last executing test programs: 3m37.601525691s ago: executing program 2 (id=1152): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000001000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000001940)='kmem_cache_free\x00', r0}, 0x18) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)={0x24, 0x1, 0x1, 0x201, 0x0, 0x0, {0x0, 0x0, 0xfffd}, [@CTA_FILTER={0xc, 0x19, 0x0, 0x1, [@CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x5}]}, @CTA_TUPLE_REPLY={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x4040001}, 0x11) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000faffffff850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000000)='kmem_cache_free\x00', r2, 0x0, 0xd4}, 0x18) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r3, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r3, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) sendmsg$BATADV_CMD_GET_MESH(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x55}, 0x4000800) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x49, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket$caif_seqpacket(0x25, 0x5, 0x3) sendmmsg$sock(r6, &(0x7f0000000cc0)=[{{&(0x7f00000003c0)=@ieee802154={0x24, @long={0x3, 0xffff, {0xaaaaaaaaaaaa0202}}}, 0x80, 0x0}}], 0x1, 0x0) fcntl$lock(r5, 0x26, &(0x7f0000000300)={0x0, 0x2, 0xc9, 0x532}) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x16, 0x8, &(0x7f0000000dc0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x33}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r5}, 0x18) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000900)={0x18, 0x7, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000e50003000000000085100000fcffffff250000001000000006000000faffffff95"], &(0x7f0000000140)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x8}, 0x94) open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x8, 0x80, 0x0, 0x4, 0x0, 0x6, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000080), 0xd}, 0x0, 0x0, 0x3, 0x4, 0x7, 0x0, 0x0, 0x0, 0x8, 0x0, 0x80000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 3m37.174598253s ago: executing program 2 (id=1159): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) lseek(0xffffffffffffffff, 0xf9ff100000000000, 0x3) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x100000001}, 0x0, 0x2, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000080)={[{@usrquota}, {@noblock_validity}, {@bh}, {@max_batch_time={'max_batch_time', 0x3d, 0x8c9}}, {@debug}, {@inlinecrypt}]}, 0x6, 0x5fc, &(0x7f0000000c00)="$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") syz_mount_image$ext4(&(0x7f0000000740)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x41, &(0x7f0000000880)={[{@nouser_xattr}, {@nodiscard}, {@usrjquota}, {@grpjquota}, {@grpjquota}, {@minixdf}, {@quota}, {@noload}, {@block_validity}]}, 0x64, 0x51c, &(0x7f0000001740)="$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") syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f00000001c0)='.\x00', 0x1ac8431, &(0x7f00000008c0)=ANY=[], 0x0, 0x0, &(0x7f00000001c0)) r1 = socket(0x10, 0x2, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000280)={r0, &(0x7f0000000200)="33e7f8422a5c840ef4819e944c0e91a6dbea03071e13bb54bdacbac11669f38272c4fd08a36cccb27eff714a07ab0bc76fe18bb98c8250e7359efeb0", &(0x7f0000000240)=""/12, 0x4}, 0x20) connect$inet6(r2, &(0x7f0000000340)={0xa, 0x5, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0xfffffffe}, 0x1c) close_range(r1, r2, 0x0) accept4$phonet_pipe(r1, &(0x7f0000000000), &(0x7f0000000180)=0x10, 0x800) 3m36.869897913s ago: executing program 2 (id=1167): openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = syz_io_uring_setup(0x49a, &(0x7f00000000c0)={0x0, 0x79af, 0x3180, 0x8000, 0x40024e}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r1, r2, 0x0) io_uring_enter(r0, 0x627, 0x4c1, 0x43, 0x0, 0x30) 3m36.70159359s ago: executing program 2 (id=1170): r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000000000000640000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000700)='f2fs_map_blocks\x00', r1}, 0x18) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="b80000000001010400000000000000000a0000003c0001802c0001801400030000000000000000000000ffffac1414aa14000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300ff02000000000000000000000000000114000400fe8000000000000000000000000000aa0c0002800500010000000000080007400000000008000480040003801c000f800800014000000000080002"], 0xb8}}, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000004c0)={{{@in6=@remote, @in=@multicast1}}, {{@in6=@private1}, 0x0, @in6=@local}}, &(0x7f00000000c0)=0xe8) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000005000000020000000410"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000000c0)='kmem_cache_free\x00', r5}, 0x18) socket$inet6_tcp(0xa, 0x1, 0x0) io_setup(0x6, &(0x7f0000000300)=0x0) io_submit(r6, 0x1, &(0x7f0000000200)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x80000000}]) io_getevents(r6, 0x1, 0x1, &(0x7f0000001340)=[{}], 0x0) syz_mount_image$ext4(&(0x7f00000002c0)='ext2\x00', &(0x7f00000001c0)='./file0\x00', 0x810703, &(0x7f0000000140)={[], [{@smackfstransmute={'smackfstransmute', 0x3d, '\'-[-$'}}]}, 0x2, 0x48d, &(0x7f0000001100)="$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") r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYRES64], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000400)={@cgroup, 0x26, 0x0, 0x1, &(0x7f0000000140)=[0x0, 0x0, 0x0], 0x3, 0x0, &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000003c0)=[0x0, 0x0, 0x0], 0x0}, 0x40) r9 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000480)='syz0\x00', 0x200002, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000000c0)=ANY=[@ANYRES32=r9, @ANYRES32=r7, @ANYRES32=r7, @ANYBLOB, @ANYRES64=r8], 0x20) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000100)={@fallback=r2, r1, 0x0, 0x10, 0x0, @void, @value=r0, @void, @void, r8}, 0x20) socket$nl_generic(0x10, 0x3, 0x10) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000006c0)='kfree\x00', r11}, 0x18) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r12, &(0x7f0000000480)={0x0, 0xffffffffffffff3c, &(0x7f0000000140)={&(0x7f00000002c0)={0x14, r13, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@void, @void}}}, 0x14}}, 0x0) 3m35.79296169s ago: executing program 2 (id=1188): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f0000000980)='sys_enter\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000f80)=ANY=[@ANYBLOB="0500000004000000080000000b"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001400)={0x18, 0x5, &(0x7f0000000080)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000340)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41100, 0x16, '\x00', 0x0, 0x2}, 0x94) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r4}, 0x10) mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x21, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000480)='kfree\x00', r3, 0x0, 0x7fffffffffffffff}, 0x18) mount(0x0, &(0x7f0000000240)='.\x00', 0x0, 0x2200020, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r6, 0x40086602, &(0x7f00000002c0)=0x20) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000d00)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000002000000850000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000800)={r0, 0x58, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000001280)={0x1, 0x14, &(0x7f0000001340)=ANY=[@ANYBLOB="1800000026cf6467c63fe2e0910a11bdf6780a0660dde8ec9363096e1df7eeb223f16fd0e8059568", @ANYRES32=r7, @ANYBLOB="0000000000000000b7020000000000008500000086000000d44a0100080000006aa20001000000007d81000001000000258a0001fcffffff7793e0ff01000000182a0000", @ANYRES32=r6, @ANYBLOB="000000000100010018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000085000000870000009500000000000000"], &(0x7f0000000200)='syzkaller\x00', 0xb5, 0xc0, &(0x7f0000000600)=""/192, 0x41100, 0x40, '\x00', r8, @fallback=0x11, 0xffffffffffffffff, 0x8, &(0x7f0000000840)={0x6, 0x5}, 0x8, 0x10, &(0x7f00000008c0)={0x4, 0xb, 0x1, 0x4}, 0x10, 0x0, r4, 0x9, &(0x7f0000000900)=[r2, r5, r6, r0, r0, r2, r6, r0, r0, r2], &(0x7f00000011c0)=[{0x3, 0x5, 0xc, 0x7}, {0x5, 0x3, 0x2, 0x3}, {0x4, 0x5, 0x2, 0xa}, {0x3, 0x5, 0xd, 0x1e}, {0x2, 0x4, 0x10, 0xa}, {0x0, 0x4, 0x10, 0x3}, {0x2, 0x3, 0x6, 0xa}, {0x3, 0x2, 0x1, 0x7}, {0x3, 0x2, 0x1, 0xa}], 0x10, 0x3}, 0x94) 3m35.683662911s ago: executing program 2 (id=1189): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="180100000100a7d9000000000020b200850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xb904}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r1, 0x1, 0xe, &(0x7f0000000040), 0x3b) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) syz_clone(0x8d002240, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0}) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0x4e20, @broadcast}, 0x10, 0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000007000000890704e000006a001c000000000000000000000008000000", @ANYRES32], 0x38}, 0x4044080) r2 = syz_io_uring_setup(0x5c6, &(0x7f0000000140)={0x0, 0x1, 0x0, 0x4}, &(0x7f0000000300)=0x0, &(0x7f0000000580)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000004c0)=@IORING_OP_TIMEOUT={0xb, 0x18, 0x0, 0x0, 0x4, &(0x7f0000000280)={0x0, 0x989680}, 0x1, 0x40, 0x1}) io_uring_enter(r2, 0x6e2, 0x3900, 0x1, 0x0, 0xe00) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000002c0)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='kfree\x00', r5, 0x0, 0x2}, 0x18) socket$nl_netfilter(0x10, 0x3, 0xc) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) pipe(&(0x7f0000000400)={0xffffffffffffffff}) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) splice(r6, 0x0, r7, 0x0, 0x88000cc, 0x0) 3m20.628709928s ago: executing program 32 (id=1189): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="180100000100a7d9000000000020b200850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xb904}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r1, 0x1, 0xe, &(0x7f0000000040), 0x3b) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) syz_clone(0x8d002240, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0}) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0x4e20, @broadcast}, 0x10, 0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000007000000890704e000006a001c000000000000000000000008000000", @ANYRES32], 0x38}, 0x4044080) r2 = syz_io_uring_setup(0x5c6, &(0x7f0000000140)={0x0, 0x1, 0x0, 0x4}, &(0x7f0000000300)=0x0, &(0x7f0000000580)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000004c0)=@IORING_OP_TIMEOUT={0xb, 0x18, 0x0, 0x0, 0x4, &(0x7f0000000280)={0x0, 0x989680}, 0x1, 0x40, 0x1}) io_uring_enter(r2, 0x6e2, 0x3900, 0x1, 0x0, 0xe00) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000002c0)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='kfree\x00', r5, 0x0, 0x2}, 0x18) socket$nl_netfilter(0x10, 0x3, 0xc) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) pipe(&(0x7f0000000400)={0xffffffffffffffff}) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) splice(r6, 0x0, r7, 0x0, 0x88000cc, 0x0) 1m21.683410201s ago: executing program 4 (id=3493): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000040)={0x30, r3, 0x1, 0xffffffff, 0x0, {{}, {}, {0x14, 0x19, {0xfffffffe, 0x9}}}}, 0x30}}, 0x0) 1m21.664893393s ago: executing program 4 (id=3494): r0 = socket$tipc(0x1e, 0x5, 0x0) connect$tipc(r0, &(0x7f0000000080)=@id={0x1e, 0x3, 0x2, {0x4e22}}, 0x10) bind$tipc(r0, &(0x7f0000000140)=@nameseq={0x1e, 0x1, 0x0, {0x41, 0x0, 0x4000000}}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r1, &(0x7f0000000240)={&(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, 0x0}, 0x20001) 1m20.816647487s ago: executing program 4 (id=3510): mremap(&(0x7f000000d000/0x2000)=nil, 0xfffffffffffffe74, 0x1000, 0x3, &(0x7f0000007000/0x1000)=nil) 1m20.759334132s ago: executing program 4 (id=3512): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x1000410, &(0x7f00000002c0)={[{@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@grpquota}]}, 0x4, 0x4f2, &(0x7f0000000c80)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0, 0x28) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=@newtaction={0x14, 0x1c, 0x1, 0x70bd27, 0x8000000, {0x0, 0x0, 0x1300}}, 0x14}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000002d40)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r3, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001040)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32], 0xa0}, 0x4004881) socket$nl_route(0x10, 0x3, 0x0) r4 = fsopen(&(0x7f0000000140)='ramfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) socketpair$tipc(0x1e, 0x4, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000040)="fb", 0x1}], 0x1, 0x0, 0x0, 0x4000800}, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000000)={0x0, 0x3}, &(0x7f0000000080)=0xc) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000000)={0x0, 0xffffba97}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000300)={0x0, 0xd}, 0x8) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000200)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r7, 0x0, 0x0, 0x0, 0x0, 0xffffff99}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x18, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000660000000000"], 0x0, 0x7ff, 0x0, 0x0, 0x41100}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) keyctl$set_reqkey_keyring(0xe, 0x4) request_key(&(0x7f0000000340)='asymmetric\x00', &(0x7f0000000080)={'syz', 0x3}, &(0x7f0000000380)=')\x80', 0x0) setreuid(0x0, 0xee00) setresuid(0x0, 0x0, 0x0) r8 = syz_clone(0x1b4a100, 0x0, 0x0, 0x0, 0x0, 0x0) r9 = syz_pidfd_open(r8, 0x0) process_madvise(r9, 0x0, 0x0, 0x14, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000080)={0x40000009, 0xe74e, 0x80000006, 0x10009, 0x9, 0xed}) 1m20.452655033s ago: executing program 4 (id=3513): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x1) r1 = socket(0x40000000015, 0x5, 0x0) connect$inet(r1, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) bind$inet(r1, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x0, 0x0, 0x0) sendto$inet(r1, 0x0, 0x0, 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f00000003c0)={0x0, 0x1}, &(0x7f0000000400)=0x8) setsockopt$inet_sctp_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f00000008c0)=@assoc_id=r2, 0x4) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) syz_mount_image$msdos(&(0x7f0000000000), &(0x7f00000004c0)='./file0\x00', 0x80c406, &(0x7f0000000500)=ANY=[@ANYBLOB="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", @ANYRES16=0xffffffffffffffff, @ANYRES16], 0xff, 0x2b1, &(0x7f0000000100)="$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") bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe89}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r4}, 0x10) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='kfree\x00', r6, 0x0, 0x2}, 0x18) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) r8 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r8, &(0x7f00000004c0)=ANY=[@ANYBLOB="33fe0000660091ef"], 0xfe33) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="0e00000004000000080000000800000000000000", @ANYRES32, @ANYBLOB="0000000000000000000000000600000000000000aa49a9b0684709cd50134b734991be2f73ed53bb3daf0d8c9f0847b57cc1ba5de605150a32fb92d571d1ae687bf5c1edbcacda982d6b9de0babb4cc8015bb6", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000ac0)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0xc014}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000a00)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc0800034000000014400000000c0a01011d000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xac}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) close(r7) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x52, &(0x7f00000001c0)}) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x9) r10 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r10, 0x5423, &(0x7f00000002c0)=0x1) close_range(r9, 0xffffffffffffffff, 0x0) 1m20.064761532s ago: executing program 4 (id=3518): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) perf_event_open(&(0x7f00000000c0)={0x3, 0x80, 0x65, 0xfa, 0x5, 0x0, 0x0, 0x100007, 0x88008, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc46, 0x4, @perf_config_ext={0x3, 0x3ff}, 0x212, 0xd, 0x7ffffefc, 0x3, 0x1, 0x0, 0x8, 0x0, 0xfc, 0x0, 0x1}, 0x0, 0x400000000007, 0xffffffffffffffff, 0x3) r1 = syz_init_net_socket$llc(0x1a, 0x802, 0x0) bind$llc(r1, &(0x7f0000000000)={0x1a, 0x0, 0x1, 0x3, 0x3, 0x4a}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000080000000c"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000000000000000000000080021850000006d00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000240)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x0, 0x1}, 0x50) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'team_slave_1\x00', 0x0}) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x6, [@float={0x5, 0x0, 0x0, 0x10, 0x10}]}, {0x0, [0x2e, 0x0, 0x0, 0x2e]}}, &(0x7f0000000540)=""/131, 0x2a, 0x83, 0x0, 0x7, 0x10000}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0x15, 0xffffffff, 0xe, 0x3, 0x2, r3, 0x5, '\x00', r4, r5, 0x5, 0x5, 0x5}, 0x50) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0x2, 0x1000000000000002, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f00000001c0)) socket$inet6(0xa, 0x3, 0xff) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={0xffffffffffffffff, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000014c0)=@newtaction={0x68, 0x30, 0xb, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x6a00}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x6, 0xff, 0x4, 0x6, 0x6}, 0x4, r7}}]}, {0x4, 0xa}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x2000a804) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="200000001100010100"/20, @ANYRES32=r7], 0x20}, 0x1, 0x0, 0x0, 0x80d5}, 0x0) 1m20.050025103s ago: executing program 33 (id=3518): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f00000008c0)=ANY=[@ANYBLOB="050000000000000061110c00000000008510000002000000850000000500000095000000000000009500a5050000000077d8f3b423cdac8d80000e868495fb58d00b6ad1f50ad32d6ad25dfd73a015e0ca6a0f68a7d007dc6751dfb265a0e3ccae669e173a64bc1cfd514600650a58f145ff1205fc9ddaa275e687d452d64e7cc957d77578f4c25235138d5521f9453559c35da860e8efbc64e57cbb7aee976f2b54421eed73d5661cfeecf9c66c54c3b3ffe1b4ce25d7c983cd44c05bd0a48dfe3e26e7a23129d6606ed28a69989d552af6d9a9df2c3af36e0360070011bbecc2f4a3799af2551ce935b0f327cb3f011a7d06602e2fd5234712596b696418f163d1a1a83109753f54b21cd027edd68149ee99eebc6f7d6dd4aed4af7588c8e1b44ccb19e810879b81a7000000e7ffffff00000000d7900a820b63278f4e9a217b98ef7042ad2a928903000000cbe43a1ed25268816b00000000000009d27d753a30a147b24a48435bd8a568669596e9e0867958e1dd7a0defb6670c06054002238260000000000040587c1ed797aa21a38e1e389f640a0b8b0000000000a835ad0f61ba739cd0c31b05c00fba8a4aee676d7caa2e53b91a68ff2e60da7b01a2e5785a238afa4aba70c08b0d71b6f72d6a8d87fb08533d97ad96d3943c4cc8306dac433a5cdf78b04963d679d5a5d07e618a1ef9057fec00f9e93021f5a8d30e716de8cde9c6000000000c3b64d10f0939b42b33ab2a8717096c58bb3bb1d457d8bb96870f5a7e2ba31fd69bb80235d957eaa9a40b764e5381ffa604aaafb76a980e72b408f686b185736693089213b4e140f8f38e5589663115093889deb646122a5dc5a9e5ba4d37749a36b880110e2bf524b79bc91105f1d3f7d0de694a9417d68694f17ba5e27ea1cec518b93fadcfe0de010ae9be3273ff73c34b5695080a35bfa5c69e3b533e1b939c81b3beda037b7191cb0000000000000000000010e5d683b8938db5c305cf7e6e62a6890ba9e1f4ee64f8202b59de5036569febfaa95f4633db108b2f786333ec7bacc927f4a1785165b5d2444b4c022bb5cff472e6a0c8ee9d6d8df83b704669147b732ac508c9b9f0ca0a1ce45319d43d4643eb285835daf2065b57bebd61ad6671296c27253a5f9688d57c91ccd40ffe2dbc5dd1613a2e6f5b363cc8d205ce6ef3c3c6ded7dd3dfdb39008d8997213f68cdc971c1d6fdacb7729a5560880a77525e9cfb94ef1735dfe74e6b948697f7e3580436b532a82e315d56b17a5dba98436cc24babaae409f0aab0b40af116001bc85492455956e853ead08b5793d4ecf72378a3dfd9cc837b1c66212d9a2be8fd6341c2f837c7fe09924a51ec42912856cce3d3b2d092c80813aad03e1e63a655f4138730f302df339f30a4fbd453c9a0fba381d071ad7cb80a52bec572e29b0b9b55c235806b97e166609f8083ce776075c"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) perf_event_open(&(0x7f00000000c0)={0x3, 0x80, 0x65, 0xfa, 0x5, 0x0, 0x0, 0x100007, 0x88008, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc46, 0x4, @perf_config_ext={0x3, 0x3ff}, 0x212, 0xd, 0x7ffffefc, 0x3, 0x1, 0x0, 0x8, 0x0, 0xfc, 0x0, 0x1}, 0x0, 0x400000000007, 0xffffffffffffffff, 0x3) r1 = syz_init_net_socket$llc(0x1a, 0x802, 0x0) bind$llc(r1, &(0x7f0000000000)={0x1a, 0x0, 0x1, 0x3, 0x3, 0x4a}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000080000000c"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000000000000000000000080021850000006d00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000240)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x0, 0x1}, 0x50) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'team_slave_1\x00', 0x0}) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x6, [@float={0x5, 0x0, 0x0, 0x10, 0x10}]}, {0x0, [0x2e, 0x0, 0x0, 0x2e]}}, &(0x7f0000000540)=""/131, 0x2a, 0x83, 0x0, 0x7, 0x10000}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0x15, 0xffffffff, 0xe, 0x3, 0x2, r3, 0x5, '\x00', r4, r5, 0x5, 0x5, 0x5}, 0x50) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0x2, 0x1000000000000002, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f00000001c0)) socket$inet6(0xa, 0x3, 0xff) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={0xffffffffffffffff, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000014c0)=@newtaction={0x68, 0x30, 0xb, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x6a00}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x6, 0xff, 0x4, 0x6, 0x6}, 0x4, r7}}]}, {0x4, 0xa}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x2000a804) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="200000001100010100"/20, @ANYRES32=r7], 0x20}, 0x1, 0x0, 0x0, 0x80d5}, 0x0) 2.91895406s ago: executing program 5 (id=4785): r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) write$selinux_attr(r0, &(0x7f0000000100)='system_u:object_r:hugetlbfs_t:s0\x00', 0x1d) socket$netlink(0x10, 0x3, 0x12) sendmsg$DEVLINK_CMD_RATE_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x34, 0x0, 0x8, 0x70bd2b, 0x25dfdbfd, {}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x40) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000540)={0x3, 0x0, 0x0, 'queue1\x00'}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000500)='syzkaller\x00', 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='kmem_cache_free\x00', r4, 0x0, 0x800000000006}, 0x18) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, 0x0, 0x24000850) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) close(0xffffffffffffffff) socket$unix(0x1, 0x1, 0x0) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) sendto$inet(r2, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvfrom$inet(r2, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) 2.879927674s ago: executing program 6 (id=4787): r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000000000000640000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x3c}}, 0x0) 2.786037713s ago: executing program 6 (id=4789): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x30}, [@alu={0x4, 0x0, 0x7, 0x0, 0x0, 0x1, 0xffffffffffffffff}]}, &(0x7f00000002c0)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r0, 0x0, 0x33, &(0x7f0000000000)=0x80020000, 0x4) listen(r0, 0x2) syz_emit_ethernet(0x3a, &(0x7f00000004c0)={@local, @random="6cf6566994c6", @val={@void, {0x8100, 0x0, 0x0, 0x1}}, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x2d, 0x28, 0x0, 0x0, 0xa3, 0x6, 0x0, @remote, @local}, {{0x4e22, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r1, &(0x7f0000000180), 0x40010) r2 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000000000000640000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, &(0x7f00000000c0)) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) io_setup(0x6, 0x0) io_submit(0x0, 0x1, &(0x7f0000000040)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x80000000}]) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000680)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0700000000000000000005000000180001801400020073797a5f74756e0000000000000000000800038004000380080005"], 0x3c}}, 0x0) r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000005c0)='blkio.throttle.io_service_bytes\x00', 0x275a, 0x0) flistxattr(r6, 0x0, 0x0) move_mount(r1, &(0x7f0000000040)='./file0\x00', r6, &(0x7f0000000080)='./file0\x00', 0x100) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r7}, &(0x7f0000000000), &(0x7f0000000180)}, 0x20) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='fib_table_lookup\x00', r8}, 0x10) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000140)="5500000018007f5f00fe01b2a4a2809302060000ff41fd01020400000a00120002002800000019002d007fffffff0022de1330d54400009b84136ef75afb83de066a5900e1baac968300000000f2ff000001000000", 0x55}], 0x1, 0x0, 0x0, 0x7a000000}, 0x0) ioctl$TIOCSERGETLSR(r1, 0x5459, &(0x7f00000000c0)) 2.738104318s ago: executing program 6 (id=4791): r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000000000000640000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000700)='f2fs_map_blocks\x00', r1}, 0x18) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="b80000000001010400000000000000000a0000003c0001802c0001801400030000000000000000000000ffffac1414aa14000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300ff02000000000000000000000000000114000400fe8000000000000000000000000000aa0c0002800500010000000000080007400000000008000480040003801c000f800800014000000000080002"], 0xb8}}, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000004c0)={{{@in6=@remote, @in=@multicast1}}, {{@in6=@private1}, 0x0, @in6=@local}}, &(0x7f00000000c0)=0xe8) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000005000000020000000410"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000000c0)='kmem_cache_free\x00', r5}, 0x18) socket$inet6_tcp(0xa, 0x1, 0x0) io_setup(0x6, &(0x7f0000000300)=0x0) io_submit(r6, 0x1, &(0x7f0000000200)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x80000000}]) io_getevents(r6, 0x1, 0x1, &(0x7f0000001340)=[{}], 0x0) syz_mount_image$ext4(&(0x7f00000002c0)='ext2\x00', &(0x7f00000001c0)='./file0\x00', 0x810703, &(0x7f0000000140)={[], [{@smackfstransmute={'smackfstransmute', 0x3d, '\'-[-$'}}]}, 0x2, 0x48d, &(0x7f0000001100)="$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") bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYRES64], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000400)={@cgroup, 0x26, 0x0, 0x1, &(0x7f0000000140)=[0x0, 0x0, 0x0], 0x3, 0x0, &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000003c0)=[0x0, 0x0, 0x0], 0x0}, 0x40) openat$cgroup(0xffffffffffffffff, &(0x7f0000000480)='syz0\x00', 0x200002, 0x0) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x20) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000100)={@fallback=r2, r1, 0x0, 0x10, 0x0, @void, @value=r0, @void, @void, r7}, 0x20) socket$nl_generic(0x10, 0x3, 0x10) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000006c0)='kfree\x00', r9}, 0x18) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r10, &(0x7f0000000480)={0x0, 0xffffffffffffff3c, &(0x7f0000000140)={&(0x7f00000002c0)={0x14, r11, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@void, @void}}}, 0x14}}, 0x0) 2.665197275s ago: executing program 5 (id=4794): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0], 0x0}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='9p_protocol_dump\x00', r1}, 0x10) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000040), 0x200080, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@version_9p2000}]}}) 2.559924836s ago: executing program 5 (id=4797): socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001cc0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = syz_io_uring_setup(0x74d, &(0x7f00000003c0)={0x0, 0x7591, 0x800, 0x1, 0x3b2}, &(0x7f0000000340), &(0x7f0000000380)) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x8, 0x0, 0xffffffff}, 0x10) r1 = socket(0x1e, 0x4, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bind$bt_hci(r1, &(0x7f00000001c0)={0x1f, 0x0, 0x4}, 0x6) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='9p_protocol_dump\x00', r3}, 0x10) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000040), 0x200080, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[{@version_9p2000}]}}) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00'}, 0x18) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100001df00000000000000000000000a20000000000a03000000000000000000070000000900010073797a300000000068000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a300000000008000540000000212c00"], 0xf8}, 0x1, 0x0, 0x0, 0x4000}, 0x0) io_uring_enter(r0, 0x749f, 0x4, 0x0, 0x0, 0xfffffffffffffef5) 2.461229185s ago: executing program 5 (id=4798): r0 = socket$l2tp6(0xa, 0x2, 0x73) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r2, 0x0, 0x3}, 0x18) setsockopt$inet6_opts(r0, 0x29, 0x39, &(0x7f0000000280)=ANY=[@ANYBLOB="1b0204"], 0x18) 2.362870005s ago: executing program 5 (id=4800): bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f0000000600)='./file0\x00', 0x10000, &(0x7f0000000640), 0x1, 0x5c5, &(0x7f0000001a00)="$eJzs3VuIXHcdB/Dfmd1Jc9mai63aGpvVUFso3dlsNiERHyzxUmtSK4oPoRCW7HQ3ZHZnzW6gOxVM8UUURPBFBKFiH6yIBvJSKbV9aPFFQakXKhoDKohQtFIQQZ3yn8t22pw0pXs5JOfzgTP7P/9zZv7/2eE755w5twBKazQ9ZBEjEXEhIrZ3R18/w2j3T2v/+dk0ZNFuf/YfWWe+6f3nZ/uz9p+3LT0MR2yOiF1HsthbvbzdxeXW6alGo36mN15bmluoLS637j41NzVTn6nPHzg0eXji4OShybV7r+O/2HrzX2+//9Ljz/37v9/53cEfpf6O9KYNvo+1Mhqjvf9JNXYO1A9nEfetdWMFGep+1HH7QF02XGCHeMva7V0/TJ/fOyNibyf/22Mouh/ei089+K/t8Zt7i+4jsH7affmTX24Pqg4+AbjWVTrrwFllLCK65UplbKy7Dn9TbK00motLdz3UPDs/3V1X3hHVykOnGvXx3rbCjqhmaXxfp/za+MQbxvdHdNaBvzK0pTM+drLZmN7oLzugYyTi4oUvnNy07Q35/9tQN//A9Svl/9fPP/lMKr8yVHRvgI2U8v+DV+Y+FfIPpSP/UF7yD+Ul/1Be8g/lJf9QXvIP5SX/UF7yD+Ul/1Be/fw/cOxYPHDsWLvVO/99vjlz6vTswuGJ8bG5syfHTjbPLIzNNJsznTN25q7+uo1mc2HfRJx9uLZUX1yqLS63Tsw1z84vneic13+innMpAKAAxy9tvm/nnmdfzCLi3Ie2dIZkU2+6rML1rd3OnNIPJWXTH8rLpdqgvGzjA9lVpm++0oTG2vcF2BiVojsAFOaOW+z/g7Ly+z+Ul9//obze7jp+FnFujbsCFMTv/1A+fv+H8hq5wv2/bhy4d9d4RLwjIn4+VL2hf68v4Jryuk39kYiLF7/3+drKfbgVFBQUVgrFfVEBG+O10BfdE6Ao0/vPz/aHjWrz6ZmNagnI89I93YOAUu5bvaE7ZXhl30B1nY4T2nlbevzJHx+7c3YoDdH7HlqHpoAc5x6NiPfkLf+zzr6BHb35dnVni5si4uaIeFdEvHuVbX/rMxGj8Xx9sE7+YeO81fzfEhFpcX1rRLw3InZHxPtW2favLqT8/3bLYJ38Qzl88bmiewAU5ZNPFt0DoCjHHWMApfX9R4ruAVCUp35cdA+Aonz9haJ7AOX27D0RMZ63/6/S2d/fV+1dF/CG3rUAtkTE1ojY1juH8MbeOYLbB/YZXs2JT0eMxm0/Hayz/w82Tv/4v9Zlx/9VVo7/G4qIPato4+kPj3wtr35qd8r/44/0j/9LQ2q/fywgsL5eejTi1tz8ZyvH/GaRchrx/rfZxuiXLj2RV//C/el1q7+UfyhG+7sRH4z8/PelUm1pbqG2uNy6u3Mf75n6/IFDk4cnDk4emqx1LhFS618oJMfRf758V179HyZS/r99QP6hGGn5v/UK+R9c///AKto48s2vHs+rH/lzyv/uZ948/5W/b8o+1xnv35fg4amlpTP7IjZlRy+vn1hFR+E6189IP0Mp/3fuzd/+39V7Tlr+H4mIj6b1hYj4X0T8PyI+FhEfj4hPRMS9b9LmN+6YuZRX/6cnUv4fO235D8VI+Z++yvI//f3PKtrYHD/7cl79R/ak/I/9/i9HHxxOg/wDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAArL3F5dbpqUajfmYdC0W/RwAAAAAAACiLVwMAAP//Oacv4Q==") bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000001a80)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) sendmsg$NFT_MSG_GETRULE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=ANY=[@ANYBLOB], 0x38}, 0x1, 0x0, 0x0, 0x20040850}, 0x44054) socket$inet6(0x10, 0x3, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000000800000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, 0x2}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000940)=ANY=[@ANYBLOB="1000000004000000040000000200000000000000", @ANYRES32=0x1, @ANYBLOB='\x00@\x00\x00\f'], 0x50) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="38000000031401002dbd7000000000000900020073797a30000000000800410073697700140033006c6f"], 0xffaf}, 0x1, 0x0, 0x0, 0x854}, 0x804) r4 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r4, &(0x7f0000000140), 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRESHEX=r2], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) epoll_create1(0x80000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000180)=@file={0x0, './bus\x00'}, 0x6e) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0}, 0x94) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000580)={@un=@abs={0x0, 0x0, 0x4e22}, {&(0x7f00000003c0)=""/14, 0xe}, &(0x7f0000000380), 0x8}, 0xa0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) r8 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r6, &(0x7f0000000040)={0x86c9460748f085ce}) r9 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x29, 0x7fff0000}]}) close_range(r9, 0xffffffffffffffff, 0x0) 2.070683874s ago: executing program 5 (id=4804): bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_bp={0x0, 0x5}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x2, 0x0, 0x3, 0xfffffffffffffffd, 0x3, 0x8, 0x0, 0xe}, 0x0, &(0x7f0000000300)={0x3ff, 0x7e7, 0x0, 0x9, 0x4, 0x0, 0x7fffffff, 0x3f8}, 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480), 0x4) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00'}, 0x18) request_key(&(0x7f0000002740)='asymmetric\x00', &(0x7f0000002780)={'syz', 0x3}, &(0x7f00000027c0)=',*[\\/&)\x00', 0xffffffffffffffff) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x80, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xf) ioctl$TCFLSH(r0, 0x400455c8, 0x0) syz_usb_connect(0x2, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x1b) 1.81184356s ago: executing program 6 (id=4815): syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./bus\x00', 0x42, 0x61) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) sendfile(r1, r0, 0x0, 0x3ffff) sendfile(r1, r0, 0x0, 0x7ffff000) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1d, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.665477584s ago: executing program 6 (id=4820): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000004700)={'team0\x00', 0x0}) socket$key(0xf, 0x3, 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000080)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r4, 0x107, 0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x1, @perf_config_ext={0x8, 0x6}, 0x120, 0x10000, 0x33f8, 0x1, 0x8, 0x20007, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x40000, 0x0) fcntl$notify(r5, 0x402, 0x1a) sendmmsg(0xffffffffffffffff, &(0x7f0000000180), 0x4000190, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r7 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r7}, &(0x7f0000000100)=0x0) flock(r6, 0x10) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7020000111e6ca5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000085000000b70000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x7, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='kmem_cache_free\x00', r9, 0x0, 0x1}, 0x18) r10 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0) read$qrtrtun(r10, 0x0, 0xeffd) r11 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r11, 0x5423, &(0x7f0000000040)=0x1) ioctl$TCSETS(r11, 0x89f0, &(0x7f00000000c0)={0x2, 0x0, 0x0, 0x81, 0x0, "5dee470000000000000000000000000c00"}) timer_settime(r8, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f00000047c0)={0x60, r2, 0x405, 0x70bd2b, 0x25dfdbfe, {}, [{{0x8, 0x1, r3}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x44084) 1.602667101s ago: executing program 1 (id=4821): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0xc, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) r1 = io_uring_setup(0x7fc0, &(0x7f0000000000)={0x0, 0x3, 0x40}) io_uring_register$IORING_REGISTER_RESTRICTIONS(r1, 0xb, &(0x7f00000002c0), 0x0) 1.482153063s ago: executing program 1 (id=4823): bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$kcm(0xa, 0x5, 0x0) prctl$PR_SET_NAME(0xf, &(0x7f0000000980)='\xff\x00\x00\x00\x00\x00\x000`\x14\x99\x06\xc0\x7fs\x00\t\x14\x17\xc3\xf5\xc9\v\x85\xe7\x00\x00\x18\x88\x06\x94\x98\xa9\xe7\x1c\x8a\x89\xdc\xcc\xf7L\xbd%\xc3!\x0e\x91S\xb2~8\"\xe2\xed\xbf\x12\x1a\\6p\'p\xef\x1a\n\x99\x12\xe8\'\x1c\x97M\xa5N\xd9\xbeV&\x1c2K?\x95\xd9\"\xbe\x050+\xca\xea\'\xe9)\xfe\xeb\x9c\xb5\xa0F`\xe4D\x10F\x831\xec\\v\xf0\xab_M\b\x03\xc3\n\x89\x01E`\xd35Q2\xecZz\xdc\x065p\x1c\x8f\x9b\x99IGXO\x00\x00\v\xed\xb0\xc5\xd4\xc7,\x1a\xb3}CMOO\x8a\xa8kh\x7f\x05c\xfc\xebb\xc8\xa2\xa9\xbf\xb3\x9b\xafE\xbd\xc5\xdc\xde\xbe_') r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=@newsa={0x15c, 0x10, 0x713, 0x0, 0x25dfdbfc, {{@in=@multicast1, @in6=@mcast2, 0x4, 0x0, 0x4e21, 0x2, 0x0, 0x0, 0x0, 0x21, 0x0, 0xee00}, {@in6=@private1, 0x4d6, 0x32}, @in=@multicast2, {0x0, 0x0, 0x0, 0x9, 0xffffffff00000001, 0x0, 0x80000001, 0x543}, {0x4, 0x7fffffffffffffff, 0x0, 0x1}, {}, 0x70bd2c, 0x3500, 0x2, 0x0, 0x0, 0x50}, [@algo_aead={0x60, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0xa0, 0x60, "210466d38547aa140db9a200000000c538c7cb7a"}}, @offload={0xc, 0x1c, {r2, 0x3}}]}, 0x15c}, 0x1, 0x0, 0x0, 0x880}, 0x2014) bpf$TOKEN_CREATE(0x24, &(0x7f0000000800)={0x0, r1}, 0x8) r3 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000000c0)=0xffffffffffffffff, 0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x1b, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007d000000180100002020732600000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r2, @fallback, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000780)) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r5, &(0x7f00000003c0)={&(0x7f0000000180), 0x10, &(0x7f0000000380)=[{&(0x7f0000000480)="c3e972bd85a6d84136d6dd55048d3593a74f338ce6772ab9a6f64041c2f6fbbecdc08ebcd3192b6a53662dae7c8e9c665e80a5d0925f728dcac30c29793992e588952653d414cb8ccdabc38767fee819ec5af0c5ee936880fe8549b4ed347779cab4ffd4e0b62c53a1c01db28f2b3f91c34211c9353bc1dece61511917c2245fd66cb8dffeacb4d46d627c97b498bf1ff6b313bfbc9765457c831771d5eec7997ec242e4505f01c1bb3e069b2e630f42a2be86598a61", 0x64}, {&(0x7f0000000300)='V', 0xffffff6c}, {&(0x7f0000001600)="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", 0x1000}, {&(0x7f0000000340)="b768eb20304f2fdc5a9694a4867840d93170ca1a86406f", 0xfffffec0}], 0x4, 0x0, 0x0, 0x8000}, 0x0) dup2(r6, r5) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r7}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) ftruncate(0xffffffffffffffff, 0x4000000002007ffc) setsockopt$sock_attach_bpf(r5, 0x1, 0x21, &(0x7f0000000040), 0x4) sendmmsg(r5, &(0x7f0000004940)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000004580)=[{0x0}, {&(0x7f00000043c0)='P', 0x1}], 0x2}}], 0x5, 0x200000d1) r8 = socket(0x10, 0x3, 0x0) r9 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r9) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feff", @ANYRES32=r10], 0x3c}}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x2000, 0x3, {0x0, 0x0, 0x0, r10, {}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{}, 0x3548, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, 0x4}}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000012c0)=@newtfilter={0x1a94, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {}, {}, {0xd}}, [@filter_kind_options=@f_matchall={{0xd}, {0x1a60, 0x2, [@TCA_MATCHALL_ACT={0x5cc, 0x2, [@m_nat={0x174, 0xc, 0x0, 0x0, {{0x8}, {0x144, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0xf, 0x40, 0x5, 0x5, 0xe8c}, @rand_addr=0x64010101, @dev={0xac, 0x14, 0x14, 0x12}, 0xffffff00}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x6, 0x7f, 0xffffffffffffffff, 0x5, 0xc0b}, @loopback, @multicast1, 0xff, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0xfffffffb, 0x37, 0xffffffffffffffff, 0x28000000, 0xdada}, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xffffff00, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x3, 0x6bc, 0x3, 0x800, 0x3}, @dev={0xac, 0x14, 0x14, 0x19}, @rand_addr=0x64010102, 0xffffff00}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x6, 0xcb6, 0x20000000, 0x7, 0x1}, @multicast1, @loopback, 0xff000000, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x9, 0xf9, 0x6, 0x1, 0x1}, @rand_addr=0x64010100, @empty, 0x0, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x5, 0x6, 0x20000003, 0x1000, 0x90a}, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0x0, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x9, 0x8, 0x0, 0x3, 0x9}, @loopback, @local, 0xff, 0x1}}]}, {0xc, 0x6, "11b61f7a267eb8d3"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_ife={0x44, 0x14, 0x0, 0x0, {{0x8}, {0x10, 0x2, 0x0, 0x1, [@TCA_IFE_SMAC={0xa, 0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x39}}]}, {0xe, 0x6, "f099110f9b23ffbf1aec"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_ife={0xe0, 0xe, 0x0, 0x0, {{0x8}, {0x1c, 0x2, 0x0, 0x1, [@TCA_IFE_SMAC={0xa, 0x4, @local}, @TCA_IFE_DMAC={0xa, 0x3, @broadcast}]}, {0x9d, 0x6, "5a7d3b119e9f6ad7cb4e186af6e14fdc3ce2ca0e330b2574e24ded3883bbf48bb62e0afc275db4c1775a8a69ff1139cce77385f9ed914dd8baf64a4a3f8dd42313bd5783d1d86f31016620d46d23303f61fff5ac8ce7c844115c04aedaa912be2f9d4a6792a193c2a2a13fab28f72ce92a4e253e3557d1a2e36d1a2521549baad96624147bb32d9ae27082fe73f9ea34f5db400134a7525bb5"}, {0xc, 0x7, {0x1, 0x1}}, {0xc}}}, @m_vlan={0xe4, 0x6, 0x0, 0x0, {{0x9}, {0x4}, {0xb6, 0x6, "2973deb6a3bd110d951c77e91bc7d6938ecec6ce4ba5e84c4ebb993859883d0da6d4378c67c44e00a565ae148c6c37d9458adcb43612a7725fbdb229262a5ad3a1a807111215c463b0882b65890b33f74a89ea7f9edd4b263399a4b5e2802642975e1840f975c1520287b1101ce60d822613b2c94c8f1aa2779640b3a7ebcac56ae6a67bfceb2296047e0dbc1db4b582fd9e55d76c96b3a3bf3896ac9c6eca7d190afe275a9b438717f01c61b660c60de2ce"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x5, 0x2}}}}, @m_ife={0x110, 0x10, 0x0, 0x0, {{0x8}, {0xc, 0x2, 0x0, 0x1, [@TCA_IFE_TYPE={0x6, 0x5, 0xfffd}]}, {0xdd, 0x6, "01236db4fc544b77dee341279b56e9570290ecf05505d043555610b577da7c2d63f6f81ee6911f8dbc7460d83b3ffa5ceadf99f87375e9bb3056bc79ef30d52e49e658e57927384065d11261960d16c361f3af7d3f95e9c69e20c7e736ddaf4a28698038d921632c1f0e67ec6c8f4c8b8e496ab68727ffa95798b0abe544be38a6441feaf07f68ff61245168b667e6f08f013695f6c707a834f5da86226004e3f1b6917712406bb0079b7d3421572bfe4aa295bed63bb2f19e03ebb9a774fd7e623b5cee8a83d9ca3a5226a2cf5b62430f959b12c1999cc70c"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_tunnel_key={0x13c, 0x12, 0x0, 0x0, {{0xf}, {0x78, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x22}}, @TCA_TUNNEL_KEY_NO_CSUM={0x5}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @loopback}, @TCA_TUNNEL_KEY_NO_CSUM={0x5}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x5, 0xffffff10, 0x2, 0x6, 0x40}, 0x2}}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @remote}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @rand_addr=0x64010100}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @remote}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @private2}]}, {0x98, 0x6, "cdd3e0e4ff75f9e6ea23e7bad18b22cac5f2db165b630f29c6a3a2b92861efca69afaf4608ef4b85108d0f57409cab0a8bf59b86395a80478bc5a2008416e419d31009dffd607af977852f725742fc0ca9ed7d039eb6bc71d2f984c33d86dd8704836e871ef01f060af5d43c618dd6fad9b4fc0857bf6621ed59ff48debf188cc03b536b7341f8dd74d6ffd02b6eb6a4a648fecf"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}]}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x3}, @TCA_MATCHALL_ACT={0x190, 0x2, [@m_tunnel_key={0x7c, 0x8, 0x0, 0x0, {{0xf}, {0x14, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x4e23}, @TCA_TUNNEL_KEY_ENC_KEY_ID={0x8}]}, {0x39, 0x6, "14b3b50a3a5f7571d6c3ba306cda2ffa6ba653c6954cd015c8e6bdc01768dd50fd2a9c5eefa6ce14330940a04bb35a0a2ac4ee78f1"}, {0xc}, {0xc, 0x8, {0x3, 0x1}}}}, @m_vlan={0x110, 0x9, 0x0, 0x0, {{0x9}, {0x14, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x8100}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x438}]}, {0xd3, 0x6, "0feff0e8e1e0437e20f2b6a1f466140dc7c32561a742ca9626e02ae66ffdce941d9e44481d67cf2f4088c852fe5fa00c7222689fe54fd1a8bff04eccf0b075601182eaff315ec28cd05c7c5564215c00f9bce11cb099da2c40840f9196f213c71190af62cdcd0b7ee2f336a55061c4414506b4d2ee560ee20e3181d3a22081f24edbf9c65150a0084bb41293c793a0ed0bb8327106ff079abbfcc52cb17c0f8a7c942132509670afc9accb0927ea6de40020b926f082664db4999442a33eaa9beba53bf8a11634168dcce72397e8f3"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}, @TCA_MATCHALL_CLASSID={0x8, 0x1, {0x6, 0xc}}, @TCA_MATCHALL_ACT={0x12e8, 0x2, [@m_ife={0xe8, 0x19, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x6, 0xffffffc0, 0x3, 0x7, 0xb}, 0x1}}, @TCA_IFE_SMAC={0xa, 0x4, @remote}]}, {0x95, 0x6, "2c8958321d1c77d0d577243b579ff6e1fa81ca601f5027e702eb8ac9a32d2478cf772f338745aff0c55b943639a3baebcece65d5b419410fee46f56d67cd27399188f8257c82e02f66f1c2329a82c14eae69f548693263031dc0ff33ed8fb7e101a6fe79b8527e2f02cc8dca10b34ba7cd3e0aff29c790cae9eb66cf5a9bf4178b4d7ae9b3cd81d9e77b5ff35c197591bb"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1}}}}, @m_csum={0xe0, 0x17, 0x0, 0x0, {{0x9}, {0x58, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0xe, 0x6, 0xffffffffffffffff, 0x7, 0x5}, 0x2f}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x8, 0xf5975a67, 0x4, 0xe356, 0x7}, 0x66}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x4, 0x4, 0x1, 0x7, 0x2}, 0x25}}]}, {0x60, 0x6, "7c6629a9bbcf4cd582bfc57304d16b268b16ff4daed18425f45e089d174d420a59aea0fb68b2048e88dc1104ece15f5084b4a57c72eca1d2a1c909357f6ba441f3d0a47ce37f438cdde0e9780c3c5fb74c125aa4e3f5f7b4469de68b"}, {0xc}, {0xc, 0x8, {0x3, 0x1}}}}, @m_skbedit={0x1060, 0x0, 0x0, 0x0, {{0xc}, {0x34, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x7}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0x3, 0xc}}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x4}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x5}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x33ff}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0xf, 0x10}}]}, {0x1004, 0x6, "a679abe2cfdacccd16679e0e6c7bdbfbc420164bb43a5320c986175bf4fc42ee2dabecbb038ae0d6a9a9166450105b4e8510e0d001118900bbcbde19c7547ec0101ef5e15635dedc3227f10b37aca553e2da64069ba724aa8677f4b701f1f2f0f1386bf56ee420f41c4c5aaf77142290d93e68d096f0efcc4573b15bcd685fdef6790cceb1a23c79949d4f86c6e151e07a46baf0288b4b36cf91d1688e63ac7bcc53b36d47645134faa9ab8023e51e0ec099b4875fbaee1d56a2cab8febcb276923eae82c9ab6f365da8745e0f144f0e079559fc8cb33f07191a4041e63b211ef96a7376c4469fc7979bbb9dc84400de9a928c635b8f6f7bedf4234128eb1b53c91a3ef57821999ae268691b5aa6b1ee6ee1c187138f655f8a7d388d9a554a6bf44861df6af8129a6b0f60bd0c551c1195bd663d4afd5aa6a82365c92ca3316516bef4cb10e81f70e523afc2d5d8c4b204691912ed81f38342c0e9811864943f2bf1efff458df51f7879cd353754a1b1f9735fc871d50ecaafec98303136da9694aaa98f5cacef3d7b17f7d7502c71fcf543bc16285f4338e147a1dd0fa2f356cd5ca50b75dc30c8a8bc32a30a576ce2fa37f8f4611708ce187aed375d04cf961afcf96bd4711493004b9a7fff9ba33d3b6c82e9f11b077afcea49da2e0f5f2fd8358b4ac50135226e8c603abbfe045811687dea39425f47cc1845e86957d697c69428369f2c3e43089bf3b62c0fb37117e51490c8ba67b7c1c78ecb9de7d460cc0b7a18ada417c4e928990926c747d19ffd74d12d53cc47fa90f016e3ce3d93c75fb9520959dd717196c13dc4f2ade64d5e7810101531df501e7795060f426a2baf4be9ecba4e09ebe1ce56fcf35f595f413da33a98adbea68fd5c2317a43ce5de62f625251abb874c651e8418d8560a6757baaa0e5acaa095930be2bceec821beb25124c073c755fd352d989b4f6d530316241b39a87b63f9d733494fc485e1a662c66d9810c251a7329644c8095a8d583cd8f5cc33e5a06b2a668e75e7a99b6473b348b2e949b174b7010bc80f0da759326b4d5113705b43ff4ef9d6779d0acc4d6c44f8b775af0779869ce886696317a1c88f08e4994e6d354f273de8546afc668dd3b37f1c46036259ddfedf6dbf6250706ccecab30df2a6a7f4548e6413b13743918cc1a64e3b62eb85be3add82654c314e279d5ca6694d7ea28df4677018c53f031aaaf1447b93ad23bb8feb04bed375f785119d887236e69ab475f54a1c121a89c4d3219cd064ce1174e8bd88bc4237a5fadf854dbd98f7e8b72f29c1e9b408b93bf5592ceb91c0597ef80f0eb35fd1393408b7f3549546a3d1df321c71f31a7cea8baff2f0dd2ab8935ae42d1792e9e3be74bbb12b3a35b9b26162a537e122a3c4b01ba71fe89f794595b70dd735e6393ce6676e3b92880b2afd6bd361b9e9c9005d9e0c1e6e2fe470a497408a4b837dc585a8fd4deaff66e9d1e80932ae6f0fa04214ae08052538d161bc1b332af59f842b1edaeaa1154ad3f1cce118270cd08020f1abc4064257d4aa0f7a9b8feae7b7813e67c289f9710317b736d4e8a624121bcdd65594b03f9dc505e5c161c1cab996171dbd684d8ba1019cbbbc505e4038f160201202d9531f218ff5216924efb69952daabe1d30af55e1533845162dd33c1e69ea9c165471395940fb96ab50a0c49ea5b1464e2315da5aaca0371eeacde14a766004a0515e9d77536304c36b407c66608e04cf0425cc040c2801db80f0e79fbf81649be4e92086bd9fce29b20fe9f60a14a1bdb5c580db775c0285ab6ad044c6493592b134a88507ee985c513618bc197e351b77fa906863da350b92b9e87d7502fe42fc760446f40361b942b4385e28fc87e83ab208b0d208ee663a888ddec8391fbacdd49d199261383645de4007c359b12f018cf71b4cbc7f7d4d3af2d2045e15926e1f76c7aced89d67af08bb6a3b0ba4bbfe17e220024c4f358549d5dc1a7017464c5b0eb0ff0c3ccd2d1afc0f62d6ba073dd17345412c74fab1a16cd78e4d87778145d2d07a7fb5af9a6a80784fec1863e34b8b05bcd4e87ddfa50d9e65eec198adb148aa699d796973ce6bad19acf6d4b98bdf1181484ac60b973953467dbe6e652b1a590d04b7b3b2ee83b7b9911e22757dcbca558e05abc72657bc5c330a754a54671c6ac591518ebf54f79109ea0cfcf28ca4c271f402bf9f017ec2650e0a4ada9d23adc08d3477a04a49028a65ade228d2e9972168bf68db5f3d026867e7c930e788e456751fa09ef03c181629f6c7cab5a4faeffd4c74bb821c8aa3caf770cd66b23f175b65aa59482a7e20e0b010c3ef75bd6d47ad07f11d59623020ed9d5fd3fd633d31eeb9b058a0c6bb85621a3e27efd926090d5d4e0c97d3691911dbd7e0fdd0d1175ca232efd4aa0836f87aa8fd09a56315d9c1b63866dde49c5801a85160d71e96b33765cc1b5bde3c4d39af4df466c9fbb9a2753e9bcf2c7649e3eb1bd442ea7d2a8ca4ea13ff2840b963b3404ddd6e7794e784c512518af655360b11cb73c0431fb81110b2d0b1254bc2efff312fecb44e3fa356cb07eb0f0ff6c477c2d51ea8b80a76051a6f0f6550570b1b5fa3bb889c42e1ac426f4c48b43fea94bce689cc89bdf84c00771e43c44fd6e85d491ca12bccb4db64cf71414d41501b348e80b510bdf07d19ffec5b4aa0775394658fc076f42230985a5250a82055232fbbc90162e09de3ad21e0c3cc1e186cf48c49a0ea77979cec42c25852abfbd74e035c8a66f15dba4232e66931e14d8cacb5d8a5fb0bdf6335b6033f18ffe723bbe242cac4d27d10637272908a6fe3d853ad26442bfd0d41d69b6314789838604d00a39718c49e7491628923a42b57305d00b7e53edbe98c6851769fd1ff3693bacd830e01ff77fd150e79fee9a0c110cea06c4e22c4b5bf86a19249d2fd1b9a68de9946281c9b507067febfc89bd5e5f90b2fd4b44f43d94b881d7dca7b715418546b6f4b7ac6a955e38d7ebe31fbb4ea4afc2593b005b4984381938e18b6f35312ea6e3feb11ac7c7eb98e3e4fde04eda6728374afcf7f3f8f0de696154dab0164e2c438174e7b4322b00032c0f33eba5114886a4e4fcae61589d89d0cf5a1514af169418977c3b5026cc9202d6190d23e00a90f12736a44e5fdedd9ff480fbbb4114e504443f9d15696c34fecef5cd12939efd2b5ffc682a393603dea33e13b90ef150ddc55be089220c53ea6b028396319b0e466d126480a7b9b0f8c0c55013e18149761cbce2670987f1a7afc40491de36cdfc827eecb099ac1f081f221f7ed472f758880c10b54dddf73824b000122ca52f89d4b271facee4893b3a7aa38e3885a61593957c863c8d6d18dcbbf2186cbf056d04fe90ae0d9d2b4c943c738ba8e1bdda4c0c8855968cd567e17e8133fd7389dd341eca4577db97502b790d9fc5f3a9deab4d9de4ee45e4d91209d4ebcfd8f0719b390da9f6b74302d65b025341d9e36528a404204595e1873e542ea6dfc2d25f664ec932643aa1a8048962f52e311570f9f9d5a2141489e5152ec654b7488328284ec4433b74ee395001f18aa2a9cd060a9acf873676f7e5657386d8531d99c956941f0daea73712a8e0e2b95fd70a2322113693e63ad7c5d08b91ad9e4031066d4f17439bfb17f019eb8328be8a83f4ce89b514daa2531e46a45df1e31632c82da676c7e794677bbe29800b4b9e3278711dc9998c09263fae404aaf0c8b7264ad591b94f03aad60821768cb484ddefdedd64e774dfb37375ea1267a4f8a0d09354476a27933bca721870b6bc860f453923b244a31746454af8a0ac09c10379d1c3f061fbbcbed9bef548e1ba2c4909cdc31974580e19a63bd24ffb1169a14e4c172293c397e766cf674865d4dc2c1847a2e15b4cb481f9e885263ca1d657c1267ecf2c5817d75ddbfc5451580fbcaf80fdc80f0433ea0fe6d3ca602d2294db203b9fb2824bf47c63f7a8836eee735314692e546d941aa0e2cb504c3c3f0c9325ac6609671c4dacc45cc46d2c1834576460a6581afcff9e5e6e7fd16c7bbb6e3f037b3ef4bdd81f75c5a5d6ce334f3f7230d2f98d33b7fd37e42c0b2a65ae49f8bd59d70523d01e604ff532b3155028f2090c1241ce2e25c2486a946011549617bda86e8246d04575a7d1ffaec46e3961646fac37f716ce15722993811f7e9c8060435f22ebbb09fce521843454225cb3399c643ac28e3c957e16cfadaa831959b6cdfa5e3ac2e2f9f31afa792d47561f049c7bfc80fe657eb78a783d0d7a0f5a245748c8f63984a1896f129bdc744276004d0e00b655788e694b014ed706c65321c8577a7864177596f90e8dcb68e765607d941bd0546861b6e2067f9c1479b7f0fc54a817ae9ae988eaa33f4d960c22c306974aafaaaf0fa0c20fe1a45ab6dc50b4da0f69e0949e6d772a0bf95c2c07dc0bee96642c2e76ae333b1897dfd4a8c431bde3f0b4d27b461fb2089b17d07b1c26984ab2a02d17195adf16c625c6fde38d35c1f33d2fb48a8af68d0850a18ea31ef608b788b4bfcb76f03101e0f103c8c0de258e7ed2a0ad82de5d643705be6cf9dc2fc54fa5edf180125cfb8a7d3254f2db67d5a8966e1bfacb548b9a51f6ce9e42ca11be38cd0c5abff32a0ddaba666eb41f384b607def6e470e3c42a3331c78fa501f4b747d422568e39f564606766238cabf80146dd75af53d97e0d4996ca62055842eaff9b5921a683f19a4fe9804313bf33723dfaa1cb6e2aba46c2c994c49092a0197201fc58c89970ebc7ae1ef6ebf21fd869b54021a1f9e43eba4946fb90df979d76858dd944c90d47c57a79e8e2a9ad090261f21a2298beae44dc728af41fea1979ddb824be1052e4d8cd1158da4986f6489eb8686f75b1d9a27a44ba832c1819b8e345be76238668fb4f9e203a3e0c6fe8a5592452370416331e6c24e01dd7ba6c6dcb8ad43fbbe3fc308440f000fd3bff5e3344327ad147c864e6734a995fb7aeec8a05aecb921b21f9f3d20999a5723e09f0c097461536f4f1a02a6bb35f650e2a782ef567cd8c303766babe60b193869aed669bd15fc098f92da9d0b58fc158274a6f8afb0b14a9b5756f45b2877189304b00b37bf8528b99b13f0c22a58a5db6a2249b45cbb0e9073d2154f32bea3108f225158fde984bcb7fff015149a8befd66550f12664a71d7cebda317210ef7e61675b5fb58849ecd53baa5e8f0332470825a14e3e05a2d53a2bc0b6f0999b20887ec189770141108378602d5f376f154bfb782b4201e9eadc7e5b0223562008f55e67e0be647e6bb0d87867d01f3d9ccd90badd0344ea377394a64ec6bff6fcd68eb1485bdc294be9908ec1a03cfac950b25b095d74126013843937e6b5bff569bf2d533d5aa0652e9545d8125f06ef679f3d0b655267380fe838253a18a70e7575e0538d8287200d529b6125b10739f9b1235537932e5e827e4262a3ef6a217d400b844a02a80939aa210619513424fdb4a335459a4f9f185f33391d9ad69549a12085f6fffe1b097e32248ab73bf545e815e0af43fffb2ef0babf9528f8533adb92e8d20afe13b3ad416e50120a95007bdf9a696a86d1e11677ad85a2e2ec53bf085cf2aa224c117324fac887b9aae605085898337c32ffe227822ad5c2c317660b067f3db68e5a958c547bface88d689ab08b53acc15fa3f03134860355cce7fba36c7e792b15012e6a4e06e5dc28f127fb67699590a616745173114c6d65fd7a9b626f79bb6abcbb6fac97233e44141216"}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}, @m_simple={0xbc, 0x1, 0x0, 0x0, {{0xb}, {0x60, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0x8, 0x3, 'sfq\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x7fff, 0x5, 0x20000000, 0x9, 0x1}}, @TCA_DEF_DATA={0x9, 0x3, '(\\[&\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x8, 0x7f, 0x5, 0x4, 0x9}}, @TCA_DEF_PARMS={0x18, 0x2, {0x5, 0x5, 0x1, 0x1, 0xfffffff9}}]}, {0x33, 0x6, "ff73c1cb6c5a9286857317b264b336a24d70e655b693fe031e95080ff179151a48d82268aa73d826fbdf84c6accccd"}, {0xc}, {0xc, 0x8, {0x1, 0x1}}}}]}, @TCA_MATCHALL_FLAGS={0x8}]}}]}, 0x1a94}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000180)='kfree\x00', r4, 0x0, 0x2}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x0, 0x8004, 0x7}, 0x48) 1.429948138s ago: executing program 1 (id=4825): r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000000000000640000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000680)=ANY=[], 0x3c}}, 0x0) 1.40786616s ago: executing program 1 (id=4826): r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000000000000640000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000700)='f2fs_map_blocks\x00', r1}, 0x18) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="b80000000001010400000000000000000a0000003c0001802c0001801400030000000000000000000000ffffac1414aa14000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300ff02000000000000000000000000000114000400fe8000000000000000000000000000aa0c0002800500010000000000080007400000000008000480040003801c000f800800014000000000080002"], 0xb8}}, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000004c0)={{{@in6=@remote, @in=@multicast1}}, {{@in6=@private1}, 0x0, @in6=@local}}, &(0x7f00000000c0)=0xe8) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000005000000020000000410"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000000c0)='kmem_cache_free\x00', r5}, 0x18) socket$inet6_tcp(0xa, 0x1, 0x0) io_setup(0x6, &(0x7f0000000300)=0x0) io_submit(r6, 0x1, &(0x7f0000000200)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x80000000}]) io_getevents(r6, 0x1, 0x1, &(0x7f0000001340)=[{}], 0x0) syz_mount_image$ext4(&(0x7f00000002c0)='ext2\x00', &(0x7f00000001c0)='./file0\x00', 0x810703, &(0x7f0000000140)={[], [{@smackfstransmute={'smackfstransmute', 0x3d, '\'-[-$'}}]}, 0x2, 0x48d, &(0x7f0000001100)="$eJzs209sFNUfAPDvTLuFH//an+IfELVKjI1/WlpQOXjRoPGAUaMHPNZSCKFQQ2sChEg1Bi8mhkS9Go8mHjx782LUk4k3o4lHQ0KUC6gH18zsbLvd7pYW9g+2n0+y9L2ZN/ved2fezJt5QwDr1mD2TxKxJSJ+joj+SnZxgcHKn2tXzk38eeXcRBLl8qu/J3m5q1fOTVSLVrfbXGSG0oj0vaSoZLGZM2ePj09NTZ4q8iOzJ94cmTlz9vFjJ8aPTh6dPDm2f/++vaNPPTn2REvizOK6uvPt6V07Xnj94osThy6+8d0XWXu3FOtr42iVwSzwP8q5+nUPtbqyLttak056GxSYXzbQmQaxIj0R8U9ElPL+3x89Czsq+uO5d7vaOKCtsmvThuar58rAGpZEt1sAdEf1Qp/d/1Y/HRp63BIuP1O5N83ivlZ8Kmt6Iy3KlOrub1tpMCIOzf31afaJNj2HAACo9cHExwfjsUbjv/TknTXlthVzKAMR8f+IuC0ibo+I7RFxR0RkZe+KiLtXWX/91NDS8U966YYCW6Fs/Pd0xPPXloz/qqO/GOgpclvz+EvJkWNTk3uK32QoShuy/OgydXx94McPm62rHf9ln6z+6liwaMel3roHdIfHZ8fzQWkLXH4nYmdvZW5vcfzJ/ExAEhE7ImLn6r56WzVx7JHPdzUrtCT+cn38y2g0z7RK5c8iHq7Mbc5FXfxVyfLzkyMbY2pyz0j1qFjq+x8uvNys/uvv/5aE2VS2/zfFov1fX2QgqZ2vnVnmy5LGiy/88n7Te5obPf77ktfy81Ffsez0+OzsqdGIvuRgnl+0fGxh29Pjs69szP+W5uMf2t3o+E/zc1w1rHsiIjuI742I+yLi/qLtD0TEgxGxe5mf5dtnm69byf5vpyz+w9G4/xfq9v/qEz3Hv/mqWf0r2//78tRQsSQ//13HSht4M78dAAAA/Fek+TvwSTo8n07T4eHKO/zbY1M6NT0z++iR6bdOHq68Kz8QpbT6pKu/5nnoaDJXfGMlPxYRG2rW7y2eG3/U8788PzwxPfXTgS4HD+vc5ib9P/NbT7dbB7Rdowmmsb4uNATouPr+ny7Onn+p6Za/tqdBQMe08wUT4NZ2nf6/MBz4u/1tATrL9R/Wr4X+/8l86nxdGXMBsDa5/sP6teL+b04Q1hzXf1i/9H9Yl1b33/nLyY1sddOJ0sZKtR2tVGL5RKS3RDMk2pRocLL4Mu3ouQkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKAV/g0AAP//5xzsfQ==") bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYRES64], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000400)={@cgroup, 0x26, 0x0, 0x1, &(0x7f0000000140)=[0x0, 0x0, 0x0], 0x3, 0x0, &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000003c0)=[0x0, 0x0, 0x0], 0x0}, 0x40) openat$cgroup(0xffffffffffffffff, &(0x7f0000000480)='syz0\x00', 0x200002, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000000c0)=ANY=[], 0x20) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000100)={@fallback=r2, r1, 0x0, 0x10, 0x0, @void, @value=r0, @void, @void, r7}, 0x20) socket$nl_generic(0x10, 0x3, 0x10) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000006c0)='kfree\x00', r9}, 0x18) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r10, &(0x7f0000000480)={0x0, 0xffffffffffffff3c, &(0x7f0000000140)={&(0x7f00000002c0)={0x14, r11, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@void, @void}}}, 0x14}}, 0x0) 1.174405614s ago: executing program 3 (id=4834): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) getpid() sched_setaffinity(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xdebd1000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) 1.065261474s ago: executing program 0 (id=4835): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x18) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb86dd6000000000142c00fe8000000000000000000000000000bbfe8000000000000000000000000000aa0600ff"], 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ec}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000080)={r2, 0x0, 0x2d, 0x0, @val=@netfilter={0xa, 0x1, 0x353b, 0x1}}, 0x20) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff6, 0x0, 0x0, 0x10, 0x3}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0xffffffffffffff62, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe, 0x7000000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x5, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000004200)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000001900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x41, '\x00', 0x0, @fallback=0x3e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) io_uring_register$IORING_REGISTER_IOWQ_AFF(0xffffffffffffffff, 0x11, &(0x7f00000004c0)="9e78a569c7433d6338bc07f008631b72ae8b8a07daf79b56577bee16f885d4977bdbddbf64eb12da00691d50a804a4b024ae034f9931f1f9e37c8b1bcb1e8c2d05a3ecfb1df27e442608b318a361cec7c78335034967405b41d4ca6ed87f3c4f9693b3a37e4154064729d212d17bdb7b2cc11a", 0x73) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f00000003c0)='mm_page_alloc\x00', r5, 0x0, 0xffffffffffffffff}, 0x18) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x8, 0x3, 0x390, 0x0, 0x43, 0xa0, 0x1d0, 0x98, 0x2f8, 0x178, 0x178, 0x2f8, 0x178, 0x49, 0x0, {[{{@ip={@loopback, @local, 0x0, 0x0, 'veth0_to_bond\x00', 'ip6erspan0\x00'}, 0x12a, 0x1b0, 0x1d0, 0x0, {0x0, 0x7a010000}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x8, 0x0, 'syz0\x00'}}, @common=@unspec=@helper={{0x48}, {0x0, 'ftp-20000\x00'}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0xe8, 0x128, 0x0, {}, [@common=@unspec=@connbytes={{0x38}, {[{0xb}]}}, @common=@set={{0x40}, {{0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x300]}}}]}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "f1c098b60204ed02d82cf440fef5497b80c29d381d41116000"}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3f0) 920.461369ms ago: executing program 0 (id=4836): bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$kcm(0xa, 0x5, 0x0) prctl$PR_SET_NAME(0xf, &(0x7f0000000980)='\xff\x00\x00\x00\x00\x00\x000`\x14\x99\x06\xc0\x7fs\x00\t\x14\x17\xc3\xf5\xc9\v\x85\xe7\x00\x00\x18\x88\x06\x94\x98\xa9\xe7\x1c\x8a\x89\xdc\xcc\xf7L\xbd%\xc3!\x0e\x91S\xb2~8\"\xe2\xed\xbf\x12\x1a\\6p\'p\xef\x1a\n\x99\x12\xe8\'\x1c\x97M\xa5N\xd9\xbeV&\x1c2K?\x95\xd9\"\xbe\x050+\xca\xea\'\xe9)\xfe\xeb\x9c\xb5\xa0F`\xe4D\x10F\x831\xec\\v\xf0\xab_M\b\x03\xc3\n\x89\x01E`\xd35Q2\xecZz\xdc\x065p\x1c\x8f\x9b\x99IGXO\x00\x00\v\xed\xb0\xc5\xd4\xc7,\x1a\xb3}CMOO\x8a\xa8kh\x7f\x05c\xfc\xebb\xc8\xa2\xa9\xbf\xb3\x9b\xafE\xbd\xc5\xdc\xde\xbe_') r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=@newsa={0x15c, 0x10, 0x713, 0x0, 0x25dfdbfc, {{@in=@multicast1, @in6=@mcast2, 0x4, 0x0, 0x4e21, 0x2, 0x0, 0x0, 0x0, 0x21, 0x0, 0xee00}, {@in6=@private1, 0x4d6, 0x32}, @in=@multicast2, {0x0, 0x0, 0x0, 0x9, 0xffffffff00000001, 0x0, 0x80000001, 0x543}, {0x4, 0x7fffffffffffffff, 0x0, 0x1}, {}, 0x70bd2c, 0x3500, 0x2, 0x0, 0x0, 0x50}, [@algo_aead={0x60, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0xa0, 0x60, "210466d38547aa140db9a200000000c538c7cb7a"}}, @offload={0xc, 0x1c, {r2, 0x3}}]}, 0x15c}, 0x1, 0x0, 0x0, 0x880}, 0x2014) bpf$TOKEN_CREATE(0x24, &(0x7f0000000800)={0x0, r1}, 0x8) r3 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000000c0)=0xffffffffffffffff, 0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x1b, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007d000000180100002020732600000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r2, @fallback, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000780)) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r5, &(0x7f00000003c0)={&(0x7f0000000180), 0x10, &(0x7f0000000380)=[{&(0x7f0000000480)="c3e972bd85a6d84136d6dd55048d3593a74f338ce6772ab9a6f64041c2f6fbbecdc08ebcd3192b6a53662dae7c8e9c665e80a5d0925f728dcac30c29793992e588952653d414cb8ccdabc38767fee819ec5af0c5ee936880fe8549b4ed347779cab4ffd4e0b62c53a1c01db28f2b3f91c34211c9353bc1dece61511917c2245fd66cb8dffeacb4d46d627c97b498bf1ff6b313bfbc9765457c831771d5eec7997ec242e4505f01c1bb3e069b2e630f42a2be86598a61", 0x64}, {&(0x7f0000000300)='V', 0xffffff6c}, {&(0x7f0000001600)="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", 0x1000}, {&(0x7f0000000340)="b768eb20304f2fdc5a9694a4867840d93170ca1a86406f", 0xfffffec0}], 0x4, 0x0, 0x0, 0x8000}, 0x0) dup2(r6, r5) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r7}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) ftruncate(0xffffffffffffffff, 0x4000000002007ffc) setsockopt$sock_attach_bpf(r5, 0x1, 0x21, &(0x7f0000000040), 0x4) sendmmsg(r5, &(0x7f0000004940)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000004580)=[{0x0}, {&(0x7f00000043c0)='P', 0x1}], 0x2}}], 0x5, 0x200000d1) r8 = socket(0x10, 0x3, 0x0) r9 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r9) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feff", @ANYRES32=r10], 0x3c}}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x2000, 0x3, {0x0, 0x0, 0x0, r10, {}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{}, 0x3548, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, 0x4}}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000012c0)=@newtfilter={0x1a94, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {}, {}, {0xd}}, [@filter_kind_options=@f_matchall={{0xd}, {0x1a60, 0x2, [@TCA_MATCHALL_ACT={0x5cc, 0x2, [@m_nat={0x174, 0xc, 0x0, 0x0, {{0x8}, {0x144, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0xf, 0x40, 0x5, 0x5, 0xe8c}, @rand_addr=0x64010101, @dev={0xac, 0x14, 0x14, 0x12}, 0xffffff00}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x6, 0x7f, 0xffffffffffffffff, 0x5, 0xc0b}, @loopback, @multicast1, 0xff, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0xfffffffb, 0x37, 0xffffffffffffffff, 0x28000000, 0xdada}, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xffffff00, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x3, 0x6bc, 0x3, 0x800, 0x3}, @dev={0xac, 0x14, 0x14, 0x19}, @rand_addr=0x64010102, 0xffffff00}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x6, 0xcb6, 0x20000000, 0x7, 0x1}, @multicast1, @loopback, 0xff000000, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x9, 0xf9, 0x6, 0x1, 0x1}, @rand_addr=0x64010100, @empty, 0x0, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x5, 0x6, 0x20000003, 0x1000, 0x90a}, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0x0, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x9, 0x8, 0x0, 0x3, 0x9}, @loopback, @local, 0xff, 0x1}}]}, {0xc, 0x6, "11b61f7a267eb8d3"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_ife={0x44, 0x14, 0x0, 0x0, {{0x8}, {0x10, 0x2, 0x0, 0x1, [@TCA_IFE_SMAC={0xa, 0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x39}}]}, {0xe, 0x6, "f099110f9b23ffbf1aec"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_ife={0xe0, 0xe, 0x0, 0x0, {{0x8}, {0x1c, 0x2, 0x0, 0x1, [@TCA_IFE_SMAC={0xa, 0x4, @local}, @TCA_IFE_DMAC={0xa, 0x3, @broadcast}]}, {0x9d, 0x6, "5a7d3b119e9f6ad7cb4e186af6e14fdc3ce2ca0e330b2574e24ded3883bbf48bb62e0afc275db4c1775a8a69ff1139cce77385f9ed914dd8baf64a4a3f8dd42313bd5783d1d86f31016620d46d23303f61fff5ac8ce7c844115c04aedaa912be2f9d4a6792a193c2a2a13fab28f72ce92a4e253e3557d1a2e36d1a2521549baad96624147bb32d9ae27082fe73f9ea34f5db400134a7525bb5"}, {0xc, 0x7, {0x1, 0x1}}, {0xc}}}, @m_vlan={0xe4, 0x6, 0x0, 0x0, {{0x9}, {0x4}, {0xb6, 0x6, "2973deb6a3bd110d951c77e91bc7d6938ecec6ce4ba5e84c4ebb993859883d0da6d4378c67c44e00a565ae148c6c37d9458adcb43612a7725fbdb229262a5ad3a1a807111215c463b0882b65890b33f74a89ea7f9edd4b263399a4b5e2802642975e1840f975c1520287b1101ce60d822613b2c94c8f1aa2779640b3a7ebcac56ae6a67bfceb2296047e0dbc1db4b582fd9e55d76c96b3a3bf3896ac9c6eca7d190afe275a9b438717f01c61b660c60de2ce"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x5, 0x2}}}}, @m_ife={0x110, 0x10, 0x0, 0x0, {{0x8}, {0xc, 0x2, 0x0, 0x1, [@TCA_IFE_TYPE={0x6, 0x5, 0xfffd}]}, {0xdd, 0x6, "01236db4fc544b77dee341279b56e9570290ecf05505d043555610b577da7c2d63f6f81ee6911f8dbc7460d83b3ffa5ceadf99f87375e9bb3056bc79ef30d52e49e658e57927384065d11261960d16c361f3af7d3f95e9c69e20c7e736ddaf4a28698038d921632c1f0e67ec6c8f4c8b8e496ab68727ffa95798b0abe544be38a6441feaf07f68ff61245168b667e6f08f013695f6c707a834f5da86226004e3f1b6917712406bb0079b7d3421572bfe4aa295bed63bb2f19e03ebb9a774fd7e623b5cee8a83d9ca3a5226a2cf5b62430f959b12c1999cc70c"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_tunnel_key={0x13c, 0x12, 0x0, 0x0, {{0xf}, {0x78, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x22}}, @TCA_TUNNEL_KEY_NO_CSUM={0x5}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @loopback}, @TCA_TUNNEL_KEY_NO_CSUM={0x5}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x5, 0xffffff10, 0x2, 0x6, 0x40}, 0x2}}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @remote}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @rand_addr=0x64010100}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @remote}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @private2}]}, {0x98, 0x6, "cdd3e0e4ff75f9e6ea23e7bad18b22cac5f2db165b630f29c6a3a2b92861efca69afaf4608ef4b85108d0f57409cab0a8bf59b86395a80478bc5a2008416e419d31009dffd607af977852f725742fc0ca9ed7d039eb6bc71d2f984c33d86dd8704836e871ef01f060af5d43c618dd6fad9b4fc0857bf6621ed59ff48debf188cc03b536b7341f8dd74d6ffd02b6eb6a4a648fecf"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}]}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x3}, @TCA_MATCHALL_ACT={0x190, 0x2, [@m_tunnel_key={0x7c, 0x8, 0x0, 0x0, {{0xf}, {0x14, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x4e23}, @TCA_TUNNEL_KEY_ENC_KEY_ID={0x8}]}, {0x39, 0x6, "14b3b50a3a5f7571d6c3ba306cda2ffa6ba653c6954cd015c8e6bdc01768dd50fd2a9c5eefa6ce14330940a04bb35a0a2ac4ee78f1"}, {0xc}, {0xc, 0x8, {0x3, 0x1}}}}, @m_vlan={0x110, 0x9, 0x0, 0x0, {{0x9}, {0x14, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x8100}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x438}]}, {0xd3, 0x6, "0feff0e8e1e0437e20f2b6a1f466140dc7c32561a742ca9626e02ae66ffdce941d9e44481d67cf2f4088c852fe5fa00c7222689fe54fd1a8bff04eccf0b075601182eaff315ec28cd05c7c5564215c00f9bce11cb099da2c40840f9196f213c71190af62cdcd0b7ee2f336a55061c4414506b4d2ee560ee20e3181d3a22081f24edbf9c65150a0084bb41293c793a0ed0bb8327106ff079abbfcc52cb17c0f8a7c942132509670afc9accb0927ea6de40020b926f082664db4999442a33eaa9beba53bf8a11634168dcce72397e8f3"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}, @TCA_MATCHALL_CLASSID={0x8, 0x1, {0x6, 0xc}}, @TCA_MATCHALL_ACT={0x12e8, 0x2, [@m_ife={0xe8, 0x19, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x6, 0xffffffc0, 0x3, 0x7, 0xb}, 0x1}}, @TCA_IFE_SMAC={0xa, 0x4, @remote}]}, {0x95, 0x6, "2c8958321d1c77d0d577243b579ff6e1fa81ca601f5027e702eb8ac9a32d2478cf772f338745aff0c55b943639a3baebcece65d5b419410fee46f56d67cd27399188f8257c82e02f66f1c2329a82c14eae69f548693263031dc0ff33ed8fb7e101a6fe79b8527e2f02cc8dca10b34ba7cd3e0aff29c790cae9eb66cf5a9bf4178b4d7ae9b3cd81d9e77b5ff35c197591bb"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1}}}}, @m_csum={0xe0, 0x17, 0x0, 0x0, {{0x9}, {0x58, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0xe, 0x6, 0xffffffffffffffff, 0x7, 0x5}, 0x2f}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x8, 0xf5975a67, 0x4, 0xe356, 0x7}, 0x66}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x4, 0x4, 0x1, 0x7, 0x2}, 0x25}}]}, {0x60, 0x6, "7c6629a9bbcf4cd582bfc57304d16b268b16ff4daed18425f45e089d174d420a59aea0fb68b2048e88dc1104ece15f5084b4a57c72eca1d2a1c909357f6ba441f3d0a47ce37f438cdde0e9780c3c5fb74c125aa4e3f5f7b4469de68b"}, {0xc}, {0xc, 0x8, {0x3, 0x1}}}}, @m_skbedit={0x1060, 0x0, 0x0, 0x0, {{0xc}, {0x34, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x7}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0x3, 0xc}}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x4}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x5}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x33ff}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0xf, 0x10}}]}, {0x1004, 0x6, "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"}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}, @m_simple={0xbc, 0x1, 0x0, 0x0, {{0xb}, {0x60, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0x8, 0x3, 'sfq\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x7fff, 0x5, 0x20000000, 0x9, 0x1}}, @TCA_DEF_DATA={0x9, 0x3, '(\\[&\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x8, 0x7f, 0x5, 0x4, 0x9}}, @TCA_DEF_PARMS={0x18, 0x2, {0x5, 0x5, 0x1, 0x1, 0xfffffff9}}]}, {0x33, 0x6, "ff73c1cb6c5a9286857317b264b336a24d70e655b693fe031e95080ff179151a48d82268aa73d826fbdf84c6accccd"}, {0xc}, {0xc, 0x8, {0x1, 0x1}}}}]}, @TCA_MATCHALL_FLAGS={0x8}]}}]}, 0x1a94}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000180)='kfree\x00', r4, 0x0, 0x2}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x0, 0x8004, 0x7}, 0x48) 823.900008ms ago: executing program 0 (id=4837): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, @perf_config_ext={0x1000008, 0x6}, 0x0, 0x10000, 0x0, 0x1, 0xb, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000046}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x3, 0xff) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a999850000000400000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000400)='kfree\x00', r2}, 0x18) setsockopt$inet6_int(r1, 0x29, 0x16, &(0x7f0000fcb000), 0x4) setsockopt$inet6_int(r1, 0x29, 0x16, &(0x7f0000fcb000)=0x80, 0x4) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x16, 0x0, 0x6, 0x4, 0x0, 0x1}, 0x50) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000380)='./file0\x00', 0xa00008, &(0x7f0000000140)={[{@usrquota}, {@nodiscard}, {@noblock_validity}]}, 0x1, 0x7ad, &(0x7f00000007c0)="$eJzs3c9rG1ceAPDvyD/jZNdeWNjNngwLu4YQeZ31JruwsFn2sBQaCLTnJEZWTGrZCpYcYmNIQin00kNLD4XmknPTprdc++PaXvo39FAS0tYJTemhuIw0SmRbcpzEklL8+cBY782M9N533sybZ82gCWDfGk//5CIORwykydFsfhLZjOiPOFlf7+H6WiGdktjYeOW7pLbOg/W1QjS9J3Uwy/wxIj57I+JIbnu5lZXV+ZlSqbiU5SerCxcnKyurRy8szMwV54qLx6emp4+d+MeJ43sX6w9frh66+/b///rRyZ9e/8Ottz5P4mQcypY1x7FXxmM82yYD6Sbc5H97XViPJb2uAM8kPTT76kd5HI7R6NuhJf/T1ZoBAJ1yJSI2AIB9JnH+B4B9pvE9wIP1tUJjivr1nKs9/WKiS+79NyKG6/E3rm/Wl/TXr9l9NVy7DjryIKldI2lIImJsD8ofj4jrt8/cTKfo0HVIgFauXouIc2PjW/v/tIfbes/C0/rbLtYZ35LX/0H3fJKOf/65ffwXkcuO/+Ha363jn6EWx+6zePLxn7uzKTuwB4U2Scd//266t+1hU/yZsb4s95vamG8gOX+hVEz7tt9GxEQMDKX5qR3KmLj/8/12y5rHf9+/89oHafnp6+M1cnf6hza/Z3amOvM8MTe7dy3iT/2t4k8etX/SZvx7epdlvPSvN99vtyyNP423MW2Pv7M2bkT8pWX7P74PKtnx/sTJ2u4w2dgpWvj46/dG2pXf3P7Xb6clrRUa/wt0Q9r+IzvHP5Y0369Zefoyvrgx+mm7ZZvjP3MzLX9z/K33/8Hk1Vp6MJt3eaZaXZqKGExe3j7/2OP3NvKN9dP4J/7c+vjfaf9Pu6FzWXrjCTc/9t/99sNnj7+z0vhn0/ZPsiCe2P5Pn7j1cL6vXfm7a//pWmoim7O9/+vf9rm7reBzbTwAAAAAAAAAAAAAAAAAAAAAAAAA2KVcRByKJJd/lM7l8vn6M7x/HyO5UrlSPXK+vLw4G7VnZY/FQK7xU5ejTb+HOpX9Hn4jf2xL/u8R8buIeHfoQC2fL5RLs70OHgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAyB9s8/z/1zVCvawcAdMxwrysAAHSd8z8A7D9tzv+DrWcf6GhdAIDuqJ3/k/5eVwMA6CLf/wPA/uP8DwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQIedPnUqnTZ+XF8rpPnZSyvL8+VLR2eLlfn8wnIhXygvXczPlctzpWK+UF5o+0FX6y+lcvnidCwuX56sFivVycrK6tmF8vJi9eyFhZm54tniQNciAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIDdq6yszs+USsUliZ0TV16IalzLmq3XW0PihUgMRUSnimjuJQ70pnMCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+BX4JQAA//9qsh/Y") mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)={[{@nr_inodes={'nr_inodes', 0x3d, [0x31]}}]}) 716.171869ms ago: executing program 0 (id=4838): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x30}, [@alu={0x4, 0x0, 0x7, 0x0, 0x0, 0x1, 0xffffffffffffffff}]}, &(0x7f00000002c0)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r0, 0x0, 0x33, &(0x7f0000000000)=0x80020000, 0x4) listen(r0, 0x2) syz_emit_ethernet(0x3a, &(0x7f00000004c0)={@local, @random="6cf6566994c6", @val={@void, {0x8100, 0x0, 0x0, 0x1}}, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x2d, 0x28, 0x0, 0x0, 0xa3, 0x6, 0x0, @remote, @local}, {{0x4e22, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r1, &(0x7f0000000180), 0x40010) r2 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000000000000640000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, &(0x7f00000000c0)) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) io_setup(0x6, 0x0) io_submit(0x0, 0x1, &(0x7f0000000040)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x80000000}]) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000680)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0700000000000000000005000000180001801400020073797a5f74756e0000000000000000000800038004000380080005"], 0x3c}}, 0x0) r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000005c0)='blkio.throttle.io_service_bytes\x00', 0x275a, 0x0) flistxattr(r6, 0x0, 0x0) move_mount(r1, &(0x7f0000000040)='./file0\x00', r6, &(0x7f0000000080)='./file0\x00', 0x100) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r7}, &(0x7f0000000000), &(0x7f0000000180)}, 0x20) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='fib_table_lookup\x00', r8}, 0x10) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000140)="5500000018007f5f00fe01b2a4a2809302060000ff41fd01020400000a00120002002800000019002d007fffffff0022de1330d54400009b84136ef75afb83de066a5900e1baac968300000000f2ff000001000000", 0x55}], 0x1, 0x0, 0x0, 0x7a000000}, 0x0) ioctl$TIOCSERGETLSR(r1, 0x5459, &(0x7f00000000c0)) 672.972423ms ago: executing program 0 (id=4839): syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f0000000e40)='./file2\x00', 0x410c84, &(0x7f0000000340), 0x1, 0x775, &(0x7f0000001180)="$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") r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000800b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x12, 0x2, 0x8, 0xd0eb, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x50) r2 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file2\x00', 0x42, 0x0) pwrite64(r2, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) mmap$xdp(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x2010, 0xffffffffffffffff, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000380)="390000fa461aa0fbe8ab13aa2151b94dbe9e8a722e34d7e484893ffa56020013fc071200000f00c79e0b9971bcbe9ac0ebaad60105ff7342d69135e54c46e7a03ef38bbd00594273dd88d5e35b163bf264c56f151f4a403adc4362c7dfd50ca5bb173ecbea730b1ca2f99be43d3f50c74c3dc1e2e9418d58022985fd92fca160613b3db806c19d0d9b59b4882394b60d5e7ec09b1650b718692b65b0364e8136437326cbab7bff4a", 0xa8}], 0x1) syz_open_dev$sg(&(0x7f0000000280), 0x0, 0x8842) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0xc0ed0040, &(0x7f0000002a00)={[{@noblock_validity}, {@resgid={'resgid', 0x3d, 0xee00}}, {@acl}, {@noload}, {@journal_dev={'journal_dev', 0x3d, 0x3}}, {@nodiscard}]}, 0xfe, 0x472, &(0x7f0000000940)="$eJzs3MtvG8UfAPDvOk6a9PFLf6U8WloIFETFI2nSBz1wAYHEAQQSHIo4BSetSt0GNUGiVQSBQxDigCpxRxyR+As4wQUBJySucEeVEMqlhZPRenfTxLVDHk6c4s9H2nZmd92Z786OPTtjN4CuNZT+kUTsjohfI2Iwyy4/YSj76+bCbOWvhdlKErXaa38m9fNuLMxW8n9i8XW7sh21Wp7f0aTc+TcjxqvVyct5fmTm4jsj01euPnX+4vi5yXOTl8ZOnz5x/HDfqbGTbYkzjevGwfenDh148Y1rL1fOXHvrx6/T+u7OjxdxtNNQdnWberTdhXXYniXppNzBirAmabulzdVb7/+D0RMDi8cG44WPOlo5YFPVarVas8/n3FwN+A9LotM1ADqj+KBPn3+LbYuGHtvCH89mD0Bp3DfzLTtSjlJ+Tm/D82079UfEmbm/v0i32KR5CACApb5Nxz9PNhv/leKeJef9L19D2RsR/4+IfRFxV0Tsj4i7I+rn3hsR962x/MYVktvHP6Xr6wpsldLx3zP52tby8V8x+ou9PXluTz3+3uTs+erksfyaHI3eHWl+dNlLlvvu+V8+a9z3aT7NPrRk/JduafnFWDCvx/VywwTdxPjMeFuCT+P/MOJguVn8SRTLOElEHIiIg+ss4/zjXx1qdezf419BG9aZal9GPJa1/1w0xF9IWq5Pjj59auzkSH9UJ4+NFHfF7X76ef7VVuVvKP42SNt/Z9P7P4s/fUZM+iOmr1y9UF+vnV57GfO/fVxJWhzbv877vy95vZ7uy/e9Nz4zc3k0oi95Kc0OLNs/duu1Rb44P43/6JHm/X9f9nhWvxL3R0R6Ex+OiAci4sG87R6KiIcj4sgK8f/w3CNvtzrWuv1XmJVvozT+iRXaP33LS1O32n/tiZ4L33/Tqvzaqtr/RD11NN+zmve/1VZwI9cOAAAA7hSl+nfgk9LwYrpUGh7OvsO/P3aWqlPTM0+cnXr30kT2Xfm90VsqZroGl8yHjuZzw0V+rCF/PJ83/rxnoJ4frkxVJzodPHS5XS36f+r3nk7XDth0fq8F3Uv/h+6l/0P30v+he+n/0KX6mu/+YKvrAXTE2j//+zelHsDWM/6H7qX/Q/fS/6ErtfxtfGlDP/m/UxPl7VGNpomB7VGNIhGlbVGN9iVe+STrEtulPkWivOr/zGKdiR1ND3X6nQkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKA9/gkAAP//Uo/mdg==") getpid() sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8983, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) setreuid(0x0, 0xee00) 659.405094ms ago: executing program 6 (id=4840): r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) write$selinux_attr(r0, &(0x7f0000000100)='system_u:object_r:hugetlbfs_t:s0\x00', 0x1d) socket$netlink(0x10, 0x3, 0x12) sendmsg$DEVLINK_CMD_RATE_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x34, 0x0, 0x8, 0x70bd2b, 0x25dfdbfd, {}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x40) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000500)='syzkaller\x00', 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='kmem_cache_free\x00', r3, 0x0, 0x800000000006}, 0x18) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, 0x0, 0x24000850) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) close(0xffffffffffffffff) socket$unix(0x1, 0x1, 0x0) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) sendto$inet(r1, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvfrom$inet(r1, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) 457.621135ms ago: executing program 1 (id=4841): prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000040)='kmem_cache_free\x00', 0xffffffffffffffff, 0x0, 0x10000000000000}, 0x18) syz_mount_image$msdos(&(0x7f0000000200), &(0x7f00000002c0)='./file2\x00', 0x1800880, &(0x7f00000059c0)=ANY=[], 0x1, 0x214, &(0x7f0000000840)="$eJzs3D1rW1cYB/AjWa6tlhZPhXbpoV3a5bb10qVDS3GhVNCSRCEv0zWWEyFFAl8NksmgOVM+RwhkCWQL+QL+DFmymYDx5Ck3OJKs2NixE0dy4vx+ix6e/z1X5+jARVy9bP5+91ZjNUtW004ozRdC8Y/QDzuFsBCKYaQffnpwZfvOxavX/v2zUlm6MDvsx/jVd4+v377//ZPOF5cf7nYKIYStxWcbX298s/ni0s16FutZbLU7MY3L7XYnXW7W4ko9ayQx/t+spVkt1ltZbW1fvtpsj5861LIspq1ebNR6sdOOnbVeTG+k9VZMkiTOB06lem8nz8NWnuf5XD/kef62JyhMZl5Myyn3n4/c3kU97l5Nn/e71W518DjI//6nsvRLfGVhPGq7263O7OW/DvK4P58Nnw/zxUPzz8KPPwzy3eyv/yoH8nJYmfzyAQAAAADgXErinkPv7yfJUfmgeu3zgQP370vh29K4MzP5pQAAAABHyHrrjbS5Mrs2KJq1Myvmwv7Ob4+GUzxu+M9Pjz9mQsWXwyK843nKIYSjjymGM9+U6RSj75EPO6PfF5xseOl9TaP8gbwao2I+HBaVw3pjbjqbAgAAnC/jN/0nHlKc6IQAAAAAAAAAAAAAAAAAAADgEzSNPzM76zUCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALzJywAAAP//ixdW4w==") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) ftruncate(r0, 0x403) fadvise64(r0, 0x0, 0x403, 0x4) 456.972965ms ago: executing program 0 (id=4851): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_bp={0x0, 0x5}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) epoll_create1(0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) pselect6(0x40, &(0x7f00000001c0)={0x2, 0x0, 0x3, 0xfffffffffffffffd, 0x3, 0x8, 0x0, 0xe}, 0x0, &(0x7f0000000300)={0x3ff, 0x7e7, 0x0, 0x9, 0x4, 0x0, 0x7fffffff, 0x3f8}, 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x80, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xf) ioctl$TCFLSH(r1, 0x400455c8, 0x0) syz_usb_connect(0x2, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000140)=0x1b) 409.278449ms ago: executing program 1 (id=4842): syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$eJzs3c9vFFUcAPDvbH/QUrSFGBUP0sQYSJSWFjDEeICrIQ3+iBcvVloQKdDQGi2aUBK8mBgvxph48iD+F0rkyklPHrx4MiREDUcT18x2pnTb2ZYubacyn0+y9M17O7w33X773r6+NxtAZQ2m/9Qi9kbEdBLRn8wvlnVGVji48Lx7f39yOn0kUa+/8WcSSZaXPz/JvvZlJ/dExM8/JbGnY2W9M3NXzo9PTU1ezo6HZy9MD8/MXTl47sL42cmzkxdHXxo9dvTI0WMjh9q6rqsFeSevv/9h/2djb3/3zT/JyPe/jSVxPF7Nnrj0OjbKYAw2vifJyqK+YxtdWUk6sp+TpS9x0llig1iX/PXrioinoj864v6L1x+fvlZq44BNVU8i6kBFJeIfKiofB+Tv7Ze/D66VMioBtsLdEwsTACvjv3NhbjB6GnMDO+8lsXRaJ4mI9mbmmu2KiNu3xq6fuTV2PTZpHg4oNn8tIp4uiv+kEf8D0RMDjfivNcV/Oi44lX1N819vs/7lU8XiH7bOQvz3rBr/0SL+31kS/++2Wf/g/eR7vU3x39vuJQEAAAAAAEBl3TwRES8W/f2/trj+JwrW//RFxPENqH9w2fHKv//X7mxANUCBuyciXilc/1vLV/8OdGSpxxrrAbqSM+emJg9FxOMRcSC6dqTHI6vUcfDzPV+3KhvM1v/lj7T+29lawKwddzp3NJ8zMT47/rDXDUTcvRbxTOH632Sx/08K+v/098H0A9ax5/kbp1qVrR3/wGapfxuxv7D/v3/XimT1+3MMN8YDw/moYKVnP/7ih1b1txv/bjEBDy/t/3euHv8DydL79cysv47Dc531VmXtjv+7kzcbt5zpzvI+Gp+dvTwS0Z2c7Ehzm/JH199meBTl8ZDHSxr/B55bff6vaPzfGxHzy/7v5K/mPcW5J//t+71Ve4z/oTxp/E+sq/9ff2L0xsCPrep/sP7/SKOvP5DlmP+DBV/lYdrdnF8Qjp1FRVvdXgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4FNQiYlcktaHFdK02NBTRFxFPxM7a1KWZ2RfOXPrg4kRa1vj8/1r+Sb/9C8dJ/vn/A0uOR5cdH46I3RHxZUdv43jo9KWpibIvHgAAAAAAAAAAAAAAAAAAALaJvhb7/1N/dJTdOmDTdZbdAKA0BfH/SxntALae/h+qS/xDdYl/qC7xD9Ul/qG6xD9Ul/iH6hL/AAAAAADwSNm97+avSUTMv9zbeKS6s7KuUlsGbLZa2Q0ASuMWP1Bdlv5AdXmPDyRrlPe0PGmtM1czffohTgYAAAAAAAAAAACAytm/1/5/qCr7/6G67P+H6sr3/+8ruR3A1vMeH4g1dvIX7v9f8ywAAAAAAAAAAAAAYCPNzF05Pz41NXlZ4q3t0YytTNTr9avpT8F2ac//PJEvhd8u7VmWyPf6PdhZ5f1OAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAmv0XAAD//xYSJMU=") r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./bus\x00', 0x42, 0x61) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) write(r1, &(0x7f0000004200)='t', 0x1) sendfile(r1, r0, 0x0, 0x3ffff) sendfile(r1, r0, 0x0, 0x7ffff000) 279.761042ms ago: executing program 3 (id=4843): socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001cc0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = syz_io_uring_setup(0x74d, &(0x7f00000003c0)={0x0, 0x7591, 0x800, 0x1, 0x3b2}, &(0x7f0000000340), &(0x7f0000000380)) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x8, 0x0, 0xffffffff}, 0x10) r1 = socket(0x1e, 0x4, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bind$bt_hci(r1, &(0x7f00000001c0)={0x1f, 0x0, 0x4}, 0x6) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='9p_protocol_dump\x00', r3}, 0x10) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000040), 0x200080, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[{@version_9p2000}]}}) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00'}, 0x18) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100001df00000000000000000000000a20000000000a03000000000000000000070000000900010073797a300000000068000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a300000000008000540000000212c0011800a0001006c696d69740000001c0002800c00024000000000000000030c0001400000000200000101480000000c0a010100000000000000"], 0xf8}, 0x1, 0x0, 0x0, 0x4000}, 0x0) io_uring_enter(r0, 0x749f, 0x4, 0x0, 0x0, 0xfffffffffffffef5) 156.410014ms ago: executing program 3 (id=4844): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0], 0x0}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='9p_protocol_dump\x00', r1}, 0x10) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000040), 0x200080, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@version_9p2000}]}}) 97.69922ms ago: executing program 3 (id=4845): r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000010000000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000680)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0700000000000000000005000000180001801400020073797a5f74756e0000000000000000000800038004000380080005"], 0x3c}}, 0x0) 63.697034ms ago: executing program 3 (id=4846): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0x7, 0x0, &(0x7f0000000000)="219a53f271a76d", 0x0, 0xcff, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xd9}, 0x50) 0s ago: executing program 3 (id=4847): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000040)='kmem_cache_free\x00', r1, 0x0, 0x10000000000000}, 0x18) syz_mount_image$msdos(&(0x7f0000000200), &(0x7f00000002c0)='./file2\x00', 0x1800880, &(0x7f00000059c0)=ANY=[], 0x1, 0x214, &(0x7f0000000840)="$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") r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) ftruncate(r2, 0x403) fadvise64(r2, 0x0, 0x403, 0x4) kernel console output (not intermixed with test programs): 285.572503][T15083] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 285.611716][T15083] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1280 with error 28 [ 285.624569][T15083] EXT4-fs (loop0): This should not happen!! Data will be lost [ 285.624569][T15083] [ 285.634342][T15083] EXT4-fs (loop0): Total free blocks count 0 [ 285.640442][T15083] EXT4-fs (loop0): Free/Dirty block details [ 285.646353][T15083] EXT4-fs (loop0): free_blocks=2415919104 [ 285.652126][T15083] EXT4-fs (loop0): dirty_blocks=1280 [ 285.657458][T15083] EXT4-fs (loop0): Block reservation details [ 285.663456][T15083] EXT4-fs (loop0): i_reserved_data_blocks=80 [ 285.709229][T15093] 9pnet_fd: Insufficient options for proto=fd [ 285.786359][T15101] tipc: Enabled bearer , priority 0 [ 285.919745][ T13] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2 with error 28 [ 285.932051][ T13] EXT4-fs (loop0): This should not happen!! Data will be lost [ 285.932051][ T13] [ 286.097018][T15111] loop1: detected capacity change from 0 to 32768 [ 286.115578][T15125] 9pnet_fd: Insufficient options for proto=fd [ 286.159139][T15131] loop0: detected capacity change from 0 to 2048 [ 286.190723][T15133] program syz.6.4173 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 286.202231][T15130] loop5: detected capacity change from 0 to 2048 [ 286.238513][T15131] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 286.256774][T15133] loop6: detected capacity change from 0 to 1024 [ 286.271260][T15133] EXT4-fs (loop6): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 286.276766][T15131] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 664 with error 28 [ 286.282265][T15133] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 286.290754][T15133] JBD2: no valid journal superblock found [ 286.294697][T15131] EXT4-fs (loop0): This should not happen!! Data will be lost [ 286.294697][T15131] [ 286.304224][T15133] EXT4-fs (loop6): Could not load journal inode [ 286.325919][T15131] EXT4-fs (loop0): Total free blocks count 0 [ 286.331936][T15131] EXT4-fs (loop0): Free/Dirty block details [ 286.337923][T15131] EXT4-fs (loop0): free_blocks=2415919104 [ 286.343656][T15131] EXT4-fs (loop0): dirty_blocks=672 [ 286.348902][T15131] EXT4-fs (loop0): Block reservation details [ 286.354921][T15131] EXT4-fs (loop0): i_reserved_data_blocks=42 [ 286.374275][T15130] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 286.407576][T15130] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1006 with error 28 [ 286.420156][T15130] EXT4-fs (loop5): This should not happen!! Data will be lost [ 286.420156][T15130] [ 286.429987][T15130] EXT4-fs (loop5): Total free blocks count 0 [ 286.435986][T15130] EXT4-fs (loop5): Free/Dirty block details [ 286.442044][T15130] EXT4-fs (loop5): free_blocks=2415919104 [ 286.448162][T15130] EXT4-fs (loop5): dirty_blocks=1008 [ 286.453550][T15130] EXT4-fs (loop5): Block reservation details [ 286.459764][T15130] EXT4-fs (loop5): i_reserved_data_blocks=63 [ 286.500814][T15148] loop6: detected capacity change from 0 to 2048 [ 286.521289][ T12] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2 with error 28 [ 286.533523][ T12] EXT4-fs (loop5): This should not happen!! Data will be lost [ 286.533523][ T12] [ 286.555272][ T12] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2 with error 28 [ 286.567539][ T12] EXT4-fs (loop0): This should not happen!! Data will be lost [ 286.567539][ T12] [ 286.581670][T15100] tipc: Disabling bearer [ 286.654674][T15158] loop5: detected capacity change from 0 to 512 [ 286.686630][T15161] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=15161 comm=syz.3.4180 [ 286.716040][T15158] EXT4-fs error (device loop5): ext4_xattr_inode_iget:441: inode #18: comm syz.5.4179: iget: bad extra_isize 90 (inode size 256) [ 286.746539][T15163] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=15163 comm=syz.0.4181 [ 286.829616][T15158] EXT4-fs error (device loop5): ext4_xattr_inode_iget:446: comm syz.5.4179: error while reading EA inode 18 err=-117 [ 286.842276][T15158] EXT4-fs error (device loop5): ext4_xattr_inode_iget:441: inode #18: comm syz.5.4179: iget: bad extra_isize 90 (inode size 256) [ 286.882046][T15170] FAULT_INJECTION: forcing a failure. [ 286.882046][T15170] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 286.895251][T15170] CPU: 0 UID: 0 PID: 15170 Comm: syz.3.4183 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 286.895301][T15170] Tainted: [W]=WARN [ 286.895308][T15170] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 286.895328][T15170] Call Trace: [ 286.895335][T15170] [ 286.895343][T15170] __dump_stack+0x1d/0x30 [ 286.895368][T15170] dump_stack_lvl+0xe8/0x140 [ 286.895390][T15170] dump_stack+0x15/0x1b [ 286.895462][T15170] should_fail_ex+0x265/0x280 [ 286.895484][T15170] should_fail+0xb/0x20 [ 286.895501][T15170] should_fail_usercopy+0x1a/0x20 [ 286.895567][T15170] _copy_from_user+0x1c/0xb0 [ 286.895597][T15170] ___sys_sendmsg+0xc1/0x1d0 [ 286.895634][T15170] __x64_sys_sendmsg+0xd4/0x160 [ 286.895737][T15170] x64_sys_call+0x191e/0x3000 [ 286.895761][T15170] do_syscall_64+0xd2/0x200 [ 286.895783][T15170] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 286.895812][T15170] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 286.895903][T15170] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 286.895925][T15170] RIP: 0033:0x7ff7f717f6c9 [ 286.895941][T15170] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 286.895960][T15170] RSP: 002b:00007ff7f5bbe038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 286.896049][T15170] RAX: ffffffffffffffda RBX: 00007ff7f73d6090 RCX: 00007ff7f717f6c9 [ 286.896061][T15170] RDX: 00000000240008c4 RSI: 0000200000000000 RDI: 0000000000000006 [ 286.896073][T15170] RBP: 00007ff7f5bbe090 R08: 0000000000000000 R09: 0000000000000000 [ 286.896085][T15170] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 286.896097][T15170] R13: 00007ff7f73d6128 R14: 00007ff7f73d6090 R15: 00007ffef6f2f9b8 [ 286.896116][T15170] [ 287.073644][T15158] EXT4-fs error (device loop5): ext4_xattr_inode_iget:446: comm syz.5.4179: error while reading EA inode 18 err=-117 [ 287.086234][T15158] EXT4-fs (loop5): 1 orphan inode deleted [ 287.093601][ T30] kauditd_printk_skb: 275 callbacks suppressed [ 287.093614][ T30] audit: type=1326 audit(287.011:31247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15171 comm="syz.6.4184" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb30a93f6c9 code=0x7ffc0000 [ 287.097769][T15169] 9pnet_fd: Insufficient options for proto=fd [ 287.099872][ T30] audit: type=1326 audit(287.011:31248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15171 comm="syz.6.4184" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb30a93f6c9 code=0x7ffc0000 [ 287.151870][ T30] audit: type=1326 audit(287.011:31249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15171 comm="syz.6.4184" exe="/root/syz-executor" sig=0 arch=c000003e syscall=440 compat=0 ip=0x7fb30a93f6c9 code=0x7ffc0000 [ 287.174923][ T30] audit: type=1326 audit(287.011:31250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15171 comm="syz.6.4184" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb30a93f6c9 code=0x7ffc0000 [ 287.198133][ T30] audit: type=1326 audit(287.011:31251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15171 comm="syz.6.4184" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb30a93f6c9 code=0x7ffc0000 [ 287.221273][ T30] audit: type=1326 audit(287.011:31252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15171 comm="syz.6.4184" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb30a93f6c9 code=0x7ffc0000 [ 287.244281][ T30] audit: type=1326 audit(287.011:31253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15171 comm="syz.6.4184" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb30a93f6c9 code=0x7ffc0000 [ 287.267324][ T30] audit: type=1326 audit(287.011:31254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15171 comm="syz.6.4184" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb30a93f6c9 code=0x7ffc0000 [ 287.290403][ T30] audit: type=1326 audit(287.021:31255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15171 comm="syz.6.4184" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb30a93f6c9 code=0x7ffc0000 [ 287.315129][ T30] audit: type=1326 audit(287.051:31256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15171 comm="syz.6.4184" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb30a93f6c9 code=0x7ffc0000 [ 287.348432][T15178] hsr0: entered promiscuous mode [ 287.354073][T15178] macsec1: entered allmulticast mode [ 287.359434][T15178] hsr0: entered allmulticast mode [ 287.364662][T15178] hsr_slave_0: entered allmulticast mode [ 287.370346][T15178] hsr_slave_1: entered allmulticast mode [ 287.391983][T15178] hsr0: left allmulticast mode [ 287.396910][T15178] hsr_slave_0: left allmulticast mode [ 287.402392][T15178] hsr_slave_1: left allmulticast mode [ 287.477023][T15187] loop5: detected capacity change from 0 to 2048 [ 287.582718][T15206] bridge0: port 3(syz_tun) entered blocking state [ 287.589221][T15206] bridge0: port 3(syz_tun) entered disabled state [ 287.595887][T15206] syz_tun: entered allmulticast mode [ 287.608554][T15206] syz_tun: entered promiscuous mode [ 287.639075][T15206] bridge0: port 3(syz_tun) entered blocking state [ 287.645661][T15206] bridge0: port 3(syz_tun) entered forwarding state [ 287.674483][T15187] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 287.689911][T15187] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 614 with error 28 [ 287.702400][T15187] EXT4-fs (loop5): This should not happen!! Data will be lost [ 287.702400][T15187] [ 287.712058][T15187] EXT4-fs (loop5): Total free blocks count 0 [ 287.718237][T15187] EXT4-fs (loop5): Free/Dirty block details [ 287.724215][T15187] EXT4-fs (loop5): free_blocks=2415919104 [ 287.730162][T15187] EXT4-fs (loop5): dirty_blocks=624 [ 287.735375][T15187] EXT4-fs (loop5): Block reservation details [ 287.741409][T15187] EXT4-fs (loop5): i_reserved_data_blocks=39 [ 287.758414][T15212] 9pnet_fd: Insufficient options for proto=fd [ 287.797097][T15217] loop1: detected capacity change from 0 to 512 [ 287.816327][ T12] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2 with error 28 [ 287.828668][ T12] EXT4-fs (loop5): This should not happen!! Data will be lost [ 287.828668][ T12] [ 287.859131][T15225] FAULT_INJECTION: forcing a failure. [ 287.859131][T15225] name failslab, interval 1, probability 0, space 0, times 0 [ 287.871831][T15225] CPU: 0 UID: 0 PID: 15225 Comm: syz.5.4203 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 287.871873][T15225] Tainted: [W]=WARN [ 287.871894][T15225] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 287.871910][T15225] Call Trace: [ 287.871992][T15225] [ 287.872003][T15225] __dump_stack+0x1d/0x30 [ 287.872032][T15225] dump_stack_lvl+0xe8/0x140 [ 287.872060][T15225] dump_stack+0x15/0x1b [ 287.872084][T15225] should_fail_ex+0x265/0x280 [ 287.872110][T15225] should_failslab+0x8c/0xb0 [ 287.872213][T15225] __kmalloc_noprof+0xa5/0x570 [ 287.872303][T15225] ? sock_kmalloc+0x85/0xc0 [ 287.872331][T15225] sock_kmalloc+0x85/0xc0 [ 287.872357][T15225] ipv6_renew_options+0x1fb/0x5f0 [ 287.872523][T15225] ipv6_set_opt_hdr+0x13b/0x620 [ 287.872566][T15225] do_ipv6_setsockopt+0x10b9/0x2160 [ 287.872609][T15225] ? calipso_sock_getattr+0x224/0x340 [ 287.872718][T15225] ? __rcu_read_unlock+0x4f/0x70 [ 287.872753][T15225] ? ip6_datagram_release_cb+0xf8/0x160 [ 287.872800][T15225] ? _raw_spin_unlock_bh+0x36/0x40 [ 287.872909][T15225] ? release_sock+0x116/0x150 [ 287.872948][T15225] ? selinux_netlbl_socket_setsockopt+0x255/0x2d0 [ 287.873022][T15225] ipv6_setsockopt+0x59/0x130 [ 287.873066][T15225] udpv6_setsockopt+0x99/0xb0 [ 287.873104][T15225] sock_common_setsockopt+0x69/0x80 [ 287.873143][T15225] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 287.873179][T15225] __sys_setsockopt+0x184/0x200 [ 287.873224][T15225] __x64_sys_setsockopt+0x64/0x80 [ 287.873334][T15225] x64_sys_call+0x20ec/0x3000 [ 287.873395][T15225] do_syscall_64+0xd2/0x200 [ 287.873497][T15225] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 287.873536][T15225] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 287.873649][T15225] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 287.873670][T15225] RIP: 0033:0x7fcfb109f6c9 [ 287.873758][T15225] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 287.873851][T15225] RSP: 002b:00007fcfafb07038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 287.873944][T15225] RAX: ffffffffffffffda RBX: 00007fcfb12f5fa0 RCX: 00007fcfb109f6c9 [ 287.873958][T15225] RDX: 0000000000000036 RSI: 0000000000000029 RDI: 0000000000000004 [ 287.873970][T15225] RBP: 00007fcfafb07090 R08: 00000000000001b0 R09: 0000000000000000 [ 287.873985][T15225] R10: 0000200000000300 R11: 0000000000000246 R12: 0000000000000001 [ 287.874002][T15225] R13: 00007fcfb12f6038 R14: 00007fcfb12f5fa0 R15: 00007ffd9b3c9e28 [ 287.874028][T15225] [ 287.876506][T15217] EXT4-fs error (device loop1): ext4_acquire_dquot:6945: comm syz.1.4200: Failed to acquire dquot type 1 [ 287.892091][T15224] loop6: detected capacity change from 0 to 512 [ 287.915489][T15228] loop0: detected capacity change from 0 to 2048 [ 287.922084][T15217] EXT4-fs (loop1): 1 truncate cleaned up [ 288.016608][T15238] siw: device registration error -23 [ 288.253516][T15250] loop0: detected capacity change from 0 to 2048 [ 288.476882][T15263] loop3: detected capacity change from 0 to 512 [ 288.486535][T15250] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 288.508484][T15263] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e843c02c, mo2=0102] [ 288.533226][T15263] System zones: 1-12 [ 288.540952][T15250] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 288.553465][T15250] EXT4-fs (loop0): This should not happen!! Data will be lost [ 288.553465][T15250] [ 288.563164][T15250] EXT4-fs (loop0): Total free blocks count 0 [ 288.569267][T15250] EXT4-fs (loop0): Free/Dirty block details [ 288.575250][T15250] EXT4-fs (loop0): free_blocks=2415919104 [ 288.588222][T15250] EXT4-fs (loop0): dirty_blocks=2352 [ 288.593531][T15250] EXT4-fs (loop0): Block reservation details [ 288.599586][T15250] EXT4-fs (loop0): i_reserved_data_blocks=147 [ 288.628256][T15263] EXT4-fs error (device loop3): ext4_xattr_inode_iget:446: comm syz.3.4215: error while reading EA inode 32 err=-116 [ 288.672944][T15263] EXT4-fs (loop3): Remounting filesystem read-only [ 288.699100][T15263] EXT4-fs (loop3): 1 orphan inode deleted [ 288.808175][T15275] loop3: detected capacity change from 0 to 512 [ 288.849474][T15275] EXT4-fs error (device loop3): ext4_acquire_dquot:6945: comm syz.3.4219: Failed to acquire dquot type 1 [ 288.861611][T15277] tipc: Enabled bearer , priority 0 [ 288.868731][T15277] +: renamed from syzkaller0 [ 288.869386][T15275] EXT4-fs (loop3): 1 truncate cleaned up [ 288.880533][T15277] tipc: Disabling bearer [ 288.918171][ T12] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2 with error 28 [ 288.922448][T15283] tipc: Enabled bearer , priority 0 [ 288.930468][ T12] EXT4-fs (loop0): This should not happen!! Data will be lost [ 288.930468][ T12] [ 288.954451][T15283] +: renamed from syzkaller0 [ 288.978727][T15283] tipc: Disabling bearer [ 289.160529][T15300] netlink: 4 bytes leftover after parsing attributes in process `ÿ'. [ 289.259777][T15314] loop3: detected capacity change from 0 to 512 [ 289.274745][T15316] loop1: detected capacity change from 0 to 512 [ 289.289491][T15316] EXT4-fs error (device loop1): ext4_acquire_dquot:6945: comm syz.1.4232: Failed to acquire dquot type 1 [ 289.306785][T15316] EXT4-fs (loop1): 1 truncate cleaned up [ 289.336583][T15315] loop6: detected capacity change from 0 to 128 [ 289.378103][T15327] 9pnet_fd: Insufficient options for proto=fd [ 289.420982][T15333] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 289.441168][T15335] FAULT_INJECTION: forcing a failure. [ 289.441168][T15335] name failslab, interval 1, probability 0, space 0, times 0 [ 289.453954][T15335] CPU: 1 UID: 0 PID: 15335 Comm: syz.1.4240 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 289.454017][T15335] Tainted: [W]=WARN [ 289.454025][T15335] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 289.454084][T15335] Call Trace: [ 289.454093][T15335] [ 289.454101][T15335] __dump_stack+0x1d/0x30 [ 289.454131][T15335] dump_stack_lvl+0xe8/0x140 [ 289.454160][T15335] dump_stack+0x15/0x1b [ 289.454238][T15335] should_fail_ex+0x265/0x280 [ 289.454265][T15335] should_failslab+0x8c/0xb0 [ 289.454306][T15335] kmem_cache_alloc_noprof+0x50/0x480 [ 289.454418][T15335] ? getname_flags+0x80/0x3b0 [ 289.454495][T15335] ? kstrtouint+0x76/0xc0 [ 289.454537][T15335] getname_flags+0x80/0x3b0 [ 289.454587][T15335] user_path_at+0x28/0x130 [ 289.454615][T15335] user_statfs+0x4d/0x110 [ 289.454635][T15335] __x64_sys_statfs+0x65/0xf0 [ 289.454695][T15335] ? fput+0x8f/0xc0 [ 289.454717][T15335] ? ksys_write+0x192/0x1a0 [ 289.454753][T15335] x64_sys_call+0x2a07/0x3000 [ 289.454777][T15335] do_syscall_64+0xd2/0x200 [ 289.454798][T15335] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 289.454852][T15335] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 289.454891][T15335] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 289.454980][T15335] RIP: 0033:0x7f9c6772f6c9 [ 289.455059][T15335] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 289.455125][T15335] RSP: 002b:00007f9c6618f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000089 [ 289.455150][T15335] RAX: ffffffffffffffda RBX: 00007f9c67985fa0 RCX: 00007f9c6772f6c9 [ 289.455240][T15335] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000001000 [ 289.455257][T15335] RBP: 00007f9c6618f090 R08: 0000000000000000 R09: 0000000000000000 [ 289.455273][T15335] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 289.455286][T15335] R13: 00007f9c67986038 R14: 00007f9c67985fa0 R15: 00007ffcfcad9758 [ 289.455306][T15335] [ 289.458555][T15338] netlink: 20 bytes leftover after parsing attributes in process `wÞ£ÿ'. [ 289.804142][T15354] loop3: detected capacity change from 0 to 512 [ 289.818883][T15354] EXT4-fs error (device loop3): ext4_acquire_dquot:6945: comm syz.3.4246: Failed to acquire dquot type 1 [ 289.830947][T15354] EXT4-fs (loop3): 1 truncate cleaned up [ 289.864486][T15360] loop3: detected capacity change from 0 to 512 [ 289.934378][ T7464] hid_parser_main: 22 callbacks suppressed [ 289.934401][ T7464] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 289.947772][ T7464] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 289.955541][ T7464] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 289.962998][ T7464] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 289.970553][ T7464] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 289.978035][ T7464] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 289.985464][ T7464] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 289.992955][ T7464] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 290.000456][ T7464] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 290.008137][ T7464] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 290.016588][T15367] netlink: 'syz.3.4250': attribute type 1 has an invalid length. [ 290.027577][ T7464] hid-generic 0000:0000:0000.0002: hidraw0: HID v8.00 Device [syz0] on syz0 [ 290.060778][T15367] 8021q: adding VLAN 0 to HW filter on device bond3 [ 290.111218][T15374] FAULT_INJECTION: forcing a failure. [ 290.111218][T15374] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 290.124441][T15374] CPU: 1 UID: 0 PID: 15374 Comm: syz.0.4253 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 290.124539][T15374] Tainted: [W]=WARN [ 290.124550][T15374] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 290.124566][T15374] Call Trace: [ 290.124575][T15374] [ 290.124719][T15374] __dump_stack+0x1d/0x30 [ 290.124750][T15374] dump_stack_lvl+0xe8/0x140 [ 290.124779][T15374] dump_stack+0x15/0x1b [ 290.124804][T15374] should_fail_ex+0x265/0x280 [ 290.124882][T15374] should_fail+0xb/0x20 [ 290.124905][T15374] should_fail_usercopy+0x1a/0x20 [ 290.124974][T15374] _copy_to_user+0x20/0xa0 [ 290.125051][T15374] simple_read_from_buffer+0xb5/0x130 [ 290.125086][T15374] proc_fail_nth_read+0x10e/0x150 [ 290.125207][T15374] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 290.125251][T15374] vfs_read+0x1a8/0x770 [ 290.125286][T15374] ? _raw_spin_unlock+0x26/0x50 [ 290.125324][T15374] ? finish_task_switch+0xad/0x2b0 [ 290.125351][T15374] ? xfd_validate_state+0x45/0xf0 [ 290.125376][T15374] ksys_read+0xda/0x1a0 [ 290.125412][T15374] __x64_sys_read+0x40/0x50 [ 290.125488][T15374] x64_sys_call+0x27c0/0x3000 [ 290.125520][T15374] do_syscall_64+0xd2/0x200 [ 290.125548][T15374] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 290.125600][T15374] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 290.125715][T15374] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 290.125743][T15374] RIP: 0033:0x7fac6227e0dc [ 290.125804][T15374] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 290.125828][T15374] RSP: 002b:00007fac60ce7030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 290.125847][T15374] RAX: ffffffffffffffda RBX: 00007fac624d5fa0 RCX: 00007fac6227e0dc [ 290.125875][T15374] RDX: 000000000000000f RSI: 00007fac60ce70a0 RDI: 0000000000000004 [ 290.125908][T15374] RBP: 00007fac60ce7090 R08: 0000000000000000 R09: 0000000000000000 [ 290.125985][T15374] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 290.126001][T15374] R13: 00007fac624d6038 R14: 00007fac624d5fa0 R15: 00007ffd39dac3a8 [ 290.126025][T15374] [ 290.422022][T15389] loop3: detected capacity change from 0 to 512 [ 290.714869][T15415] netlink: 68 bytes leftover after parsing attributes in process `syz.0.4268'. [ 290.739528][T15414] tipc: Enabled bearer , priority 0 [ 290.746903][T15414] +: renamed from syzkaller0 [ 290.762316][T15414] tipc: Disabling bearer [ 290.880537][T15426] loop5: detected capacity change from 0 to 2048 [ 290.963926][T15426] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 290.979586][T15426] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1106 with error 28 [ 290.992113][T15426] EXT4-fs (loop5): This should not happen!! Data will be lost [ 290.992113][T15426] [ 291.001964][T15426] EXT4-fs (loop5): Total free blocks count 0 [ 291.007994][T15426] EXT4-fs (loop5): Free/Dirty block details [ 291.013954][T15426] EXT4-fs (loop5): free_blocks=2415919104 [ 291.019727][T15426] EXT4-fs (loop5): dirty_blocks=1120 [ 291.025030][T15426] EXT4-fs (loop5): Block reservation details [ 291.031063][T15426] EXT4-fs (loop5): i_reserved_data_blocks=70 [ 291.052557][T15446] ip6t_srh: unknown srh match flags 4000 [ 291.145667][ T12] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2 with error 28 [ 291.157930][ T12] EXT4-fs (loop5): This should not happen!! Data will be lost [ 291.157930][ T12] [ 291.169839][T15458] FAULT_INJECTION: forcing a failure. [ 291.169839][T15458] name failslab, interval 1, probability 0, space 0, times 0 [ 291.182582][T15458] CPU: 0 UID: 0 PID: 15458 Comm: syz.6.4284 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 291.182721][T15458] Tainted: [W]=WARN [ 291.182836][T15458] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 291.182850][T15458] Call Trace: [ 291.182856][T15458] [ 291.182863][T15458] __dump_stack+0x1d/0x30 [ 291.182886][T15458] dump_stack_lvl+0xe8/0x140 [ 291.182908][T15458] dump_stack+0x15/0x1b [ 291.182926][T15458] should_fail_ex+0x265/0x280 [ 291.183032][T15458] should_failslab+0x8c/0xb0 [ 291.183063][T15458] kmem_cache_alloc_noprof+0x50/0x480 [ 291.183093][T15458] ? alloc_empty_file+0x76/0x200 [ 291.183113][T15458] alloc_empty_file+0x76/0x200 [ 291.183208][T15458] alloc_file_pseudo+0xc6/0x160 [ 291.183279][T15458] __shmem_file_setup+0x1de/0x210 [ 291.183301][T15458] shmem_file_setup+0x3b/0x50 [ 291.183320][T15458] __se_sys_memfd_create+0x2c3/0x590 [ 291.183347][T15458] __x64_sys_memfd_create+0x31/0x40 [ 291.183379][T15458] x64_sys_call+0x2ac2/0x3000 [ 291.183403][T15458] do_syscall_64+0xd2/0x200 [ 291.183424][T15458] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 291.183453][T15458] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 291.183566][T15458] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 291.183594][T15458] RIP: 0033:0x7fb30a93f6c9 [ 291.183610][T15458] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 291.183629][T15458] RSP: 002b:00007fb30939ed68 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 291.183648][T15458] RAX: ffffffffffffffda RBX: 000000000000409c RCX: 00007fb30a93f6c9 [ 291.183661][T15458] RDX: 00007fb30939edec RSI: 0000000000000000 RDI: 00007fb30a9c2960 [ 291.183699][T15458] RBP: 0000200000000000 R08: 00007fb30939eb07 R09: 0000000000000000 [ 291.183712][T15458] R10: 000000000000000a R11: 0000000000000202 R12: 0000000000000001 [ 291.183724][T15458] R13: 00007fb30939edec R14: 00007fb30939edf0 R15: 00007fff9f7f47e8 [ 291.183744][T15458] [ 291.190461][T15460] ip6tnl1: entered promiscuous mode [ 291.257945][T15463] netlink: 48 bytes leftover after parsing attributes in process `syz.6.4287'. [ 291.261688][T15460] ip6tnl1: entered allmulticast mode [ 291.406892][T15463] netlink: 48 bytes leftover after parsing attributes in process `syz.6.4287'. [ 291.537631][T15476] netlink: 20 bytes leftover after parsing attributes in process `syz.6.4292'. [ 291.548211][T15480] loop1: detected capacity change from 0 to 2048 [ 291.560187][T15476] IPv6: Can't replace route, no match found [ 291.567128][T15476] program syz.6.4292 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 291.654226][T15485] loop5: detected capacity change from 0 to 8192 [ 291.669495][T15487] loop0: detected capacity change from 0 to 512 [ 291.689516][T15487] EXT4-fs error (device loop0): ext4_acquire_dquot:6945: comm syz.0.4297: Failed to acquire dquot type 1 [ 291.728849][T15487] EXT4-fs (loop0): 1 truncate cleaned up [ 291.804387][ T7167] FAT-fs (loop5): error, invalid access to FAT (entry 0x0000e1b1) [ 291.812302][ T7167] FAT-fs (loop5): Filesystem has been set read-only [ 291.836211][T15500] netlink: 4 bytes leftover after parsing attributes in process `ÿ'. [ 291.846427][T15506] netlink: 20 bytes leftover after parsing attributes in process `syz.5.4303'. [ 291.926615][T15520] loop1: detected capacity change from 0 to 2048 [ 291.968729][T15527] 9pnet_fd: Insufficient options for proto=fd [ 291.971853][T15528] loop5: detected capacity change from 0 to 512 [ 291.983131][T15528] EXT4-fs error (device loop5): ext4_xattr_inode_iget:446: comm syz.5.4309: error while reading EA inode 32 err=-116 [ 291.996562][T15528] EXT4-fs (loop5): Remounting filesystem read-only [ 292.003150][T15528] EXT4-fs warning (device loop5): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 292.013866][T15528] EXT4-fs (loop5): 1 orphan inode deleted [ 292.016141][T15531] loop1: detected capacity change from 0 to 2048 [ 292.224817][T15541] loop1: detected capacity change from 0 to 2048 [ 292.274929][T15545] netlink: 48 bytes leftover after parsing attributes in process `syz.5.4314'. [ 292.284090][T15545] netlink: 48 bytes leftover after parsing attributes in process `syz.5.4314'. [ 292.369474][ T30] kauditd_printk_skb: 807 callbacks suppressed [ 292.369491][ T30] audit: type=1326 audit(292.291:32054): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15546 comm="syz.5.4315" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcfb109f6c9 code=0x7ffc0000 [ 292.404453][ T30] audit: type=1326 audit(292.291:32055): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15546 comm="syz.5.4315" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcfb109f6c9 code=0x7ffc0000 [ 292.427725][ T30] audit: type=1326 audit(292.291:32056): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15546 comm="syz.5.4315" exe="/root/syz-executor" sig=0 arch=c000003e syscall=77 compat=0 ip=0x7fcfb109f6c9 code=0x7ffc0000 [ 292.450828][ T30] audit: type=1326 audit(292.291:32057): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15546 comm="syz.5.4315" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcfb109f6c9 code=0x7ffc0000 [ 292.473861][ T30] audit: type=1326 audit(292.291:32058): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15546 comm="syz.5.4315" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fcfb109f6c9 code=0x7ffc0000 [ 292.496810][ T30] audit: type=1326 audit(292.291:32059): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15546 comm="syz.5.4315" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcfb109f6c9 code=0x7ffc0000 [ 292.519892][ T30] audit: type=1326 audit(292.291:32060): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15546 comm="syz.5.4315" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7fcfb109f6c9 code=0x7ffc0000 [ 292.542891][ T30] audit: type=1326 audit(292.291:32061): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15546 comm="syz.5.4315" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcfb109f6c9 code=0x7ffc0000 [ 292.565951][ T30] audit: type=1326 audit(292.291:32062): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15546 comm="syz.5.4315" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcfb109f6c9 code=0x7ffc0000 [ 292.599604][ T30] audit: type=1326 audit(292.321:32063): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15550 comm="syz.5.4316" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcfb109f6c9 code=0x7ffc0000 [ 292.685939][T15552] loop5: detected capacity change from 0 to 128 [ 292.711604][T15559] netlink: 'syz.6.4319': attribute type 4 has an invalid length. [ 292.727627][T15557] loop1: detected capacity change from 0 to 2048 [ 292.791800][T15567] netlink: 'syz.6.4319': attribute type 4 has an invalid length. [ 292.921678][T15574] loop3: detected capacity change from 0 to 512 [ 292.939496][T15574] EXT4-fs error (device loop3): ext4_acquire_dquot:6945: comm syz.3.4323: Failed to acquire dquot type 1 [ 292.950776][T15576] tipc: Enabled bearer , priority 0 [ 292.951188][T15576] +: renamed from syzkaller0 [ 292.963165][T15574] EXT4-fs (loop3): 1 truncate cleaned up [ 292.970322][T15576] tipc: Disabling bearer [ 293.149542][T15590] syzkaller0: entered promiscuous mode [ 293.149614][T15590] syzkaller0: entered allmulticast mode [ 293.156448][T15594] hsr_slave_0: left promiscuous mode [ 293.162102][T15594] hsr_slave_1: left promiscuous mode [ 293.234299][T15603] FAULT_INJECTION: forcing a failure. [ 293.234299][T15603] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 293.234341][T15603] CPU: 0 UID: 0 PID: 15603 Comm: syz.6.4333 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 293.234373][T15603] Tainted: [W]=WARN [ 293.234382][T15603] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 293.234400][T15603] Call Trace: [ 293.234438][T15603] [ 293.234448][T15603] __dump_stack+0x1d/0x30 [ 293.234477][T15603] dump_stack_lvl+0xe8/0x140 [ 293.234558][T15603] dump_stack+0x15/0x1b [ 293.234583][T15603] should_fail_ex+0x265/0x280 [ 293.234610][T15603] should_fail+0xb/0x20 [ 293.234631][T15603] should_fail_usercopy+0x1a/0x20 [ 293.234663][T15603] _copy_to_user+0x20/0xa0 [ 293.234695][T15603] do_fcntl+0x8b2/0xdf0 [ 293.234720][T15603] ? selinux_file_fcntl+0x1cb/0x1e0 [ 293.234766][T15603] __se_sys_fcntl+0xb1/0x120 [ 293.234790][T15603] __x64_sys_fcntl+0x43/0x50 [ 293.234843][T15603] x64_sys_call+0x29a4/0x3000 [ 293.234888][T15603] do_syscall_64+0xd2/0x200 [ 293.234918][T15603] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 293.234983][T15603] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 293.235033][T15603] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 293.235086][T15603] RIP: 0033:0x7fb30a93f6c9 [ 293.235109][T15603] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 293.235138][T15603] RSP: 002b:00007fb30939f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000048 [ 293.235184][T15603] RAX: ffffffffffffffda RBX: 00007fb30ab95fa0 RCX: 00007fb30a93f6c9 [ 293.235203][T15603] RDX: 00002000000000c0 RSI: 0000000000000024 RDI: 0000000000000003 [ 293.235254][T15603] RBP: 00007fb30939f090 R08: 0000000000000000 R09: 0000000000000000 [ 293.235272][T15603] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 293.235290][T15603] R13: 00007fb30ab96038 R14: 00007fb30ab95fa0 R15: 00007fff9f7f47e8 [ 293.235319][T15603] [ 293.357689][T15605] loop3: detected capacity change from 0 to 1024 [ 294.005574][T15642] loop6: detected capacity change from 0 to 1024 [ 294.014238][T15642] EXT4-fs error (device loop6): ext4_acquire_dquot:6945: comm syz.6.4346: Failed to acquire dquot type 0 [ 294.027674][T15642] EXT4-fs error (device loop6): mb_free_blocks:2017: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 294.050664][T15645] $Hÿ: renamed from bond0 (while UP) [ 294.060037][T15645] $Hÿ: entered promiscuous mode [ 294.065309][T15645] bond_slave_0: entered promiscuous mode [ 294.067216][T15647] ip6t_srh: unknown srh match flags 4000 [ 294.071289][T15645] bond_slave_1: entered promiscuous mode [ 294.095299][T15642] EXT4-fs error (device loop6): ext4_do_update_inode:5632: inode #13: comm syz.6.4346: corrupted inode contents [ 294.112921][T15642] EXT4-fs error (device loop6): ext4_dirty_inode:6517: inode #13: comm syz.6.4346: mark_inode_dirty error [ 294.126855][T15642] EXT4-fs error (device loop6): ext4_do_update_inode:5632: inode #13: comm syz.6.4346: corrupted inode contents [ 294.150998][T15642] EXT4-fs error (device loop6): __ext4_ext_dirty:206: inode #13: comm syz.6.4346: mark_inode_dirty error [ 294.165546][T15634] sg_write: data in/out 705/246 bytes for SCSI command 0x0-- guessing data in; [ 294.165546][T15634] program syz.0.4344 not setting count and/or reply_len properly [ 294.191372][T15642] EXT4-fs error (device loop6): ext4_do_update_inode:5632: inode #13: comm syz.6.4346: corrupted inode contents [ 294.215018][T15642] EXT4-fs error (device loop6) in ext4_orphan_del:301: Corrupt filesystem [ 294.240110][T15642] EXT4-fs error (device loop6): ext4_do_update_inode:5632: inode #13: comm syz.6.4346: corrupted inode contents [ 294.253996][T15642] EXT4-fs error (device loop6): ext4_truncate:4637: inode #13: comm syz.6.4346: mark_inode_dirty error [ 294.265539][T15642] EXT4-fs error (device loop6) in ext4_process_orphan:343: Corrupt filesystem [ 294.266534][T15636] loop3: detected capacity change from 0 to 32768 [ 294.277989][T15642] EXT4-fs (loop6): 1 truncate cleaned up [ 294.287984][T15642] FAULT_INJECTION: forcing a failure. [ 294.287984][T15642] name failslab, interval 1, probability 0, space 0, times 0 [ 294.300697][T15642] CPU: 1 UID: 0 PID: 15642 Comm: syz.6.4346 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 294.300851][T15642] Tainted: [W]=WARN [ 294.300859][T15642] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 294.300872][T15642] Call Trace: [ 294.300880][T15642] [ 294.300888][T15642] __dump_stack+0x1d/0x30 [ 294.300942][T15642] dump_stack_lvl+0xe8/0x140 [ 294.300973][T15642] dump_stack+0x15/0x1b [ 294.300993][T15642] should_fail_ex+0x265/0x280 [ 294.301014][T15642] should_failslab+0x8c/0xb0 [ 294.301045][T15642] __kmalloc_noprof+0xa5/0x570 [ 294.301153][T15642] ? ext4_find_extent+0x16b/0x7a0 [ 294.301183][T15642] ext4_find_extent+0x16b/0x7a0 [ 294.301214][T15642] ext4_ext_map_blocks+0x11f/0x38a0 [ 294.301318][T15642] ? fixup_exception+0x741/0xd50 [ 294.301348][T15642] ? exc_page_fault+0x62/0xa0 [ 294.301381][T15642] ? kernelmode_fixup_or_oops+0x59/0xb0 [ 294.301410][T15642] ? strncpy_from_user+0x1f4/0x230 [ 294.301449][T15642] ext4_map_query_blocks+0xa8/0x480 [ 294.301559][T15642] ext4_map_blocks+0x330/0xd00 [ 294.301596][T15642] ? __traceiter_kfree+0x2e/0x50 [ 294.301688][T15642] ? security_compute_sid+0x11da/0x1290 [ 294.301722][T15642] ext4_getblk+0x114/0x510 [ 294.301761][T15642] ext4_bread_batch+0x5c/0x320 [ 294.301798][T15642] __ext4_find_entry+0x840/0xf40 [ 294.301861][T15642] ? __d_alloc+0x3d/0x340 [ 294.301896][T15642] ? avc_has_perm_noaudit+0x1b1/0x200 [ 294.301937][T15642] ? may_create+0x26e/0x2b0 [ 294.301975][T15642] ext4_lookup+0xbb/0x390 [ 294.302082][T15642] ? __pfx_ext4_lookup+0x10/0x10 [ 294.302111][T15642] path_openat+0xcf3/0x2170 [ 294.302155][T15642] do_filp_open+0x109/0x230 [ 294.302187][T15642] do_sys_openat2+0xa6/0x110 [ 294.302218][T15642] __x64_sys_openat+0xf2/0x120 [ 294.302311][T15642] x64_sys_call+0x2eab/0x3000 [ 294.302335][T15642] do_syscall_64+0xd2/0x200 [ 294.302408][T15642] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 294.302438][T15642] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 294.302523][T15642] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 294.302610][T15642] RIP: 0033:0x7fb30a93f6c9 [ 294.302626][T15642] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 294.302644][T15642] RSP: 002b:00007fb30939f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 294.302664][T15642] RAX: ffffffffffffffda RBX: 00007fb30ab95fa0 RCX: 00007fb30a93f6c9 [ 294.302678][T15642] RDX: 0000000000008042 RSI: 00002000000000c0 RDI: ffffffffffffff9c [ 294.302722][T15642] RBP: 00007fb30939f090 R08: 0000000000000000 R09: 0000000000000000 [ 294.302795][T15642] R10: 0000000000000108 R11: 0000000000000246 R12: 0000000000000001 [ 294.302808][T15642] R13: 00007fb30ab96038 R14: 00007fb30ab95fa0 R15: 00007fff9f7f47e8 [ 294.302828][T15642] [ 294.597829][T15636] loop3: p2 p3 [ 294.602124][T15636] loop3: p3 size 196608 extends beyond EOD, truncated [ 295.062316][T15684] tipc: Enabled bearer , priority 0 [ 295.070582][T15684] +: renamed from syzkaller0 [ 295.076954][T15684] tipc: Disabling bearer [ 295.155364][T15685] loop0: detected capacity change from 0 to 2048 [ 295.176488][T15687] __nla_validate_parse: 6 callbacks suppressed [ 295.176539][T15687] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4361'. [ 295.262093][T15691] loop1: detected capacity change from 0 to 512 [ 295.274312][T15691] ext2: Unknown parameter 'smackfstransmute' [ 295.302019][T15693] loop0: detected capacity change from 0 to 2048 [ 295.572220][T15697] netlink: 4 bytes leftover after parsing attributes in process `ÿ'. [ 295.615304][T15708] loop6: detected capacity change from 0 to 512 [ 295.633142][ T170] Bluetooth: hci0: Frame reassembly failed (-84) [ 295.641319][T15708] EXT4-fs error (device loop6): ext4_acquire_dquot:6945: comm syz.6.4365: Failed to acquire dquot type 1 [ 295.653491][T15708] EXT4-fs (loop6): 1 truncate cleaned up [ 295.698203][T15722] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4372'. [ 295.813998][T15728] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 295.820580][T15728] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 295.828160][T15728] vhci_hcd vhci_hcd.0: Device attached [ 295.841051][T15728] loop0: detected capacity change from 0 to 1024 [ 295.848080][T15728] EXT4-fs: Ignoring removed orlov option [ 295.982167][T15734] sctp: [Deprecated]: syz.0.4374 (pid 15734) Use of int in max_burst socket option. [ 295.982167][T15734] Use struct sctp_assoc_value instead [ 296.003236][T15734] xt_CT: You must specify a L4 protocol and not use inversions on it [ 296.077429][ T36] usb 1-1: new low-speed USB device number 2 using vhci_hcd [ 296.086277][T15733] loop6: detected capacity change from 0 to 8192 [ 296.198626][T13174] FAT-fs (loop6): error, invalid access to FAT (entry 0x0000e1b1) [ 296.206488][T13174] FAT-fs (loop6): Filesystem has been set read-only [ 296.354730][T15745] can0: slcan on ptm1. [ 296.407616][T15745] can0 (unregistered): slcan off ptm1. [ 296.413453][T15745] Falling back ldisc for ptm1. [ 296.542234][T15748] loop3: detected capacity change from 0 to 2048 [ 296.620251][T15748] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 296.651952][T15748] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 450 with error 28 [ 296.664501][T15748] EXT4-fs (loop3): This should not happen!! Data will be lost [ 296.664501][T15748] [ 296.674208][T15748] EXT4-fs (loop3): Total free blocks count 0 [ 296.680241][T15748] EXT4-fs (loop3): Free/Dirty block details [ 296.686187][T15748] EXT4-fs (loop3): free_blocks=2415919104 [ 296.691927][T15748] EXT4-fs (loop3): dirty_blocks=464 [ 296.697139][T15748] EXT4-fs (loop3): Block reservation details [ 296.703176][T15748] EXT4-fs (loop3): i_reserved_data_blocks=29 [ 296.809237][ T52] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2 with error 28 [ 296.821505][ T52] EXT4-fs (loop3): This should not happen!! Data will be lost [ 296.821505][ T52] [ 296.833537][T15729] vhci_hcd: connection reset by peer [ 296.840174][ T13] vhci_hcd: stop threads [ 296.844432][ T13] vhci_hcd: release socket [ 296.848950][ T13] vhci_hcd: disconnect device [ 297.144577][T15767] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4385'. [ 297.153563][T15767] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4385'. [ 297.173930][T15767] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4385'. [ 297.182920][T15767] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4385'. [ 297.443544][T15786] netlink: 'syz.0.4390': attribute type 1 has an invalid length. [ 297.548996][T15781] lo speed is unknown, defaulting to 1000 [ 297.574433][ T30] kauditd_printk_skb: 873 callbacks suppressed [ 297.574450][ T30] audit: type=1400 audit(297.491:32931): avc: denied { create } for pid=15796 comm="syz.6.4396" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 297.600401][ T30] audit: type=1400 audit(297.491:32932): avc: denied { bind } for pid=15796 comm="syz.6.4396" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 297.619649][ T30] audit: type=1400 audit(297.491:32933): avc: denied { listen } for pid=15796 comm="syz.6.4396" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 297.638846][ T30] audit: type=1400 audit(297.491:32934): avc: denied { connect } for pid=15796 comm="syz.6.4396" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 297.658201][ T30] audit: type=1400 audit(297.491:32935): avc: denied { read } for pid=15796 comm="syz.6.4396" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 297.658562][ T3551] Bluetooth: hci0: command 0x1003 tx timeout [ 297.683822][ T3679] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 297.760465][T15803] loop6: detected capacity change from 0 to 2048 [ 297.844090][T15812] loop6: detected capacity change from 0 to 2048 [ 298.032857][ T30] audit: type=1326 audit(297.951:32936): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15818 comm="syz.0.4402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac6227f6c9 code=0x7ffc0000 [ 298.035074][T15819] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 298.062456][T15819] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 298.070129][T15819] vhci_hcd vhci_hcd.0: Device attached [ 298.093672][T15819] loop0: detected capacity change from 0 to 1024 [ 298.100942][T15819] EXT4-fs: Ignoring removed orlov option [ 298.106861][ T30] audit: type=1326 audit(297.951:32937): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15818 comm="syz.0.4402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac6227f6c9 code=0x7ffc0000 [ 298.129975][ T30] audit: type=1326 audit(297.951:32938): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15818 comm="syz.0.4402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7fac6227f6c9 code=0x7ffc0000 [ 298.152971][ T30] audit: type=1326 audit(297.951:32939): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15818 comm="syz.0.4402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac6227f6c9 code=0x7ffc0000 [ 298.176105][ T30] audit: type=1326 audit(297.951:32940): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15818 comm="syz.0.4402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac6227f6c9 code=0x7ffc0000 [ 298.279973][T15835] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4407'. [ 298.288933][T15835] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4407'. [ 298.329238][T15835] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4407'. [ 298.382255][T15841] loop3: detected capacity change from 0 to 2048 [ 298.471992][T15849] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 298.493994][T15845] loop5: detected capacity change from 0 to 2048 [ 298.509769][T15848] loop3: detected capacity change from 0 to 512 [ 298.612929][T15858] netlink: 'syz.6.4412': attribute type 1 has an invalid length. [ 298.675717][T15856] loop1: detected capacity change from 0 to 8192 [ 298.743242][T15849] lo speed is unknown, defaulting to 1000 [ 298.890429][T15820] vhci_hcd: connection closed [ 298.890740][ T13] vhci_hcd: stop threads [ 298.899853][ T13] vhci_hcd: release socket [ 298.904303][ T13] vhci_hcd: disconnect device [ 298.949839][T12070] FAT-fs (loop1): error, invalid access to FAT (entry 0x0000e1b1) [ 298.957745][T12070] FAT-fs (loop1): Filesystem has been set read-only [ 299.026334][T15865] tipc: Enabling of bearer rejected, failed to enable media [ 299.279809][T15875] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 299.314995][T15875] IPv6: sit1: Disabled Multicast RS [ 299.441474][T10893] EXT4-fs unmount: 125 callbacks suppressed [ 299.441494][T10893] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 299.463838][T15888] loop1: detected capacity change from 0 to 2048 [ 299.495634][T15896] loop0: detected capacity change from 0 to 2048 [ 299.502206][T15888] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 299.526053][T12070] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 299.547792][T15896] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 299.580886][T10893] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000900. [ 299.583846][T15912] loop6: detected capacity change from 0 to 512 [ 299.598592][T15912] EXT4-fs error (device loop6): ext4_acquire_dquot:6945: comm syz.6.4430: Failed to acquire dquot type 1 [ 299.610443][T15912] EXT4-fs (loop6): 1 truncate cleaned up [ 299.616617][T15912] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 299.666560][T13174] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 299.757032][T15926] loop6: detected capacity change from 0 to 512 [ 299.763912][T15926] ext2: Unknown parameter 'smackfstransmute' [ 299.814724][T15928] loop0: detected capacity change from 0 to 512 [ 299.850495][T15928] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 299.870965][T15928] siw: device registration error -23 [ 299.889700][T10893] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 299.980099][T15936] loop0: detected capacity change from 0 to 2048 [ 300.000511][T15936] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 300.048423][T10893] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 300.089971][T15943] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 300.096524][T15943] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 300.104058][T15943] vhci_hcd vhci_hcd.0: Device attached [ 300.122302][T15943] loop0: detected capacity change from 0 to 1024 [ 300.129169][T15947] 9pnet_fd: Insufficient options for proto=fd [ 300.130285][T15943] EXT4-fs: Ignoring removed orlov option [ 300.143422][T15943] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 300.378021][T15963] loop3: detected capacity change from 0 to 512 [ 300.400045][T15963] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 300.416701][T15961] __nla_validate_parse: 6 callbacks suppressed [ 300.416719][T15961] netlink: 4 bytes leftover after parsing attributes in process `ÿ'. [ 300.504676][T11232] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 300.536572][T15972] loop3: detected capacity change from 0 to 512 [ 300.560020][T15972] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 300.621331][T11232] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 300.937091][T15944] vhci_hcd: connection closed [ 300.937298][ T4235] vhci_hcd: stop threads [ 300.946348][ T4235] vhci_hcd: release socket [ 300.950805][ T4235] vhci_hcd: disconnect device [ 300.956435][T15988] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 300.962982][T15988] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 300.970623][T15988] vhci_hcd vhci_hcd.0: Device attached [ 300.991496][T15992] loop3: detected capacity change from 0 to 1024 [ 301.013892][T15992] EXT4-fs: Ignoring removed orlov option [ 301.044656][T15992] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 301.157476][ T36] usb 1-1: enqueue for inactive port 0 [ 301.163048][ T36] usb 1-1: enqueue for inactive port 0 [ 301.207301][ T24] usb 7-1: new low-speed USB device number 2 using vhci_hcd [ 301.237313][ T36] vhci_hcd: vhci_device speed not set [ 301.473772][T10893] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 301.534894][T16001] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4459'. [ 301.543839][T16001] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4459'. [ 301.585459][T15999] loop0: detected capacity change from 0 to 2048 [ 301.603233][T16001] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4459'. [ 301.612172][T16001] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4459'. [ 301.630596][T15999] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 301.723502][T16009] loop6: detected capacity change from 0 to 512 [ 301.829253][T16009] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 301.915285][T15990] vhci_hcd: connection reset by peer [ 301.921099][ T4235] vhci_hcd: stop threads [ 301.925361][ T4235] vhci_hcd: release socket [ 301.929823][ T4235] vhci_hcd: disconnect device [ 302.028019][T16009] siw: device registration error -23 [ 302.073356][T13174] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 302.125474][T10893] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 302.323848][ T13] Bluetooth: hci0: Frame reassembly failed (-84) [ 302.452235][T11232] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 302.512888][T16035] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4471'. [ 302.522029][T16035] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4471'. [ 302.539774][T16035] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4471'. [ 302.548765][T16035] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4471'. [ 302.571534][T16033] netlink: 4 bytes leftover after parsing attributes in process `ÿ'. [ 302.677246][T16044] +: renamed from syzkaller0 [ 302.689199][T16046] loop5: detected capacity change from 0 to 512 [ 302.689710][T16048] loop6: detected capacity change from 0 to 512 [ 302.709852][T16046] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 302.710391][T16048] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 302.735521][T16046] siw: device registration error -23 [ 302.742031][T16048] siw: device registration error -23 [ 302.783899][ T7167] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 302.806359][T16060] loop3: detected capacity change from 0 to 2048 [ 302.813534][T13174] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 302.826151][T16060] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 302.893348][T16072] can0: slcan on ptm1. [ 302.904655][T16060] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 302.924839][T16060] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1430 with error 28 [ 302.937421][T16060] EXT4-fs (loop3): This should not happen!! Data will be lost [ 302.937421][T16060] [ 302.947105][T16060] EXT4-fs (loop3): Total free blocks count 0 [ 302.953170][T16060] EXT4-fs (loop3): Free/Dirty block details [ 302.959095][T16060] EXT4-fs (loop3): free_blocks=2415919104 [ 302.964827][T16060] EXT4-fs (loop3): dirty_blocks=1440 [ 302.970134][T16060] EXT4-fs (loop3): Block reservation details [ 302.976221][T16060] EXT4-fs (loop3): i_reserved_data_blocks=90 [ 302.982225][ T30] kauditd_printk_skb: 910 callbacks suppressed [ 302.982279][ T30] audit: type=1326 audit(302.901:33849): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16074 comm="syz.1.4486" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c6772f6c9 code=0x7ffc0000 [ 303.011455][ T30] audit: type=1326 audit(302.901:33850): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16074 comm="syz.1.4486" exe="/root/syz-executor" sig=0 arch=c000003e syscall=77 compat=0 ip=0x7f9c6772f6c9 code=0x7ffc0000 [ 303.025350][ T170] Bluetooth: hci1: Frame reassembly failed (-84) [ 303.034398][ T30] audit: type=1326 audit(302.901:33851): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16074 comm="syz.1.4486" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c6772f6c9 code=0x7ffc0000 [ 303.063775][ T30] audit: type=1326 audit(302.901:33852): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16074 comm="syz.1.4486" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f9c6772f6c9 code=0x7ffc0000 [ 303.086804][ T30] audit: type=1326 audit(302.901:33853): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16074 comm="syz.1.4486" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c6772f6c9 code=0x7ffc0000 [ 303.110186][ T30] audit: type=1326 audit(302.901:33854): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16074 comm="syz.1.4486" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7f9c6772f6c9 code=0x7ffc0000 [ 303.133191][ T30] audit: type=1326 audit(302.901:33855): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16074 comm="syz.1.4486" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c6772f6c9 code=0x7ffc0000 [ 303.156202][ T30] audit: type=1326 audit(302.901:33856): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16074 comm="syz.1.4486" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f9c6772f6c9 code=0x7ffc0000 [ 303.179124][ T30] audit: type=1326 audit(302.901:33857): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16074 comm="syz.1.4486" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c6772f6c9 code=0x7ffc0000 [ 303.202201][ T30] audit: type=1326 audit(302.901:33858): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16074 comm="syz.1.4486" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c6772f6c9 code=0x7ffc0000 [ 303.237818][ T13] Bluetooth: hci2: Frame reassembly failed (-84) [ 303.266500][ T170] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2 with error 28 [ 303.267662][T16072] can0 (unregistered): slcan off ptm1. [ 303.308317][T16090] FAULT_INJECTION: forcing a failure. [ 303.308317][T16090] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 303.321503][T16090] CPU: 1 UID: 0 PID: 16090 Comm: syz.5.4490 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 303.321620][T16090] Tainted: [W]=WARN [ 303.321630][T16090] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 303.321647][T16090] Call Trace: [ 303.321656][T16090] [ 303.321665][T16090] __dump_stack+0x1d/0x30 [ 303.321695][T16090] dump_stack_lvl+0xe8/0x140 [ 303.321742][T16090] dump_stack+0x15/0x1b [ 303.321840][T16090] should_fail_ex+0x265/0x280 [ 303.321896][T16090] should_fail+0xb/0x20 [ 303.321916][T16090] should_fail_usercopy+0x1a/0x20 [ 303.321945][T16090] _copy_from_user+0x1c/0xb0 [ 303.321979][T16090] __sys_connect+0xd0/0x2b0 [ 303.322105][T16090] __x64_sys_connect+0x3f/0x50 [ 303.322145][T16090] x64_sys_call+0x2c0c/0x3000 [ 303.322176][T16090] do_syscall_64+0xd2/0x200 [ 303.322265][T16090] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 303.322304][T16090] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 303.322349][T16090] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 303.322435][T16090] RIP: 0033:0x7fcfb109f6c9 [ 303.322456][T16090] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 303.322487][T16090] RSP: 002b:00007fcfafb07038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 303.322514][T16090] RAX: ffffffffffffffda RBX: 00007fcfb12f5fa0 RCX: 00007fcfb109f6c9 [ 303.322531][T16090] RDX: 0000000000000032 RSI: 00002000000002c0 RDI: 0000000000000003 [ 303.322548][T16090] RBP: 00007fcfafb07090 R08: 0000000000000000 R09: 0000000000000000 [ 303.322617][T16090] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 303.322629][T16090] R13: 00007fcfb12f6038 R14: 00007fcfb12f5fa0 R15: 00007ffd9b3c9e28 [ 303.322648][T16090] [ 303.577675][T16104] loop3: detected capacity change from 0 to 512 [ 303.597124][T16104] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 303.634626][T11232] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 303.714888][T16107] lo speed is unknown, defaulting to 1000 [ 303.778967][T16107] chnl_net:caif_netlink_parms(): no params data found [ 303.802561][ T170] netdevsim netdevsim5 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 303.812965][ T170] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 303.855916][T16107] bridge0: port 1(bridge_slave_0) entered blocking state [ 303.864459][T16107] bridge0: port 1(bridge_slave_0) entered disabled state [ 303.875040][T16107] bridge_slave_0: entered allmulticast mode [ 303.882326][T16107] bridge_slave_0: entered promiscuous mode [ 303.892583][ T170] netdevsim netdevsim5 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 303.902928][ T170] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 303.915918][T16107] bridge0: port 2(bridge_slave_1) entered blocking state [ 303.923047][T16107] bridge0: port 2(bridge_slave_1) entered disabled state [ 303.930646][T16107] bridge_slave_1: entered allmulticast mode [ 303.938176][T16107] bridge_slave_1: entered promiscuous mode [ 303.967130][T16107] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 303.980791][T16107] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 304.010865][T16107] team0: Port device team_slave_0 added [ 304.018508][T16107] team0: Port device team_slave_1 added [ 304.047179][ T170] netdevsim netdevsim5 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 304.057530][ T170] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 304.070779][T16107] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 304.077847][T16107] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 304.103797][T16107] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 304.117358][T16107] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 304.124332][T16107] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 304.150337][T16107] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 304.171830][ T170] netdevsim netdevsim5 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 304.182204][ T170] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 304.223984][T16107] hsr_slave_0: entered promiscuous mode [ 304.232172][T16107] hsr_slave_1: entered promiscuous mode [ 304.238687][T16107] debugfs: 'hsr0' already exists in 'hsr' [ 304.244460][T16107] Cannot create hsr debugfs directory [ 304.277946][ T170] bridge_slave_1: left allmulticast mode [ 304.283652][ T170] bridge_slave_1: left promiscuous mode [ 304.289350][ T170] bridge0: port 2(bridge_slave_1) entered disabled state [ 304.298948][ T170] bridge_slave_0: left allmulticast mode [ 304.304711][ T170] bridge_slave_0: left promiscuous mode [ 304.310408][ T170] bridge0: port 1(bridge_slave_0) entered disabled state [ 304.358108][ T3679] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 304.437058][ T170] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 304.449283][ T170] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 304.459477][ T170] bond0 (unregistering): Released all slaves [ 304.511360][ T170] tipc: Left network mode [ 304.522055][ T170] hsr_slave_0: left promiscuous mode [ 304.529041][ T170] hsr_slave_1: left promiscuous mode [ 304.534869][ T170] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 304.542341][ T170] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 304.550138][ T170] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 304.557547][ T170] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 304.569568][ T170] veth1_macvtap: left promiscuous mode [ 304.575165][ T170] veth0_macvtap: left promiscuous mode [ 304.581150][ T170] veth1_vlan: left promiscuous mode [ 304.586718][ T170] veth0_vlan: left promiscuous mode [ 304.704867][T16129] loop3: detected capacity change from 0 to 2048 [ 304.719321][T16129] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 304.868599][T11232] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 305.009310][T16137] loop3: detected capacity change from 0 to 128 [ 305.019075][T16137] syz.3.4498: attempt to access beyond end of device [ 305.019075][T16137] loop3: rw=1, sector=138, nr_sectors = 4 limit=128 [ 305.077317][T10304] Bluetooth: hci1: command 0x1003 tx timeout [ 305.077567][ T3551] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 305.093701][T16149] 9pnet_fd: Insufficient options for proto=fd [ 305.110308][T16107] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 305.121161][T16107] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 305.131934][T16107] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 305.141438][T16107] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 305.192251][T16107] 8021q: adding VLAN 0 to HW filter on device bond0 [ 305.206187][T16107] 8021q: adding VLAN 0 to HW filter on device team0 [ 305.216366][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 305.223483][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 305.234429][ T170] bridge0: port 2(bridge_slave_1) entered blocking state [ 305.241582][ T170] bridge0: port 2(bridge_slave_1) entered forwarding state [ 305.248884][ T3551] Bluetooth: hci2: command 0x1003 tx timeout [ 305.249458][ T3682] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 305.312169][ T170] Bluetooth: hci0: Frame reassembly failed (-84) [ 305.338844][T16107] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 305.447133][T16107] veth0_vlan: entered promiscuous mode [ 305.455587][T16107] veth1_vlan: entered promiscuous mode [ 305.472306][T16107] veth0_macvtap: entered promiscuous mode [ 305.480254][T16107] veth1_macvtap: entered promiscuous mode [ 305.491865][T16107] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 305.503749][T16107] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 305.514893][ T170] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 305.523913][ T170] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 305.537086][ T170] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 305.549650][ T170] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 305.584564][T16184] +: renamed from syzkaller0 [ 305.639164][T16186] __nla_validate_parse: 5 callbacks suppressed [ 305.639181][T16186] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4507'. [ 305.654346][T16186] hsr_slave_0: left promiscuous mode [ 305.660354][T16186] hsr_slave_1: left promiscuous mode [ 305.811215][T16188] can0: slcan on ptm1. [ 305.877450][T16188] can0 (unregistered): slcan off ptm1. [ 305.902619][ T13] Bluetooth: hci1: Frame reassembly failed (-84) [ 306.277588][ T24] usb 7-1: enqueue for inactive port 0 [ 306.283096][ T24] usb 7-1: enqueue for inactive port 0 [ 306.402456][ T24] vhci_hcd: vhci_device speed not set [ 306.413094][T16194] loop1: detected capacity change from 0 to 128 [ 306.423189][T16194] syz.1.4511: attempt to access beyond end of device [ 306.423189][T16194] loop1: rw=1, sector=138, nr_sectors = 4 limit=128 [ 306.491516][T16197] program syz.1.4512 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 306.509417][T16197] loop1: detected capacity change from 0 to 1024 [ 306.516366][T16197] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 306.527330][T16197] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 306.537619][T16197] JBD2: no valid journal superblock found [ 306.543423][T16197] EXT4-fs (loop1): Could not load journal inode [ 306.617873][T16203] 9pnet_fd: Insufficient options for proto=fd [ 306.698667][T16205] netlink: 4 bytes leftover after parsing attributes in process `ÿ'. [ 306.725196][T16211] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4518'. [ 306.734448][T16211] hsr_slave_0: left promiscuous mode [ 306.740174][T16211] hsr_slave_1: left promiscuous mode [ 306.881781][T16218] loop6: detected capacity change from 0 to 1024 [ 306.888337][T16218] EXT4-fs: Ignoring removed orlov option [ 306.895953][T16218] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 307.317316][ T3682] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 307.323494][T10304] Bluetooth: hci0: command 0x1003 tx timeout [ 307.542244][T16230] FAULT_INJECTION: forcing a failure. [ 307.542244][T16230] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 307.555390][T16230] CPU: 0 UID: 0 PID: 16230 Comm: syz.1.4523 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 307.555439][T16230] Tainted: [W]=WARN [ 307.555460][T16230] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 307.555477][T16230] Call Trace: [ 307.555487][T16230] [ 307.555496][T16230] __dump_stack+0x1d/0x30 [ 307.555520][T16230] dump_stack_lvl+0xe8/0x140 [ 307.555542][T16230] dump_stack+0x15/0x1b [ 307.555560][T16230] should_fail_ex+0x265/0x280 [ 307.555657][T16230] should_fail+0xb/0x20 [ 307.555674][T16230] should_fail_usercopy+0x1a/0x20 [ 307.555695][T16230] strncpy_from_user+0x25/0x230 [ 307.555730][T16230] ? __kmalloc_cache_noprof+0x249/0x4a0 [ 307.555793][T16230] __se_sys_memfd_create+0x1ff/0x590 [ 307.555818][T16230] __x64_sys_memfd_create+0x31/0x40 [ 307.555865][T16230] x64_sys_call+0x2ac2/0x3000 [ 307.555896][T16230] do_syscall_64+0xd2/0x200 [ 307.555960][T16230] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 307.555997][T16230] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 307.556075][T16230] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 307.556175][T16230] RIP: 0033:0x7f9c6772f6c9 [ 307.556196][T16230] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 307.556220][T16230] RSP: 002b:00007f9c6618ee18 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 307.556289][T16230] RAX: ffffffffffffffda RBX: 000000000000053b RCX: 00007f9c6772f6c9 [ 307.556307][T16230] RDX: 00007f9c6618eef0 RSI: 0000000000000000 RDI: 00007f9c677b2960 [ 307.556325][T16230] RBP: 0000200000000b80 R08: 00007f9c6618ebb7 R09: 00007f9c6618ee40 [ 307.556342][T16230] R10: 000000000000000a R11: 0000000000000202 R12: 0000200000000000 [ 307.556359][T16230] R13: 00007f9c6618eef0 R14: 00007f9c6618eeb0 R15: 00002000000001c0 [ 307.556383][T16230] [ 307.775504][T16232] loop1: detected capacity change from 0 to 1024 [ 307.797962][T16232] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 307.809028][T16232] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 307.838633][T16232] JBD2: no valid journal superblock found [ 307.844422][T16232] EXT4-fs (loop1): Could not load journal inode [ 307.852552][T13174] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 307.879438][ T170] Bluetooth: hci0: Frame reassembly failed (-84) [ 307.899118][T16239] loop1: detected capacity change from 0 to 512 [ 307.909396][T16239] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 307.925235][T16239] siw: device registration error -23 [ 307.942964][T12070] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 307.957378][T10304] Bluetooth: hci1: command 0x1003 tx timeout [ 307.963449][ T3551] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 307.982454][T16244] loop1: detected capacity change from 0 to 512 [ 307.999574][T16244] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.4528: bg 0: block 248: padding at end of block bitmap is not set [ 308.014336][T16244] __quota_error: 426 callbacks suppressed [ 308.014355][T16244] Quota error (device loop1): write_blk: dquota write failed [ 308.027571][T16244] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 308.037566][T16244] EXT4-fs error (device loop1): ext4_acquire_dquot:6945: comm syz.1.4528: Failed to acquire dquot type 1 [ 308.049515][T16244] EXT4-fs (loop1): 1 truncate cleaned up [ 308.051004][ T30] audit: type=1326 audit(307.981:34285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16246 comm="syz.3.4530" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7f717f6c9 code=0x7ffc0000 [ 308.055776][T16244] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 308.080074][T16247] netlink: 4 bytes leftover after parsing attributes in process `ÿ'. [ 308.106462][ T30] audit: type=1326 audit(308.001:34286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16246 comm="syz.3.4530" exe="/root/syz-executor" sig=0 arch=c000003e syscall=77 compat=0 ip=0x7ff7f717f6c9 code=0x7ffc0000 [ 308.129509][ T30] audit: type=1326 audit(308.001:34287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16246 comm="syz.3.4530" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7f717f6c9 code=0x7ffc0000 [ 308.152582][ T30] audit: type=1326 audit(308.001:34288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16246 comm="syz.3.4530" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7ff7f717f6c9 code=0x7ffc0000 [ 308.175928][ T30] audit: type=1326 audit(308.001:34289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16246 comm="syz.3.4530" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7f717f6c9 code=0x7ffc0000 [ 308.199339][ T30] audit: type=1326 audit(308.001:34290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16246 comm="syz.3.4530" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7ff7f717f6c9 code=0x7ffc0000 [ 308.222988][ T30] audit: type=1326 audit(308.001:34291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16246 comm="syz.3.4530" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7f717f6c9 code=0x7ffc0000 [ 308.246018][ T30] audit: type=1326 audit(308.001:34292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16246 comm="syz.3.4530" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7f717f6c9 code=0x7ffc0000 [ 308.272089][T12070] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 308.302153][T16260] loop5: detected capacity change from 0 to 512 [ 308.319800][T16260] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 308.335328][T16260] siw: device registration error -23 [ 308.352312][T16107] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 308.429619][T16271] +: renamed from syzkaller0 [ 308.445110][T16272] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4540'. [ 308.582972][T16281] netlink: 4 bytes leftover after parsing attributes in process `ÿ'. [ 308.594203][T16290] program syz.3.4547 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 308.622623][T16295] netlink: 48 bytes leftover after parsing attributes in process `syz.5.4549'. [ 308.632022][T16295] netlink: 48 bytes leftover after parsing attributes in process `syz.5.4549'. [ 308.681023][T16301] xt_connbytes: Forcing CT accounting to be enabled [ 308.687925][T16301] set match dimension is over the limit! [ 308.698864][T16301] loop0: detected capacity change from 0 to 512 [ 308.706574][T16301] EXT4-fs: Ignoring removed nomblk_io_submit option [ 308.723078][T16303] +: renamed from syzkaller0 [ 308.731751][T16301] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.4548: bg 0: block 248: padding at end of block bitmap is not set [ 308.746550][T16301] EXT4-fs error (device loop0): ext4_acquire_dquot:6945: comm syz.0.4548: Failed to acquire dquot type 1 [ 308.759733][T16301] EXT4-fs (loop0): 1 truncate cleaned up [ 308.766761][T16301] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 308.804870][T16307] loop3: detected capacity change from 0 to 1024 [ 308.812061][T16307] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 308.823040][T16307] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 308.834345][T16307] JBD2: no valid journal superblock found [ 308.840349][T16307] EXT4-fs (loop3): Could not load journal inode [ 308.850936][T10893] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 308.898558][T16309] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4554'. [ 308.935332][T16318] loop5: detected capacity change from 0 to 2048 [ 308.942415][T16312] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 308.949903][T16312] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 308.957814][T16312] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 308.965290][T16312] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 308.978995][T16318] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 309.036837][T16316] loop3: detected capacity change from 0 to 128 [ 309.048110][T16316] syz.3.4556: attempt to access beyond end of device [ 309.048110][T16316] loop3: rw=1, sector=138, nr_sectors = 4 limit=128 [ 309.214158][T16107] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 309.220625][T16331] netlink: 4 bytes leftover after parsing attributes in process `ÿ'. [ 309.256018][T16337] program syz.3.4561 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 309.284541][T16339] loop3: detected capacity change from 0 to 512 [ 309.291619][T16339] ext4: Unknown parameter 'mblk_io_submit.sb' [ 309.309208][T16339] loop3: detected capacity change from 0 to 128 [ 309.322817][T16339] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 309.419324][T16348] +: renamed from syzkaller0 [ 309.438833][T16350] 9pnet_fd: Insufficient options for proto=fd [ 309.453780][T16352] xt_connbytes: Forcing CT accounting to be enabled [ 309.460680][T16352] Cannot find set identified by id 0 to match [ 309.508809][T16359] loop5: detected capacity change from 0 to 512 [ 309.519694][T16359] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 309.538573][T16359] siw: device registration error -23 [ 309.557448][T16107] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 309.583257][T16369] loop5: detected capacity change from 0 to 1024 [ 309.590715][T16369] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 309.601696][T16369] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 309.612964][T16369] JBD2: no valid journal superblock found [ 309.618765][T16369] EXT4-fs (loop5): Could not load journal inode [ 309.656692][T16372] loop5: detected capacity change from 0 to 2048 [ 309.678866][T16372] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 309.696005][T16372] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 309.732989][T16377] hsr_slave_0: left promiscuous mode [ 309.739117][T16377] hsr_slave_1: left promiscuous mode [ 309.753170][T16107] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 309.793634][T16381] loop5: detected capacity change from 0 to 1024 [ 309.801080][T16381] EXT4-fs: Ignoring removed orlov option [ 309.809114][T16381] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 309.837465][T16107] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 309.858163][T16387] loop5: detected capacity change from 0 to 512 [ 309.864844][T16387] ext3: Unknown parameter 'fowner<00000000000000016832' [ 309.957313][ T3682] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 310.326113][T16395] can0: slcan on ptm0. [ 310.391363][T16397] +: renamed from syzkaller0 [ 310.491920][T16405] batadv0: entered allmulticast mode [ 310.497359][T16394] can0 (unregistered): slcan off ptm0. [ 310.503093][T16405] batadv0: left allmulticast mode [ 310.529483][T16407] loop6: detected capacity change from 0 to 2048 [ 310.549096][T16407] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 310.581997][T13174] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 310.610641][T16418] loop3: detected capacity change from 0 to 2048 [ 310.630359][T16418] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 310.674266][T16421] loop1: detected capacity change from 0 to 128 [ 310.691314][T16416] syz.1.4588: attempt to access beyond end of device [ 310.691314][T16416] loop1: rw=1, sector=138, nr_sectors = 4 limit=128 [ 310.729585][T16424] 9pnet_fd: Insufficient options for proto=fd [ 310.752307][T16425] loop6: detected capacity change from 0 to 512 [ 310.800456][T16425] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 310.835450][T16425] siw: device registration error -23 [ 310.841083][T16434] +: renamed from syzkaller0 [ 310.851424][T16432] loop0: detected capacity change from 0 to 512 [ 310.868926][T16432] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 310.879461][T13174] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 310.890184][T11232] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 310.924982][T16432] EXT4-fs error (device loop0): ext4_validate_block_bitmap:432: comm syz.0.4593: bg 0: block 104: invalid block bitmap [ 310.937975][T16432] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6667: Corrupt filesystem [ 310.947214][T16439] FAULT_INJECTION: forcing a failure. [ 310.947214][T16439] name failslab, interval 1, probability 0, space 0, times 0 [ 310.947650][T16432] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.4593: invalid indirect mapped block 1 (level 1) [ 310.960057][T16439] CPU: 0 UID: 0 PID: 16439 Comm: syz.3.4595 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 310.960104][T16439] Tainted: [W]=WARN [ 310.960176][T16439] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 310.960196][T16439] Call Trace: [ 310.960233][T16439] [ 310.960241][T16439] __dump_stack+0x1d/0x30 [ 310.960341][T16439] dump_stack_lvl+0xe8/0x140 [ 310.960390][T16439] dump_stack+0x15/0x1b [ 310.960417][T16439] should_fail_ex+0x265/0x280 [ 310.960453][T16439] ? __se_sys_memfd_create+0x1cc/0x590 [ 310.960490][T16439] should_failslab+0x8c/0xb0 [ 310.960605][T16439] __kmalloc_cache_noprof+0x4c/0x4a0 [ 310.960651][T16439] ? fput+0x8f/0xc0 [ 310.960728][T16439] __se_sys_memfd_create+0x1cc/0x590 [ 310.960766][T16439] __x64_sys_memfd_create+0x31/0x40 [ 310.960815][T16439] x64_sys_call+0x2ac2/0x3000 [ 310.960897][T16439] do_syscall_64+0xd2/0x200 [ 310.960928][T16439] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 310.960970][T16439] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 310.961031][T16439] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 310.961061][T16439] RIP: 0033:0x7ff7f717f6c9 [ 310.961083][T16439] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 310.961136][T16439] RSP: 002b:00007ff7f5bdee18 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 310.961163][T16439] RAX: ffffffffffffffda RBX: 0000000000000477 RCX: 00007ff7f717f6c9 [ 310.961181][T16439] RDX: 00007ff7f5bdeef0 RSI: 0000000000000000 RDI: 00007ff7f7202960 [ 310.961199][T16439] RBP: 0000200000000880 R08: 00007ff7f5bdebb7 R09: 00007ff7f5bdee40 [ 310.961292][T16439] R10: 000000000000000a R11: 0000000000000202 R12: 0000200000000080 [ 310.961308][T16439] R13: 00007ff7f5bdeef0 R14: 00007ff7f5bdeeb0 R15: 0000200000000000 [ 310.961336][T16439] [ 310.971935][T16441] __nla_validate_parse: 5 callbacks suppressed [ 310.971956][T16441] netlink: 48 bytes leftover after parsing attributes in process `syz.6.4596'. [ 310.984784][T16432] EXT4-fs (loop0): 1 truncate cleaned up [ 311.046945][T16441] netlink: 48 bytes leftover after parsing attributes in process `syz.6.4596'. [ 311.047888][T16432] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 311.086748][T16445] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4598'. [ 311.178295][T16451] FAULT_INJECTION: forcing a failure. [ 311.178295][T16451] name failslab, interval 1, probability 0, space 0, times 0 [ 311.219253][T16451] CPU: 1 UID: 0 PID: 16451 Comm: syz.6.4600 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 311.219285][T16451] Tainted: [W]=WARN [ 311.219319][T16451] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 311.219334][T16451] Call Trace: [ 311.219342][T16451] [ 311.219351][T16451] __dump_stack+0x1d/0x30 [ 311.219380][T16451] dump_stack_lvl+0xe8/0x140 [ 311.219423][T16451] dump_stack+0x15/0x1b [ 311.219446][T16451] should_fail_ex+0x265/0x280 [ 311.219473][T16451] should_failslab+0x8c/0xb0 [ 311.219667][T16451] __kmalloc_cache_node_noprof+0x54/0x4a0 [ 311.219708][T16451] ? __get_vm_area_node+0x106/0x1d0 [ 311.219831][T16451] __get_vm_area_node+0x106/0x1d0 [ 311.219864][T16451] __vmalloc_node_range_noprof+0x28c/0xed0 [ 311.219925][T16451] ? bpf_prog_alloc_no_stats+0x47/0x3b0 [ 311.219971][T16451] ? terminate_walk+0x27f/0x2a0 [ 311.220046][T16451] ? path_openat+0x1bf8/0x2170 [ 311.220075][T16451] ? _parse_integer_limit+0x170/0x190 [ 311.220118][T16451] ? bpf_prog_alloc_no_stats+0x47/0x3b0 [ 311.220179][T16451] __vmalloc_noprof+0x83/0xc0 [ 311.220283][T16451] ? bpf_prog_alloc_no_stats+0x47/0x3b0 [ 311.220331][T16451] bpf_prog_alloc_no_stats+0x47/0x3b0 [ 311.220396][T16451] ? bpf_prog_alloc+0x2a/0x150 [ 311.220439][T16451] bpf_prog_alloc+0x3c/0x150 [ 311.220483][T16451] __get_filter+0x92/0x230 [ 311.220622][T16451] sk_reuseport_attach_filter+0x20/0x140 [ 311.220670][T16451] sk_setsockopt+0x1890/0x20e0 [ 311.220718][T16451] sock_setsockopt+0x40/0x50 [ 311.220759][T16451] __sys_setsockopt+0x13a/0x200 [ 311.220810][T16451] __x64_sys_setsockopt+0x64/0x80 [ 311.220852][T16451] x64_sys_call+0x20ec/0x3000 [ 311.220881][T16451] do_syscall_64+0xd2/0x200 [ 311.220902][T16451] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 311.221018][T16451] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 311.221062][T16451] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 311.221142][T16451] RIP: 0033:0x7fb30a93f6c9 [ 311.221162][T16451] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 311.221274][T16451] RSP: 002b:00007fb30937e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 311.221297][T16451] RAX: ffffffffffffffda RBX: 00007fb30ab96090 RCX: 00007fb30a93f6c9 [ 311.221314][T16451] RDX: 0000000000000033 RSI: 0000000000000001 RDI: 0000000000000005 [ 311.221399][T16451] RBP: 00007fb30937e090 R08: 0000000000000010 R09: 0000000000000000 [ 311.221412][T16451] R10: 0000200000000640 R11: 0000000000000246 R12: 0000000000000001 [ 311.221428][T16451] R13: 00007fb30ab96128 R14: 00007fb30ab96090 R15: 00007fff9f7f47e8 [ 311.221453][T16451] [ 311.221601][T16451] syz.6.4600: vmalloc error: size 4096, vm_struct allocation failed, mode:0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0 [ 311.496979][T16451] CPU: 1 UID: 0 PID: 16451 Comm: syz.6.4600 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 311.497010][T16451] Tainted: [W]=WARN [ 311.497016][T16451] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 311.497028][T16451] Call Trace: [ 311.497089][T16451] [ 311.497097][T16451] __dump_stack+0x1d/0x30 [ 311.497117][T16451] dump_stack_lvl+0xe8/0x140 [ 311.497135][T16451] dump_stack+0x15/0x1b [ 311.497151][T16451] warn_alloc+0x12b/0x1a0 [ 311.497212][T16451] __vmalloc_node_range_noprof+0x2b1/0xed0 [ 311.497256][T16451] ? terminate_walk+0x27f/0x2a0 [ 311.497369][T16451] ? path_openat+0x1bf8/0x2170 [ 311.497390][T16451] ? _parse_integer_limit+0x170/0x190 [ 311.497428][T16451] ? bpf_prog_alloc_no_stats+0x47/0x3b0 [ 311.497459][T16451] __vmalloc_noprof+0x83/0xc0 [ 311.497487][T16451] ? bpf_prog_alloc_no_stats+0x47/0x3b0 [ 311.497580][T16451] bpf_prog_alloc_no_stats+0x47/0x3b0 [ 311.497610][T16451] ? bpf_prog_alloc+0x2a/0x150 [ 311.497691][T16451] bpf_prog_alloc+0x3c/0x150 [ 311.497721][T16451] __get_filter+0x92/0x230 [ 311.497824][T16451] sk_reuseport_attach_filter+0x20/0x140 [ 311.497902][T16451] sk_setsockopt+0x1890/0x20e0 [ 311.497983][T16451] sock_setsockopt+0x40/0x50 [ 311.498027][T16451] __sys_setsockopt+0x13a/0x200 [ 311.498073][T16451] __x64_sys_setsockopt+0x64/0x80 [ 311.498121][T16451] x64_sys_call+0x20ec/0x3000 [ 311.498158][T16451] do_syscall_64+0xd2/0x200 [ 311.498223][T16451] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 311.498284][T16451] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 311.498319][T16451] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 311.498413][T16451] RIP: 0033:0x7fb30a93f6c9 [ 311.498426][T16451] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 311.498443][T16451] RSP: 002b:00007fb30937e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 311.498459][T16451] RAX: ffffffffffffffda RBX: 00007fb30ab96090 RCX: 00007fb30a93f6c9 [ 311.498471][T16451] RDX: 0000000000000033 RSI: 0000000000000001 RDI: 0000000000000005 [ 311.498498][T16451] RBP: 00007fb30937e090 R08: 0000000000000010 R09: 0000000000000000 [ 311.498509][T16451] R10: 0000200000000640 R11: 0000000000000246 R12: 0000000000000001 [ 311.498520][T16451] R13: 00007fb30ab96128 R14: 00007fb30ab96090 R15: 00007fff9f7f47e8 [ 311.498538][T16451] [ 311.729823][T16451] Mem-Info: [ 311.730841][T10893] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 311.732935][T16451] active_anon:3679 inactive_anon:0 isolated_anon:0 [ 311.732935][T16451] active_file:14964 inactive_file:12644 isolated_file:0 [ 311.732935][T16451] unevictable:0 dirty:660 writeback:0 [ 311.732935][T16451] slab_reclaimable:3505 slab_unreclaimable:19736 [ 311.732935][T16451] mapped:29613 shmem:343 pagetables:1035 [ 311.732935][T16451] sec_pagetables:0 bounce:0 [ 311.732935][T16451] kernel_misc_reclaimable:0 [ 311.732935][T16451] free:1834699 free_pcp:6204 free_cma:0 [ 311.786726][T16451] Node 0 active_anon:14716kB inactive_anon:0kB active_file:59856kB inactive_file:50576kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:118452kB dirty:2640kB writeback:0kB shmem:1372kB kernel_stack:3520kB pagetables:4140kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 311.814184][T16451] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 311.843839][T16451] lowmem_reserve[]: 0 2881 7859 7859 [ 311.849188][T16451] Node 0 DMA32 free:2946624kB boost:0kB min:4132kB low:7060kB high:9988kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:3129332kB managed:2950256kB mlocked:0kB bounce:0kB free_pcp:3632kB local_pcp:3528kB free_cma:0kB [ 311.880672][T16451] lowmem_reserve[]: 0 0 4978 4978 [ 311.885758][T16451] Node 0 Normal free:4376812kB boost:0kB min:7188kB low:12284kB high:17380kB reserved_highatomic:0KB free_highatomic:0KB active_anon:14716kB inactive_anon:0kB active_file:59856kB inactive_file:50576kB unevictable:0kB writepending:2640kB zspages:0kB present:5242880kB managed:5098240kB mlocked:0kB bounce:0kB free_pcp:21356kB local_pcp:4796kB free_cma:0kB [ 311.918776][T16451] lowmem_reserve[]: 0 0 0 0 [ 311.923343][T16451] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 311.935975][T16451] Node 0 DMA32: 2*4kB (M) 1*8kB (M) 3*16kB (M) 2*32kB (M) 3*64kB (M) 2*128kB (M) 2*256kB (M) 3*512kB (M) 3*1024kB (M) 2*2048kB (M) 717*4096kB (M) = 2946624kB [ 311.952237][T16451] Node 0 Normal: 2023*4kB (UME) 969*8kB (UME) 948*16kB (UME) 478*32kB (UME) 355*64kB (UME) 211*128kB (UME) 143*256kB (UM) 90*512kB (UME) 69*1024kB (UME) 38*2048kB (UME) 989*4096kB (UM) = 4378148kB [ 311.973188][T16451] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 311.982500][T16451] 27914 total pagecache pages [ 311.987178][T16451] 2 pages in swap cache [ 311.991364][T16451] Free swap = 124988kB [ 311.995618][T16451] Total swap = 124996kB [ 311.999783][T16451] 2097051 pages RAM [ 312.003577][T16451] 0 pages HighMem/MovableOnly [ 312.008309][T16451] 81087 pages reserved [ 312.062891][T16461] 9pnet_fd: Insufficient options for proto=fd [ 312.154404][T16466] netlink: 4 bytes leftover after parsing attributes in process `ÿ'. [ 312.175944][T16473] loop6: detected capacity change from 0 to 2048 [ 312.189097][T16473] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 312.392765][T13174] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 312.468362][T16482] team0: No ports can be present during mode change [ 312.951639][T16492] program syz.0.4615 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 312.969756][T16492] loop0: detected capacity change from 0 to 1024 [ 312.976540][T16492] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 312.987545][T16492] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 312.997786][T16492] JBD2: no valid journal superblock found [ 313.003608][T16492] EXT4-fs (loop0): Could not load journal inode [ 313.019013][ T30] kauditd_printk_skb: 1008 callbacks suppressed [ 313.019106][ T30] audit: type=1326 audit(312.941:35299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16474 comm="syz.3.4609" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7ff7f717f6c9 code=0x7ffc0000 [ 313.048593][ T30] audit: type=1326 audit(312.941:35300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16474 comm="syz.3.4609" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7ff7f717f6c9 code=0x7ffc0000 [ 313.082523][T16496] 9pnet_fd: Insufficient options for proto=fd [ 313.116100][T16498] +: renamed from syzkaller0 [ 313.118340][ T3551] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 313.155581][T16500] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4619'. [ 313.204286][T16511] loop5: detected capacity change from 0 to 2048 [ 313.229245][T16511] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 313.252492][T16107] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 313.474912][T16521] loop0: detected capacity change from 0 to 2048 [ 313.497969][T16523] program syz.6.4626 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 313.516749][T16523] loop6: detected capacity change from 0 to 1024 [ 313.523826][T16523] EXT4-fs (loop6): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 313.534840][T16523] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 313.546757][T16523] JBD2: no valid journal superblock found [ 313.546774][T16521] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 313.552539][T16523] EXT4-fs (loop6): Could not load journal inode [ 313.609091][T10893] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 313.658375][T16530] set match dimension is over the limit! [ 313.700399][ T30] audit: type=1326 audit(313.621:35301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16533 comm="syz.1.4630" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c6772f6c9 code=0x7ffc0000 [ 313.723455][ T30] audit: type=1326 audit(313.621:35302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16533 comm="syz.1.4630" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c6772f6c9 code=0x7ffc0000 [ 313.746469][ T30] audit: type=1326 audit(313.621:35303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16533 comm="syz.1.4630" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9c6772f6c9 code=0x7ffc0000 [ 313.769532][ T30] audit: type=1326 audit(313.621:35304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16533 comm="syz.1.4630" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c6772f6c9 code=0x7ffc0000 [ 313.792643][ T30] audit: type=1326 audit(313.621:35305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16533 comm="syz.1.4630" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c6772f6c9 code=0x7ffc0000 [ 313.815649][ T30] audit: type=1326 audit(313.621:35306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16533 comm="syz.1.4630" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9c6772f6c9 code=0x7ffc0000 [ 313.838725][ T30] audit: type=1326 audit(313.621:35307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16533 comm="syz.1.4630" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c6772f6c9 code=0x7ffc0000 [ 313.861713][ T30] audit: type=1326 audit(313.621:35308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16533 comm="syz.1.4630" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c6772f6c9 code=0x7ffc0000 [ 313.928421][T16538] 9pnet_fd: Insufficient options for proto=fd [ 313.959549][T16540] loop5: detected capacity change from 0 to 512 [ 313.998116][T16543] netlink: 48 bytes leftover after parsing attributes in process `syz.1.4634'. [ 314.007384][T16543] netlink: 48 bytes leftover after parsing attributes in process `syz.1.4634'. [ 314.034892][T16540] siw: device registration error -23 [ 314.158267][T16553] team0: No ports can be present during mode change [ 314.274248][T16536] loop6: detected capacity change from 0 to 512 [ 314.340196][ T4235] Bluetooth: hci0: Frame reassembly failed (-84) [ 314.348726][T16536] EXT4-fs error (device loop6): ext4_orphan_get:1418: comm syz.6.4631: bad orphan inode 11862016 [ 314.523224][T16569] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4641'. [ 314.602182][T16575] netlink: 4 bytes leftover after parsing attributes in process `ÿ'. [ 314.629528][T16578] loop0: detected capacity change from 0 to 128 [ 314.639255][T16578] syz.0.4644: attempt to access beyond end of device [ 314.639255][T16578] loop0: rw=1, sector=138, nr_sectors = 4 limit=128 [ 314.709135][T16587] loop0: detected capacity change from 0 to 2048 [ 314.811736][T16602] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 314.818280][T16602] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 314.825884][T16602] vhci_hcd vhci_hcd.0: Device attached [ 314.837694][T16602] loop0: detected capacity change from 0 to 1024 [ 314.844659][T16602] EXT4-fs: Ignoring removed orlov option [ 314.989423][T16610] program syz.5.4654 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 315.013560][T16610] loop5: detected capacity change from 0 to 1024 [ 315.067915][T16610] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 315.078890][T16610] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 315.089310][ T24] usb 1-1: new low-speed USB device number 3 using vhci_hcd [ 315.098110][T16610] JBD2: no valid journal superblock found [ 315.103912][T16610] EXT4-fs (loop5): Could not load journal inode [ 315.329253][T16616] loop5: detected capacity change from 0 to 1024 [ 315.337821][T16616] EXT4-fs: Ignoring removed orlov option [ 315.894041][T16603] vhci_hcd: connection reset by peer [ 315.900884][ T4235] vhci_hcd: stop threads [ 315.905228][ T4235] vhci_hcd: release socket [ 315.909739][ T4235] vhci_hcd: disconnect device [ 315.978632][T16628] loop1: detected capacity change from 0 to 2048 [ 316.013978][T16632] 9pnet_fd: Insufficient options for proto=fd [ 316.280368][T16638] loop5: detected capacity change from 0 to 512 [ 316.319191][T16638] siw: device registration error -23 [ 316.357371][ T3551] Bluetooth: hci0: command 0x1003 tx timeout [ 316.363606][ T3682] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 316.408949][T16643] netlink: 4 bytes leftover after parsing attributes in process `ÿ'. [ 316.448234][T16648] loop6: detected capacity change from 0 to 512 [ 316.471838][T16648] EXT4-fs error (device loop6): ext4_acquire_dquot:6945: comm syz.6.4668: Failed to acquire dquot type 1 [ 316.484098][T16648] EXT4-fs (loop6): 1 truncate cleaned up [ 316.513804][T16655] loop5: detected capacity change from 0 to 2048 [ 316.515543][T16657] +: renamed from syzkaller0 [ 316.532251][T16655] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 316.585049][T16662] loop6: detected capacity change from 0 to 2048 [ 316.601504][T16665] loop5: detected capacity change from 0 to 2048 [ 316.677773][T16665] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 316.694328][T16665] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1386 with error 28 [ 316.706928][T16665] EXT4-fs (loop5): This should not happen!! Data will be lost [ 316.706928][T16665] [ 316.716722][T16665] EXT4-fs (loop5): Total free blocks count 0 [ 316.722746][T16665] EXT4-fs (loop5): Free/Dirty block details [ 316.728671][T16665] EXT4-fs (loop5): free_blocks=2415919104 [ 316.734399][T16665] EXT4-fs (loop5): dirty_blocks=1392 [ 316.739814][T16665] EXT4-fs (loop5): Block reservation details [ 316.745815][T16665] EXT4-fs (loop5): i_reserved_data_blocks=87 [ 316.811476][ T13] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2 with error 28 [ 316.823726][ T13] EXT4-fs (loop5): This should not happen!! Data will be lost [ 316.823726][ T13] [ 316.846339][T16688] loop6: detected capacity change from 0 to 2048 [ 316.857148][T16690] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(3) [ 316.863744][T16690] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 316.871306][T16690] vhci_hcd vhci_hcd.0: Device attached [ 316.890867][T16690] loop5: detected capacity change from 0 to 1024 [ 316.897957][T16690] EXT4-fs: Ignoring removed orlov option [ 316.972082][T16697] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4682'. [ 317.117346][ T1037] usb 11-1: new low-speed USB device number 3 using vhci_hcd [ 317.179509][T16704] loop1: detected capacity change from 0 to 2048 [ 317.209303][T16704] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 317.252625][T16718] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4687'. [ 317.330083][T16725] loop3: detected capacity change from 0 to 512 [ 317.346831][T16725] ext2: Unknown parameter 'smackfstransmute' [ 317.543471][T16736] loop6: detected capacity change from 0 to 1024 [ 317.554770][T16738] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4695'. [ 317.564511][T16738] hsr_slave_0: left promiscuous mode [ 317.565007][T16736] EXT4-fs: Ignoring removed orlov option [ 317.575673][T16738] hsr_slave_1: left promiscuous mode [ 317.621401][T16741] loop6: detected capacity change from 0 to 2048 [ 317.700919][T16745] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 317.708385][T16745] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 317.716194][T16745] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 317.723798][T16745] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 317.780086][T16691] vhci_hcd: connection reset by peer [ 317.790351][ T170] vhci_hcd: stop threads [ 317.794640][ T170] vhci_hcd: release socket [ 317.799242][ T170] vhci_hcd: disconnect device [ 317.880643][T16745] can0: slcan on ptm0. [ 317.927599][T16745] can0 (unregistered): slcan off ptm0. [ 317.933296][T16745] Falling back ldisc for ptm0. [ 318.087486][T16756] xt_connbytes: Forcing CT accounting to be enabled [ 318.094226][T16756] set match dimension is over the limit! [ 318.232679][T16758] loop3: detected capacity change from 0 to 512 [ 318.305748][T16764] +: renamed from syzkaller0 [ 318.372791][ T30] kauditd_printk_skb: 304 callbacks suppressed [ 318.372809][ T30] audit: type=1326 audit(318.291:35611): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16765 comm="syz.5.4704" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f437fe1f6c9 code=0x7ffc0000 [ 318.405455][ T30] audit: type=1326 audit(318.291:35612): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16767 comm="syz.3.4705" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7f717f6c9 code=0x7ffc0000 [ 318.428462][ T30] audit: type=1326 audit(318.291:35613): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16767 comm="syz.3.4705" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7f717f6c9 code=0x7ffc0000 [ 318.451696][ T30] audit: type=1326 audit(318.291:35614): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16767 comm="syz.3.4705" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff7f717f6c9 code=0x7ffc0000 [ 318.475131][ T30] audit: type=1326 audit(318.291:35615): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16767 comm="syz.3.4705" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7f717f6c9 code=0x7ffc0000 [ 318.498124][ T30] audit: type=1326 audit(318.291:35616): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16767 comm="syz.3.4705" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff7f717f6c9 code=0x7ffc0000 [ 318.521183][ T30] audit: type=1326 audit(318.291:35617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16767 comm="syz.3.4705" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff7f717f6c9 code=0x7ffc0000 [ 318.544240][ T30] audit: type=1326 audit(318.291:35618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16767 comm="syz.3.4705" exe="/root/syz-executor" sig=0 arch=c000003e syscall=207 compat=0 ip=0x7ff7f717f6c9 code=0x7ffc0000 [ 318.567224][ T30] audit: type=1326 audit(318.321:35619): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16765 comm="syz.5.4704" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f437fe1f6c9 code=0x7ffc0000 [ 318.590381][ T30] audit: type=1326 audit(318.321:35620): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16765 comm="syz.5.4704" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f437fe1f6c9 code=0x7ffc0000 [ 318.670464][T16777] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 318.677970][T16777] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 318.686110][T16777] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 318.693869][T16777] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 318.713038][T16783] program syz.0.4709 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 318.731303][T16785] can0: slcan on ptm0. [ 318.752796][T16787] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4711'. [ 318.772987][T16783] loop0: detected capacity change from 0 to 1024 [ 318.790314][T16783] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 318.801335][T16783] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 318.811034][T16785] can0 (unregistered): slcan off ptm0. [ 318.816965][T16785] Falling back ldisc for ptm0. [ 318.823026][T16783] JBD2: no valid journal superblock found [ 318.828894][T16783] EXT4-fs (loop0): Could not load journal inode [ 318.835398][T16788] loop3: detected capacity change from 0 to 512 [ 318.842120][T16788] ext2: Unknown parameter 'smackfstransmute' [ 318.924694][T16794] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4714'. [ 318.962567][T16796] loop0: detected capacity change from 0 to 512 [ 318.982001][T16796] siw: device registration error -23 [ 318.994635][T16799] loop6: detected capacity change from 0 to 512 [ 319.001428][T16799] ext2: Unknown parameter 'smackfstransmute' [ 319.116260][T16804] loop0: detected capacity change from 0 to 1024 [ 319.123073][T16804] EXT4-fs: Ignoring removed orlov option [ 319.892792][T16828] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4725'. [ 319.936929][T16830] team0: No ports can be present during mode change [ 319.952803][T16831] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(3) [ 319.959344][T16831] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 319.966969][T16831] vhci_hcd vhci_hcd.0: Device attached [ 319.983615][T16831] loop5: detected capacity change from 0 to 1024 [ 319.990889][T16831] EXT4-fs: Ignoring removed orlov option [ 320.005336][T16837] +: renamed from syzkaller0 [ 320.051317][T16839] 9pnet_fd: Insufficient options for proto=fd [ 320.112833][T16844] loop0: detected capacity change from 0 to 1024 [ 320.119303][ T24] usb 1-1: enqueue for inactive port 0 [ 320.125209][T16844] EXT4-fs: Ignoring removed orlov option [ 320.130946][ T24] usb 1-1: enqueue for inactive port 0 [ 320.168371][T16847] loop0: detected capacity change from 0 to 128 [ 320.180149][T16847] syz.0.4731: attempt to access beyond end of device [ 320.180149][T16847] loop0: rw=1, sector=138, nr_sectors = 4 limit=128 [ 320.207333][ T24] vhci_hcd: vhci_device speed not set [ 320.486391][T16859] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4737'. [ 320.614909][T16866] +: renamed from syzkaller0 [ 320.672647][T16870] loop0: detected capacity change from 0 to 1024 [ 320.679814][T16870] EXT4-fs: Ignoring removed orlov option [ 320.690543][T16872] loop3: detected capacity change from 0 to 2048 [ 320.716229][T16877] loop0: detected capacity change from 0 to 128 [ 320.724668][T16877] syz.0.4743: attempt to access beyond end of device [ 320.724668][T16877] loop0: rw=1, sector=138, nr_sectors = 4 limit=128 [ 320.757375][ T3551] Bluetooth: hci0: command 0x1003 tx timeout [ 320.763407][ T3682] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 320.834141][T16880] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4744'. [ 320.925950][T16832] vhci_hcd: connection closed [ 320.926840][ T52] vhci_hcd: stop threads [ 320.935850][ T52] vhci_hcd: release socket [ 320.940365][ T52] vhci_hcd: disconnect device [ 320.950282][T16883] loop0: detected capacity change from 0 to 512 [ 320.956925][T16883] ext2: Unknown parameter 'smackfstransmute' [ 321.034512][T16885] netlink: 4 bytes leftover after parsing attributes in process `ÿ'. [ 321.146774][T16890] loop3: detected capacity change from 0 to 2048 [ 321.533793][T16913] loop3: detected capacity change from 0 to 2048 [ 321.574660][T16921] loop3: detected capacity change from 0 to 512 [ 321.624286][T16919] netlink: 4 bytes leftover after parsing attributes in process `ÿ'. [ 321.647121][T16929] loop3: detected capacity change from 0 to 1024 [ 321.654352][T16929] EXT4-fs: Ignoring removed orlov option [ 321.705543][T16934] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 321.712089][T16934] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 321.719732][T16934] vhci_hcd vhci_hcd.0: Device attached [ 321.733950][T16934] loop3: detected capacity change from 0 to 1024 [ 321.749024][T16934] EXT4-fs: Ignoring removed orlov option [ 321.770786][T16940] loop0: detected capacity change from 0 to 1024 [ 321.777508][T16940] EXT4-fs: Ignoring removed orlov option [ 321.876142][T16944] can0: slcan on ptm0. [ 321.897548][T16944] can0 (unregistered): slcan off ptm0. [ 321.903651][T16944] Falling back ldisc for ptm0. [ 321.977302][ T3378] usb 7-1: new low-speed USB device number 3 using vhci_hcd [ 322.197742][ T1037] usb 11-1: enqueue for inactive port 0 [ 322.207905][ T1037] usb 11-1: enqueue for inactive port 0 [ 322.255752][T16962] loop6: detected capacity change from 0 to 128 [ 322.270018][T16962] syz.6.4771: attempt to access beyond end of device [ 322.270018][T16962] loop6: rw=1, sector=138, nr_sectors = 4 limit=128 [ 322.287323][ T1037] vhci_hcd: vhci_device speed not set [ 322.343029][T16966] 9pnet_fd: Insufficient options for proto=fd [ 322.410188][T16972] loop6: detected capacity change from 0 to 1024 [ 322.418433][T16972] EXT4-fs (loop6): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 322.429563][T16972] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 322.440742][T16972] JBD2: no valid journal superblock found [ 322.446710][T16972] EXT4-fs (loop6): Could not load journal inode [ 322.565209][T16976] xt_connbytes: Forcing CT accounting to be enabled [ 322.599889][T16977] loop6: detected capacity change from 0 to 2048 [ 322.641046][T16976] set match dimension is over the limit! [ 322.654358][T16935] vhci_hcd: connection reset by peer [ 322.693610][ T52] vhci_hcd: stop threads [ 322.697950][ T52] vhci_hcd: release socket [ 322.702434][ T52] vhci_hcd: disconnect device [ 322.847037][T16990] loop1: detected capacity change from 0 to 2048 [ 323.033820][T17007] loop0: detected capacity change from 0 to 1024 [ 323.041489][T17007] EXT4-fs: Ignoring removed orlov option [ 323.121784][T17013] loop0: detected capacity change from 0 to 1024 [ 323.129131][T17013] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 323.140057][T17013] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 323.151053][T17013] JBD2: no valid journal superblock found [ 323.156808][T17013] EXT4-fs (loop0): Could not load journal inode [ 323.205780][T17017] 9pnet_fd: Insufficient options for proto=fd [ 323.209009][T17020] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4791'. [ 323.222337][T17021] tipc: Enabling of bearer rejected, failed to enable media [ 323.231465][T17021] +: renamed from syzkaller0 [ 323.272480][T17023] loop3: detected capacity change from 0 to 2048 [ 323.286659][T17026] loop6: detected capacity change from 0 to 512 [ 323.293947][T17026] ext2: Unknown parameter 'smackfstransmute' [ 323.347641][T17032] loop3: detected capacity change from 0 to 2048 [ 323.440834][T17032] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 323.480843][T17032] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1204 with error 28 [ 323.485966][T17040] loop0: detected capacity change from 0 to 512 [ 323.493319][T17032] EXT4-fs (loop3): This should not happen!! Data will be lost [ 323.493319][T17032] [ 323.493339][T17032] EXT4-fs (loop3): Total free blocks count 0 [ 323.515420][T17032] EXT4-fs (loop3): Free/Dirty block details [ 323.521423][T17032] EXT4-fs (loop3): free_blocks=2415919104 [ 323.527226][T17032] EXT4-fs (loop3): dirty_blocks=1216 [ 323.532629][T17032] EXT4-fs (loop3): Block reservation details [ 323.538698][T17032] EXT4-fs (loop3): i_reserved_data_blocks=76 [ 323.539666][T17047] loop5: detected capacity change from 0 to 512 [ 323.553008][T17040] __quota_error: 280 callbacks suppressed [ 323.553024][T17040] Quota error (device loop0): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 323.569003][T17040] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 323.578972][T17040] EXT4-fs error (device loop0): ext4_acquire_dquot:6945: comm syz.0.4799: Failed to acquire dquot type 1 [ 323.592881][T17040] EXT4-fs (loop0): 1 truncate cleaned up [ 323.616201][T17047] siw: device registration error -23 [ 323.622068][ T52] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2 with error 28 [ 323.634333][ T52] EXT4-fs (loop3): This should not happen!! Data will be lost [ 323.634333][ T52] [ 323.637925][ T30] audit: type=1326 audit(323.561:35901): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17050 comm="syz.0.4801" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac6227f6c9 code=0x7ffc0000 [ 323.666968][ T30] audit: type=1326 audit(323.561:35902): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17050 comm="syz.0.4801" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac6227f6c9 code=0x7ffc0000 [ 323.690802][ T30] audit: type=1326 audit(323.561:35903): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17050 comm="syz.0.4801" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac6227f6c9 code=0x7ffc0000 [ 323.713975][ T30] audit: type=1326 audit(323.561:35904): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17050 comm="syz.0.4801" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac6227f6c9 code=0x7ffc0000 [ 323.737032][ T30] audit: type=1326 audit(323.561:35905): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17050 comm="syz.0.4801" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac6227f6c9 code=0x7ffc0000 [ 323.737240][T17051] loop0: detected capacity change from 0 to 128 [ 323.760100][ T30] audit: type=1326 audit(323.621:35906): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17050 comm="syz.0.4801" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fac6227f6c9 code=0x7ffc0000 [ 323.772760][T17051] syz.0.4801: attempt to access beyond end of device [ 323.772760][T17051] loop0: rw=1, sector=138, nr_sectors = 4 limit=128 [ 323.789309][ T30] audit: type=1326 audit(323.621:35907): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17050 comm="syz.0.4801" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac6227f6c9 code=0x7ffc0000 [ 323.825513][ T30] audit: type=1326 audit(323.621:35908): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17050 comm="syz.0.4801" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac6227f6c9 code=0x7ffc0000 [ 323.889674][ T37] Bluetooth: hci0: Frame reassembly failed (-84) [ 323.896422][T17055] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4803'. [ 323.931356][T17066] loop0: detected capacity change from 0 to 2048 [ 323.972596][T17064] netlink: 4 bytes leftover after parsing attributes in process `ÿ'. [ 324.035120][T17079] loop3: detected capacity change from 0 to 512 [ 324.049211][T17079] EXT4-fs error (device loop3): ext4_acquire_dquot:6945: comm syz.3.4812: Failed to acquire dquot type 1 [ 324.061501][T17079] EXT4-fs (loop3): 1 truncate cleaned up [ 324.061506][T17083] netlink: 52 bytes leftover after parsing attributes in process `syz.1.4809'. [ 324.104028][T17087] 9pnet_fd: Insufficient options for proto=fd [ 324.111122][T17085] loop3: detected capacity change from 0 to 2048 [ 324.133654][T17089] loop6: detected capacity change from 0 to 1024 [ 324.170712][T17089] EXT4-fs: Ignoring removed orlov option [ 324.204981][T17097] loop1: detected capacity change from 0 to 2048 [ 324.221748][T17085] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 324.230496][T17100] program syz.0.4819 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 324.237349][T17085] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1310 with error 28 [ 324.258248][T17085] EXT4-fs (loop3): This should not happen!! Data will be lost [ 324.258248][T17085] [ 324.267945][T17085] EXT4-fs (loop3): Total free blocks count 0 [ 324.274269][T17085] EXT4-fs (loop3): Free/Dirty block details [ 324.280365][T17085] EXT4-fs (loop3): free_blocks=2415919104 [ 324.286189][T17085] EXT4-fs (loop3): dirty_blocks=1312 [ 324.291599][T17085] EXT4-fs (loop3): Block reservation details [ 324.297627][T17085] EXT4-fs (loop3): i_reserved_data_blocks=82 [ 324.313040][T17100] loop0: detected capacity change from 0 to 1024 [ 324.320050][T17100] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 324.330995][T17100] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 324.343678][T17100] JBD2: no valid journal superblock found [ 324.349546][T17100] EXT4-fs (loop0): Could not load journal inode [ 324.349876][T17107] team0: No ports can be present during mode change [ 324.460606][ T52] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2 with error 28 [ 324.472746][T17114] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4823'. [ 324.472951][ T52] EXT4-fs (loop3): This should not happen!! Data will be lost [ 324.472951][ T52] [ 324.535048][T17120] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4826'. [ 324.561569][T17122] 9pnet_fd: Insufficient options for proto=fd [ 324.601970][T17126] loop1: detected capacity change from 0 to 512 [ 324.608992][T17126] ext2: Unknown parameter 'smackfstransmute' [ 324.643030][T17129] netlink: 52 bytes leftover after parsing attributes in process `syz.0.4828'. [ 324.658887][T17131] loop3: detected capacity change from 0 to 1024 [ 324.665629][T17131] EXT4-fs: Ignoring removed orlov option [ 324.713385][T17134] can0: slcan on ptm2. [ 324.716647][T17137] loop3: detected capacity change from 0 to 2048 [ 324.777502][T17134] can0 (unregistered): slcan off ptm2. [ 324.783231][T17134] Falling back ldisc for ptm2. [ 324.935251][T17147] set match dimension is over the limit! [ 325.088470][T17149] netlink: 4 bytes leftover after parsing attributes in process `ÿ'. [ 325.123128][T17154] loop0: detected capacity change from 0 to 2048 [ 325.217602][T10893] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 325.276552][T17161] loop0: detected capacity change from 0 to 2048 [ 325.485078][ T4235] Bluetooth: hci1: Frame reassembly failed (-84) [ 325.486151][T17172] loop1: detected capacity change from 0 to 128 [ 325.501662][T17172] syz.1.4841: attempt to access beyond end of device [ 325.501662][T17172] loop1: rw=1, sector=138, nr_sectors = 4 limit=128 [ 325.534806][T17175] loop1: detected capacity change from 0 to 1024 [ 325.541826][T17175] EXT4-fs: Ignoring removed orlov option [ 325.719159][T17180] netlink: 52 bytes leftover after parsing attributes in process `syz.3.4843'. [ 325.886125][T17177] ================================================================== [ 325.894250][T17177] BUG: KCSAN: data-race in xas_find_marked / xas_set_mark [ 325.895188][T17188] loop3: detected capacity change from 0 to 128 [ 325.901424][T17177] [ 325.901434][T17177] write to 0xffff88811a658f94 of 4 bytes by task 17175 on cpu 1: [ 325.901456][T17177] xas_set_mark+0x12b/0x140 [ 325.901477][T17177] __folio_start_writeback+0x155/0x390 [ 325.927686][T17177] ext4_bio_write_folio+0x5ad/0x9f0 [ 325.932907][T17177] mpage_process_page_bufs+0x4a1/0x620 [ 325.938383][T17177] mpage_prepare_extent_to_map+0x786/0xc00 [ 325.944204][T17177] ext4_do_writepages+0xa05/0x2750 [ 325.949322][T17177] ext4_writepages+0x176/0x300 [ 325.954100][T17177] do_writepages+0x1c6/0x310 [ 325.958723][T17177] file_write_and_wait_range+0x156/0x2c0 [ 325.964382][T17177] generic_buffers_fsync_noflush+0x45/0x120 [ 325.970297][T17177] ext4_sync_file+0x1ab/0x690 [ 325.974986][T17177] vfs_fsync_range+0x10d/0x130 [ 325.979768][T17177] ext4_buffered_write_iter+0x34f/0x3c0 [ 325.985324][T17177] ext4_file_write_iter+0x387/0xf60 [ 325.990535][T17177] iter_file_splice_write+0x666/0xa60 [ 325.995922][T17177] direct_splice_actor+0x156/0x2a0 [ 326.001044][T17177] splice_direct_to_actor+0x312/0x680 [ 326.006428][T17177] do_splice_direct+0xda/0x150 [ 326.011205][T17177] do_sendfile+0x380/0x650 [ 326.015644][T17177] __x64_sys_sendfile64+0x105/0x150 [ 326.020865][T17177] x64_sys_call+0x2bb4/0x3000 [ 326.025551][T17177] do_syscall_64+0xd2/0x200 [ 326.030066][T17177] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 326.035968][T17177] [ 326.038298][T17177] read to 0xffff88811a658f94 of 4 bytes by task 17177 on cpu 0: [ 326.045941][T17177] xas_find_marked+0x5dc/0x620 [ 326.050715][T17177] find_get_entry+0x5d/0x380 [ 326.055331][T17177] filemap_get_folios_tag+0x92/0x210 [ 326.060660][T17177] mpage_prepare_extent_to_map+0x320/0xc00 [ 326.066483][T17177] ext4_do_writepages+0x708/0x2750 [ 326.071601][T17177] ext4_writepages+0x176/0x300 [ 326.076370][T17177] do_writepages+0x1c6/0x310 [ 326.080969][T17177] file_write_and_wait_range+0x156/0x2c0 [ 326.086620][T17177] generic_buffers_fsync_noflush+0x45/0x120 [ 326.092536][T17177] ext4_sync_file+0x1ab/0x690 [ 326.097229][T17177] vfs_fsync_range+0x10d/0x130 [ 326.102013][T17177] ext4_buffered_write_iter+0x34f/0x3c0 [ 326.107573][T17177] ext4_file_write_iter+0x387/0xf60 [ 326.112778][T17177] iter_file_splice_write+0x666/0xa60 [ 326.118162][T17177] direct_splice_actor+0x156/0x2a0 [ 326.123285][T17177] splice_direct_to_actor+0x312/0x680 [ 326.128668][T17177] do_splice_direct+0xda/0x150 [ 326.133439][T17177] do_sendfile+0x380/0x650 [ 326.137878][T17177] __x64_sys_sendfile64+0x105/0x150 [ 326.143097][T17177] x64_sys_call+0x2bb4/0x3000 [ 326.147785][T17177] do_syscall_64+0xd2/0x200 [ 326.152295][T17177] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 326.158194][T17177] [ 326.160518][T17177] value changed: 0x0a000021 -> 0x04000021 [ 326.166229][T17177] [ 326.168546][T17177] Reported by Kernel Concurrency Sanitizer on: [ 326.174700][T17177] CPU: 0 UID: 0 PID: 17177 Comm: syz.1.4842 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 326.186081][T17177] Tainted: [W]=WARN [ 326.189882][T17177] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 326.199938][T17177] ================================================================== [ 326.217823][ T3682] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 326.224157][T10304] Bluetooth: hci0: command 0x1003 tx timeout [ 326.246550][T17188] syz.3.4847: attempt to access beyond end of device [ 326.246550][T17188] loop3: rw=1, sector=138, nr_sectors = 4 limit=128 [ 326.997315][ T3378] usb 7-1: enqueue for inactive port 0 [ 327.002886][ T3378] usb 7-1: enqueue for inactive port 0 [ 327.077351][ T3378] vhci_hcd: vhci_device speed not set [ 327.557304][ T3682] Bluetooth: hci1: command 0x1003 tx timeout [ 327.558264][ T3551] Bluetooth: hci1: Opcode 0x1003 failed: -110