x1a [ 156.662708][T10323] should_fail_ex+0x261/0x270 [ 156.662737][T10323] should_fail+0xb/0x10 [ 156.662761][T10323] should_fail_usercopy+0x1a/0x20 [ 156.662892][T10323] _copy_from_user+0x1c/0xa0 [ 156.662928][T10323] ucma_write+0xdc/0x250 [ 156.662955][T10323] ? __pfx_ucma_write+0x10/0x10 [ 156.662982][T10323] vfs_write+0x295/0x950 [ 156.663082][T10323] ? putname+0xe1/0x100 [ 156.663174][T10323] ? __fget_files+0x186/0x1c0 [ 156.663197][T10323] ksys_write+0xeb/0x1b0 [ 156.663224][T10323] __x64_sys_write+0x42/0x50 [ 156.663246][T10323] x64_sys_call+0x2a45/0x2e10 [ 156.663280][T10323] do_syscall_64+0xc9/0x1a0 [ 156.663308][T10323] ? clear_bhb_loop+0x25/0x80 [ 156.663332][T10323] ? clear_bhb_loop+0x25/0x80 [ 156.663355][T10323] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 156.663457][T10323] RIP: 0033:0x7fa4a197e169 [ 156.663475][T10323] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 156.663496][T10323] RSP: 002b:00007fa49ffe7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 156.663518][T10323] RAX: ffffffffffffffda RBX: 00007fa4a1ba5fa0 RCX: 00007fa4a197e169 [ 156.663532][T10323] RDX: 0000000000000048 RSI: 0000200000000280 RDI: 0000000000000008 [ 156.663546][T10323] RBP: 00007fa49ffe7090 R08: 0000000000000000 R09: 0000000000000000 [ 156.663609][T10323] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 156.663624][T10323] R13: 0000000000000000 R14: 00007fa4a1ba5fa0 R15: 00007fff0a92da48 [ 156.663648][T10323] [ 156.878169][ T4909] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 156.879821][T10325] loop3: detected capacity change from 0 to 512 [ 156.888523][ T4909] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.910525][T10325] EXT4-fs (loop3): orphan cleanup on readonly fs [ 156.917878][T10325] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.2457: bg 0: block 248: padding at end of block bitmap is not set [ 156.934009][T10325] EXT4-fs error (device loop3): ext4_acquire_dquot:6935: comm syz.3.2457: Failed to acquire dquot type 1 [ 156.946171][T10325] EXT4-fs (loop3): 1 truncate cleaned up [ 156.953197][T10325] EXT4-fs (loop3): warning: mounting fs with errors, running e2fsck is recommended [ 156.953253][T10297] bridge0: port 1(bridge_slave_0) entered blocking state [ 156.953291][T10297] bridge0: port 1(bridge_slave_0) entered disabled state [ 156.970701][T10325] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 156.976839][T10297] bridge_slave_0: entered allmulticast mode [ 156.991811][T10297] bridge_slave_0: entered promiscuous mode [ 157.001468][ T4909] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 157.011827][ T4909] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.023255][T10297] bridge0: port 2(bridge_slave_1) entered blocking state [ 157.030442][T10297] bridge0: port 2(bridge_slave_1) entered disabled state [ 157.037666][T10297] bridge_slave_1: entered allmulticast mode [ 157.045024][T10297] bridge_slave_1: entered promiscuous mode [ 157.068682][T10297] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 157.079617][T10297] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 157.101764][ T4909] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 157.112136][ T4909] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.121992][T10336] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2459'. [ 157.132481][T10297] team0: Port device team_slave_0 added [ 157.139153][T10297] team0: Port device team_slave_1 added [ 157.161424][T10297] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 157.168447][T10297] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 157.195088][T10297] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 157.212046][ T4909] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 157.222571][ T4909] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.234672][T10297] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 157.241685][T10297] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 157.267993][T10297] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 157.296130][T10297] hsr_slave_0: entered promiscuous mode [ 157.302462][T10297] hsr_slave_1: entered promiscuous mode [ 157.308364][T10297] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 157.315970][T10297] Cannot create hsr debugfs directory [ 157.361544][ T4909] bridge_slave_1: left allmulticast mode [ 157.367342][ T4909] bridge_slave_1: left promiscuous mode [ 157.373114][ T4909] bridge0: port 2(bridge_slave_1) entered disabled state [ 157.381362][ T4909] bridge_slave_0: left allmulticast mode [ 157.387107][ T4909] bridge_slave_0: left promiscuous mode [ 157.392866][ T4909] bridge0: port 1(bridge_slave_0) entered disabled state [ 157.470168][ T4909] dvmrp0 (unregistering): left allmulticast mode [ 157.514441][ T4909] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 157.525311][ T4909] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 157.535107][ T4909] bond0 (unregistering): Released all slaves [ 157.619270][ T4909] hsr_slave_0: left promiscuous mode [ 157.628748][ T4909] veth1_macvtap: left promiscuous mode [ 157.634706][ T4909] veth0_macvtap: left promiscuous mode [ 157.651584][ T4909] veth1_vlan: left promiscuous mode [ 157.658054][ T4909] veth0_vlan: left promiscuous mode [ 157.753211][ T4909] team0 (unregistering): Port device team_slave_1 removed [ 157.763184][ T4909] team0 (unregistering): Port device team_slave_0 removed [ 157.957220][T10378] netlink: 'syz.3.2462': attribute type 39 has an invalid length. [ 158.022959][T10297] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 158.035602][T10297] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 158.044671][T10297] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 158.055325][T10297] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 158.065879][T10393] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2463'. [ 158.148438][T10297] 8021q: adding VLAN 0 to HW filter on device bond0 [ 158.161730][T10297] 8021q: adding VLAN 0 to HW filter on device team0 [ 158.185068][ T4916] bridge0: port 1(bridge_slave_0) entered blocking state [ 158.192265][ T4916] bridge0: port 1(bridge_slave_0) entered forwarding state [ 158.223974][ T4913] bridge0: port 2(bridge_slave_1) entered blocking state [ 158.231118][ T4913] bridge0: port 2(bridge_slave_1) entered forwarding state [ 158.285851][T10297] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 158.363336][T10297] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 158.427478][T10429] loop2: detected capacity change from 0 to 1024 [ 158.444691][T10429] EXT4-fs: Ignoring removed nobh option [ 158.450327][T10429] EXT4-fs: Ignoring removed bh option [ 158.540902][T10297] veth0_vlan: entered promiscuous mode [ 158.548778][T10297] veth1_vlan: entered promiscuous mode [ 158.564799][T10297] veth0_macvtap: entered promiscuous mode [ 158.572443][T10297] veth1_macvtap: entered promiscuous mode [ 158.584682][T10463] loop2: detected capacity change from 0 to 1024 [ 158.584952][T10297] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 158.596716][T10463] EXT4-fs: Ignoring removed nobh option [ 158.601589][T10297] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 158.617318][T10463] EXT4-fs: Ignoring removed bh option [ 158.619157][T10297] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 158.634435][T10297] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 158.645109][T10297] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 158.656063][T10297] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 158.665779][T10297] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.674586][T10297] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.683554][T10297] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.692332][T10297] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.759440][T10476] IPv6: Can't replace route, no match found [ 158.770495][T10475] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2471'. [ 158.799475][T10478] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2473'. [ 158.803566][T10480] netlink: 'syz.4.2472': attribute type 39 has an invalid length. [ 158.834166][T10482] loop2: detected capacity change from 0 to 512 [ 158.841907][T10482] EXT4-fs: Ignoring removed nomblk_io_submit option [ 158.860523][T10482] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 158.868490][T10482] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8842c01d, mo2=0102] [ 158.877022][T10482] EXT4-fs (loop2): couldn't mount RDWR because of unsupported optional features (80) [ 158.887001][T10482] EXT4-fs (loop2): Skipping orphan cleanup due to unknown ROCOMPAT features [ 158.896510][T10482] EXT4-fs mount: 56 callbacks suppressed [ 158.896526][T10482] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 158.900700][T10487] loop3: detected capacity change from 0 to 512 [ 158.920685][T10482] EXT4-fs (loop2): couldn't mount RDWR because of unsupported optional features (80) [ 158.923169][T10487] EXT4-fs: Ignoring removed nomblk_io_submit option [ 158.947000][ T3310] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 158.948516][T10487] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 158.964156][T10487] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8842c01d, mo2=0102] [ 158.972383][T10487] EXT4-fs (loop3): couldn't mount RDWR because of unsupported optional features (80) [ 158.982077][T10487] EXT4-fs (loop3): Skipping orphan cleanup due to unknown ROCOMPAT features [ 158.991571][T10487] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 159.010228][T10487] EXT4-fs (loop3): couldn't mount RDWR because of unsupported optional features (80) [ 159.033197][ T3311] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 159.092116][T10490] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2477'. [ 159.178347][T10498] loop1: detected capacity change from 0 to 1024 [ 159.188045][T10498] EXT4-fs: Ignoring removed nobh option [ 159.193759][T10498] EXT4-fs: Ignoring removed bh option [ 159.208122][T10503] FAULT_INJECTION: forcing a failure. [ 159.208122][T10503] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 159.221604][T10503] CPU: 1 UID: 0 PID: 10503 Comm: syz.3.2481 Not tainted 6.15.0-rc3-syzkaller-00019-gbc3372351d0c #0 PREEMPT(voluntary) [ 159.221647][T10503] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 159.221659][T10503] Call Trace: [ 159.221665][T10503] [ 159.221672][T10503] dump_stack_lvl+0xf6/0x150 [ 159.221699][T10503] dump_stack+0x15/0x1a [ 159.221720][T10503] should_fail_ex+0x261/0x270 [ 159.221751][T10503] should_fail+0xb/0x10 [ 159.221770][T10503] should_fail_usercopy+0x1a/0x20 [ 159.221807][T10503] _copy_from_user+0x1c/0xa0 [ 159.221838][T10503] copy_msghdr_from_user+0x54/0x2b0 [ 159.221919][T10503] ? __fget_files+0x186/0x1c0 [ 159.221944][T10503] __sys_sendmsg+0x141/0x240 [ 159.221984][T10503] __x64_sys_sendmsg+0x46/0x50 [ 159.222008][T10503] x64_sys_call+0x26f3/0x2e10 [ 159.222053][T10503] do_syscall_64+0xc9/0x1a0 [ 159.222124][T10503] ? clear_bhb_loop+0x25/0x80 [ 159.222218][T10503] ? clear_bhb_loop+0x25/0x80 [ 159.222286][T10503] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 159.222306][T10503] RIP: 0033:0x7fa3b8cbe169 [ 159.222321][T10503] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 159.222337][T10503] RSP: 002b:00007fa3b7327038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 159.222359][T10503] RAX: ffffffffffffffda RBX: 00007fa3b8ee5fa0 RCX: 00007fa3b8cbe169 [ 159.222373][T10503] RDX: 0000000000000040 RSI: 00002000000007c0 RDI: 0000000000000003 [ 159.222386][T10503] RBP: 00007fa3b7327090 R08: 0000000000000000 R09: 0000000000000000 [ 159.222399][T10503] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 159.222412][T10503] R13: 0000000000000000 R14: 00007fa3b8ee5fa0 R15: 00007ffe6bef07c8 [ 159.222434][T10503] [ 159.245436][T10498] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 159.389251][T10509] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2483'. [ 159.429307][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 159.483808][T10515] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2485'. [ 159.522495][T10519] loop1: detected capacity change from 0 to 512 [ 159.545934][T10519] EXT4-fs: Ignoring removed nomblk_io_submit option [ 159.566678][T10519] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 159.574775][T10519] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8842c01d, mo2=0102] [ 159.583420][T10519] EXT4-fs (loop1): couldn't mount RDWR because of unsupported optional features (80) [ 159.593055][T10519] EXT4-fs (loop1): Skipping orphan cleanup due to unknown ROCOMPAT features [ 159.602430][T10519] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 159.615200][T10519] EXT4-fs (loop1): couldn't mount RDWR because of unsupported optional features (80) [ 159.635338][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 159.722308][ T29] kauditd_printk_skb: 87 callbacks suppressed [ 159.722324][ T29] audit: type=1326 audit(1745376920.854:9953): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10523 comm="syz.3.2489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3b8cbe169 code=0x7ffc0000 [ 159.753473][ T29] audit: type=1326 audit(1745376920.884:9954): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10523 comm="syz.3.2489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7fa3b8cbe169 code=0x7ffc0000 [ 159.762824][T10532] loop1: detected capacity change from 0 to 1024 [ 159.777057][ T29] audit: type=1326 audit(1745376920.884:9955): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10523 comm="syz.3.2489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3b8cbe169 code=0x7ffc0000 [ 159.807092][ T29] audit: type=1326 audit(1745376920.884:9956): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10523 comm="syz.3.2489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7fa3b8cbe169 code=0x7ffc0000 [ 159.807465][T10532] EXT4-fs: Ignoring removed bh option [ 159.830772][ T29] audit: type=1326 audit(1745376920.884:9957): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10523 comm="syz.3.2489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3b8cbe169 code=0x7ffc0000 [ 159.837424][T10532] EXT4-fs: inline encryption not supported [ 159.859545][ T29] audit: type=1326 audit(1745376920.884:9958): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10523 comm="syz.3.2489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=22 compat=0 ip=0x7fa3b8cbe169 code=0x7ffc0000 [ 159.859584][ T29] audit: type=1326 audit(1745376920.884:9959): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10523 comm="syz.3.2489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3b8cbe169 code=0x7ffc0000 [ 159.865435][T10532] EXT4-fs: inline encryption not supported [ 159.888830][ T29] audit: type=1326 audit(1745376920.884:9960): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10523 comm="syz.3.2489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=275 compat=0 ip=0x7fa3b8cbe169 code=0x7ffc0000 [ 159.916965][T10532] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 159.967034][T10532] EXT4-fs error (device loop1): ext4_map_blocks:709: inode #3: block 1: comm syz.1.2491: lblock 1 mapped to illegal pblock 1 (length 1) [ 159.973509][T10535] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2492'. [ 159.990137][T10532] Quota error (device loop1): write_blk: dquota write failed [ 159.997781][T10532] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 160.009541][T10532] EXT4-fs error (device loop1): ext4_acquire_dquot:6935: comm syz.1.2491: Failed to acquire dquot type 0 [ 160.025583][T10537] IPv6: Can't replace route, no match found [ 160.030109][T10532] EXT4-fs error (device loop1): ext4_free_blocks:6587: comm syz.1.2491: Freeing blocks not in datazone - block = 0, count = 4096 [ 160.048782][T10532] EXT4-fs error (device loop1): ext4_read_inode_bitmap:139: comm syz.1.2491: Invalid inode bitmap blk 0 in block_group 0 [ 160.061789][ T4909] EXT4-fs error (device loop1): ext4_map_blocks:675: inode #3: block 1: comm kworker/u8:26: lblock 1 mapped to illegal pblock 1 (length 1) [ 160.070010][T10532] EXT4-fs error (device loop1) in ext4_free_inode:361: Corrupt filesystem [ 160.086519][T10532] EXT4-fs (loop1): 1 orphan inode deleted [ 160.092384][ T4909] EXT4-fs error (device loop1): ext4_release_dquot:6971: comm kworker/u8:26: Failed to release dquot type 0 [ 160.105700][T10532] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 160.135039][T10532] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 160.163850][T10540] loop0: detected capacity change from 0 to 1024 [ 160.178966][T10540] EXT4-fs: Ignoring removed nobh option [ 160.184827][T10540] EXT4-fs: Ignoring removed bh option [ 160.213832][T10540] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 160.256844][ T3314] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 160.269233][T10548] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2496'. [ 160.306487][T10558] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2497'. [ 160.316587][T10558] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2497'. [ 160.378209][T10565] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 160.399150][T10565] SELinux: failed to load policy [ 160.407036][T10565] loop0: detected capacity change from 0 to 164 [ 160.486186][T10573] IPv6: Can't replace route, no match found [ 160.541180][T10577] loop0: detected capacity change from 0 to 512 [ 160.548525][T10577] EXT4-fs (loop0): blocks per group (71) and clusters per group (20800) inconsistent [ 160.702149][T10580] loop4: detected capacity change from 0 to 1024 [ 160.709225][T10580] EXT4-fs: Ignoring removed nobh option [ 160.714932][T10580] EXT4-fs: Ignoring removed bh option [ 160.732732][T10580] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 160.759922][T10297] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 160.799585][T10591] FAULT_INJECTION: forcing a failure. [ 160.799585][T10591] name failslab, interval 1, probability 0, space 0, times 0 [ 160.824953][T10591] CPU: 1 UID: 0 PID: 10591 Comm: syz.1.2511 Not tainted 6.15.0-rc3-syzkaller-00019-gbc3372351d0c #0 PREEMPT(voluntary) [ 160.824983][T10591] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 160.824999][T10591] Call Trace: [ 160.825005][T10591] [ 160.825014][T10591] dump_stack_lvl+0xf6/0x150 [ 160.825048][T10591] dump_stack+0x15/0x1a [ 160.825069][T10591] should_fail_ex+0x261/0x270 [ 160.825098][T10591] should_failslab+0x8f/0xb0 [ 160.825125][T10591] kmem_cache_alloc_node_noprof+0x5c/0x340 [ 160.825161][T10591] ? __alloc_skb+0x10d/0x320 [ 160.825205][T10591] __alloc_skb+0x10d/0x320 [ 160.825229][T10591] netlink_alloc_large_skb+0xad/0xe0 [ 160.825269][T10591] netlink_sendmsg+0x3da/0x720 [ 160.825299][T10591] ? __pfx_netlink_sendmsg+0x10/0x10 [ 160.825435][T10591] __sock_sendmsg+0x140/0x180 [ 160.825474][T10591] ____sys_sendmsg+0x350/0x4e0 [ 160.825587][T10591] __sys_sendmsg+0x1a0/0x240 [ 160.825627][T10591] __x64_sys_sendmsg+0x46/0x50 [ 160.825704][T10591] x64_sys_call+0x26f3/0x2e10 [ 160.825731][T10591] do_syscall_64+0xc9/0x1a0 [ 160.825763][T10591] ? clear_bhb_loop+0x25/0x80 [ 160.825783][T10591] ? clear_bhb_loop+0x25/0x80 [ 160.825803][T10591] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 160.825865][T10591] RIP: 0033:0x7f69efa1e169 [ 160.825884][T10591] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 160.825905][T10591] RSP: 002b:00007f69ee087038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 160.825927][T10591] RAX: ffffffffffffffda RBX: 00007f69efc45fa0 RCX: 00007f69efa1e169 [ 160.825941][T10591] RDX: 0000000020040000 RSI: 00002000000003c0 RDI: 0000000000000008 [ 160.825956][T10591] RBP: 00007f69ee087090 R08: 0000000000000000 R09: 0000000000000000 [ 160.825970][T10591] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 160.825985][T10591] R13: 0000000000000000 R14: 00007f69efc45fa0 R15: 00007ffd5b611a18 [ 160.826026][T10591] [ 161.088789][ T3004] ================================================================== [ 161.097017][ T3004] BUG: KCSAN: data-race in atime_needs_update / inode_set_ctime_current [ 161.105655][ T3004] [ 161.107997][ T3004] write to 0xffff88811f6a9258 of 8 bytes by task 3295 on cpu 1: [ 161.115645][ T3004] inode_set_ctime_current+0x527/0x7a0 [ 161.121139][ T3004] shmem_unlink+0x114/0x170 [ 161.125672][ T3004] vfs_unlink+0x275/0x430 [ 161.130042][ T3004] do_unlinkat+0x257/0x4f0 [ 161.134484][ T3004] __x64_sys_unlink+0x2e/0x40 [ 161.139186][ T3004] x64_sys_call+0x2358/0x2e10 [ 161.143890][ T3004] do_syscall_64+0xc9/0x1a0 [ 161.148518][ T3004] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 161.154438][ T3004] [ 161.156807][ T3004] read to 0xffff88811f6a9258 of 8 bytes by task 3004 on cpu 0: [ 161.164387][ T3004] atime_needs_update+0x2ed/0x3e0 [ 161.169445][ T3004] touch_atime+0x4a/0x350 [ 161.173822][ T3004] do_readlinkat+0x12d/0x210 [ 161.178446][ T3004] __x64_sys_readlink+0x47/0x60 [ 161.183334][ T3004] x64_sys_call+0x2a81/0x2e10 [ 161.188038][ T3004] do_syscall_64+0xc9/0x1a0 [ 161.192566][ T3004] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 161.198497][ T3004] [ 161.200840][ T3004] value changed: 0x0000000068085699 -> 0x000000006808569a [ 161.207971][ T3004] [ 161.210312][ T3004] Reported by Kernel Concurrency Sanitizer on: [ 161.216488][ T3004] CPU: 0 UID: 0 PID: 3004 Comm: udevd Not tainted 6.15.0-rc3-syzkaller-00019-gbc3372351d0c #0 PREEMPT(voluntary) [ 161.228576][ T3004] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 161.238662][ T3004] ==================================================================