last executing test programs: 24.558134839s ago: executing program 3 (id=3461): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x39, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x24, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f}, 0x94) syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r3}, 0x10) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x8, 0x3, 0x3b0, 0x0, 0x43, 0xa0, 0x1d0, 0x98, 0x318, 0x178, 0x178, 0x318, 0x178, 0x49, 0x0, {[{{@ip={@loopback, @local, 0x0, 0x0, 'veth0_to_bond\x00', 'ip6erspan0\x00'}, 0x12a, 0x1b0, 0x1d0, 0x0, {0x0, 0x7a010000}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x8, 0x0, 'syz0\x00'}}, @common=@unspec=@helper={{0x48}, {0x0, 'ftp-20000\x00'}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0xe8, 0x148, 0x0, {}, [@common=@unspec=@connbytes={{0x38}, {[{0xb}]}}, @common=@set={{0x40}, {{0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x300]}}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@multicast1}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x410) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000010000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000300), 0x1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f00000002c0)='tlb_flush\x00', r4}, 0x18) mremap(&(0x7f0000000000/0x9000)=nil, 0x200003, 0x600000, 0x3, &(0x7f0000a00000/0x600000)=nil) syz_open_dev$usbfs(&(0x7f0000000040), 0x20000007d, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(0xffffffffffffffff, 0x9201, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0x5, 0x6, 0x8, 0xad, 0x0, 0xffffffffffffffff, 0x4000000}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=@base={0xd, 0x2, 0x4, 0x4002, 0x5, r5, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x8000000}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000340)='kfree\x00', r0, 0x0, 0x1}, 0x18) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000040)="d8000000180081064e81f782db4cb904021d080006007c09e8fe55a10a0015000600142603600e1208000f0000000401a80016002000034004000200035c0461c1d60008000000000000fb8000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f0f49e119c849ea6e5a0fc55e4cde205a214d6102d6dcbf33fb5ce3bb9ad809d5e1cace81ed0bffece0b42a1a83", 0xd4}, {&(0x7f00000014c0)="5c9ebe30", 0x4}], 0x2}, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={0xffffffffffffffff, 0x0, 0x25, 0x0, @val=@netfilter}, 0x40) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0xffffffff, 0x0, {0x0, 0x0, 0x74, 0x0, {0x0, 0x7}, {0x0, 0x4}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000ec0)={r3, 0xe0, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000c00)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x5, &(0x7f0000000c40)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000c80)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xba, &(0x7f0000000cc0)=[{}], 0x8, 0x10, &(0x7f0000000d00), &(0x7f0000000d40), 0x8, 0x94, 0x8, 0x8, &(0x7f0000000d80)}}, 0x10) r8 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'veth1_macvtap\x00', 0x0}) r10 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5c00000010000305000000000000ffff00000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800b0001006d616373656300001c000280050007000000000005000a0000000000050009000000000008000500", @ANYRES32=r9], 0x5c}}, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000001200)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x33800}, 0xc, &(0x7f00000011c0)={&(0x7f0000000f00)={0x2ac, 0x0, 0x200, 0x70bd26, 0x25dfdbfd, {}, [{{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x80000000}}}]}}, {{0x8}, {0x24c, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x8000}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8}}}, {0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0xf, 0x3, 0x4, 0x20c9}, {0x8001, 0x9, 0x3}]}}}, {0x5c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x2c, 0x4, [{0xa45, 0x7, 0x8, 0x9}, {0x5d, 0x1, 0x3, 0x7}, {0x7f, 0x1, 0x2, 0xffffff00}, {0x200, 0x8, 0xff, 0x1b61}, {0x6, 0xd7, 0xff, 0xff}]}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r7}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r9}}}]}}]}, 0x2ac}, 0x1, 0x0, 0x0, 0x20000800}, 0xc0040d4) 24.179888714s ago: executing program 3 (id=3467): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$nl_route(0x10, 0x3, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="07000000040000000001"], 0x50) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4, 0x90042, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x67a, 0x1, 0x81, 0x3, 0xd13e, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{}, &(0x7f0000000180), &(0x7f00000001c0)=r2}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x49, 0x0, 0x0, 0x0}, 0x94) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000200)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000340)={0x0, 0xcc}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback, 0x7}], 0x1c) sendmmsg$inet6(r1, &(0x7f0000000640)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x2, @loopback, 0x3}, 0x1c, &(0x7f0000000500)=[{&(0x7f0000000300)="06", 0x1}], 0x1}}], 0x1, 0x3404c8d4) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f0000000240)=ANY=[@ANYRES32, @ANYRES32=r0], 0x1000f) 24.126318575s ago: executing program 3 (id=3468): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="07000000040000000800000001000000"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x18) syz_clone(0x638c1100, 0x0, 0x0, 0x0, 0x0, 0x0) 23.120024309s ago: executing program 3 (id=3472): syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f00000004c0)='./file1\x00', 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="646f74732c646f74732c646f74732c636865636b3d72656c617865642c616c6c6f775f7574696d653d30303030303030303030303030303030303030303030302c6e6f646f74732c646f74732c6e6f646f74732c6e6f646f74732c636865636b3d7374726963742c616c6c6f775f7574696d653d30303030303030303030303030303030303030303030312c646f74732c646f74732c616c6c6f775f7574696d653d30303030303030303030303030303030303030303030312c6e6f646f74732c646f74732c666d61736b3d30303030303030303030303030303030303030303030322c6e6f646f74732c646f74732c666c7573682c6e6f646f74732c636865636b3d6e6f726d616c2c0079c7cebee7a0df8765ffc536c4e752679b645307d1bf097e07b8e261bb27d1bb80ee490fc501e4f230ddf1483b11ac5c39a93cfc3ba360037c79a9be063a3bf5015e3d6a8cad0e98ccb29619c51c44ec612fc7ff44fa8cf7759eada764c43ba9d602a958bd209ace3df01c3dae04baa94aedc5515da8160ae0"], 0xfd, 0x1bf, &(0x7f0000000300)="$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") openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x2142, 0x17e) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) set_mempolicy(0x6005, &(0x7f0000000080)=0xfffffffffffffffd, 0x4) gettid() timer_create(0x0, 0x0, &(0x7f0000bbdffc)) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x18) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYRES64=r3, @ANYRES16=r3, @ANYBLOB="0000000000000000340012800e00010069703665727370616e0000002000060000000000000004537a3155202b5800000000ffff7f00000108000a00000000150000000000000000", @ANYRESHEX=r1], 0x5c}}, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000580)='./file1\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./bus\x00', 0x0) r4 = open(&(0x7f00000000c0)='.\x00', 0x8000, 0x50) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r5, 0x107, 0xd, &(0x7f00000000c0)=@req={0x8000, 0xb4f, 0x300, 0x1daf6}, 0x10) setsockopt$packet_int(r5, 0x107, 0xa, &(0x7f0000000580), 0x4) r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) capset(&(0x7f0000000380)={0x20080522}, &(0x7f0000000040)={0x200000, 0x40200000, 0x0, 0x6, 0x7}) r7 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r7) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) syz_open_procfs(r6, &(0x7f0000000240)='fdinfo\x00') mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1be) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x101091, 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x200a0, 0x0) set_mempolicy(0x1, &(0x7f0000000500)=0xc, 0x9) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) getdents(r4, &(0x7f0000001fc0)=""/184, 0xb8) 22.947767121s ago: executing program 3 (id=3476): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r0, &(0x7f0000000e80)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000006c0)="0d18687da3e7f33aed145cf8ff2d1e5a18c0d5f9856f4824f41040f6987d0b531da10713ed151bc4867681f28e033aef683334d03864ed30590dd4ea64a20ecbbc1346c9f42510d91eec0632885b7da95ca85f4b1435c5c1e993a85257df5f19bdfc5e038a16e6a8aef907e347081fdb93cee93217e11f19cde423e6138bd1b79ee615527ccaf8049959ac6e32af46d777ccb8c26c", 0x95}, {&(0x7f0000000380)="3f82090ccda4f8ce1b08afd200c6075794cdd2e0021e32a0f6267447162a2085457cf687e74d142e85e9c4ac6eefcdaa493bcb54152b1339a38d3898707b77a9333cfb7bdc7c523ab4aa869c6db252e8e93bc14cfccfdedf9bbaed10dbc3c315aaedb987b398dd67a155fc3644", 0x6d}], 0x2}}, {{0x0, 0x0, &(0x7f0000000e40)=[{&(0x7f0000001800)="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", 0x2ff}], 0x1}}], 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 22.765796253s ago: executing program 3 (id=3481): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f00000bd000), 0x318, 0x0) r1 = socket$kcm(0x10, 0x100000000002, 0x4) sendmsg$kcm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="39000000140081ae00002c000500015601618575e285af0100d41f215c0000883795c04a31ba377a1b2cc32b38d3440c6942cb76cab30000", 0x38}], 0x1, 0x0, 0x0, 0xc00e}, 0x0) 22.710000544s ago: executing program 32 (id=3481): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f00000bd000), 0x318, 0x0) r1 = socket$kcm(0x10, 0x100000000002, 0x4) sendmsg$kcm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="39000000140081ae00002c000500015601618575e285af0100d41f215c0000883795c04a31ba377a1b2cc32b38d3440c6942cb76cab30000", 0x38}], 0x1, 0x0, 0x0, 0xc00e}, 0x0) 3.059377899s ago: executing program 2 (id=3759): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800}}, {@minixdf}]}, 0x0, 0x502, &(0x7f0000000fc0)="$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") openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x8604}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=@mpls_getroute={0x24, 0x1a, 0x9e8a232eead7ae69, 0x70bd26, 0x0, {0x1c, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x4}, [@RTA_OIF={0x8}]}, 0x24}}, 0x0) io_uring_setup(0x2b1b, &(0x7f0000002700)={0x0, 0x91cd, 0x100, 0x0, 0x19d}) prctl$PR_SET_NAME(0xf, &(0x7f0000000680)='+}[@\x00[$oB\xfa=\xee\xc4F\xba\xed\x97') perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x37, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0xd}, 0x4c58, 0x10000, 0x0, 0x1, 0x8, 0x20002, 0xb, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x18, &(0x7f0000000000)={&(0x7f0000000440)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xffe0}, {0xf}, {0xe, 0xd}}, [@TCA_RATE={0x6, 0x5, {0x9, 0x1}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="620af8ffa1dc0021bfa100000000000007010000f8ffffffb702000007000000bd120000000000008500000010000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24561f1b2607995daa56f151905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64b751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07372c29184ff7f4a7c0000070000006056feb4cc664c0af9360a1f7a5e6b607130c89f18c0c1088d8b8588d72ec29c48f0af5f2d9f51c4b45e0000000000000401d01aa27ae8b09e00e79ab20b0b8ed8fb7a68af2ad0810000000000006fa03c6468978089b302d7ff6023cdcedb5e0125ebbcebdde510cb2364149215108337719acd97cfa107d40224edc5465ad32b77a74e802a0dc6bf25cca242bc6099ad2300000480006ef6c1ff0900000000000010c63a949e8b7955394ffaff03000000000000ab87b1bfeda7be586602d985430cea080000000000000026abfb0767042361448279b05d96a703a660581eecdbf5bcd3de227a167ca17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9b081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b6c7632d5933a1c1fa5605bd7603f2ba2a790d62d6faec2fed44da4928b30142ba1fde5c5d50b83bae645ffa4997da9c77af4c0cb97fca585ec6bf58351d578be00d952aab9c71764b0a8a7583c90b3433b809bdb9fbd48fc877505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223d8d9e86c5ea06d108d8f80a0eb4fa39f6b5c02e6d6d90756ff578f57000000009700cf0b4b8bc229413300000000000000000003000000000000000000000000001000000000559711e6e8fcffffffffffffffb2d02edc3e01dd271c896249ed85b980680b09000000000f0000169cdcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffffd897ef3b7cda42f93d53046da21b40216e14ba2d6af8656b01e17addaedab25b30002abbba7fa725f38400be7c1fb8f72cd317902f19e385be9e48dccf1f9f3282830689da6b53b263339863297771d74732d400003341bf4a00fc9fec2271ff01589646efd1cf870cd7bb2366fde4a594290c405ff870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d30a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78249788f11f761038b75d4fe32b561d46ea3abe0fa7956488bef241875f3b4b6ab7929a57affe760e797724f4fce1093b62d7e8c7123d890decacec55bf404e4e1f74b7eed82571be54c72d978cf906df0042e36acd37d7f9e109f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2acd1fe582786105c70600000000000000b7561301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c542c9062ece84c99a061887a20639b41c8c12ee86c50804042b3eac1f870b136345cf67ca3fb5aac518a75f9e7d7101da841735e186c489b3a06fb99e0347f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f91e358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e669261192899d4562db0e22d564ae09bb6d163118e401e024fd452277c3887d6116c6cc9d8046c216c1f895778cb26e22a2a998de44aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f154772f514216bdf57d2a40d40b51ab67903ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99a3594191e104d417e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1594e32409e2a3bce109b6000000000000a1fec9000000d694210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137ab79a404abde7750898b59270bb29b81367ac91bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f00fb8191bbab2dc591dda61f0868afc4294859323e7a45319f18101288a0268893373750d1a8fe64680b0a3fc22dd704e4214d00000000d6c98cd1a9fbe1e7d58c08acaf30065b928a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ce21d69993e9960ff5f76015e6009756237badf4e7965bbe2777e808fcba821a00e8c5c39609ff854356cb490000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466ac96e0d0b3bc19faa5449209b085f3c334b47f067bbab40743b2a428f1da1f68df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c471c784ae7da7eaa69eb7f7f80572fdd11bb1d070080fbc22bf73468788df51710eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331ff5e20fa26b8471d42645288d7226bbd9c9e9e1cc9eb3d541e407cc2dae5e690cd628ab84875f2c50ba830d3f474b079b407000000deff000040430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71b967ce7daac4be290159f6bcd75f0dda9de5532e66ae9e48b0ed1254a81faae79b6af6fbb869604d51de44c4e0973171ad47d6c00ebc7603093f000000fdec30cd6db49a47613808bad959719c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f15d6533f78a1f4e2df4ca23d867693fd42de9b49a1b36d48a44ba6a4530e59bec53e876dc660dd63bed8d31c31c37a373d4efd89f0000377b1b1292a893a516dab183ee65744fb8fc4f9ce2242e0f0059161c5e0000000000000000000057d77480e0345effff6413258d1f6eb190aa28cbb4bafe34124172e436b176c7ed4b132fb805d5edd9d188daf28d89c014c3ecca10ae55704544673e1fa03b84f63e022fe755f4007a4a899eaf52c4f491d8e97c862e29e457060000007ac691faee1e0c8fe056a07474e6e5490a7d3c3402000000b60600d837c6befc63ddf2f594ad7cbc56a1e44d218c956a5392a995f1fae8e9f206efbb33854dc70104ebc1581848f9745cb796da2dfb714a0500000000000000faed94fc39acfb3fd25dfa8116a154cd1226e1bb72b59fed817072a0da60160761fd3dffda0f7c592eabd8ab68334d2a1693cb187539049e331272bf5135044df8161400211b8012b6eb1ed5656e83f65509bb4b323c5bd61bff949d3bade2f6ffda1360c2786e16937ab61d6dcafed319c716357d0885f9c6d1f442954c167dd9b4acd9468ce3674c82bbb2e31389179b025dbe063b7f906217b2cf8410c7023aa3e5cc3ba1000000000000000000000000000000006ae6301a2da44394275c582a6516bb92ea1980a0a659f2f1811c8b281c209647c4241f292b20508b215dde27bb2487a6e2b5e4a8ccfab90c23827ef06cbe364073005f8a6d1456aaeb85ffb7858f24eced67a67ab825e863928ed64c83f62ffdaa997657335b63c6b4163aff094059e626766845fd779c9e6cdbbd64c24936615ee68538e8fddd0d90f3a7579579a142c0f7b318264d5c13c31cf475829528267ead38523cab7e1664e8426ca85e82ccf821c8a02a7e7d954d05b68a9c28f79429b09e2bb3681ae2b831e27c735123361c193d66ed4d71f19b199d371ec6bfada7cd370e3fdd3cd980fa1e145fd3f3e96b1feb53c865e1ad6acf5d16ed652ee0c7f45352222692fbd679212c225d097aa90f7e1fb1f983415f43e75a19ecf7fd21bfa150ef563aa72ba1c43c5f3d9be128ec26b691f31f9cab931631606a81622f120675c962be2d3b5e95f74f0b209e42e6bdd76e6e725295b1d78d928f6f63c41cbde2ba66ad81168070c8c6e18a6e452a31bdc4a60d637545ed4c8a1c649c3ce54ad3e16304d06a234f5f9311ef0f78924b68dbb4712efdb6974667bdb54f16fd2061b9ba93638dd177227e94e4ebd0ec1d437db948062bf41742000000000000000000305f70dd02fa0c61d5fe6d8ff35389246037e18d34c1375ae04f44f0c2543c772c5ccb137be7dc1874c5140200000054d77d4ea5ed144a648257f4a0301067bbcd9b91072659d872f26b796e2b81025edb5f45f785e2c2602b248ecdd80f019ca659be7e8ae953325a27564f33c9d458a60be3dab38baab7eb1a66ab1ffd6308f7fd51beb356fe75eb985b7581bb5584c53984ba9c7340f97e8d3825681c53de5f554e595b00000000000000006a8fa9f05d64c4be42f981f00051a3bc38613067dbd1427e01bfec016e51844cefa8a855bf23ac887b4a88eed6d9443857242f28e31a41d20105fbf3394ff910e734b4d9101265ff729c426e01c1ab13dda8c388b9e6626f19eecb87e39175e85e17000000000000000000009431807e43886903526074e6b40244c938a4c68a38c25ddd7c143b3f14eafe4b28ec66815cf8d1f56aa1424bc9b5d58790298e5b310969e50c222563b54e60854e1bfeef448aca8c5ccbf5546ce4c3cd5a733fec25fb94e1e0f966bcbd28a4d8fe4f556eaa1104a793006619700798354c6ae0040965e3083562bfa20968c04007d21dc02c9fd1f75e1ff40f439bdde4e784012e52049b483f02f81b88f5f57816b3fecec79cfca8d37203e769759d6b6a56b7605ced8ee18475a77ff0963a565fb6021d216c01b1098e40550a1cfd80e9180100000000000000654cd76ca61fe5ad8a31ec558fdbfa706d5e738bceae81fe777c307d5bc72183a4c2d35732e74dd690c57bdfdc1f069f9491bca7a8c59363799be70018c25ece5ad7307dc7a95c51bc25a8bbe2cf5ddf6aa161693782b0e7feb8a768f391b49d4c978c96dbb52f21c122eba9f17c8bed10591958cf06321a248b5f76ceedfe0d080d6aeadc11b237b3326dd04b86ac37c0d131544888db9e128d059761ad9a393e96c3b41c13c5a381bff187a75de560ba6eb3faa5ff8d2bb3c88f8de5efc2fb2200cfda6d07ceae22577064334fbf76a23e62e6059211d995b879f6b7d3f7fcf03652b81e6b7cdeff947ad185d3c6269ca247b429c3b872a8f1ef60407d29a874f4ec31c9effed55543a65a6b4d778cebcd43b7905f3960140bd783540a7353014bda8e9c7a34a5f428fd1f8eb11e837dd9d586487fdebcb1ecd3a003ff0fda4be617fecf1ff0ef2cdfb7fea73ca18874664d60a4b9423f3297bc8eb91b4ee1d73272ab28a7d7ab055a8eb58fe379de85338304e26e3620941b463e9049fd105c74c91cc4d71b0f76e2c2e4825106aa7ce2a3adbbc7a0443ece98c077b358e752b439132a0f27080ece2a94c320b002c77f82662675a7713c7067081cac15994698c41ff4754268ae2676384ff799783f55d7e5a1a092a01b965dc99cb7a9d98440c355927629f2bcf9dc2396eb2f5d25829715b24327642ac48f1201014a95e0e65e12cdf27e19043e3c5d3e798375cead35b9a93190a52cdecaaccc854a1d41ef365303f0e9b4fc969c9dab6df5e8a795b140fcc09e8a7b694d12932917facd8ceaa4e2d0d16bb0b95387fcd5ff136d8abddf94daf442bbff744591931872a36cf921ad69f2127386e8b0f9afee4da8d3fbec809fbb3ca0fded2859cf25d4c6155d396c5b9bd1a928923123f63f4c40688eae69990a9419456247bbaeb7948de84d2ff875414883bb1e503d4bfebc01bc12a53ea06bf38e571157bd642dac25dbee7832c58378374a39483d6721eec96c28911db21c0c006b42afc90000000000000000000000700000000000000000008ce4ea442c1a207108b35511186c5e860278f6463f52f3990ce08b1bfccc3cff4b5ae27b610aa9ba11b47d4f94c439e055cdbb2b12c983885c93ea4ab4ca1e02d831ae162ee104"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000002780)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2500000000040000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000040000008500000006000000850000005000000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000004c0)='mm_page_free\x00', r4, 0x0, 0x80000}, 0x18) r5 = io_uring_setup(0x21a4, &(0x7f0000000000)={0x0, 0x75f, 0x10, 0x1, 0x11cb}) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f00000015c0)='kmem_cache_free\x00', r6}, 0x18) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) r7 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0xe2981) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r7, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x1e, 0x0, 0x0) write$sndseq(r7, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32={[0x2600, 0x0, 0x2000]}}], 0xffc8) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r5, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) 2.512014866s ago: executing program 2 (id=3768): sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="01002c6325d24cdbdb2504000000d77fa4812f0c64913d2651ba858646711125a6f5b2268a8e321a752fdfbc7e5b4ae240f4f0116d9a78486f668a8dbe84cc279cac2e103fe5c702a642146602995dc3ba6f2af6d18a5fda1df50c17092045211ecffc0498e5d410ca794d8229efe928310e36bdfc09d9a5d49e756a5d2a6a6494563d22c6e19a4a7520fb06514b72c4556b85d5d1078a539f"], 0x14}, 0x1, 0x0, 0x0, 0x20000800}, 0x54) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000300)='ext4_fc_commit_start\x00', r1}, 0x18) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x2) readv(r2, &(0x7f0000000000)=[{&(0x7f0000001300)=""/244, 0x940}], 0x1) ioctl$TIOCVHANGUP(r2, 0x5437, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000005300)=[{0x28, 0x0, 0xfb, 0xfffff034}, {0x80000006, 0x66}]}, 0x10) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000002fc0)=[{{&(0x7f0000000340)={0xa, 0x4e23, 0xfffffff9, @dev={0xfe, 0x80, '\x00', 0x36}, 0x9}, 0x1c, &(0x7f00000004c0)=[{&(0x7f00000005c0)="05", 0x1}], 0x1}}], 0x1, 0x24000045) 2.478359326s ago: executing program 2 (id=3770): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x39, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x24, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f}, 0x94) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x1f, &(0x7f0000001480)={0x0, @in={{0x2, 0x1c, @dev={0xac, 0x14, 0x14, 0x1b}}}, 0xc4}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x18) r3 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xc3, 0x0, 0x0, 0x0, 0x0, 0x100000000003, 0x10, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xa19a, 0x1000}, 0x0, 0x0, 0xffffffff, 0x1, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x2) write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x15) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x14, 0x10, 0x701, 0x0, 0x0, {0xa}}, 0x14}}, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r5}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r6 = fsopen(&(0x7f0000000000)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) r7 = fsmount(r6, 0x1, 0x2) openat$cgroup_pressure(r7, &(0x7f0000000040)='memory.pressure\x00', 0x2, 0x0) recvmmsg(r4, &(0x7f0000001b40)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)=""/189, 0xbd}, {&(0x7f00000003c0)=""/152, 0x98}, {&(0x7f0000000480)=""/4096, 0x1000}], 0x3}}], 0x7, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x40082406, &(0x7f0000000340)='cpu\t&0&&\t') perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r8, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @dev}}, 0x80, 0x0, 0x0, 0x0, 0x10b8}, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(r8, 0x84, 0x83, &(0x7f0000000000)=@assoc_value, &(0x7f0000000080)=0x8) 2.392286188s ago: executing program 4 (id=3773): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r0, &(0x7f0000000e80)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000006c0)="0d18687da3e7f33aed145cf8ff2d1e5a18c0d5f9856f4824f41040f6987d0b531da10713ed151bc4867681f28e033aef683334d03864ed30590dd4ea64a20ecbbc1346c9f42510d91eec0632885b7da95ca85f4b1435c5c1e993a85257df5f19bdfc5e038a16e6a8aef907e347081fdb93cee93217e11f19cde423e6138bd1b79ee615527ccaf8049959ac6e32af46d777ccb8c26ca925f69590df13a81aee3213e80ba5cacf1f930b3cc49093d11594ef13325790b55efbdc2dd99ed1c3c609a49cc151870a", 0xc6}, {&(0x7f0000000380)="3f82090ccda4f8ce1b08afd200c6075794cdd2e0021e32a0f6267447162a2085457cf687e74d142e85e9c4ac6eefcdaa493bcb54152b1339a38d3898707b77a9333cfb7bdc7c523ab4aa869c6db252e8e93bc14cfccfdedf9bbaed10dbc3c315aaedb987b398dd67a155fc3644e2fda199e2cfaa69af7df7", 0x78}], 0x2}}, {{0x0, 0x0, &(0x7f0000000e40)=[{&(0x7f0000001800)}], 0x1}}], 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 2.362079138s ago: executing program 4 (id=3774): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x64, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x1, 0x6}, 0x2, 0x0, 0x2, 0x0, 0x6, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) getpgid(0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454da, &(0x7f00000001c0)={'bond_slave_0\x00'}) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB="0300"/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000e00"/19], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) fstat(r1, &(0x7f0000000540)) sendmsg$NL80211_CMD_DEL_PMKSA(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x400c1) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x6, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="c872e100e8ffffff8500000007000000"], &(0x7f0000000040)='syzkaller\x00', 0x1, 0x0, 0x0, 0x41100, 0x22, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000080)={0x1, 0x2}, 0x8, 0x10, &(0x7f0000000180)={0x3, 0x3, 0x5, 0x1}, 0x10, 0x0, 0x0, 0x8, &(0x7f00000001c0)=[0x1, 0x1, 0xffffffffffffffff], &(0x7f0000000580)=[{0x3, 0x2, 0xa}, {0x0, 0x2, 0x6, 0x6}, {0x4, 0x5, 0x9, 0x5}, {0x5, 0x1, 0x10, 0x1}, {0x2, 0x4, 0xd, 0xc}, {0x4, 0x1, 0xb, 0x4}, {0x1, 0x2, 0x10, 0xb}, {0x1, 0x5, 0xd, 0xc}], 0x10, 0x3}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000208e052500000000040000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000040000008500000006000000850000005000000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f00000007c0)='virtio_transport_alloc_pkt\x00', 0xffffffffffffffff, 0x0, 0x3}, 0x18) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000003800)=@raw={'raw\x00', 0x3c1, 0x3, 0x2b0, 0x0, 0x5c, 0x160, 0xd0, 0x3e0, 0x1e0, 0x228, 0x25a, 0x1e0, 0x228, 0x4, 0x0, {[{{@ipv6={@remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', [], [0x0, 0x1fe], 'veth0_to_batadv\x00', 'batadv_slave_0\x00', {}, {0xff}}, 0x5002, 0xa8, 0xd0, 0x52020000, {0x0, 0x6802000000000000}}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@dev, @mcast1, [], [], 'virt_wifi0\x00', 'lo\x00', {}, {}, 0x89}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x7, 0x0, 'snmp\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x310) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r3, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000080)="03", 0x1}], 0x1, &(0x7f0000000280)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18}, 0x0) recvmmsg(r4, &(0x7f0000001140), 0x700, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x7, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r5}}]}, &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r6}, 0x10) r7 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x8042, 0x108) fcntl$setlease(r7, 0x400, 0x1) unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000800000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', 0xffffffffffffffff, 0x0, 0x3}, 0x18) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000000f80)=@newtaction={0x88c, 0x30, 0x12f, 0x0, 0x0, {}, [{0x878, 0x1, [@m_police={0x874, 0x1, 0x0, 0x0, {{0xb}, {0x848, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x801, 0x3, 0x0, 0x0, 0xfffffffa, {0x7, 0x0, 0x0, 0x0, 0x0, 0x7}, {0x7, 0x0, 0x2, 0x0, 0x0, 0x7}, 0x80000001, 0x4000000}}], [@TCA_POLICE_RATE={0x404, 0x2, [0xa3, 0x5, 0x4, 0x8, 0x2, 0x7, 0x1, 0x0, 0x8, 0xfffffffc, 0x4, 0x2, 0x55, 0x1, 0x4, 0x9, 0x8f729a78, 0x8, 0x5, 0x10001, 0x3, 0x40, 0x7, 0x3, 0x8, 0x8, 0x6, 0x9, 0x3, 0x251, 0xb, 0x3, 0x3, 0x0, 0x5, 0x7ff, 0x8, 0x6a4, 0x9, 0x8001, 0x84e, 0x0, 0x1, 0x1, 0xffffff7f, 0x4, 0x2, 0x9, 0x2, 0x7ffb, 0x6, 0x80000001, 0xf9, 0x4, 0x8, 0x9, 0x1, 0x294, 0x401, 0x26, 0x3e2, 0x5d0, 0x0, 0x14c9, 0xff, 0x1ff, 0x7, 0xffff, 0x4e6, 0x0, 0x800, 0x3, 0x8, 0x2, 0x800, 0x2596, 0x8, 0x2, 0x7f, 0x1, 0xfffffffe, 0x400, 0x7f, 0x7ff, 0x10000, 0x7, 0x9, 0x9, 0xd, 0x3, 0x0, 0x2, 0xdc2d, 0x1, 0x3, 0x3, 0x1ff, 0x5628, 0x678, 0x0, 0x5, 0x0, 0x5, 0x6, 0xc0, 0x20d, 0x26, 0x7fff, 0x0, 0x5, 0x895, 0x3, 0x3, 0xc22, 0x5, 0x62, 0x9, 0x477, 0x4, 0xe, 0x1c1df941, 0x40, 0x141, 0xc, 0x9, 0x6, 0x7, 0x7, 0x8c7, 0x1, 0x5, 0x8, 0x8, 0x41d, 0x8, 0x7, 0x5, 0x7fffffff, 0x0, 0x2, 0x30, 0x80000001, 0x3, 0x1e4a, 0xa4, 0x30, 0x1395, 0x3, 0x7fff, 0x3d, 0x0, 0x11, 0x7fff, 0x7, 0xfffffffb, 0x7, 0xa, 0x401, 0xb1a1, 0x8, 0x8, 0x3, 0xd08f57a5, 0xfffffffc, 0x1, 0x719b1140, 0x8, 0x2, 0x7a56, 0xfffffa8b, 0x4, 0x8, 0x200, 0x680, 0x10, 0x5, 0x82a4, 0x3, 0x3, 0x6, 0xa, 0x10000, 0x9, 0x3508, 0x81, 0x0, 0x81, 0x4, 0x1, 0x5a5, 0x1000, 0x8, 0x0, 0x5, 0x8, 0xff, 0x6, 0x9bb, 0x7fff, 0x8, 0x3, 0x0, 0x9, 0x5, 0x5, 0x800, 0x1, 0x9, 0x2, 0xe99, 0x3, 0x2, 0x71, 0x8001, 0xbf5, 0x3, 0x1, 0x24, 0x2, 0xcf2, 0x3, 0x81, 0x0, 0x6, 0x2f4, 0x8, 0x9, 0x400, 0x207f, 0x4, 0x4, 0x1000, 0x1, 0x6, 0x9, 0x0, 0x346, 0xcaf, 0xfe, 0x10000, 0x1, 0x3ff, 0xfffffff8, 0x5, 0x8, 0x638f, 0x8, 0x7, 0x6, 0x9, 0x3, 0x8, 0x5, 0x0, 0x0, 0xff]}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x2, 0x7d3, 0x2, 0x7, 0xc, 0x7f, 0xfffffff8, 0x400000, 0x7fffffff, 0x0, 0x80000001, 0x80, 0x4000005, 0x6, 0x6, 0x4, 0x6, 0x4, 0x8, 0x9, 0xb979, 0x517, 0x4bd, 0xe, 0x1, 0x9, 0x2, 0x7, 0x3ff, 0xfffffff8, 0x2, 0x9, 0x2, 0x1000, 0x812, 0x8, 0xff, 0x8, 0x3, 0x9, 0x5, 0x7, 0x4, 0x8, 0x70, 0x80000000, 0xe, 0xc5f, 0x40, 0x6, 0x8, 0x5f44, 0x70, 0x4, 0x3, 0x98, 0x0, 0x8, 0xfff, 0xd, 0xbb7, 0x41, 0x6, 0x5, 0x2, 0xfffff3e3, 0x7f, 0x4, 0x400, 0x101, 0x6, 0x0, 0x9, 0x400, 0x1, 0x37, 0x8, 0x3, 0xbcb4, 0x0, 0x49, 0x3, 0xffffffff, 0x6, 0x6, 0x101, 0x4, 0x8, 0x2, 0xce, 0x7, 0x400, 0x49, 0x0, 0x2, 0xb, 0x3, 0x8, 0x2, 0x7f, 0x800, 0x5, 0x3, 0x2, 0x9, 0x0, 0x0, 0x5, 0x6, 0x5, 0x40000000, 0x7, 0x2, 0x5, 0xc1, 0x8000, 0xb, 0x329, 0xc, 0x1, 0x1, 0x9, 0x2000, 0x101, 0xc72e, 0x0, 0x3, 0x2, 0x7, 0x6, 0x80000000, 0x8, 0x72, 0x2000095a, 0x1, 0xfffffff8, 0x3, 0x1, 0x3, 0x80000001, 0x10001, 0x9, 0xe000000, 0x1, 0x40, 0x6, 0x8, 0x200000, 0x100, 0xa, 0x1, 0xfffffffe, 0x1ff, 0x8, 0x7ff, 0x8, 0x9534, 0x6, 0x3, 0x1, 0x443, 0x6, 0x5, 0x1, 0xffffff80, 0x6, 0x7fffffff, 0x0, 0x8, 0xffffff24, 0x0, 0x1, 0x4, 0x8001, 0x6, 0xd0e, 0x15, 0x5, 0xfffffffd, 0x5a9a, 0xd020, 0xfffff000, 0x1, 0x9, 0x8c, 0x7ff, 0x6, 0xfffffffb, 0x986, 0x9, 0x13c8f99b, 0x2, 0x80000001, 0xfffffffd, 0x75, 0x26, 0x0, 0x3, 0x0, 0x1000, 0x557, 0xff, 0x6, 0x2, 0x609f, 0x1, 0xd0, 0x3, 0xf1a, 0xfff, 0x2, 0x69, 0x0, 0xffff, 0x7, 0x1800, 0xc, 0x8, 0x4, 0x12e, 0x5, 0xa61, 0x1, 0x8001, 0x0, 0x4, 0x0, 0xd, 0x8, 0x16, 0x0, 0x4, 0x6d6a, 0x9, 0x1, 0x9, 0x1000, 0xba, 0x4, 0x0, 0x8, 0xffffe9b0, 0x20001, 0x4, 0x10000, 0x6, 0x3, 0x2, 0x4, 0x9, 0x101, 0x9, 0x3, 0x6, 0x1, 0xfffffe00]}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x88c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) io_setup(0x2, &(0x7f0000002400)=0x0) io_submit(r9, 0x1, &(0x7f0000000040)=[&(0x7f00000010c0)={0x0, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2}]) r10 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r10, 0x4000000000000, 0x40, &(0x7f0000000300)=@raw={'raw\x00', 0x4001, 0x8000000, 0x238, 0xf8, 0x720d, 0x148, 0xf8, 0x148, 0x1c8, 0x240, 0x240, 0x1c8, 0x240, 0x7fffffe, 0x0, {[{{@ip={@remote, @empty, 0x0, 0x0, 'wlan1\x00', 'ip6erspan0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @dev}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x298) 2.2281779s ago: executing program 1 (id=3777): socket$inet6_udp(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8c}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4000000}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000a40)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000003c0)="9bf5d228cce90598e14af74ff69529bbf514d43ca6cdb8c7253833a66cab353f0c0dc0670336e5935f3dadbee27538594682ab56dd21171419a0d99a4f1408debf886f88049020e0614e4d97768758805ee8331e06fc3a62afec094662dd96464d27bace4842bb3699d97ee9324b4e4953a6ff9f3f58b04797fa3c63ffa80149d7b7ff87ec147846b8090a3d9ad22e387768abaf6fcc97f7f9a41da5ad5dbb8b2fa50bd57b8b01285cdaaa3d6e0c3a4ef39b50bcb134ccb57deb9e6b0d8a06d6989a35ce03d9", 0xc6}, {&(0x7f0000000000)="5af7a89b51082de5ca5fe732593b91de05f55beb3b4dc683f1f5a710eb8b2131c5fd", 0x22}, {&(0x7f0000000600)="4552b2945f56247abcc792924ddea3ecf67907f7e4928237fab62e5fa4121bd299bc416a0319284e7efe0f0242e0e7633027baea4c162522e8ee69c64c3147be3d6b0d43de9a57c35b3a0207adf28d8a3e489a835907ba51b345b4537c5806c7", 0x60}, {&(0x7f0000000840)="de801c832ae651ca0657200f14cbc630c8c7e861f4e8782df105f103e53dbf3866d227b2e2ea49c14898a167efa0917a1ab27a0eab75f2d1055db3314d7c5d56b851a5b73d219012a64b0961baf4ba181da57e5c0215cf4970a5555b2c55552febd9de97f735c958f3d0f3ec82cba03728d29a4f6070b8bee730947a9792cfd7da59b7e84af78b9a9fca498bdee0db21948f39701c3cad5acc88", 0x9a}], 0x4, &(0x7f0000000740)=[@cred={{0x1c, 0x1, 0x2, {r0}}}, @cred={{0x1c, 0x1, 0x2, {r0}}}], 0x40, 0x8800}}], 0x1, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000480), 0x400034f, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0x3d, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000004f4b000000000000000000180100002020702000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000fdffffff850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000000c0)="d800000018008103e00312ba0d8105040a600300ff0f040b067c55a1bc000900b80006990700000015000500fef32702d3001500030001400200000901ac040098007f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1d9d322fe04000000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad809d5e1cace81ed0b66bce0b42a9ecbee5de6ccd40dd6e4edef3d93452a92307f00000e970300"/216, 0xd8}], 0x1}, 0x48002) creat(&(0x7f00000002c0)='./file0\x00', 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000", @ANYRES32, @ANYBLOB='\x00'/12, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) unshare(0x26000400) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) pipe(&(0x7f00000002c0)={0xffffffffffffffff}) vmsplice(r3, &(0x7f0000000080)=[{&(0x7f00000004c0)="7cd1", 0x2}, {0x0}], 0x2, 0x0) 1.931920754s ago: executing program 4 (id=3780): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x8802, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000c80)=ANY=[@ANYBLOB="09000000170000000a0004004000000000000000", @ANYRES32=0x1, @ANYBLOB="0500"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000580), 0x1000, r1}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) syz_mount_image$vfat(&(0x7f0000000440), &(0x7f0000000000)='./file1\x00', 0x844, &(0x7f0000000bc0)=ANY=[], 0x5, 0x267, &(0x7f0000000740)="$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") execveat(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="07000000040000000800000001000000"], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x18) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000a80)=ANY=[@ANYBLOB="440100001a0033060000000000000000fc020000000000000000000000000000fe8000000000000000000000000000fd00"/63, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000001fffffffd32000000ac1414aa00000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000276cc38735eb7764000099fcf450000500000000000a0000000000000000000000000001000000073500000a000400000000000000000048000200656362286369706865725f6e756c"], 0x144}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000100)='kfree\x00'}, 0x18) creat(&(0x7f00000000c0)='./file0\x00', 0xc9028ba210c11f88) 1.677405097s ago: executing program 5 (id=3782): r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r1 = open_tree(0xffffffffffffff9c, &(0x7f00000000c0)='\x00', 0x89901) move_mount(r1, 0x0, r0, 0x0, 0x46) r2 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000000000000640000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], 0x0, 0x4, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r3}, 0x10) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) inotify_init1(0x0) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"/675], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3a, 0x10, &(0x7f0000000340), 0xfffffe94, 0x0, 0xffffffffffffffff, 0xffffffffffffff5b}, 0x42) syz_open_procfs(0x0, &(0x7f00000003c0)='net/mcfilter6\x00') syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCSETSW(r4, 0x5403, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2e69a, 0x0, "000800fe630500000000000800001f00"}) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000000)=0x8) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b007eb000000000000000", @ANYRES32, @ANYBLOB="0000000274937300000000000000008100000000", @ANYRES32=0x0, @ANYRES32, @ANYRESHEX=r1], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000180)='kmem_cache_free\x00'}, 0x10) socket$xdp(0x2c, 0x3, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc018937e, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) capset(&(0x7f0000000c00)={0x20080522}, &(0x7f0000000140)) 1.574788828s ago: executing program 5 (id=3783): syz_clone(0x80842111, 0x0, 0x0, 0x0, 0x0, 0x0) pipe(0x0) close(0xffffffffffffffff) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x2) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x1, 0x0, 0x7ffc1ffb}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) sigaltstack(0x0, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f00000005c0)={[{@noblock_validity}, {}, {@sysvgroups}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@nomblk_io_submit}]}, 0x3, 0x56a, &(0x7f00000015c0)="$eJzs3c9rHFUcAPDvbJL+1qZQinqQQA9WajdN4o8KQutRtFjQe12SaSjZdEt2U5pYaHuwFy9SBBEL4h/g3WPxH/CvKGihSAl68BKZzWy7TbL5uXW3zucD0743M5s3b998335nZ5cNoLBGsn9KEa9GxDdJxOG2bYORbxxZ2W/p8Y3JbEliefmzP5NI8nWt/ZP8/4N55ZWI+PWriJOlte3WFxZnKtVqOpfXRxuzV0frC4unLs9WptPp9Mr4xMSZdybG33/v3a719c0Lf3//6f2Pznx9fOm7nx8euZvEuTiUb2vvxy7caq+MxEj+nAzFuVU7jnWhsX6S9PoA2JGBPM6HIpsDDsdAHvXA/9/NiFgGCioR/1BQrTygdW3fpevgF8ajD1cugNb2f3DlvZHY17w2OrCUPHNllF3vDneh/ayNX/64dzdbYpP3IW52oT2Allu3I+L04ODa+S/J57+dO91883hjq9so2usP9NL9LP95a738p/Qk/4l18p+D68TuTmwe/6WHXWimoyz/+2Dd/PfJ1DU8kNdeauZ8Q8mly9X0dES8HBEnYmhvVt/ofs6ZpQfLnba153/ZkrXfygXz43g4uPfZx0xVGpXd9Lndo9sRrz3Nf5NYM//va+a6q8c/ez4ubLGNY+m91ztt27z/7bqfAS//FPHGuuP/9I5WsvH9ydHm+TDaOivW+uvOsd86tb+9/ndfNv4HNu7/cNJ+v7a+/TZ+3PdP2mnbTs//PcnnzfKefN31SqMxNxaxJ/lk7frxp49t1Vv7Z/0/cXzj+W+9839/RHyxxf7fOXqn4679MP5T2xr/7RcefPzlD53a39r4v90sncjXbGX+2+oB7ua5AwAAAAAAgH5TiohDkZTKT8qlUrm88vmOo3GgVK3VGycv1eavTEXzu7LDMVRq3ek+3PZ5iLH887Ct+viq+kREHImIbwf2N+vlyVp1qtedBwAAAAAAAAAAAAAAAAAAgD5xsMP3/zO/D/T66IDnzk9+Q3FtGv/d+KUnoC95/YfiEv9QXOIfikv8Q3GJfygu8Q/FJf6huMQ/AAAAAAAAAAAAAAAAAAAAAAAAAAAAdNWF8+ezZXnp8Y3JrD51bWF+pnbt1FRanynPzk+WJ2tzV8vTtdp0NS1P1mY3+3vVWu3q2HjMXx9tpPXGaH1h8eJsbf5K4+Ll2cp0ejEd+k96BQAAAAAAAAAAAAAAAAAAAC+W+sLiTKVaTecUOhbORl8cxo4LyWajfDY/GXbUxGDvO6jwHAo9npgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoM2/AQAA///fKTPH") ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00'}) 1.292098152s ago: executing program 1 (id=3784): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r0, &(0x7f0000000e80)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000006c0)="0d18687da3e7f33aed145cf8ff2d1e5a18c0d5f9856f4824f41040f6987d0b531da10713ed151bc4867681f28e033aef683334d03864ed30590dd4ea64a20ecbbc1346c9f42510d91eec0632885b7da95ca85f4b1435c5c1e993a85257df5f19bdfc5e038a16e6a8aef907e347081fdb93cee93217e11f19cde423e6138bd1b79ee615527ccaf8049959ac6e32af46d777ccb8c26ca925f69590df13a81aee3213e80ba5cacf1f930b3cc49093d11594ef13325790b55efbdc2dd99ed1c3c609a49cc151870a", 0xc6}, {&(0x7f0000000380)="3f82090ccda4f8ce1b08afd200c6075794cdd2e0021e32a0f6267447162a2085457cf687e74d142e85e9c4ac6eefcdaa493bcb54152b1339a38d3898707b77a9333cfb7bdc7c523ab4aa869c6db252e8e93bc14cfccfdedf9bbaed10dbc3c315aaedb987b398dd67a155fc3644e2fda199e2cfaa69af7df7", 0x78}], 0x2}}, {{0x0, 0x0, &(0x7f0000000e40)=[{&(0x7f0000001800)="353a35d6094e4ee7d764b6993f65136c5d6b84d9b1324a0b25e094700c9a66f9181738098f32e3e48859c3878d53a9752474da0d6af299d849d48f2fa2c8c807d7a1521da940585790ff1e6f9da83e32b751d1af9cfac640c1361f5ae8b99c187dafe9ea854120f6eaab11e7fdeb3f2152ebdbc21520ca01f64bb821576deef4ed6696cdddc1768b5b4fbd68a687cb6ba52ecf5cc6f8f05062f26de19d6aaaeb6cbca00e46685f77d2b3e8dd9d0d099e799cd5a76c67ab283f790366f7f744508edc9e48fa101b89215bd330c4e7", 0xce}], 0x1}}], 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 1.219275273s ago: executing program 2 (id=3785): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000000000000800000000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x10, &(0x7f0000000000)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0xfca804a0, 0x10, 0x10, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='kfree\x00', 0xffffffffffffffff, 0x0, 0x2}, 0x18) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2}) readv(r2, &(0x7f00000001c0)=[{&(0x7f0000001400)=""/227, 0x10}], 0x4) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', @link_local}) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x446, &(0x7f00000001c0)={[{@stripe={'stripe', 0x3d, 0x2}}, {@journal_dev={'journal_dev', 0x3d, 0x1045}}, {@oldalloc}, {@noquota}, {@data_err_ignore}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@delalloc}, {@errors_continue}, {@orlov}, {@user_xattr}, {@quota}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x1, 0x553, &(0x7f0000001080)="$eJzs3d9rW1UcAPDvTdv91nUwhopIYQ9O5tK19ccEH+aj6HCg7zO0d2U0WUaTjrUO3B7ciy8yBBEH4ru++zj8B/wrBjoYMoo++BK56U2XrUmbddnSmc8Hbjkn9ybnfnPv9/TcnBsSwNCayP4UIl6OiG+SiIMRkeTrRiNfObG23er9q7PZkkSj8elfSXO7rN56rdbz9ueVlyLit68ijhc2tltbXlkolcvpYl6frFcuTdaWV05cqJTm0/n04vTMzKm3Z6bfe/edvsX6xtl/vv/k9oenvj66+t0vdw/dTOJ0HMjXtcfxBK61VyZiIn9PxuL0IxtO9aGxnSQZ9A6wLSN5no9F1gccjJE864H/vy8jogEMqUT+w5BqjQNa1/Z9ug5+btz7YO0CaGP8o2ufjcSe5rXRvtXkoSuj7Hp3vA/tZ238+uetm9kS/fscAmBL165HxMnR0Y39X5L3f9t3sodtHm1D/wfPzu1s/PNmp/FPYX38Ex3GP/s75O52bJ3/hbt9aKarbPz3fsfx7/qk1fhIXnuhOeYbS85fKKdZ3/ZiRByLsd1ZfbP5nFOrdxrd1rWP/7Ila781Fsz34+7o7oefM1eql54k5nb3rke80nH8m6wf/6TD8c/ej7M9tnEkvfVat3Vbx/90NX6KeL3j8X8wo5VsPj852TwfJltnxUZ/3zjye7f2Bx1/dvz3bR7/eNI+X1t7/DZ+3PNv2m3dQ/FH7+f/ruSzZnlX/tiVUr2+OBWxK/l44+PTD57bqre2z+I/dnTz/q/T+b83Ij7vMf4bh39+taf4B3T85x7r+D9+4c5HX/zQrf3e+r+3mqVj+SO99H+97uCTvHcAAAAAAACw0xQi4kAkheJ6uVAoFtfu7zgc+wrlaq1+/Hx16eJcNL8rOx5jhdZM98G2+yGm8vthW/XpR+ozEXEoIr4d2dusF2er5blBBw8AAAAAAAAAAAAAAAAAAAA7xP4u3//P/DEy6L0Dnjo/+Q3Da8v878cvPQE7kv//MLzkPwwv+Q/DS/7D8JL/MLzkPwwv+Q/DS/4DAAAAAAAAAAAAAAAAAAAAAAAAAABAX509cyZbGqv3r85m9bnLy0sL1csn5tLaQrGyNFucrS5eKs5Xq/PltDhbrWz1euVq9dLUdCxdmayntfpkbXnlXKW6dLF+7kKlNJ+eS8eeSVQAAAAAAAAAAAAAAAAAAADwfKktryyUyuV0UUFhW4XRnbEbCn0uDLpnAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAH/gsAAP//6AY3sQ==") r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x9) fallocate(r3, 0x1, 0x6, 0x8000c62) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) write$UHID_INPUT(r4, &(0x7f0000000940)={0x8, {"85f080a4933d55266e07e799aa0cc421388242df2a3c6b631b65b1c061edd2aa108c3528fe9b0bb3a53ab1200f5d01a68a4acdec8fee09648222f908c1fedc3000342e6139de28366c13509306d00ebcc67497181ac916db98af9d366b76e427d9ab5bb68095f0fb246df32b8af0783653136f8a04c03690312125c7ded6a24fda8685340c575ead69519e3583f89d467ec232d6a1ffd0463ba4ea3cbae5dae6654b5547b5458f02ac307729e57b09e134f68be44f88d72517b230b066f6315b5fb80206397bbff8cbc2a36e01c2e7b3aadb32bd3dd5288a69a991d9c674717e3abba7167280b2db3b1b8502afa4f3f296c532510c9d2dd79bb5eeb25adb5edddbdd069c09d14d15c2e7e1e2bd6c108fab3591bb22e97d6992236d2273c8bb95536f7118d007965008b125c7daac2814e6bbe1adbfa3572ad0b7ad5c26c8014118d8374ca9f285779dfee7715a403908146a74de61b3853914c89f444c12e7a38bdd46c4ed36eb806ea598f44d1dec9eff9e2476f43802211f0762b66673b45d236b2391ce322e30fb9c69fe0d514dc1f8b6e3979c1205fd5224b07d18a44fec4f6f1a6f65158bb6adcc295bf2dd7dea107f59d7e03c61fe5822292e45968956b931bdc4d6445ff1631e0b98e4b4448774dd4b9cd53a45896fdb3f03702778741ae2b45a25bf9a23fc02fb97a630f132bf9def6c6d4a7baeb62972f1a814f6f2377bcfc78e2e86368c138510a04cedf7175af8c2034fae7413e3ace8c71ab9a0af1ca7042011a6ed028e205648535dabf3b2f85196ae18d36b839e3cd54ae4933ad529888fdac7bb8a70c72bc0fc81ba06506f2d5bc7686e219bbe5283959cbef9950e071cb6d9f341fc624a5110341f26cebd7100599a06e61f66fae120c7fc2b34c6221200eba75bd1277114671a3fa8f058b27fd897b052f4a52afcea814df526181c75c4497210a2b8b74e26601561e78735387cf123654b0295d1d60556956b36d96dd038866c4b4db31ebdcddd6929bbc2850cd4901389e6ea6e86041e0efa1158f334e7afda0e11c2fb0e6df6364cb95659f506d5c7e63fb67c8116577d15e4a4b1fc4c27de2e52586cb1f52be9c3601f5066549de8bdc3ec07d1a84caf1961323ec2487a37b751aeabafcd647ce2dae5d9499c0f969467e6cabad198669ac96bd1488954eff0854ee0c83d7b596d273625bdb16270782321071fda5d980ded78ffa9dc2b56037d7cbf942547f48a5131f1991f6c17ae1ed5120ca6878f98e68e7997a9a2b70be640a70a34adb80de286c6692abb5f092e4e3a15a83217e03d02a4054f34af3a65ff6b36f395b76a0579cffafd5d3bb0e704c935caecf3a7ab756c23fd60c9fe3f4fb2be7504f5bae22b116ff1588dcf02b327d31bf0488dba8af5b33ccf2d7d87f43bbc48fcd4f191ad6af9313ad38b8b29674bfabd6651bc1f6ce5abb4a2f1413194f96b26d7d6edc4e013fba549075c97eef508af5ca7873664b058b7bcf455a8a04b591d29fab6366c844bb75576bac2d52323e747303d00a5736c9812922b0e17bcec9135550736b54cf6407d61e22e62d7bb75f62935b665acf33e75f688c36ef416f1b890d0f0c8ad1df00e02ec45967834d5649c8e7143978622fa3704672970b7993a87e97d3d926a14265647bc8b8c9e6f83e29572608d24b42c2635ef4abbd0af83860e99c90d7471cf6e8ce99507f5ec2bc572212fa9ee3f5a9dfa3815fe55f0bbb119acce062ae37f2ff921707abba139bcddf42bfd174d29b540161b4113c4e1a13f3a628c638ec4d3a884dfbc093e23ec0d0671b46b41dc8b42d950c8615ba5ee87f49b5d0910ffa4871207995001920db05a95199967f097ba7b55bbd271d818690c4238406b40a3dfc42fa56a67173b53a96b543326c56738b6d043195934018696f5ab49347e5148a78f2d1369a71afab8330273d46ecfba4ee05802a5385649851db949dbfb39e290941641c50b1ac20fb3102754a760b097f464ddb0b83f8168badfa71db6621dcf22fb081e3403f3bac5c7e65905aca52885c807f8ddab18bb2f12ef952c50483c0e251968bc70ff0d42a638ca744dea4c7ebb4fea777cf663bb4f1505ed79730c45bc86e488a13f924377a8e2ee6670a02ca52874ae1c42a35d55b9765757047b2cc3742aa51fa3e43fb2c113c92ad213bad252c1a82966dd016f12a7f1c3900c0f1ab455035163f31899bdd30f3ff43ad17d9e45bb7438c1c986712736f24be14f71ab1bfe92a25ec07f086ee8c7971b8077a13e58a8e8bea39c8e06b251909f02cb0080abf020f27ca160eb26c082dda1fa54ea4094dfdbcb2fa7bddccb67a844e8075f4cc08dad35757006d051e183dced336bc0c2502f93ffc87dca622286ba174c24e1f53f27dc2777baafe170348b0e8d3e743b3aa906bc0764bbe7da08ff403efe2212627d672250658bb513b7312517d1f88c61c7ba5f9647cd619281c5b390b48606ee39fb4171103df2e09d7cfd56c06c721f7c24ad8cce383623fc2dcb15ac56438ea331820ae59c8c474e36fc73f7b1b3b86df1b42490815513681aafbf7e871b4b9686efae6c45ecfca60a640a6f071dfd31f9437c3d03086164b48c1ed802986864bfe0d49bdd7709662262368dbc3ecc05eb240ecc41904c76d78ab5c52b66af5a720fdd6a92f52be0676427a56e32e5bc5085b25f90add28a76f2fce6f8f0ef74f4659698549646bd63175adf77b5cdcfe676e1b1a9af15102946554ba6136cbc83c6268ee40318f3c9d4718025688b35d2265bf60bf889ff629f7834586ef46eab7a9176337536bb6001e676546b987f36b1fe4b9f6e46a8ce73eb22ebbb9c14d8e2b43ea77ef887e5a26448f4086fa819a25e27725ac10298851c8bc45f2ce4430b07917ade5ea8c434c3f2576effbeb521173736e5c9557450643068b0c0fb132a7e99de6ca292246a9937fa7d7e06e59cf59ce5b9f842629049931146af40a8a1256ba373a88d09dc00cdf4453cc6ba78572bf3e1f2352a978cdbad60220cb8ac37d7f614a306492a4b5eee9244b0ca84b6cf2e23013bfb1cb92bf6d126fe550e58c19f84e7a4081437b75b31b2b9fb658dcd8ba077962e0f3359721a148d4fefe5c97941ca9688cb85adf38fd10f5811cdd8e074a21bbfc9541c71465b08d7321281b68ed52bfab789b9c83849c09d52376d419b1e7ba367603236e119cdf4a7b7cf9d81f2229601deace53cea2f14a05f7fa0ca04b39e31c6453e332f4bd0915c0e09e28f4d1125c390c6ff0833a04b6fc37855e65de90333e505b9eb66e00686a3ed499cfb7b8b215dbdc9787b5baa724cfa71ee6745b41e203de8b7794757ac328ec5567540b951b50530c3d4ee34705ea1c66fd6591e88561083e86d48c45ef3b83a3029319d8f3d8e65ce14c1dc3cb92d0a7dbeb609a8d2793928caa079f0fbbb2bc90b9f058cc048f4032041d14c5bca00e99b3027ec3a50c4957199cf016a4594069af8659df0973f20ffb15dbc265ac5b8a2203e90b114a3e9441e357c60ce0b550a7fe66fc34f5702ac8e8992a22e89194c1df69e81a9b7ad3d2634ea8c0388588192fd47d8e803b10044d558617fb2921b69eb4d85c051f86ef63a2f4382b9becd870fb2ecadca6902712b88680792e2f2ec89591cfebb6db3ad31c2a339af10465fcf7988519d382218df52261234f26a6f66ad0d1859de505d0fe819caf2f8d30aa9fd1228ac91d11ca67f1f8d50c8eefa5c441514321507dff6c6ea3cff6f340a1c11e0c40f419e8e60fc94d8828fa47a96cdf7ee4f61e23f40751b25cf9ca1295041a350f83f0e679515d6b4b46e2c9ce8999e07f835abc1663cefcf728df37831f4e17f8c8a4feaf1fbf44c38c9313284404a50ba4cd8abe835b33bfecb02cd6c9d7f435853b4c8d505ab83cf46512739116694765658bae64b3127152d216055aef9b25c70a8a3b302752d7b1e8791c657b9f3fc9001ef299fd1a349491ae6ee9940149160507fc4130fb825d47d97dc2c243209d2403583ac3ef6ddbedcaa76432255487c0a06e59e043e572ab3aec002af6a6b6a2dc9cfaeefa70557886c4d12924a0388f2f1bc8e89e4cfa69705d1ef3c4658f8616278b588011d9dd914beec0b151d65b6524fba3e3f235d58373e021699b07622a51504eade747e0b2f9cf38bc167cabc8cb18c708d1337e25648707e8c0872876514c7a49c0b2aaee5ed9e9ecfcbcc23e032c4deb63e48e7120188056468fad31448e4b42e7d62fbcfc1c2cfb01fcf0db5e8a162bdb9bd820c763f17b96c23f32db9d1c1d74ddbe657b4f9595a9796982a0742153111b15e484d8ffebe47ce0a78a41e470a341616ec2eb6eef813fb415fab50fa965bec6a5977a0ade4fed67f86fc24e11b0e2f5364079f7c7c35b560cac726dbc80f29dbd248f7ecda0286a23ef172a28c96d9bdb1f598eab31c6baf0321312da23920c074b9d2d2e442717f2c21001142a39c2da6b8bd9d06b05a6a8deae1bd1be4108a636ddbebc682d113e715f2f3ee506abc28b1c654b3d2d28e02f73b171ed0deed71dda90ce4a0b728cc75cb576385e7418b545b992b1dd98e2ee53355f464f9250a2a03b3d1e4d2ac1aa71d01de2573530324e14d15a507883411ddbd37be21dc929db9b11f11010e4d2a04c7325a5ae6d24d19900ff97a8a89438f8676457a78cff05201528f4358fe67f61288bf042a8f3c2e0f8b4997b8fb74996b80d465489b2d7807a945eba72a945e8cf8625dbad6f6f6e30537b29e558ca8a8b0625f578c766d34f2d28d704715f94df1f6318a308042aa494baa295640679f1eab1e6a8308af8ce6441d5ad8a2f3d477eb5307af0dfae6644493f1434030b8361621340ad3dcefa6d8f090ed3929d89ad9c0ba01a6903033428dd8f98619304b1803187d2a6130bf1e009b5eb0e7e21c75594b3b8470f3106c92a9e55bfeb026091ced127a90a1f1247f3c07e36d3572923e0de3f73518d0369a25fcd4e65d243b7eab91063a7bfd8bc8ac9e39fbbb32b5c9517886287a18eacd8dbfda9b91db693cb12e42cba5988280e09e51e72b91a0f360656d8f21cc1eb3248ac345ad51d1a6172b18419277851dab01e028c7e8e2cf34095efd28267852a08fccf61c45b5e46930160daf50282be058274e7ff58c48b60b86d0c8cc886ab8778a2a2b5fa2557ad7bf7f01f2175523ce758871d334c20a9839f7a89fe2867c06289c8a2f6456ac7e4fbadee53ac41aee68214bc76669853baa4f58255b39ba581414f2e8c4b49303f8936a33bae5cbc96b29a5c724d5b50e1614144c2acd03bd90de891c3d36ce040d57543682ecbfcae66c4153c337c3a5d01896524c8e0c27e9a08919821ca27bbfe3fc9ba24a823aeec8d4ad8ef8a65c585bee4dcf1acaa3da501a8c11a23b2e22920c1ad0129a038b31fe16c2abc80589dbf7c37211afc5d1a6db908bc5fe8a692060069fcbcdcba7c523d3c424aa3b0c6556387e0e51bcde9e5f850abf62d2c2101c3a2786a0cb94932877a09cb6b64aa61da8cab3b423e7adc4c4700418a65e87225710e1691f6d9cb2eb63cce5b605ce0a4a89cf519767e00845397c5e381141a0ed8a89b01064b495ec8d1e2da37433bf1597d919a69610d2ad26bdf6fca8de422bb2cb80d0516206e8194ee51445a3dcb5dee33c0c310b4751e68e58bebda2fb586985a5a5b06456756f44e6dbfef4bb99ca732f00fb9ea35775f7419681bfbe6f43dc7c4650c13b63d93c1d490bf0173f287a4309531f13ecb1a775d0bd881a", 0x1000}}, 0x1006) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r5}, 0x10) futimesat(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)={{}, {0x0, 0x2710}}) 1.158134064s ago: executing program 1 (id=3787): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000dc0)={0x11, 0xb, 0x0, &(0x7f0000000400)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x3b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r0, 0x0, 0x6}, 0x18) socket$netlink(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x37, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0xd}, 0x4c58, 0x10000, 0x0, 0x1, 0x8, 0x20002, 0xb, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$nl_route(0x10, 0x3, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="07000000040000000001000001"], 0x50) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f0000000200)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f0000000340)={0x0, 0xcc}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback, 0x7}], 0x1c) sendmmsg$inet6(r2, &(0x7f0000000640)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x2, @loopback, 0x3}, 0x1c, &(0x7f0000000500)=[{&(0x7f0000000300)="06", 0x1}], 0x1}}], 0x1, 0x3404c8d4) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r2, 0x84, 0x77, &(0x7f0000000240)=ANY=[@ANYRES32, @ANYRES32=r1], 0x1000f) 1.137409404s ago: executing program 5 (id=3788): sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="01002c6325d24cdbdb2504000000d77fa4812f0c64913d2651ba858646711125a6f5b2268a8e321a752fdfbc7e5b4ae240f4f0116d9a78486f668a8dbe84cc279cac2e103fe5c702a642146602995dc3ba6f2af6d18a5fda1df50c17092045211ecffc0498e5d410ca794d8229efe928310e36bdfc09d9a5d49e756a5d2a6a6494563d22c6e19a4a7520fb06514b72c4556b85d5d1078a539f"], 0x14}, 0x1, 0x0, 0x0, 0x20000800}, 0x54) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000300)='ext4_fc_commit_start\x00', r1}, 0x18) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x2) readv(r2, &(0x7f0000000000)=[{&(0x7f0000001300)=""/244, 0x940}], 0x1) ioctl$TIOCVHANGUP(r2, 0x5437, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000005300)=[{0x28, 0x0, 0xfb, 0xfffff034}, {0x80000006, 0x66}]}, 0x10) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r3, &(0x7f0000002fc0)=[{{&(0x7f0000000340)={0xa, 0x4e23, 0xfffffff9, @dev={0xfe, 0x80, '\x00', 0x36}, 0x9}, 0x1c, &(0x7f00000004c0)=[{&(0x7f00000005c0)="05", 0x1}], 0x1}}], 0x1, 0x24000045) 1.122374425s ago: executing program 0 (id=3789): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x0, 0x37, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x2000759, &(0x7f00000009c0)={[{@dioread_nolock}, {@noblock_validity}, {@usrquota}, {@errors_remount}, {@abort, 0x0}, {@noauto_da_alloc}, {@noload}, {@minixdf}, {@mblk_io_submit}, {@lazytime}, {@usrjquota}, {@nolazytime}, {@journal_dev={'journal_dev', 0x3d, 0x724}}, {@norecovery}, {@nouser_xattr}, {@journal_checksum}, {@sysvgroups}], [{@audit}, {@fowner_gt={'fowner>', 0xee00}}], 0x2c}, 0x6, 0x4fc, &(0x7f0000001a40)="$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") bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0}, 0x94) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0xffd0}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0}, @generic={0x66, 0x8}, @initr0, @exit, @alu={0x6, 0x0, 0x3, 0xa, 0x0, 0x2}, @printk={@x, {}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa}}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0xff99, &(0x7f0000000340)=""/222, 0x0, 0x8}, 0x78) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000040)={r0}, 0xc) getrlimit(0x1, &(0x7f0000000000)) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x1e, &(0x7f0000000000)=[0xffffffffffffffff], 0x1) 1.071188295s ago: executing program 0 (id=3790): syz_emit_ethernet(0x3e, &(0x7f00000002c0)={@multicast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f4adf7", 0x8, 0x2c, 0x0, @dev, @mcast2, {[], @echo_reply={0x81, 0x0, 0x0, 0x0, 0x3}}}}}}, 0x0) 1.069915985s ago: executing program 4 (id=3791): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x8802, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) syz_mount_image$vfat(&(0x7f0000000440), &(0x7f0000000000)='./file1\x00', 0x844, &(0x7f0000000bc0)=ANY=[], 0x5, 0x267, &(0x7f0000000740)="$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") execveat(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="07000000040000000800000001000000"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x18) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000a80)=ANY=[@ANYBLOB="440100001a0033060000000000000000fc020000000000000000000000000000fe8000000000000000000000000000fd00"/63, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000001fffffffd32000000ac1414aa00000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000276cc38735eb7764000099fcf450000500000000000a0000000000000000000000000001000000073500000a000400000000000000000048000200656362286369706865725f6e756c"], 0x144}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000100)='kfree\x00'}, 0x18) creat(&(0x7f00000000c0)='./file0\x00', 0xc9028ba210c11f88) 1.060774626s ago: executing program 1 (id=3792): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[], 0x48) r0 = socket$netlink(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000240)='kfree\x00'}, 0x10) r1 = mq_open(&(0x7f000084dff0)='\xa1sxt\x1a\x00\x00\x00\x00\x00\x00\x00\x01\x88\xbdd', 0x6e93ebbbcc0884f2, 0x100, &(0x7f0000000300)={0x0, 0x1, 0x3}) mq_timedsend(r1, 0x0, 0x0, 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='kfree\x00', r2}, 0x18) mq_timedsend(r1, 0x0, 0x0, 0x0, 0x0) mq_timedreceive(r1, &(0x7f0000000600)=""/204, 0xcc, 0x9, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 1.033513866s ago: executing program 0 (id=3793): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xfbf0283703c70d89, 0x4008132, 0xffffffffffffffff, 0x0) mprotect(&(0x7f00000af000/0x3000)=nil, 0x3000, 0x100000a) r1 = syz_open_procfs(0x0, &(0x7f00000002c0)='pagemap\x00') munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) mremap(&(0x7f0000802000/0x4000)=nil, 0x4000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) preadv(r1, &(0x7f0000000200)=[{&(0x7f0000001a80)=""/102378, 0x18fea}], 0x1, 0x3fe, 0x0) gettid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$int_in(r2, 0x5452, &(0x7f0000000180)=0xffffffffffffffff) fcntl$setsig(r2, 0xa, 0x12) ppoll(&(0x7f0000000100)=[{r3, 0x1000}], 0x1, 0x0, &(0x7f0000000200)={[0x8001a0efffffff]}, 0x8) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4) r4 = socket$inet6(0xa, 0x3, 0x88) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYRESOCT=r0, @ANYBLOB="7d075d4685a59d233074a3c7da585773228df7050323699d81567878ac382f89a3"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB], 0x0, 0x7a, 0x0, 0x0, 0x41000, 0x44, '\x00', 0x0, @cgroup_sysctl=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r5}, &(0x7f0000000340), &(0x7f0000000300)}, 0x20) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='kmem_cache_free\x00', r6}, 0x18) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f00000007c0)={{{@in6=@ipv4={'\x00', '\xff\xff', @multicast1}, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x4e22, 0x0, 0x0, 0x3, 0x2}, {0x0, 0x200000000, 0x40000000007, 0x20000a0de, 0x100000000, 0x4, 0x200000003, 0x800000000000009}, {0x5}, 0x1, 0x0, 0x1, 0x0, 0x3}, {{@in=@broadcast, 0x0, 0x6c}, 0xa, @in=@dev={0xac, 0x14, 0x14, 0x19}, 0x3502, 0x1, 0x8, 0x0, 0x9075}}, 0xe8) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x4}}}, 0x1c) 1.000792487s ago: executing program 5 (id=3794): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xfbf0283703c70d89, 0x4008132, 0xffffffffffffffff, 0x0) mprotect(&(0x7f00000af000/0x3000)=nil, 0x3000, 0x100000a) r1 = syz_open_procfs(0x0, &(0x7f00000002c0)='pagemap\x00') munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) mremap(&(0x7f0000802000/0x4000)=nil, 0x4000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) preadv(r1, &(0x7f0000000200)=[{&(0x7f0000001a80)=""/102378, 0x18fea}], 0x1, 0x3fe, 0x0) gettid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$int_in(r2, 0x5452, &(0x7f0000000180)=0xffffffffffffffff) fcntl$setsig(r2, 0xa, 0x12) ppoll(&(0x7f0000000100)=[{r3, 0x1000}], 0x1, 0x0, &(0x7f0000000200)={[0x8001a0efffffff]}, 0x8) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4) r4 = socket$inet6(0xa, 0x3, 0x88) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYRESOCT=r0, @ANYBLOB="7d075d4685a59d233074a3c7da585773228df7050323699d81567878ac382f89a3"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5], 0x0, 0x7a, 0x0, 0x0, 0x41000, 0x44, '\x00', 0x0, @cgroup_sysctl=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r5}, &(0x7f0000000340), &(0x7f0000000300)}, 0x20) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='kmem_cache_free\x00', r6}, 0x18) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f00000007c0)={{{@in6=@ipv4={'\x00', '\xff\xff', @multicast1}, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x4e22, 0x0, 0x0, 0x3, 0x2}, {0x0, 0x200000000, 0x40000000007, 0x20000a0de, 0x100000000, 0x4, 0x200000003, 0x800000000000009}, {0x5}, 0x1, 0x0, 0x1, 0x0, 0x3}, {{@in=@broadcast, 0x0, 0x6c}, 0xa, @in=@dev={0xac, 0x14, 0x14, 0x19}, 0x3502, 0x1, 0x8, 0x0, 0x9075}}, 0xe8) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x4}}}, 0x1c) 939.655127ms ago: executing program 1 (id=3795): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x39, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x24, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f}, 0x94) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x1f, &(0x7f0000001480)={0x0, @in={{0x2, 0x1c, @dev={0xac, 0x14, 0x14, 0x1b}}}, 0xc4}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x18) r3 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xc3, 0x0, 0x0, 0x0, 0x0, 0x100000000003, 0x10, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xa19a, 0x1000}, 0x0, 0x0, 0xffffffff, 0x1, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x2) write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x15) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x14, 0x10, 0x701, 0x0, 0x0, {0xa}}, 0x14}}, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r5}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r6 = fsopen(&(0x7f0000000000)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) r7 = fsmount(r6, 0x1, 0x2) openat$cgroup_pressure(r7, &(0x7f0000000040)='memory.pressure\x00', 0x2, 0x0) recvmmsg(r4, &(0x7f0000001b40)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)=""/189, 0xbd}, {&(0x7f00000003c0)=""/152, 0x98}, {&(0x7f0000000480)=""/4096, 0x1000}], 0x3}}], 0x7, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x40082406, &(0x7f0000000340)='cpu\t&0&&\t') perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r8, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @dev}}, 0x80, 0x0, 0x0, 0x0, 0x10b8}, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(r8, 0x84, 0x83, &(0x7f0000000000)=@assoc_value, &(0x7f0000000080)=0x8) 262.316607ms ago: executing program 2 (id=3796): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000808000400", @ANYRES32=r1, @ANYBLOB="06001500070000000c00168008000100", @ANYRES64=r0], 0x38}}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB="180300000000000000000000000000008510000006000000180000000000000000000000000008006500000000000000180000000000000000000000000000009500000000000000740300000000000095"], &(0x7f0000000000)='GPL\x00'}, 0x94) 199.784367ms ago: executing program 2 (id=3797): socket$inet6_udp(0xa, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4000000}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000a40)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000003c0)="9bf5d228cce90598e14af74ff69529bbf514d43ca6cdb8c7253833a66cab353f0c0dc0670336e5935f3dadbee27538594682ab56dd21171419a0d99a4f1408debf886f88049020e0614e4d97768758805ee8331e06fc3a62afec094662dd96464d27bace4842bb3699d97ee9324b4e4953a6ff9f3f58b04797fa3c63ffa80149d7b7ff87ec147846b8090a3d9ad22e387768abaf6fcc97f7f9a41da5ad5dbb8b2fa50bd57b8b01285cdaaa3d6e0c3a4ef39b50bcb134ccb57deb9e6b0d8a06d6989a35ce03d9", 0xc6}, {&(0x7f0000000000)="5af7a89b51082de5ca5fe732593b91de05f55beb3b4dc683f1f5a710eb8b2131c5fd", 0x22}, {&(0x7f0000000600)="4552b2945f56247abcc792924ddea3ecf67907f7e4928237fab62e5fa4121bd299bc416a0319284e7efe0f0242e0e7633027baea4c162522e8ee69c64c3147be3d6b0d43de9a57c35b3a0207adf28d8a3e489a835907ba51b345b4537c5806c7", 0x60}, {&(0x7f0000000840)}], 0x4, &(0x7f0000000740)=[@cred={{0x1c}}, @cred={{0x1c}}], 0x40, 0x8800}}], 0x1, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000480), 0x400034f, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0x3d, &(0x7f0000000040)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000000c0)="d800000018008103e00312ba0d8105040a600300ff0f040b067c55a1bc000900b80006990700000015000500fef32702d3001500030001400200000901ac040098007f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1d9d322fe04000000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad809d5e1cace81ed0b66bce0b42a9ecbee5de6ccd40dd6e4edef3d93452a92307f00000e970300"/216, 0xd8}], 0x1}, 0x48002) creat(&(0x7f00000002c0)='./file0\x00', 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000", @ANYRES32, @ANYBLOB='\x00'/12, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB], 0x48) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) unshare(0x26000400) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) pipe(&(0x7f00000002c0)={0xffffffffffffffff}) vmsplice(r2, &(0x7f0000000080)=[{&(0x7f00000004c0)="7cd1", 0x2}, {0x0}], 0x2, 0x0) 163.711628ms ago: executing program 4 (id=3798): syz_clone(0x80842111, 0x0, 0x0, 0x0, 0x0, 0x0) pipe(0x0) close(0xffffffffffffffff) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x2) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x1, 0x0, 0x7ffc1ffb}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) sigaltstack(0x0, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f00000005c0)={[{@noblock_validity}, {}, {@sysvgroups}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@nomblk_io_submit}]}, 0x3, 0x56a, &(0x7f00000015c0)="$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") ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00'}) 138.638128ms ago: executing program 0 (id=3799): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r0, &(0x7f0000000e80)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000006c0)="0d18687da3e7f33aed145cf8ff2d1e5a18c0d5f9856f4824f41040f6987d0b531da10713ed151bc4867681f28e033aef683334d03864ed30590dd4ea64a20ecbbc1346c9f42510d91eec0632885b7da95ca85f4b1435c5c1e993a85257df5f19bdfc5e038a16e6a8aef907e347081fdb93cee93217e11f19cde423e6138bd1b79ee615527ccaf8049959ac6e32af46d777ccb8c26ca925f69590df13a81aee3213e80ba5cacf1f930b3cc49093d11594ef13325790b55efbdc2dd99ed1c3c609a49cc151870a", 0xc6}, {&(0x7f0000000380)="3f82090ccda4f8ce1b08afd200c6075794cdd2e0021e32a0f6267447162a2085457cf687e74d142e85e9c4ac6eefcdaa493bcb54152b1339a38d3898707b77a9333cfb7bdc7c523ab4aa869c6db252e8e93bc14cfccfdedf9bbaed10dbc3c315aaedb987b398dd67a155fc3644e2fda199e2cfaa69af7df7", 0x78}], 0x2}}, {{0x0, 0x0, &(0x7f0000000e40)=[{&(0x7f0000001800)="353a35d6094e4ee7d764b6993f65136c5d6b84d9b1324a0b25e094700c9a66f9181738098f32e3e48859c3878d53a9752474da0d6af299d849d48f2fa2c8c807d7a1521da940585790ff1e6f9da83e32b751d1af9cfac640c1361f5ae8b99c187dafe9ea854120f6eaab11e7fdeb3f2152ebdbc21520ca01f64bb821576deef4ed6696cdddc1768b5b4fbd68a687cb6ba52ecf5cc6f8f05062f26de19d6aaaeb6cbca00e46685f77d2b3e8dd9d0d099e799cd5a76c67ab283f790366f7f744508edc9e48fa101b89215bd330c4e7", 0xce}], 0x1}}], 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 130.812698ms ago: executing program 5 (id=3800): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x0, 0x37, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x2000759, &(0x7f00000009c0)={[{@dioread_nolock}, {@noblock_validity}, {@usrquota}, {@errors_remount}, {@abort, 0x0}, {@noauto_da_alloc}, {@noload}, {@minixdf}, {@mblk_io_submit}, {@lazytime}, {@usrjquota}, {@nolazytime}, {@journal_dev={'journal_dev', 0x3d, 0x724}}, {@norecovery}, {@nouser_xattr}, {@journal_checksum}, {@sysvgroups}], [{@audit}, {@fowner_gt={'fowner>', 0xee00}}], 0x2c}, 0x6, 0x4fc, &(0x7f0000001a40)="$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") bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0}, 0x94) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0xffd0}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0}, @generic={0x66, 0x8}, @initr0, @exit, @alu={0x6, 0x0, 0x3, 0xa, 0x0, 0x2}, @printk={@x, {}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa}}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0xff99, &(0x7f0000000340)=""/222, 0x0, 0x8}, 0x78) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000040)={r0}, 0xc) getrlimit(0x1, &(0x7f0000000000)) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x1e, &(0x7f0000000000)=[0xffffffffffffffff], 0x1) 112.889998ms ago: executing program 0 (id=3801): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='sys_enter\x00', r0}, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x37, 0x2, 0xfd, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0xd}, 0x4c58, 0xfffe, 0x0, 0x6, 0x8, 0x20002, 0xb, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x10, 0xffffffffffffffff, 0x2) ioctl$IMSETDEVNAME(0xffffffffffffffff, 0x80184947, 0x0) perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x67a, 0x1, 0xfffffffe, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c0000000014"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xd, &(0x7f0000000680)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r3, &(0x7f00000005c0), 0x10) sendmsg$can_raw(r3, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000ff0)={0x0}, 0x2, 0x0, 0x0, 0xcc804}, 0x24000095) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002006e6c3830323131"], 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x40050) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x0, &(0x7f0000000040)}) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/wakeup_count', 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x38, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x1, @perf_bp={0x0, 0xd}, 0x0, 0x10200, 0x1, 0x1, 0x8, 0x20005, 0x2b, 0x0, 0x0, 0x0, 0xffffffffffffff7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) getpid() process_madvise(0xffffffffffffffff, 0x0, 0x0, 0x19, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000140)={'veth0_vlan\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x200, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {}, {0x0, 0x4}}}, 0x24}, 0x1, 0x0, 0x0, 0x8080}, 0x0) close_range(r4, 0xffffffffffffffff, 0x100000000000000) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1e00000003000000030000000000000000040000", @ANYRES32=r2, @ANYBLOB="0200000000000000000004000000000000000000", @ANYRES32=r6, @ANYRES32, @ANYBLOB="05000000030000000100"/28], 0x50) 30.310999ms ago: executing program 4 (id=3802): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r0, &(0x7f0000000e80)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000006c0)="0d18687da3e7f33aed145cf8ff2d1e5a18c0d5f9856f4824f41040f6987d0b531da10713ed151bc4867681f28e033aef683334d03864ed30590dd4ea64a20ecbbc1346c9f42510d91eec0632885b7da95ca85f4b1435c5c1e993a85257df5f19bdfc5e038a16e6a8aef907e347081fdb93cee93217e11f19cde423e6138bd1b79ee615527ccaf8049959ac6e32af46d777ccb8c26ca925f69590df13a81aee3213e80ba5cacf1f930b3cc49093d11594ef13325790b55efbdc2dd99ed1c3c609a49cc151870a", 0xc6}, {&(0x7f00000002c0)="9c811ff500139d7d28a5f0de630ec6041ed353d314e58721edf306c382ac611fe34479cb9e2585745ff3c61da74b06eb64f69a4e90d706178176dc533f123b66d04d51fb740c1efdf8db3b99ed18fb67c1f75ef7d55b3bb185f5f38665ea5e0918", 0x61}, {0x0}], 0x3}}, {{0x0, 0x0, &(0x7f0000000e40)=[{&(0x7f0000001800)="353a35d6094e4ee7d764b6993f65136c5d6b84d9b1324a0b25e094700c9a66f9181738098f32e3e48859c3878d53a9752474da0d6af299d849d48f2fa2c8c807d7a1521da940585790ff1e6f9da83e32b751d1af9cfac640c1361f5ae8b99c187dafe9ea854120f6eaab11e7fdeb3f2152ebdbc21520ca01f64bb821576deef4ed6696cdddc1768b5b4fbd68a687cb6ba52ecf5cc6f8f05062f26de19d6aaaeb6cbca00e46685f77d2b3e8dd9d0d099e799cd5a76c67ab283f790366f7f744508edc9e48fa101b89215bd330c4e706c1f09d781a5a50aef5e424a7a88b3241a338ca7411cda28aa167b5628b79e8a7d588efb69636181b9c54f6d296386c95f8a08e27d5792dcb20fa3b5b4f60c71f310b31bb1ab4a825c2dc10fac150a17d92bb51849d9eea53c78d427d8d1036dc906084046fcae09499c220ef50c2c7c475f392bc288eb5efb8032d1ade92e88e50a05a95dd5c6cbbdfb086fa53bca14d40c8c3f7149b39b16b7c7370978389366174db5fbc99dbe958f8c1690cd695dfbe6c384162a412c8d3cfd7cf223f9df4c67b92514111891f53d4e19826797302e1a87e7a627c52740bb3bd311771a68d349c0a68ef6f2a765f8220323add67b2b6695ca41adcda387a4264bcd94c8578a9ccca3b55ebcda45369b56068cfeec34abc2cbd94b9b12d057fa9d4328d57073f40e5ae64443e4a10ed400575bbd1168a170a0134b9ad28735dbd9603a9e417cce864f2141a92f57e1fdfcff4776f94a794d6db8d3e9e0ecc783956c7ab15a8d5639d3df1ac9da6057af913a563bd55b657f37cbf4cae2919aea6ff8a748eb4c036361b8866cc062bbad019f43d02b0c38bd6309f2baa53924466203ab8d00daaac4c9da846e645d64c10e47c32e9824e79ade4eeee7cbf71b1bb48f760800b04334745ab553dea12a85f0671eb07a4cc67ceaffa8269e0b052f25136cfb8a6b9327a2d165c42933642d3171ad00ebf0be485f5ed319021600a94072f251c8905a2451eba3ba7db2ec5fb8613463a796610629719166259ffa3261e06f09b5a69798b88848da9028ff7ed8a729c384374fce0f4f5cda3b61cc4d61da382c5708f26edb16e9b65d667ed61248dfbed35a6a886adec25361c17d9f30f94db7e3085440df135ddec94f3f01fe2e2f9edb9e19fd8ae0b93363f0dbadc858d8e0a93dea50e89b2d7674b7e0f813c38f70a87554f5d0b95b531ec006716", 0x36a}], 0x1}}], 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 18.27469ms ago: executing program 1 (id=3803): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000dc0)={0x11, 0xb, 0x0, &(0x7f0000000400)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x3b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r0, 0x0, 0x6}, 0x18) socket$netlink(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x37, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0xd}, 0x4c58, 0x10000, 0x0, 0x1, 0x8, 0x20002, 0xb, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$nl_route(0x10, 0x3, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="07000000040000000001000001"], 0x50) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f0000000200)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f0000000340)={0x0, 0xcc}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback, 0x7}], 0x1c) sendmmsg$inet6(r2, &(0x7f0000000640)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x2, @loopback, 0x3}, 0x1c, &(0x7f0000000500)=[{&(0x7f0000000300)="06", 0x1}], 0x1}}], 0x1, 0x3404c8d4) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r2, 0x84, 0x77, &(0x7f0000000240)=ANY=[@ANYRES32, @ANYRES32=r1], 0x1000f) 4.02219ms ago: executing program 0 (id=3804): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$nl_route(0x10, 0x3, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="07000000040000000001000001"], 0x50) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{}, &(0x7f0000000180), 0x0}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000340)={0x0, 0xcc}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback, 0x7}], 0x1c) sendmmsg$inet6(r1, &(0x7f0000000640)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x2, @loopback, 0x3}, 0x1c, &(0x7f0000000500)=[{&(0x7f0000000300)="06", 0x1}], 0x1}}], 0x1, 0x3404c8d4) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f0000000240)=ANY=[@ANYRES32, @ANYRES32=r0], 0x1000f) 0s ago: executing program 5 (id=3805): sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="01002c6325d24cdbdb2504000000d77fa4812f0c64913d2651ba858646711125a6f5b2268a8e321a752fdfbc7e5b4ae240f4f0116d9a78486f668a8dbe84cc279cac2e103fe5c702a642146602995dc3ba6f2af6d18a5fda1df50c17092045211ecffc0498e5d410ca794d8229efe928310e36bdfc09d9a5d49e756a5d2a6a6494563d22c6e19a4a7520fb06514b72c4556b85d5d1078a539f"], 0x14}, 0x1, 0x0, 0x0, 0x20000800}, 0x54) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000300)='ext4_fc_commit_start\x00', r1}, 0x18) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x2) readv(r2, &(0x7f0000000000)=[{&(0x7f0000001300)=""/244, 0x940}], 0x1) ioctl$TIOCVHANGUP(r2, 0x5437, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000005300)=[{0x28, 0x0, 0xfb, 0xfffff034}, {0x80000006, 0x66}]}, 0x10) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r3, &(0x7f0000002fc0)=[{{&(0x7f0000000340)={0xa, 0x4e23, 0xfffffff9, @dev={0xfe, 0x80, '\x00', 0x36}, 0x9}, 0x1c, &(0x7f00000004c0)=[{&(0x7f00000005c0)="05", 0x1}], 0x1}}], 0x1, 0x24000045) kernel console output (not intermixed with test programs): 7ffc0000 [ 253.844722][T15417] netlink: 332 bytes leftover after parsing attributes in process `syz.2.3076'. [ 253.975936][T15428] xt_hashlimit: size too large, truncated to 1048576 [ 253.982826][T15428] xt_hashlimit: Unknown mode mask 80FF, kernel too old? [ 253.991329][ T29] audit: type=1326 audit(253.938:17681): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15427 comm="syz.1.3080" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5510c4e929 code=0x7ffc0000 [ 254.014448][ T29] audit: type=1326 audit(253.938:17682): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15427 comm="syz.1.3080" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5510c4e929 code=0x7ffc0000 [ 254.037544][ T29] audit: type=1326 audit(253.938:17683): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15427 comm="syz.1.3080" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5510c4e929 code=0x7ffc0000 [ 254.060539][ T29] audit: type=1326 audit(253.938:17684): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15427 comm="syz.1.3080" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5510c4e929 code=0x7ffc0000 [ 254.083688][ T29] audit: type=1326 audit(253.938:17685): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15427 comm="syz.1.3080" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5510c4e929 code=0x7ffc0000 [ 254.106883][ T29] audit: type=1326 audit(253.938:17686): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15427 comm="syz.1.3080" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5510c4e929 code=0x7ffc0000 [ 254.228630][T15431] xt_hashlimit: size too large, truncated to 1048576 [ 254.235508][T15431] xt_hashlimit: Unknown mode mask 80FF, kernel too old? [ 254.485189][T15437] IPv6: Can't replace route, no match found [ 254.743160][T15453] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 254.743244][T15452] IPVS: stopping master sync thread 15453 ... [ 254.811008][T15457] xt_hashlimit: size too large, truncated to 1048576 [ 254.817791][T15457] xt_hashlimit: Unknown mode mask 80FF, kernel too old? [ 254.849079][T15469] loop2: detected capacity change from 0 to 1024 [ 254.856977][T15469] EXT4-fs: Ignoring removed oldalloc option [ 254.857761][T15467] loop3: detected capacity change from 0 to 1024 [ 254.868263][T15469] EXT4-fs: Ignoring removed orlov option [ 254.870953][T15467] EXT4-fs: Ignoring removed orlov option [ 254.880926][T15469] EXT4-fs (loop2): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 254.881307][T15467] EXT4-fs: Ignoring removed nomblk_io_submit option [ 254.910698][T15469] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 254.925759][T15469] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4113: comm syz.2.3089: Allocating blocks 385-513 which overlap fs metadata [ 254.941188][T15467] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 254.952297][T15469] EXT4-fs (loop2): pa ffff888106964540: logic 16, phys. 129, len 24 [ 254.961307][T15469] EXT4-fs error (device loop2): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 8 [ 254.985449][T13553] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 255.094031][T15489] lo speed is unknown, defaulting to 1000 [ 255.269551][T15509] loop1: detected capacity change from 0 to 128 [ 255.286685][T15509] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (30846!=65535) [ 255.314832][T15509] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 ro without journal. Quota mode: none. [ 255.327792][T15511] xt_hashlimit: size too large, truncated to 1048576 [ 255.334547][T15509] EXT4-fs error (device loop1): __ext4_find_entry:1626: inode #2: comm syz.1.3100: checksumming directory block 0 [ 255.334830][T15509] EXT4-fs error (device loop1): __ext4_find_entry:1626: inode #2: comm syz.1.3100: checksumming directory block 0 [ 255.346669][T15511] xt_hashlimit: Unknown mode mask 80FF, kernel too old? [ 255.375838][T15516] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 255.387829][T15509] IPVS: stopping master sync thread 15516 ... [ 255.404563][T12623] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 255.550265][T15549] loop3: detected capacity change from 0 to 1024 [ 255.557650][T15549] EXT4-fs: Ignoring removed orlov option [ 255.563434][T15549] EXT4-fs: Ignoring removed nomblk_io_submit option [ 255.574642][T15549] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 255.578653][T15556] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 255.587708][T15555] IPVS: stopping master sync thread 15556 ... [ 255.622747][T13553] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 255.673686][ T4849] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 255.711099][T15569] loop1: detected capacity change from 0 to 256 [ 255.740905][T15569] FAT-fs (loop1): Directory bread(block 64) failed [ 255.748934][T15580] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 255.748953][T15576] IPVS: stopping master sync thread 15580 ... [ 255.748988][T15569] FAT-fs (loop1): Directory bread(block 65) failed [ 255.784616][T15569] FAT-fs (loop1): Directory bread(block 66) failed [ 255.791378][T15569] FAT-fs (loop1): Directory bread(block 67) failed [ 255.797989][T15569] FAT-fs (loop1): Directory bread(block 68) failed [ 255.804563][T15569] FAT-fs (loop1): Directory bread(block 69) failed [ 255.811217][T15569] FAT-fs (loop1): Directory bread(block 70) failed [ 255.817830][T15569] FAT-fs (loop1): Directory bread(block 71) failed [ 255.824482][T15569] FAT-fs (loop1): Directory bread(block 72) failed [ 255.831084][T15569] FAT-fs (loop1): Directory bread(block 73) failed [ 255.877285][T15579] IPv6: Can't replace route, no match found [ 256.076894][T15597] loop3: detected capacity change from 0 to 1024 [ 256.085233][T15597] EXT4-fs: Ignoring removed orlov option [ 256.091013][T15597] EXT4-fs: Ignoring removed nomblk_io_submit option [ 256.114913][T15597] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 256.168647][T13553] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 256.264988][T15617] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 256.278224][T15616] IPVS: stopping master sync thread 15617 ... [ 256.408754][T15609] Cannot find set identified by id 0 to match [ 256.608192][T15636] xt_hashlimit: size too large, truncated to 1048576 [ 256.615697][T15636] xt_hashlimit: Unknown mode mask 80FF, kernel too old? [ 256.703101][T15649] loop4: detected capacity change from 0 to 1024 [ 256.712099][T15649] EXT4-fs: Ignoring removed oldalloc option [ 256.726569][T15649] EXT4-fs: Ignoring removed orlov option [ 256.734526][T15649] EXT4-fs (loop4): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 256.765031][T15649] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 256.779416][T15649] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4113: comm syz.4.3135: Allocating blocks 385-513 which overlap fs metadata [ 256.794598][T15649] EXT4-fs (loop4): pa ffff8881069644d0: logic 16, phys. 129, len 24 [ 256.802641][T15649] EXT4-fs error (device loop4): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 8 [ 257.389837][T15662] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 257.389909][T15661] IPVS: stopping master sync thread 15662 ... [ 257.530509][T14504] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 257.615813][T15694] xt_hashlimit: size too large, truncated to 1048576 [ 257.622638][T15694] xt_hashlimit: Unknown mode mask 80FF, kernel too old? [ 257.651676][T15672] Cannot find set identified by id 0 to match [ 257.665117][T15701] loop4: detected capacity change from 0 to 128 [ 257.672251][T15701] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (30846!=65535) [ 257.685075][T15701] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 ro without journal. Quota mode: none. [ 257.703550][T15701] EXT4-fs error (device loop4): __ext4_find_entry:1626: inode #2: comm syz.4.3152: checksumming directory block 0 [ 257.723580][T15701] EXT4-fs error (device loop4): __ext4_find_entry:1626: inode #2: comm syz.4.3152: checksumming directory block 0 [ 257.747989][T15701] IPVS: stopping master sync thread 15709 ... [ 257.754394][T15709] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 257.782004][T14504] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 257.878245][T15723] loop4: detected capacity change from 0 to 1024 [ 257.885290][T15723] EXT4-fs: Ignoring removed oldalloc option [ 257.891387][T15723] EXT4-fs: Ignoring removed orlov option [ 257.897485][T15723] EXT4-fs (loop4): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 257.914099][T15723] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 257.928255][T15723] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4113: comm syz.4.3157: Allocating blocks 385-513 which overlap fs metadata [ 257.943595][T15723] EXT4-fs (loop4): pa ffff888100496a80: logic 16, phys. 129, len 24 [ 257.951643][T15723] EXT4-fs error (device loop4): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 8 [ 258.563717][T15743] Cannot find set identified by id 0 to match [ 258.719656][T15755] IPv6: Can't replace route, no match found [ 258.729671][T14504] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 258.784279][T15773] loop3: detected capacity change from 0 to 128 [ 258.791680][T15773] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (30846!=65535) [ 258.802976][T15773] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 ro without journal. Quota mode: none. [ 258.816674][T15773] EXT4-fs error (device loop3): __ext4_find_entry:1626: inode #2: comm syz.3.3175: checksumming directory block 0 [ 258.829284][T15773] EXT4-fs error (device loop3): __ext4_find_entry:1626: inode #2: comm syz.3.3175: checksumming directory block 0 [ 258.845510][T15780] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 258.856717][T15773] IPVS: stopping master sync thread 15780 ... [ 258.881389][T13553] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 258.915927][T15781] lo speed is unknown, defaulting to 1000 [ 259.609871][ T29] kauditd_printk_skb: 378 callbacks suppressed [ 259.609883][ T29] audit: type=1326 audit(259.588:18065): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15809 comm="syz.2.3178" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77fe0be929 code=0x7ffc0000 [ 259.658826][T15810] loop2: detected capacity change from 0 to 1024 [ 259.687604][T15810] EXT4-fs: Ignoring removed orlov option [ 259.694136][T15810] EXT4-fs: Ignoring removed nomblk_io_submit option [ 259.705617][ T29] audit: type=1326 audit(259.628:18066): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15809 comm="syz.2.3178" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77fe0be929 code=0x7ffc0000 [ 259.729368][ T29] audit: type=1326 audit(259.628:18067): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15809 comm="syz.2.3178" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f77fe0be929 code=0x7ffc0000 [ 259.752361][ T29] audit: type=1326 audit(259.628:18068): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15809 comm="syz.2.3178" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77fe0be929 code=0x7ffc0000 [ 259.776021][ T29] audit: type=1326 audit(259.628:18069): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15809 comm="syz.2.3178" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f77fe0be929 code=0x7ffc0000 [ 259.798999][ T29] audit: type=1326 audit(259.628:18070): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15809 comm="syz.2.3178" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77fe0be929 code=0x7ffc0000 [ 259.822675][ T29] audit: type=1326 audit(259.628:18071): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15809 comm="syz.2.3178" exe="/root/syz-executor" sig=0 arch=c000003e syscall=131 compat=0 ip=0x7f77fe0be929 code=0x7ffc0000 [ 259.845677][ T29] audit: type=1326 audit(259.628:18072): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15809 comm="syz.2.3178" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77fe0be929 code=0x7ffc0000 [ 259.869292][ T29] audit: type=1326 audit(259.628:18073): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15809 comm="syz.2.3178" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f77fe0be929 code=0x7ffc0000 [ 259.892350][ T29] audit: type=1326 audit(259.628:18074): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15809 comm="syz.2.3178" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77fe0be929 code=0x7ffc0000 [ 259.920923][T15810] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 259.961982][ T4849] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 260.009681][T15841] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 260.009778][T15840] IPVS: stopping master sync thread 15841 ... [ 260.144639][T15859] loop3: detected capacity change from 0 to 1024 [ 260.151604][T15859] EXT4-fs: Ignoring removed oldalloc option [ 260.157941][T15859] EXT4-fs: Ignoring removed orlov option [ 260.164541][T15859] EXT4-fs (loop3): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 260.169174][T15845] IPv6: Can't replace route, no match found [ 260.184434][T15859] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 260.198661][T15859] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4113: comm syz.3.3185: Allocating blocks 385-513 which overlap fs metadata [ 260.214967][T15859] EXT4-fs (loop3): pa ffff8881069645b0: logic 16, phys. 129, len 24 [ 260.223038][T15859] EXT4-fs error (device loop3): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 8 [ 260.424073][T15873] lo speed is unknown, defaulting to 1000 [ 260.630127][T15901] loop4: detected capacity change from 0 to 1024 [ 260.638518][T15901] EXT4-fs: Ignoring removed orlov option [ 260.644277][T15901] EXT4-fs: Ignoring removed nomblk_io_submit option [ 260.656560][T15901] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 260.685509][T14504] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 260.729857][T15919] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 260.741076][T15918] IPVS: stopping master sync thread 15919 ... [ 260.858258][T15921] lo speed is unknown, defaulting to 1000 [ 260.989442][T15943] xt_hashlimit: size too large, truncated to 1048576 [ 260.996763][T15943] xt_hashlimit: Unknown mode mask 80FF, kernel too old? [ 261.073399][T13553] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 261.090818][T15947] loop2: detected capacity change from 0 to 1024 [ 261.098382][T15947] EXT4-fs: Ignoring removed orlov option [ 261.104192][T15947] EXT4-fs: Ignoring removed nomblk_io_submit option [ 261.163839][T15957] random: crng reseeded on system resumption [ 261.228165][T15947] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 261.249872][T15957] loop3: detected capacity change from 0 to 1764 [ 261.272102][ T4849] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 261.324053][T15970] IPVS: stopping master sync thread 15971 ... [ 261.346533][T15937] lo speed is unknown, defaulting to 1000 [ 262.002092][T16009] IPv6: Can't replace route, no match found [ 262.087314][T16038] loop4: detected capacity change from 0 to 1024 [ 262.094368][T16038] EXT4-fs: Ignoring removed oldalloc option [ 262.100560][T16038] EXT4-fs: Ignoring removed orlov option [ 262.106729][T16038] EXT4-fs (loop4): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 262.124711][T16038] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 262.139431][T16038] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4113: comm syz.4.3218: Allocating blocks 385-513 which overlap fs metadata [ 262.162213][T16038] EXT4-fs (loop4): pa ffff8881069644d0: logic 16, phys. 129, len 24 [ 262.170291][T16038] EXT4-fs error (device loop4): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 8 [ 262.396819][T16050] loop3: detected capacity change from 0 to 1024 [ 262.404256][T16050] EXT4-fs: Ignoring removed orlov option [ 262.410017][T16050] EXT4-fs: Ignoring removed nomblk_io_submit option [ 262.427139][T16050] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 262.501361][T13553] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 262.528473][T16048] netlink: 332 bytes leftover after parsing attributes in process `syz.2.3219'. [ 262.613205][T16066] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 262.638123][T16065] IPVS: stopping master sync thread 16066 ... [ 262.772895][T16071] IPv6: Can't replace route, no match found [ 262.789212][T16063] lo speed is unknown, defaulting to 1000 [ 262.908108][T14504] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 262.924756][T16082] loop1: detected capacity change from 0 to 1024 [ 262.932021][T16082] EXT4-fs: Ignoring removed oldalloc option [ 262.947079][T16082] EXT4-fs: Ignoring removed orlov option [ 262.957241][T16082] EXT4-fs (loop1): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 263.005091][T16082] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 263.029415][T16090] xt_hashlimit: size too large, truncated to 1048576 [ 263.036231][T16090] xt_hashlimit: Unknown mode mask 80FF, kernel too old? [ 263.054029][T16082] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4113: comm syz.1.3224: Allocating blocks 385-513 which overlap fs metadata [ 263.069225][T16082] EXT4-fs (loop1): pa ffff8881069645b0: logic 16, phys. 129, len 24 [ 263.077343][T16082] EXT4-fs error (device loop1): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 8 [ 263.596359][T16137] loop3: detected capacity change from 0 to 128 [ 263.604007][T16137] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (30846!=65535) [ 263.633208][T16137] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 ro without journal. Quota mode: none. [ 263.649362][T16137] EXT4-fs error (device loop3): __ext4_find_entry:1626: inode #2: comm syz.3.3235: checksumming directory block 0 [ 263.683265][T16137] EXT4-fs error (device loop3): __ext4_find_entry:1626: inode #2: comm syz.3.3235: checksumming directory block 0 [ 263.699347][T16157] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 263.699813][T16137] IPVS: stopping master sync thread 16157 ... [ 263.716483][T16158] loop2: detected capacity change from 0 to 128 [ 263.724738][T16158] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (30846!=65535) [ 263.735756][T16158] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 ro without journal. Quota mode: none. [ 263.749673][T12623] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 263.759181][T16158] EXT4-fs error (device loop2): __ext4_find_entry:1626: inode #2: comm syz.2.3241: checksumming directory block 0 [ 263.759911][T16158] EXT4-fs error (device loop2): __ext4_find_entry:1626: inode #2: comm syz.2.3241: checksumming directory block 0 [ 263.784056][T13553] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 263.792283][T16162] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 263.804009][T16158] IPVS: stopping master sync thread 16162 ... [ 263.837082][ T4849] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 263.915609][T16170] IPv6: Can't replace route, no match found [ 264.056582][T16196] random: crng reseeded on system resumption [ 264.130693][T16196] loop2: detected capacity change from 0 to 1764 [ 264.203197][T16198] lo speed is unknown, defaulting to 1000 [ 264.294032][T16250] loop2: detected capacity change from 0 to 1024 [ 264.301516][T16250] EXT4-fs: Ignoring removed orlov option [ 264.307380][T16250] EXT4-fs: Ignoring removed nomblk_io_submit option [ 264.326451][T16198] chnl_net:caif_netlink_parms(): no params data found [ 264.344702][T16250] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 264.373899][ T4849] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 264.384469][T16198] bridge0: port 1(bridge_slave_0) entered blocking state [ 264.391544][T16198] bridge0: port 1(bridge_slave_0) entered disabled state [ 264.398723][T16395] loop3: detected capacity change from 0 to 1024 [ 264.399099][T16198] bridge_slave_0: entered allmulticast mode [ 264.406289][T16395] EXT4-fs: Ignoring removed oldalloc option [ 264.411968][T16198] bridge_slave_0: entered promiscuous mode [ 264.423755][T16198] bridge0: port 2(bridge_slave_1) entered blocking state [ 264.430943][T16198] bridge0: port 2(bridge_slave_1) entered disabled state [ 264.438213][T16198] bridge_slave_1: entered allmulticast mode [ 264.438380][T16395] EXT4-fs: Ignoring removed orlov option [ 264.446121][T16198] bridge_slave_1: entered promiscuous mode [ 264.451396][T16395] EXT4-fs (loop3): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 264.474720][T16198] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 264.485162][T16395] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 264.499472][T16198] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 264.516487][T16395] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4113: comm syz.3.3262: Allocating blocks 385-513 which overlap fs metadata [ 264.531697][T16395] EXT4-fs (loop3): pa ffff888106964620: logic 16, phys. 129, len 24 [ 264.539741][T16395] EXT4-fs error (device loop3): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 8 [ 264.551453][T16198] team0: Port device team_slave_0 added [ 264.558020][T16198] team0: Port device team_slave_1 added [ 264.576763][T16198] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 264.583759][T16198] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 264.609880][T16198] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 264.623438][T16198] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 264.630434][T16198] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 264.656724][T16198] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 264.693682][T16198] hsr_slave_0: entered promiscuous mode [ 264.700143][T16198] hsr_slave_1: entered promiscuous mode [ 264.706924][T16198] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 264.715407][T16198] Cannot create hsr debugfs directory [ 264.723283][ T1991] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 264.788498][ T1991] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 264.844943][ T1991] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 264.896316][ T1991] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 264.979577][ T1991] bridge_slave_1: left allmulticast mode [ 264.986145][ T1991] bridge_slave_1: left promiscuous mode [ 264.991975][ T1991] bridge0: port 2(bridge_slave_1) entered disabled state [ 264.998957][T16603] loop1: detected capacity change from 0 to 512 [ 264.999222][ T29] kauditd_printk_skb: 499 callbacks suppressed [ 264.999237][ T29] audit: type=1326 audit(264.968:18574): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16602 comm="syz.1.3276" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5510c4e929 code=0x7ffc0000 [ 265.035079][ T29] audit: type=1326 audit(264.968:18575): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16602 comm="syz.1.3276" exe="/root/syz-executor" sig=0 arch=c000003e syscall=431 compat=0 ip=0x7f5510c4e929 code=0x7ffc0000 [ 265.035232][T16603] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 265.058102][ T29] audit: type=1326 audit(264.968:18576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16602 comm="syz.1.3276" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5510c4e929 code=0x7ffc0000 [ 265.058131][ T29] audit: type=1326 audit(264.968:18577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16602 comm="syz.1.3276" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f5510c4e929 code=0x7ffc0000 [ 265.069740][T16603] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=884ee02c, mo2=0102] [ 265.091206][ T29] audit: type=1326 audit(264.968:18578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16602 comm="syz.1.3276" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f5510c4e963 code=0x7ffc0000 [ 265.091283][ T29] audit: type=1326 audit(264.968:18579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16602 comm="syz.1.3276" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f5510c4d3df code=0x7ffc0000 [ 265.115931][T16603] EXT4-fs (loop1): orphan cleanup on readonly fs [ 265.122860][ T29] audit: type=1326 audit(264.968:18580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16602 comm="syz.1.3276" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f5510c4e9b7 code=0x7ffc0000 [ 265.168994][ T29] audit: type=1326 audit(264.968:18581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16602 comm="syz.1.3276" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f5510c4d290 code=0x7ffc0000 [ 265.176667][T16603] EXT4-fs error (device loop1): ext4_get_branch:178: inode #11: block 33619980: comm syz.1.3276: invalid block [ 265.198856][ T29] audit: type=1326 audit(264.968:18582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16602 comm="syz.1.3276" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f5510c4e52b code=0x7ffc0000 [ 265.199065][ T29] audit: type=1326 audit(264.988:18583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16602 comm="syz.1.3276" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f5510c4d58a code=0x7ffc0000 [ 265.224528][T16603] EXT4-fs (loop1): Remounting filesystem read-only [ 265.234925][ T1991] bridge_slave_0: left allmulticast mode [ 265.263373][T16603] EXT4-fs (loop1): 1 truncate cleaned up [ 265.280779][ T1991] bridge_slave_0: left promiscuous mode [ 265.288874][T16603] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: writeback. [ 265.293781][ T1991] bridge0: port 1(bridge_slave_0) entered disabled state [ 265.332868][T12623] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 265.483128][T16631] loop2: detected capacity change from 0 to 512 [ 265.491161][T16631] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 265.501162][ T1991] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 265.501370][T16631] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=884ee02c, mo2=0102] [ 265.518112][T16631] EXT4-fs (loop2): orphan cleanup on readonly fs [ 265.524728][ T1991] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 265.524791][T16631] EXT4-fs error (device loop2): ext4_get_branch:178: inode #11: block 33619980: comm syz.2.3286: invalid block [ 265.545297][T16631] EXT4-fs (loop2): Remounting filesystem read-only [ 265.552058][ T1991] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 265.552105][T16631] EXT4-fs (loop2): 1 truncate cleaned up [ 265.566263][T16631] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: writeback. [ 265.566997][ T1991] bond0 (unregistering): Released all slaves [ 265.606694][ T4849] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 265.625388][ T1991] tipc: Left network mode [ 265.645270][ T1991] hsr_slave_0: left promiscuous mode [ 265.650857][ T1991] hsr_slave_1: left promiscuous mode [ 265.657443][ T1991] veth1_macvtap: left promiscuous mode [ 265.686661][T16651] loop2: detected capacity change from 0 to 1024 [ 265.698135][T13553] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 265.698941][T16651] EXT4-fs: Ignoring removed oldalloc option [ 265.716405][T16651] EXT4-fs: Ignoring removed orlov option [ 265.735383][T16651] EXT4-fs (loop2): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 265.746867][ T1991] team0 (unregistering): Port device team_slave_1 removed [ 265.756793][T16651] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 265.771798][ T1991] team0 (unregistering): Port device team_slave_0 removed [ 265.782935][T16651] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4113: comm syz.2.3287: Allocating blocks 385-513 which overlap fs metadata [ 265.804013][ T4921] smc: removing ib device syz0 [ 265.811117][ T3369] lo speed is unknown, defaulting to 1000 [ 265.816930][ T3369] syz0: Port: 1 Link DOWN [ 265.823274][T16651] EXT4-fs (loop2): pa ffff888100496b60: logic 16, phys. 129, len 24 [ 265.831298][T16651] EXT4-fs error (device loop2): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 8 [ 265.989014][T16688] loop3: detected capacity change from 0 to 512 [ 265.996774][T16688] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 266.007036][T16688] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=884ee02c, mo2=0102] [ 266.015802][T16688] EXT4-fs (loop3): orphan cleanup on readonly fs [ 266.022458][T16688] EXT4-fs error (device loop3): ext4_get_branch:178: inode #11: block 33619980: comm syz.3.3296: invalid block [ 266.034485][T16688] EXT4-fs (loop3): Remounting filesystem read-only [ 266.041298][T16688] EXT4-fs (loop3): 1 truncate cleaned up [ 266.089972][T16198] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 266.099416][T16198] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 266.108331][T16198] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 266.123267][T16198] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 266.183451][T16198] 8021q: adding VLAN 0 to HW filter on device bond0 [ 266.194938][T16198] 8021q: adding VLAN 0 to HW filter on device team0 [ 266.204810][ T179] bridge0: port 1(bridge_slave_0) entered blocking state [ 266.211904][ T179] bridge0: port 1(bridge_slave_0) entered forwarding state [ 266.244490][ T4921] bridge0: port 2(bridge_slave_1) entered blocking state [ 266.251623][ T4921] bridge0: port 2(bridge_slave_1) entered forwarding state [ 266.375556][T16198] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 266.425303][T16712] Cannot find set identified by id 0 to match [ 266.466873][T16720] netlink: 332 bytes leftover after parsing attributes in process `syz.4.3299'. [ 266.642087][T16198] veth0_vlan: entered promiscuous mode [ 266.659614][T16761] loop1: detected capacity change from 0 to 512 [ 266.671206][T16198] veth1_vlan: entered promiscuous mode [ 266.699379][T16761] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 266.736876][T16198] veth0_macvtap: entered promiscuous mode [ 266.763898][T16761] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=884ee02c, mo2=0102] [ 266.771911][T16761] EXT4-fs (loop1): orphan cleanup on readonly fs [ 266.780099][T16198] veth1_macvtap: entered promiscuous mode [ 266.815315][T16761] EXT4-fs error (device loop1): ext4_get_branch:178: inode #11: block 33619980: comm syz.1.3307: invalid block [ 266.827588][T16761] EXT4-fs (loop1): Remounting filesystem read-only [ 266.835068][T16761] EXT4-fs (loop1): 1 truncate cleaned up [ 266.858738][T16198] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 266.890691][T16198] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 266.920721][T16198] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 266.929535][T16198] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 266.938310][T16198] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 266.945019][T16749] IPv6: Can't replace route, no match found [ 266.947160][T16198] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 267.389382][T16827] loop4: detected capacity change from 0 to 512 [ 267.397844][T16827] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 267.413009][T16827] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=884ee02c, mo2=0102] [ 267.429318][T16827] EXT4-fs (loop4): orphan cleanup on readonly fs [ 267.439462][T16827] EXT4-fs error (device loop4): ext4_get_branch:178: inode #11: block 33619980: comm syz.4.3318: invalid block [ 267.472760][T16827] EXT4-fs (loop4): Remounting filesystem read-only [ 267.505075][T16827] EXT4-fs (loop4): 1 truncate cleaned up [ 267.977462][T16882] IPv6: Can't replace route, no match found [ 268.028190][T16926] loop4: detected capacity change from 0 to 512 [ 268.035650][T16926] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 268.046624][T16926] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=884ee02c, mo2=0102] [ 268.055182][T16926] EXT4-fs (loop4): orphan cleanup on readonly fs [ 268.061817][T16926] EXT4-fs error (device loop4): ext4_get_branch:178: inode #11: block 33619980: comm syz.4.3335: invalid block [ 268.075090][T16926] EXT4-fs (loop4): Remounting filesystem read-only [ 268.081891][T16926] EXT4-fs (loop4): 1 truncate cleaned up [ 268.159324][T16930] IPv6: Can't replace route, no match found [ 268.165246][T16938] loop2: detected capacity change from 0 to 1024 [ 268.166369][T16938] EXT4-fs: Ignoring removed orlov option [ 268.177384][T16938] EXT4-fs: Ignoring removed nomblk_io_submit option [ 268.647361][T16991] loop3: detected capacity change from 0 to 512 [ 268.655426][T16991] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 268.674523][T16991] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=884ee02c, mo2=0102] [ 268.684328][T16991] EXT4-fs (loop3): orphan cleanup on readonly fs [ 268.691298][T16991] EXT4-fs error (device loop3): ext4_get_branch:178: inode #11: block 33619980: comm syz.3.3347: invalid block [ 268.703857][T16991] EXT4-fs (loop3): Remounting filesystem read-only [ 268.710790][T16991] EXT4-fs (loop3): 1 truncate cleaned up [ 268.766262][T17005] loop1: detected capacity change from 0 to 128 [ 268.773884][T17005] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (30846!=65535) [ 268.786330][T17005] EXT4-fs error (device loop1): __ext4_find_entry:1626: inode #2: comm syz.1.3350: checksumming directory block 0 [ 268.800932][T17012] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 268.801777][T17005] IPVS: stopping master sync thread 17012 ... [ 268.823138][T17013] loop3: detected capacity change from 0 to 512 [ 268.830314][T17013] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 268.851427][T17013] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c842e02c, mo2=0002] [ 268.859881][T17013] EXT4-fs (loop3): orphan cleanup on readonly fs [ 268.866265][T17013] EXT4-fs error (device loop3): ext4_orphan_get:1419: comm syz.3.3349: bad orphan inode 267 [ 268.879409][T17013] EXT4-fs (loop3): Remounting filesystem read-only [ 268.935335][T17013] EXT4-fs warning (device loop3): dx_probe:861: inode #2: comm syz.3.3349: dx entry: limit 0 != root limit 125 [ 268.947256][T17013] EXT4-fs warning (device loop3): dx_probe:934: inode #2: comm syz.3.3349: Corrupt directory, running e2fsck is recommended [ 268.977829][T17024] random: crng reseeded on system resumption [ 269.032048][T17024] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 269.039885][T17024] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 269.049353][T17024] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 269.056880][T17024] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 269.198585][T17056] IPv6: Can't replace route, no match found [ 269.307104][T17091] loop1: detected capacity change from 0 to 512 [ 269.314560][T17091] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 269.324840][T17091] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=884ee02c, mo2=0102] [ 269.333038][T17091] EXT4-fs (loop1): orphan cleanup on readonly fs [ 269.339806][T17091] EXT4-fs error (device loop1): ext4_get_branch:178: inode #11: block 33619980: comm syz.1.3360: invalid block [ 269.351732][T17091] EXT4-fs (loop1): Remounting filesystem read-only [ 269.358685][T17091] EXT4-fs (loop1): 1 truncate cleaned up [ 269.755318][T17107] Cannot find set identified by id 0 to match [ 269.910524][T17112] IPv6: Can't replace route, no match found [ 270.007128][T17118] loop2: detected capacity change from 0 to 1024 [ 270.013879][T17118] EXT4-fs: Ignoring removed oldalloc option [ 270.019828][T17118] EXT4-fs: Ignoring removed orlov option [ 270.025853][T17118] EXT4-fs (loop2): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 270.044964][T17118] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4113: comm syz.2.3365: Allocating blocks 385-513 which overlap fs metadata [ 270.059719][T17118] EXT4-fs (loop2): pa ffff888100496b60: logic 16, phys. 129, len 24 [ 270.067949][T17118] EXT4-fs error (device loop2): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 8 [ 270.608147][ T29] kauditd_printk_skb: 415 callbacks suppressed [ 270.608163][ T29] audit: type=1326 audit(270.588:18999): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17167 comm="syz.1.3374" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5510c4e929 code=0x7ffc0000 [ 270.616147][T17168] loop1: detected capacity change from 0 to 1024 [ 270.645128][T17168] EXT4-fs: Ignoring removed orlov option [ 270.650882][T17168] EXT4-fs: Ignoring removed nomblk_io_submit option [ 270.658119][ T29] audit: type=1326 audit(270.588:19000): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17167 comm="syz.1.3374" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5510c4e929 code=0x7ffc0000 [ 270.681277][ T29] audit: type=1326 audit(270.588:19001): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17167 comm="syz.1.3374" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5510c4e929 code=0x7ffc0000 [ 270.704307][ T29] audit: type=1326 audit(270.588:19002): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17167 comm="syz.1.3374" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5510c4e929 code=0x7ffc0000 [ 270.727355][ T29] audit: type=1326 audit(270.588:19003): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17167 comm="syz.1.3374" exe="/root/syz-executor" sig=0 arch=c000003e syscall=131 compat=0 ip=0x7f5510c4e929 code=0x7ffc0000 [ 270.750433][ T29] audit: type=1326 audit(270.588:19004): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17167 comm="syz.1.3374" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5510c4e929 code=0x7ffc0000 [ 270.773705][ T29] audit: type=1326 audit(270.588:19005): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17167 comm="syz.1.3374" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5510c4e929 code=0x7ffc0000 [ 270.796665][ T29] audit: type=1326 audit(270.588:19006): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17167 comm="syz.1.3374" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f5510c4e929 code=0x7ffc0000 [ 270.819647][ T29] audit: type=1326 audit(270.588:19007): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17167 comm="syz.1.3374" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5510c4e929 code=0x7ffc0000 [ 270.842618][ T29] audit: type=1326 audit(270.588:19008): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17167 comm="syz.1.3374" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f5510c4e929 code=0x7ffc0000 [ 271.094633][T17183] IPv6: Can't replace route, no match found [ 271.210610][T17196] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 271.222280][T17195] IPVS: stopping master sync thread 17196 ... [ 271.232282][T17189] Cannot find set identified by id 0 to match [ 271.508044][T17212] IPv6: Can't replace route, no match found [ 271.584502][T17238] loop4: detected capacity change from 0 to 256 [ 271.603590][T17238] FAT-fs (loop4): Directory bread(block 64) failed [ 271.610354][T17238] FAT-fs (loop4): Directory bread(block 65) failed [ 271.617102][T17238] FAT-fs (loop4): Directory bread(block 66) failed [ 271.624252][T17238] FAT-fs (loop4): Directory bread(block 67) failed [ 271.630975][T17238] FAT-fs (loop4): Directory bread(block 68) failed [ 271.637699][T17238] FAT-fs (loop4): Directory bread(block 69) failed [ 271.644760][T17238] FAT-fs (loop4): Directory bread(block 70) failed [ 271.651506][T17238] FAT-fs (loop4): Directory bread(block 71) failed [ 271.659862][T17238] FAT-fs (loop4): Directory bread(block 72) failed [ 271.674776][T17238] FAT-fs (loop4): Directory bread(block 73) failed [ 272.137855][T17261] netlink: 332 bytes leftover after parsing attributes in process `syz.3.3393'. [ 272.626505][T17277] loop4: detected capacity change from 0 to 512 [ 272.644789][T17277] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 272.699239][T17277] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=884ee02c, mo2=0102] [ 272.722618][T17277] EXT4-fs (loop4): orphan cleanup on readonly fs [ 272.737905][T17277] EXT4-fs error (device loop4): ext4_get_branch:178: inode #11: block 33619980: comm syz.4.3398: invalid block [ 272.767665][T17277] EXT4-fs (loop4): Remounting filesystem read-only [ 272.781998][T17277] EXT4-fs (loop4): 1 truncate cleaned up [ 273.199007][T17302] Cannot find set identified by id 0 to match [ 273.272325][T17315] IPv6: Can't replace route, no match found [ 273.354774][T17344] random: crng reseeded on system resumption [ 273.393885][T17344] loop3: detected capacity change from 0 to 1764 [ 273.492947][T17358] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 273.492954][T17357] IPVS: stopping master sync thread 17358 ... [ 273.906341][T17399] Cannot find set identified by id 0 to match [ 274.049457][T17410] loop4: detected capacity change from 0 to 512 [ 274.057099][T17410] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 274.068209][T17410] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=884ee02c, mo2=0102] [ 274.076719][T17410] EXT4-fs (loop4): orphan cleanup on readonly fs [ 274.083368][T17410] EXT4-fs error (device loop4): ext4_get_branch:178: inode #11: block 33619980: comm syz.4.3424: invalid block [ 274.095633][T17410] EXT4-fs (loop4): Remounting filesystem read-only [ 274.102290][T17410] EXT4-fs (loop4): 1 truncate cleaned up [ 274.188340][T17425] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 274.188398][T17424] IPVS: stopping master sync thread 17425 ... [ 274.386048][T17458] loop3: detected capacity change from 0 to 1024 [ 274.393190][T17458] EXT4-fs: Ignoring removed orlov option [ 274.398970][T17458] EXT4-fs: Ignoring removed nomblk_io_submit option [ 274.517071][T17475] loop2: detected capacity change from 0 to 512 [ 274.542681][T17475] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 274.553930][T17475] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=884ee02c, mo2=0102] [ 274.577545][T17475] EXT4-fs (loop2): orphan cleanup on readonly fs [ 274.603664][T17462] IPv6: Can't replace route, no match found [ 274.614543][T17475] EXT4-fs error (device loop2): ext4_get_branch:178: inode #11: block 33619980: comm syz.2.3437: invalid block [ 274.628493][T17483] IPVS: stopping master sync thread 17484 ... [ 274.646736][T17475] EXT4-fs (loop2): Remounting filesystem read-only [ 274.655863][T17475] EXT4-fs (loop2): 1 truncate cleaned up [ 274.969846][T17515] IPv6: Can't replace route, no match found [ 274.980239][T17518] loop2: detected capacity change from 0 to 1024 [ 274.987578][T17518] EXT4-fs: Ignoring removed orlov option [ 274.993326][T17518] EXT4-fs: Ignoring removed nomblk_io_submit option [ 275.028600][T17544] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 275.040046][T17542] IPVS: stopping master sync thread 17544 ... [ 275.056045][T17547] loop3: detected capacity change from 0 to 512 [ 275.063597][T17547] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 275.074627][T17547] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=884ee02c, mo2=0102] [ 275.082905][T17547] EXT4-fs (loop3): orphan cleanup on readonly fs [ 275.092477][T17547] EXT4-fs error (device loop3): ext4_get_branch:178: inode #11: block 33619980: comm syz.3.3452: invalid block [ 275.109520][T17547] EXT4-fs (loop3): Remounting filesystem read-only [ 275.117559][T17547] EXT4-fs (loop3): 1 truncate cleaned up [ 275.201788][T17561] xt_hashlimit: size too large, truncated to 1048576 [ 275.208796][T17561] xt_hashlimit: Unknown mode mask 80FF, kernel too old? [ 275.377818][T17597] FAULT_INJECTION: forcing a failure. [ 275.377818][T17597] name failslab, interval 1, probability 0, space 0, times 0 [ 275.390583][T17597] CPU: 0 UID: 0 PID: 17597 Comm: syz.3.3460 Tainted: G W 6.16.0-rc5-syzkaller-00121-gbc9ff192a6c9 #0 PREEMPT(voluntary) [ 275.390617][T17597] Tainted: [W]=WARN [ 275.390626][T17597] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 275.390649][T17597] Call Trace: [ 275.390657][T17597] [ 275.390666][T17597] __dump_stack+0x1d/0x30 [ 275.390722][T17597] dump_stack_lvl+0xe8/0x140 [ 275.390747][T17597] dump_stack+0x15/0x1b [ 275.390768][T17597] should_fail_ex+0x265/0x280 [ 275.390806][T17597] should_failslab+0x8c/0xb0 [ 275.390834][T17597] __kmalloc_node_noprof+0xa9/0x410 [ 275.390892][T17597] ? load_msg+0x41/0x2f0 [ 275.390912][T17597] load_msg+0x41/0x2f0 [ 275.390928][T17597] ? proc_fail_nth_write+0x12d/0x160 [ 275.391011][T17597] do_msgsnd+0xdc/0xaf0 [ 275.391031][T17597] ? __rcu_read_unlock+0x4f/0x70 [ 275.391052][T17597] ? __fget_files+0x184/0x1c0 [ 275.391071][T17597] ? fput+0x8f/0xc0 [ 275.391168][T17597] __x64_sys_msgsnd+0xa8/0xc0 [ 275.391198][T17597] x64_sys_call+0x28de/0x2fb0 [ 275.391224][T17597] do_syscall_64+0xd2/0x200 [ 275.391300][T17597] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 275.391348][T17597] ? clear_bhb_loop+0x40/0x90 [ 275.391371][T17597] ? clear_bhb_loop+0x40/0x90 [ 275.391399][T17597] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 275.391422][T17597] RIP: 0033:0x7f312228e929 [ 275.391439][T17597] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 275.391457][T17597] RSP: 002b:00007f31208f7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000045 [ 275.391472][T17597] RAX: ffffffffffffffda RBX: 00007f31224b5fa0 RCX: 00007f312228e929 [ 275.391483][T17597] RDX: 0000000000000008 RSI: 0000200000000000 RDI: 0000000000000000 [ 275.391587][T17597] RBP: 00007f31208f7090 R08: 0000000000000000 R09: 0000000000000000 [ 275.391600][T17597] R10: 0000000000000800 R11: 0000000000000246 R12: 0000000000000001 [ 275.391614][T17597] R13: 0000000000000000 R14: 00007f31224b5fa0 R15: 00007ffdf1003f98 [ 275.391635][T17597] [ 275.654630][ T29] kauditd_printk_skb: 369 callbacks suppressed [ 275.654644][ T29] audit: type=1326 audit(275.638:19378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17587 comm="syz.4.3459" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c5560e929 code=0x7ffc0000 [ 275.678457][T17595] netlink: 332 bytes leftover after parsing attributes in process `syz.4.3459'. [ 275.687944][ T29] audit: type=1326 audit(275.638:19379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17587 comm="syz.4.3459" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f1c5560e929 code=0x7ffc0000 [ 275.716108][ T29] audit: type=1326 audit(275.638:19380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17587 comm="syz.4.3459" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c5560e929 code=0x7ffc0000 [ 275.739152][ T29] audit: type=1326 audit(275.638:19381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17587 comm="syz.4.3459" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c5560e929 code=0x7ffc0000 [ 275.762187][ T29] audit: type=1326 audit(275.638:19382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17587 comm="syz.4.3459" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1c5560e929 code=0x7ffc0000 [ 275.785265][ T29] audit: type=1326 audit(275.638:19383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17587 comm="syz.4.3459" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c5560e929 code=0x7ffc0000 [ 275.808370][ T29] audit: type=1326 audit(275.638:19384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17587 comm="syz.4.3459" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c5560e929 code=0x7ffc0000 [ 275.831490][ T29] audit: type=1326 audit(275.638:19385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17587 comm="syz.4.3459" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1c5560e929 code=0x7ffc0000 [ 275.854609][ T29] audit: type=1326 audit(275.638:19386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17587 comm="syz.4.3459" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c5560e929 code=0x7ffc0000 [ 275.877657][ T29] audit: type=1326 audit(275.638:19387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17587 comm="syz.4.3459" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c5560e929 code=0x7ffc0000 [ 275.935674][T17601] Cannot find set identified by id 0 to match [ 276.021454][T17616] loop2: detected capacity change from 0 to 128 [ 276.029483][T17616] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (30846!=65535) [ 276.057069][T17616] EXT4-fs error (device loop2): __ext4_find_entry:1626: inode #2: comm syz.2.3465: checksumming directory block 0 [ 276.081271][T17616] EXT4-fs error (device loop2): __ext4_find_entry:1626: inode #2: comm syz.2.3465: checksumming directory block 0 [ 276.203716][T17626] IPVS: stopping master sync thread 17625 ... [ 276.204083][T17625] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 276.795557][T17658] FAULT_INJECTION: forcing a failure. [ 276.795557][T17658] name failslab, interval 1, probability 0, space 0, times 0 [ 276.808205][T17658] CPU: 0 UID: 0 PID: 17658 Comm: syz.1.3471 Tainted: G W 6.16.0-rc5-syzkaller-00121-gbc9ff192a6c9 #0 PREEMPT(voluntary) [ 276.808306][T17658] Tainted: [W]=WARN [ 276.808314][T17658] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 276.808329][T17658] Call Trace: [ 276.808336][T17658] [ 276.808346][T17658] __dump_stack+0x1d/0x30 [ 276.808437][T17658] dump_stack_lvl+0xe8/0x140 [ 276.808454][T17658] dump_stack+0x15/0x1b [ 276.808516][T17658] should_fail_ex+0x265/0x280 [ 276.808544][T17658] should_failslab+0x8c/0xb0 [ 276.808563][T17658] __kvmalloc_node_noprof+0x123/0x4e0 [ 276.808588][T17658] ? alloc_fdtable+0xa5/0x1b0 [ 276.808622][T17658] ? __kmalloc_cache_noprof+0x22e/0x320 [ 276.808690][T17658] alloc_fdtable+0xa5/0x1b0 [ 276.808717][T17658] dup_fd+0x4c7/0x540 [ 276.808751][T17658] ? _raw_spin_unlock+0x26/0x50 [ 276.808859][T17658] ksys_unshare+0x346/0x6d0 [ 276.808891][T17658] ? ksys_write+0x192/0x1a0 [ 276.808943][T17658] __x64_sys_unshare+0x1f/0x30 [ 276.808976][T17658] x64_sys_call+0x2d4b/0x2fb0 [ 276.809001][T17658] do_syscall_64+0xd2/0x200 [ 276.809064][T17658] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 276.809087][T17658] ? clear_bhb_loop+0x40/0x90 [ 276.809176][T17658] ? clear_bhb_loop+0x40/0x90 [ 276.809202][T17658] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 276.809338][T17658] RIP: 0033:0x7f5510c4e929 [ 276.809354][T17658] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 276.809393][T17658] RSP: 002b:00007f550f275038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 276.809411][T17658] RAX: ffffffffffffffda RBX: 00007f5510e76160 RCX: 00007f5510c4e929 [ 276.809422][T17658] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000064000600 [ 276.809434][T17658] RBP: 00007f550f275090 R08: 0000000000000000 R09: 0000000000000000 [ 276.809448][T17658] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 276.809516][T17658] R13: 0000000000000000 R14: 00007f5510e76160 R15: 00007ffd60176138 [ 276.809533][T17658] [ 277.117336][T17664] loop3: detected capacity change from 0 to 256 [ 277.189594][T17629] IPv6: Can't replace route, no match found [ 277.235987][T17667] IPv6: Can't replace route, no match found [ 277.405495][T17683] IPv6: Can't replace route, no match found [ 277.462692][T17694] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 277.473823][T17693] IPVS: stopping master sync thread 17694 ... [ 277.485370][ T1991] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 277.558246][ T1991] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 277.571825][T17712] random: crng reseeded on system resumption [ 277.639334][ T1991] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 277.697227][ T1991] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 277.786691][T17710] chnl_net:caif_netlink_parms(): no params data found [ 277.796130][ T1991] bridge_slave_1: left allmulticast mode [ 277.801838][ T1991] bridge_slave_1: left promiscuous mode [ 277.807693][ T1991] bridge0: port 2(bridge_slave_1) entered disabled state [ 277.816492][ T1991] bridge_slave_0: left allmulticast mode [ 277.822302][ T1991] bridge_slave_0: left promiscuous mode [ 277.828057][ T1991] bridge0: port 1(bridge_slave_0) entered disabled state [ 277.998450][ T1991] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 278.008578][ T1991] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 278.019083][ T1991] bond0 (unregistering): Released all slaves [ 278.046202][T17886] net_ratelimit: 246 callbacks suppressed [ 278.046215][T17886] skbuff: bad partial csum: csum=65489/0 headroom=64 headlen=65491 [ 278.064568][T17886] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3489'. [ 278.122392][ T1991] hsr_slave_0: left promiscuous mode [ 278.129306][ T1991] hsr_slave_1: left promiscuous mode [ 278.158730][ T1991] veth1_macvtap: left promiscuous mode [ 278.170898][ T1991] veth0_macvtap: left promiscuous mode [ 278.184713][ T1991] veth1_vlan: left promiscuous mode [ 278.197221][ T1991] veth0_vlan: left promiscuous mode [ 278.242013][T17911] IPv6: Can't replace route, no match found [ 278.314300][ T1991] team0 (unregistering): Port device team_slave_1 removed [ 278.331851][ T1991] team0 (unregistering): Port device team_slave_0 removed [ 278.357328][T17977] loop4: detected capacity change from 0 to 128 [ 278.376460][T17977] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (30846!=65535) [ 278.395646][T17710] bridge0: port 1(bridge_slave_0) entered blocking state [ 278.402893][T17710] bridge0: port 1(bridge_slave_0) entered disabled state [ 278.410900][T17710] bridge_slave_0: entered allmulticast mode [ 278.419651][T17977] EXT4-fs error (device loop4): __ext4_find_entry:1626: inode #2: comm syz.4.3493: checksumming directory block 0 [ 278.435376][T17977] EXT4-fs error (device loop4): __ext4_find_entry:1626: inode #2: comm syz.4.3493: checksumming directory block 0 [ 278.447992][T17710] bridge_slave_0: entered promiscuous mode [ 278.456156][T17993] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 278.456195][T17977] IPVS: stopping master sync thread 17993 ... [ 278.456492][T17710] bridge0: port 2(bridge_slave_1) entered blocking state [ 278.480341][T17710] bridge0: port 2(bridge_slave_1) entered disabled state [ 278.487760][T17710] bridge_slave_1: entered allmulticast mode [ 278.494400][T17710] bridge_slave_1: entered promiscuous mode [ 278.523957][T17710] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 278.536871][T17710] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 278.564126][T17710] team0: Port device team_slave_0 added [ 278.571126][T17710] team0: Port device team_slave_1 added [ 278.600396][T17710] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 278.607602][T17710] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 278.633903][T17710] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 278.645820][T17710] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 278.652969][T17710] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 278.679071][T17710] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 278.713570][T17710] hsr_slave_0: entered promiscuous mode [ 278.719763][T17710] hsr_slave_1: entered promiscuous mode [ 278.725944][T17710] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 278.733817][T17710] Cannot create hsr debugfs directory [ 278.835671][T17710] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 278.844724][T17710] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 278.853458][T17710] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 278.863380][T17710] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 278.898933][T17710] 8021q: adding VLAN 0 to HW filter on device bond0 [ 278.917839][T17710] 8021q: adding VLAN 0 to HW filter on device team0 [ 278.933615][ T4921] bridge0: port 1(bridge_slave_0) entered blocking state [ 278.940825][ T4921] bridge0: port 1(bridge_slave_0) entered forwarding state [ 278.969547][ T136] bridge0: port 2(bridge_slave_1) entered blocking state [ 278.976709][ T136] bridge0: port 2(bridge_slave_1) entered forwarding state [ 279.012388][T18223] xt_hashlimit: size too large, truncated to 1048576 [ 279.019169][T18223] xt_hashlimit: Unknown mode mask 80FF, kernel too old? [ 279.063390][T17710] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 279.132016][T18222] IPv6: Can't replace route, no match found [ 279.186141][T17710] veth0_vlan: entered promiscuous mode [ 279.194177][T17710] veth1_vlan: entered promiscuous mode [ 279.208708][T17710] veth0_macvtap: entered promiscuous mode [ 279.216040][T17710] veth1_macvtap: entered promiscuous mode [ 279.227811][T17710] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 279.238797][T17710] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 279.247929][T17710] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 279.256697][T17710] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 279.265527][T17710] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 279.274242][T17710] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 279.334007][T18247] loop5: detected capacity change from 0 to 1024 [ 279.341324][T18247] EXT4-fs: Ignoring removed orlov option [ 279.347061][T18247] EXT4-fs: Ignoring removed nomblk_io_submit option [ 279.365429][T18252] loop4: detected capacity change from 0 to 128 [ 279.373045][T18252] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (30846!=65535) [ 279.385837][T18252] EXT4-fs error (device loop4): __ext4_find_entry:1626: inode #2: comm syz.4.3503: checksumming directory block 0 [ 279.398775][T18252] EXT4-fs error (device loop4): __ext4_find_entry:1626: inode #2: comm syz.4.3503: checksumming directory block 0 [ 279.414787][T18252] IPVS: stopping master sync thread 18260 ... [ 279.415026][T18260] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 279.436991][T18266] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 279.448943][T18259] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 279.459324][T18259] SELinux: failed to load policy [ 279.514399][T18272] netlink: 14 bytes leftover after parsing attributes in process `syz.5.3507'. [ 279.530286][T18273] loop1: detected capacity change from 0 to 512 [ 279.541173][T18272] hsr_slave_0: left promiscuous mode [ 279.550360][T18273] EXT4-fs: Ignoring removed nobh option [ 279.556067][T18272] hsr_slave_1: left promiscuous mode [ 279.585615][T18273] EXT4-fs error (device loop1): ext4_do_update_inode:5568: inode #3: comm syz.1.3505: corrupted inode contents [ 279.597781][T18273] EXT4-fs error (device loop1): ext4_dirty_inode:6459: inode #3: comm syz.1.3505: mark_inode_dirty error [ 279.609839][T18273] EXT4-fs error (device loop1): ext4_do_update_inode:5568: inode #3: comm syz.1.3505: corrupted inode contents [ 279.622207][T18273] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #3: comm syz.1.3505: mark_inode_dirty error [ 279.634355][T18270] xt_connbytes: Forcing CT accounting to be enabled [ 279.634395][T18273] EXT4-fs error (device loop1): ext4_acquire_dquot:6933: comm syz.1.3505: Failed to acquire dquot type 0 [ 279.634801][T18273] EXT4-fs error (device loop1): ext4_do_update_inode:5568: inode #16: comm syz.1.3505: corrupted inode contents [ 279.641088][T18270] Cannot find set identified by id 0 to match [ 279.652569][T18273] EXT4-fs error (device loop1): ext4_dirty_inode:6459: inode #16: comm syz.1.3505: mark_inode_dirty error [ 279.682793][T18273] EXT4-fs error (device loop1): ext4_do_update_inode:5568: inode #16: comm syz.1.3505: corrupted inode contents [ 279.695254][T18273] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #16: comm syz.1.3505: mark_inode_dirty error [ 279.707784][T18273] EXT4-fs error (device loop1): ext4_do_update_inode:5568: inode #16: comm syz.1.3505: corrupted inode contents [ 279.719912][T18273] EXT4-fs error (device loop1) in ext4_orphan_del:305: Corrupt filesystem [ 279.729060][T18273] EXT4-fs error (device loop1): ext4_do_update_inode:5568: inode #16: comm syz.1.3505: corrupted inode contents [ 279.741254][T18273] EXT4-fs error (device loop1): ext4_truncate:4597: inode #16: comm syz.1.3505: mark_inode_dirty error [ 279.753536][T18273] EXT4-fs error (device loop1) in ext4_process_orphan:347: Corrupt filesystem [ 279.764290][T18273] EXT4-fs (loop1): 1 truncate cleaned up [ 279.813800][T18288] loop4: detected capacity change from 0 to 512 [ 279.823952][T18288] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 279.860604][T18288] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=884ee02c, mo2=0102] [ 279.868921][T18288] EXT4-fs (loop4): orphan cleanup on readonly fs [ 279.876180][T18288] EXT4-fs error (device loop4): ext4_get_branch:178: inode #11: block 33619980: comm syz.4.3510: invalid block [ 279.892519][T18288] EXT4-fs (loop4): Remounting filesystem read-only [ 279.903178][T18288] EXT4-fs (loop4): 1 truncate cleaned up [ 279.916907][T18297] FAULT_INJECTION: forcing a failure. [ 279.916907][T18297] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 279.917019][T18288] EXT4-fs mount: 45 callbacks suppressed [ 279.917034][T18288] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: writeback. [ 279.930114][T18297] CPU: 0 UID: 0 PID: 18297 Comm: syz.1.3512 Tainted: G W 6.16.0-rc5-syzkaller-00121-gbc9ff192a6c9 #0 PREEMPT(voluntary) [ 279.930163][T18297] Tainted: [W]=WARN [ 279.930173][T18297] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 279.930243][T18297] Call Trace: [ 279.930252][T18297] [ 279.930324][T18297] __dump_stack+0x1d/0x30 [ 279.930354][T18297] dump_stack_lvl+0xe8/0x140 [ 279.930382][T18297] dump_stack+0x15/0x1b [ 279.930405][T18297] should_fail_ex+0x265/0x280 [ 279.930571][T18297] should_fail+0xb/0x20 [ 279.930608][T18297] should_fail_usercopy+0x1a/0x20 [ 279.930652][T18297] _copy_from_user+0x1c/0xb0 [ 279.930679][T18297] do_ipv6_setsockopt+0x220/0x22e0 [ 279.930771][T18297] ? _parse_integer+0x27/0x40 [ 279.930923][T18297] ? kstrtoull+0x111/0x140 [ 279.930958][T18297] ? __rcu_read_unlock+0x4f/0x70 [ 279.930988][T18297] ? avc_has_perm_noaudit+0x1b1/0x200 [ 279.931027][T18297] ? selinux_netlbl_socket_setsockopt+0x1f9/0x2d0 [ 279.931189][T18297] ipv6_setsockopt+0x59/0x130 [ 279.931222][T18297] rawv6_setsockopt+0x1d2/0x420 [ 279.931341][T18297] sock_common_setsockopt+0x69/0x80 [ 279.931372][T18297] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 279.931413][T18297] __sys_setsockopt+0x184/0x200 [ 279.931450][T18297] __x64_sys_setsockopt+0x64/0x80 [ 279.931485][T18297] x64_sys_call+0x2bd5/0x2fb0 [ 279.931510][T18297] do_syscall_64+0xd2/0x200 [ 279.931559][T18297] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 279.931590][T18297] ? clear_bhb_loop+0x40/0x90 [ 279.931616][T18297] ? clear_bhb_loop+0x40/0x90 [ 279.931716][T18297] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 279.931740][T18297] RIP: 0033:0x7f5510c4e929 [ 279.931780][T18297] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 279.931802][T18297] RSP: 002b:00007f550f2b7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 279.931825][T18297] RAX: ffffffffffffffda RBX: 00007f5510e75fa0 RCX: 00007f5510c4e929 [ 279.931840][T18297] RDX: 0000000000000022 RSI: 0000000000000029 RDI: 0000000000000006 [ 279.931922][T18297] RBP: 00007f550f2b7090 R08: 000000000000005c R09: 0000000000000000 [ 279.931987][T18297] R10: 0000200000000340 R11: 0000000000000246 R12: 0000000000000001 [ 279.932002][T18297] R13: 0000000000000000 R14: 00007f5510e75fa0 R15: 00007ffd60176138 [ 279.932025][T18297] [ 280.220608][T14504] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 280.240382][T18312] loop4: detected capacity change from 0 to 128 [ 280.254213][T18313] netlink: 332 bytes leftover after parsing attributes in process `syz.2.3513'. [ 280.264664][T18312] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (30846!=65535) [ 280.290752][T18312] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 ro without journal. Quota mode: none. [ 280.305078][T18312] EXT4-fs error (device loop4): __ext4_find_entry:1626: inode #2: comm syz.4.3516: checksumming directory block 0 [ 280.320631][T18312] EXT4-fs error (device loop4): __ext4_find_entry:1626: inode #2: comm syz.4.3516: checksumming directory block 0 [ 280.338124][T18320] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 280.338213][T18312] IPVS: stopping master sync thread 18320 ... [ 280.372897][T14504] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 280.409821][T18324] loop4: detected capacity change from 0 to 1024 [ 280.422225][T18324] EXT4-fs: Ignoring removed orlov option [ 280.428131][T18324] EXT4-fs: Ignoring removed nomblk_io_submit option [ 280.445467][T18324] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 280.475663][T14504] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 280.523414][T18337] FAULT_INJECTION: forcing a failure. [ 280.523414][T18337] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 280.536782][T18337] CPU: 1 UID: 0 PID: 18337 Comm: syz.4.3522 Tainted: G W 6.16.0-rc5-syzkaller-00121-gbc9ff192a6c9 #0 PREEMPT(voluntary) [ 280.536864][T18337] Tainted: [W]=WARN [ 280.536869][T18337] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 280.536882][T18337] Call Trace: [ 280.536889][T18337] [ 280.536896][T18337] __dump_stack+0x1d/0x30 [ 280.536918][T18337] dump_stack_lvl+0xe8/0x140 [ 280.536940][T18337] dump_stack+0x15/0x1b [ 280.537004][T18337] should_fail_ex+0x265/0x280 [ 280.537037][T18337] should_fail_alloc_page+0xf2/0x100 [ 280.537063][T18337] __alloc_frozen_pages_noprof+0xff/0x360 [ 280.537160][T18337] alloc_pages_mpol+0xb3/0x250 [ 280.537185][T18337] vma_alloc_folio_noprof+0x1aa/0x300 [ 280.537220][T18337] handle_mm_fault+0xec2/0x2be0 [ 280.537315][T18337] ? __rcu_read_unlock+0x4f/0x70 [ 280.537374][T18337] do_user_addr_fault+0x3fe/0x1090 [ 280.537406][T18337] exc_page_fault+0x62/0xa0 [ 280.537474][T18337] asm_exc_page_fault+0x26/0x30 [ 280.537499][T18337] RIP: 0010:filldir+0x1f6/0x420 [ 280.537574][T18337] Code: c2 ff 48 89 ef 4c 89 fe e8 17 ae c2 ff 4c 39 fd 0f 82 af 01 00 00 4c 39 e5 0f 87 a6 01 00 00 0f 01 cb 0f ae e8 48 8b 44 24 40 <49> 89 47 08 48 8b 44 24 10 48 8b 4c 24 38 48 89 08 48 8b 6c 24 18 [ 280.537593][T18337] RSP: 0018:ffffc90003ba7d38 EFLAGS: 00050287 [ 280.537609][T18337] RAX: 0000000000000000 RBX: 0000000000000001 RCX: ffff88810c7c4100 [ 280.537623][T18337] RDX: 0000000000000000 RSI: 0000200000001fc0 RDI: 0000200000001fd8 [ 280.537636][T18337] RBP: 0000200000001fd8 R08: 0001c90003ba7ea7 R09: 0000000000000000 [ 280.537665][T18337] R10: 0000000000000001 R11: ffffffff8194f7d0 R12: 00007ffffffff000 [ 280.537679][T18337] R13: 0000000000000004 R14: ffffffff86430860 R15: 0000200000001fc0 [ 280.537772][T18337] ? __pfx_filldir+0x10/0x10 [ 280.537874][T18337] ? filldir+0x1d9/0x420 [ 280.537900][T18337] ? __pfx_filldir+0x10/0x10 [ 280.537937][T18337] proc_readdir_de+0xb6/0x380 [ 280.537962][T18337] proc_readdir+0x91/0xb0 [ 280.538039][T18337] iterate_dir+0x111/0x330 [ 280.538119][T18337] ? mutex_lock+0xd/0x30 [ 280.538161][T18337] __se_sys_getdents+0x88/0x1b0 [ 280.538252][T18337] ? __pfx_filldir+0x10/0x10 [ 280.538285][T18337] __x64_sys_getdents+0x43/0x50 [ 280.538362][T18337] x64_sys_call+0x292b/0x2fb0 [ 280.538381][T18337] do_syscall_64+0xd2/0x200 [ 280.538394][T18337] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 280.538415][T18337] ? clear_bhb_loop+0x40/0x90 [ 280.538492][T18337] ? clear_bhb_loop+0x40/0x90 [ 280.538509][T18337] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 280.538529][T18337] RIP: 0033:0x7f1c5560e929 [ 280.538544][T18337] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 280.538562][T18337] RSP: 002b:00007f1c53c77038 EFLAGS: 00000246 ORIG_RAX: 000000000000004e [ 280.538581][T18337] RAX: ffffffffffffffda RBX: 00007f1c55835fa0 RCX: 00007f1c5560e929 [ 280.538652][T18337] RDX: 00000000000000b8 RSI: 0000200000001fc0 RDI: 0000000000000005 [ 280.538662][T18337] RBP: 00007f1c53c77090 R08: 0000000000000000 R09: 0000000000000000 [ 280.538672][T18337] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 280.538685][T18337] R13: 0000000000000000 R14: 00007f1c55835fa0 R15: 00007ffdf6a976a8 [ 280.538706][T18337] [ 280.915454][ T29] kauditd_printk_skb: 375 callbacks suppressed [ 280.915470][ T29] audit: type=1326 audit(280.898:19761): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18341 comm="syz.0.3524" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4536c2e929 code=0x7ffc0000 [ 280.985289][ T29] audit: type=1326 audit(280.898:19762): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18341 comm="syz.0.3524" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4536c2e929 code=0x7ffc0000 [ 281.008530][ T29] audit: type=1326 audit(280.898:19763): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18341 comm="syz.0.3524" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4536c2e929 code=0x7ffc0000 [ 281.032080][ T29] audit: type=1326 audit(280.898:19764): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18341 comm="syz.0.3524" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4536c2e929 code=0x7ffc0000 [ 281.055183][ T29] audit: type=1326 audit(280.898:19765): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18341 comm="syz.0.3524" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4536c2e929 code=0x7ffc0000 [ 281.078656][ T29] audit: type=1326 audit(280.898:19766): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18341 comm="syz.0.3524" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4536c2e929 code=0x7ffc0000 [ 281.101640][ T29] audit: type=1326 audit(280.898:19767): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18341 comm="syz.0.3524" exe="/root/syz-executor" sig=0 arch=c000003e syscall=131 compat=0 ip=0x7f4536c2e929 code=0x7ffc0000 [ 281.124707][ T29] audit: type=1326 audit(280.898:19768): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18341 comm="syz.0.3524" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4536c2e929 code=0x7ffc0000 [ 281.148022][ T29] audit: type=1326 audit(280.898:19769): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18341 comm="syz.0.3524" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f4536c2e929 code=0x7ffc0000 [ 281.171064][ T29] audit: type=1326 audit(280.898:19770): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18341 comm="syz.0.3524" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4536c2e929 code=0x7ffc0000 [ 281.315306][T18345] IPv6: Can't replace route, no match found [ 281.342516][T18370] loop5: detected capacity change from 0 to 512 [ 281.349759][T18370] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 281.361305][T18370] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=884ee02c, mo2=0102] [ 281.372714][T18370] EXT4-fs (loop5): orphan cleanup on readonly fs [ 281.379431][T18370] EXT4-fs error (device loop5): ext4_get_branch:178: inode #11: block 33619980: comm syz.5.3528: invalid block [ 281.406744][T18370] EXT4-fs (loop5): Remounting filesystem read-only [ 281.461137][T18370] EXT4-fs (loop5): 1 truncate cleaned up [ 281.476979][T18370] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: writeback. [ 281.556131][T17710] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 281.625068][T18401] xt_hashlimit: size too large, truncated to 1048576 [ 281.631771][T18401] xt_hashlimit: Unknown mode mask 80FF, kernel too old? [ 281.965250][T18441] loop4: detected capacity change from 0 to 512 [ 281.987795][T18441] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 282.093000][T18441] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=884ee02c, mo2=0102] [ 282.101210][T18441] EXT4-fs (loop4): orphan cleanup on readonly fs [ 282.111188][T18441] EXT4-fs error (device loop4): ext4_get_branch:178: inode #11: block 33619980: comm syz.4.3539: invalid block [ 282.123592][T18441] EXT4-fs (loop4): Remounting filesystem read-only [ 282.130400][T18441] EXT4-fs (loop4): 1 truncate cleaned up [ 282.136469][T18441] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: writeback. [ 282.219527][T18449] loop2: detected capacity change from 0 to 1024 [ 282.233551][T18449] EXT4-fs: Ignoring removed orlov option [ 282.239308][T18449] EXT4-fs: Ignoring removed nomblk_io_submit option [ 282.252901][T14504] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 282.266031][T18449] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 282.313458][ T4849] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 282.858939][T18485] netlink: 332 bytes leftover after parsing attributes in process `syz.4.3549'. [ 283.005789][T18497] loop1: detected capacity change from 0 to 128 [ 283.027278][T18497] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (30846!=65535) [ 283.091238][T18497] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 ro without journal. Quota mode: none. [ 283.137489][T18497] EXT4-fs error (device loop1): __ext4_find_entry:1626: inode #2: comm syz.1.3552: checksumming directory block 0 [ 283.150651][T18497] EXT4-fs error (device loop1): __ext4_find_entry:1626: inode #2: comm syz.1.3552: checksumming directory block 0 [ 283.422572][T18525] IPVS: stopping master sync thread 18524 ... [ 283.445094][T12623] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 283.956411][T18545] Cannot find set identified by id 0 to match [ 284.028882][T18584] loop5: detected capacity change from 0 to 128 [ 284.036696][T18584] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (30846!=65535) [ 284.048068][T18584] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 ro without journal. Quota mode: none. [ 284.067021][T18584] EXT4-fs error (device loop5): __ext4_find_entry:1626: inode #2: comm syz.5.3563: checksumming directory block 0 [ 284.080180][T18584] EXT4-fs error (device loop5): __ext4_find_entry:1626: inode #2: comm syz.5.3563: checksumming directory block 0 [ 284.102808][T18584] IPVS: stopping master sync thread 18266 ... [ 284.131028][T17710] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 284.247182][T18614] loop1: detected capacity change from 0 to 512 [ 284.253733][T18617] loop4: detected capacity change from 0 to 1024 [ 284.261116][T18617] EXT4-fs: Ignoring removed oldalloc option [ 284.268044][T18617] EXT4-fs: Ignoring removed orlov option [ 284.287742][T18617] EXT4-fs (loop4): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 284.320043][T18614] EXT4-fs (loop1): 1 orphan inode deleted [ 284.329070][T18617] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 284.341957][T18614] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 284.354810][ T31] EXT4-fs error (device loop1): ext4_release_dquot:6969: comm kworker/u8:1: Failed to release dquot type 1 [ 284.367801][T18614] FAULT_INJECTION: forcing a failure. [ 284.367801][T18614] name failslab, interval 1, probability 0, space 0, times 0 [ 284.380567][T18614] CPU: 0 UID: 0 PID: 18614 Comm: syz.1.3567 Tainted: G W 6.16.0-rc5-syzkaller-00121-gbc9ff192a6c9 #0 PREEMPT(voluntary) [ 284.380639][T18614] Tainted: [W]=WARN [ 284.380648][T18614] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 284.380664][T18614] Call Trace: [ 284.380672][T18614] [ 284.380681][T18614] __dump_stack+0x1d/0x30 [ 284.380707][T18614] dump_stack_lvl+0xe8/0x140 [ 284.380733][T18614] dump_stack+0x15/0x1b [ 284.380758][T18614] should_fail_ex+0x265/0x280 [ 284.380796][T18614] should_failslab+0x8c/0xb0 [ 284.380821][T18614] kmem_cache_alloc_noprof+0x50/0x310 [ 284.380853][T18614] ? getname_flags+0x80/0x3b0 [ 284.380909][T18614] getname_flags+0x80/0x3b0 [ 284.380937][T18614] user_path_at+0x28/0x130 [ 284.380970][T18614] __se_sys_mount+0x25b/0x2e0 [ 284.381091][T18614] ? fput+0x8f/0xc0 [ 284.381123][T18614] __x64_sys_mount+0x67/0x80 [ 284.381164][T18614] x64_sys_call+0xd36/0x2fb0 [ 284.381192][T18614] do_syscall_64+0xd2/0x200 [ 284.381236][T18614] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 284.381282][T18614] ? clear_bhb_loop+0x40/0x90 [ 284.381351][T18614] ? clear_bhb_loop+0x40/0x90 [ 284.381394][T18614] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 284.381411][T18614] RIP: 0033:0x7f5510c4e929 [ 284.381424][T18614] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 284.381442][T18614] RSP: 002b:00007f550f2b7038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 284.381463][T18614] RAX: ffffffffffffffda RBX: 00007f5510e75fa0 RCX: 00007f5510c4e929 [ 284.381477][T18614] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000000 [ 284.381497][T18614] RBP: 00007f550f2b7090 R08: 0000000000000000 R09: 0000000000000000 [ 284.381507][T18614] R10: 0000000000000021 R11: 0000000000000246 R12: 0000000000000001 [ 284.381520][T18614] R13: 0000000000000000 R14: 00007f5510e75fa0 R15: 00007ffd60176138 [ 284.381554][T18614] [ 284.581030][T18617] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4113: comm syz.4.3565: Allocating blocks 385-513 which overlap fs metadata [ 284.597071][T12623] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 284.601617][T18617] EXT4-fs (loop4): pa ffff888100496bd0: logic 16, phys. 129, len 24 [ 284.614117][T18617] EXT4-fs error (device loop4): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 8 [ 284.818079][T18671] loop1: detected capacity change from 0 to 128 [ 284.825505][T18671] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (30846!=65535) [ 284.840153][T18671] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 ro without journal. Quota mode: none. [ 284.855467][T18671] EXT4-fs error (device loop1): __ext4_find_entry:1626: inode #2: comm syz.1.3575: checksumming directory block 0 [ 284.868047][T18671] EXT4-fs error (device loop1): __ext4_find_entry:1626: inode #2: comm syz.1.3575: checksumming directory block 0 [ 284.881796][T18671] IPVS: stopping master sync thread 18689 ... [ 284.887980][T18689] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 284.910260][T12623] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 284.940141][T18698] loop1: detected capacity change from 0 to 1024 [ 284.947263][T18698] EXT4-fs: Ignoring removed orlov option [ 284.953107][T18698] EXT4-fs: Ignoring removed nomblk_io_submit option [ 284.970851][T18698] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 284.999934][T12623] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 285.088794][T14504] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 285.102067][T18727] loop5: detected capacity change from 0 to 512 [ 285.127224][T18727] EXT4-fs error (device loop5): ext4_orphan_get:1393: inode #15: comm syz.5.3587: casefold flag without casefold feature [ 285.213066][T18727] EXT4-fs error (device loop5): ext4_orphan_get:1398: comm syz.5.3587: couldn't read orphan inode 15 (err -117) [ 285.225880][T18727] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 285.254368][T18727] netlink: 36 bytes leftover after parsing attributes in process `syz.5.3587'. [ 285.266299][T18721] IPv6: Can't replace route, no match found [ 285.352814][T17710] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 285.448171][T18732] IPv6: Can't replace route, no match found [ 285.606953][ T31] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 285.626548][T18756] chnl_net:caif_netlink_parms(): no params data found [ 285.665859][ T31] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 285.683669][T18906] vhci_hcd: invalid port number 96 [ 285.688870][T18906] vhci_hcd: default hub control req: 0000 vfffc i0060 l0 [ 285.699365][ T31] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 285.774107][ T31] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 285.789750][T18756] bridge0: port 1(bridge_slave_0) entered blocking state [ 285.796982][T18756] bridge0: port 1(bridge_slave_0) entered disabled state [ 285.808441][T18756] bridge_slave_0: entered allmulticast mode [ 285.809133][T18756] bridge_slave_0: entered promiscuous mode [ 285.810168][T18756] bridge0: port 2(bridge_slave_1) entered blocking state [ 285.828542][T18756] bridge0: port 2(bridge_slave_1) entered disabled state [ 285.836032][T18756] bridge_slave_1: entered allmulticast mode [ 285.842718][T18756] bridge_slave_1: entered promiscuous mode [ 285.926547][T18756] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 285.973835][T18756] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 285.996924][ T31] bridge_slave_1: left allmulticast mode [ 286.002711][ T31] bridge_slave_1: left promiscuous mode [ 286.008450][ T31] bridge0: port 2(bridge_slave_1) entered disabled state [ 286.033656][ T31] bridge_slave_0: left promiscuous mode [ 286.039378][ T31] bridge0: port 1(bridge_slave_0) entered disabled state [ 286.122175][T19028] xt_hashlimit: size too large, truncated to 1048576 [ 286.128912][T19028] xt_hashlimit: Unknown mode mask 80FF, kernel too old? [ 286.269410][ T31] bond_slave_0: left promiscuous mode [ 286.274914][ T31] bond_slave_1: left promiscuous mode [ 286.367244][ T31] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 286.383787][ T31] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 286.398642][ T31] bond0 (unregistering): Released all slaves [ 286.437983][T18756] team0: Port device team_slave_0 added [ 286.515664][ T31] hsr_slave_0: left promiscuous mode [ 286.521484][ T31] hsr_slave_1: left promiscuous mode [ 286.529628][ T31] veth1_macvtap: left promiscuous mode [ 286.535292][ T31] veth1_vlan: left promiscuous mode [ 286.540557][ T31] veth0_vlan: left promiscuous mode [ 286.599483][ T31] team0 (unregistering): Port device team_slave_1 removed [ 286.608960][ T31] team0 (unregistering): Port device team_slave_0 removed [ 286.659102][T18756] team0: Port device team_slave_1 added [ 286.692569][T18756] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 286.699549][T18756] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 286.725501][T18756] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 286.775300][T18756] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 286.782308][T18756] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 286.808312][T18756] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 286.890022][T18756] hsr_slave_0: entered promiscuous mode [ 286.899276][T18756] hsr_slave_1: entered promiscuous mode [ 286.909632][T18756] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 286.931119][T18756] Cannot create hsr debugfs directory [ 286.948911][ T29] kauditd_printk_skb: 348 callbacks suppressed [ 286.948927][ T29] audit: type=1400 audit(286.928:20118): avc: denied { create } for pid=19159 comm="syz.4.3603" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 287.060090][ T29] audit: type=1326 audit(287.038:20119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19218 comm="syz.4.3605" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c5560e929 code=0x7ffc0000 [ 287.091052][T19219] loop4: detected capacity change from 0 to 1024 [ 287.098279][T19219] EXT4-fs: Ignoring removed orlov option [ 287.104060][T19219] EXT4-fs: Ignoring removed nomblk_io_submit option [ 287.111629][ T29] audit: type=1326 audit(287.068:20120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19218 comm="syz.4.3605" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1c5560e929 code=0x7ffc0000 [ 287.134894][ T29] audit: type=1326 audit(287.068:20121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19218 comm="syz.4.3605" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c5560e929 code=0x7ffc0000 [ 287.158118][ T29] audit: type=1326 audit(287.068:20122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19218 comm="syz.4.3605" exe="/root/syz-executor" sig=0 arch=c000003e syscall=131 compat=0 ip=0x7f1c5560e929 code=0x7ffc0000 [ 287.181266][ T29] audit: type=1326 audit(287.068:20123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19218 comm="syz.4.3605" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c5560e929 code=0x7ffc0000 [ 287.204424][ T29] audit: type=1326 audit(287.068:20124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19218 comm="syz.4.3605" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f1c5560e929 code=0x7ffc0000 [ 287.227403][ T29] audit: type=1326 audit(287.068:20125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19218 comm="syz.4.3605" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c5560e929 code=0x7ffc0000 [ 287.250428][ T29] audit: type=1326 audit(287.068:20126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19218 comm="syz.4.3605" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f1c5560e929 code=0x7ffc0000 [ 287.273329][ T29] audit: type=1326 audit(287.068:20127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19218 comm="syz.4.3605" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c5560e929 code=0x7ffc0000 [ 287.309011][T19219] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 287.363469][T14504] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 287.585117][T19272] netlink: 332 bytes leftover after parsing attributes in process `syz.4.3608'. [ 287.736114][T19295] serio: Serial port ptm0 [ 287.747278][T18756] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 287.777302][T18756] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 287.797559][T18756] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 287.821163][T18756] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 287.843716][T19295] syz.5.3611 (19295) used greatest stack depth: 8104 bytes left [ 287.947694][T18756] 8021q: adding VLAN 0 to HW filter on device bond0 [ 288.044913][T18756] 8021q: adding VLAN 0 to HW filter on device team0 [ 288.065359][ T31] bridge0: port 1(bridge_slave_0) entered blocking state [ 288.072484][ T31] bridge0: port 1(bridge_slave_0) entered forwarding state [ 288.105732][T18756] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 288.116310][T18756] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 288.153669][ T31] bridge0: port 2(bridge_slave_1) entered blocking state [ 288.160946][ T31] bridge0: port 2(bridge_slave_1) entered forwarding state [ 288.299065][T18756] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 288.448093][T18756] veth0_vlan: entered promiscuous mode [ 288.459242][T18756] veth1_vlan: entered promiscuous mode [ 288.476281][T18756] veth0_macvtap: entered promiscuous mode [ 288.484026][T18756] veth1_macvtap: entered promiscuous mode [ 288.491489][T19354] loop1: detected capacity change from 0 to 1024 [ 288.497434][T18756] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 288.508942][T18756] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 288.508952][T19354] EXT4-fs: Ignoring removed orlov option [ 288.509058][T19354] EXT4-fs: Ignoring removed nomblk_io_submit option [ 288.519557][T18756] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 288.537283][T18756] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 288.546021][T18756] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 288.554741][T18756] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 288.573920][T19354] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 288.620641][T12623] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 288.732638][T19377] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3625'. [ 288.766309][T19377] loop2: detected capacity change from 0 to 764 [ 288.783525][T19377] iso9660: Unknown parameter 'syztnl0' [ 288.882889][T19390] netlink: 332 bytes leftover after parsing attributes in process `syz.0.3626'. [ 288.910663][T19375] Cannot find set identified by id 0 to match [ 289.112791][T19397] random: crng reseeded on system resumption [ 289.410262][T19408] loop4: detected capacity change from 0 to 1024 [ 289.442713][T19408] EXT4-fs: Ignoring removed orlov option [ 289.448476][T19408] EXT4-fs: Ignoring removed nomblk_io_submit option [ 289.574010][T19408] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 289.846175][T19417] random: crng reseeded on system resumption [ 289.853498][T14504] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 289.893525][T19417] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 289.901061][T19417] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 289.929909][T19417] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 289.937370][T19417] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 289.953852][T19419] netlink: 'syz.2.3633': attribute type 12 has an invalid length. [ 289.963559][T19426] loop5: detected capacity change from 0 to 1764 [ 290.020395][T19437] loop4: detected capacity change from 0 to 1024 [ 290.030320][T19440] loop2: detected capacity change from 0 to 1024 [ 290.037343][T19437] EXT4-fs: Ignoring removed orlov option [ 290.043116][T19437] EXT4-fs: Ignoring removed nomblk_io_submit option [ 290.050488][T19440] EXT4-fs: Ignoring removed orlov option [ 290.056264][T19440] EXT4-fs: Ignoring removed nomblk_io_submit option [ 290.084391][T19440] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 290.094492][T19437] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 290.138062][T18756] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 290.188898][T14504] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 290.305796][T19465] netlink: 332 bytes leftover after parsing attributes in process `syz.5.3640'. [ 290.603692][T19499] loop4: detected capacity change from 0 to 512 [ 290.623855][T19499] EXT4-fs (loop4): orphan cleanup on readonly fs [ 290.643544][T19499] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.3652: bg 0: block 248: padding at end of block bitmap is not set [ 290.676837][T19509] loop2: detected capacity change from 0 to 1024 [ 290.685903][T19509] EXT4-fs: Ignoring removed oldalloc option [ 290.694180][T19509] EXT4-fs: Ignoring removed orlov option [ 290.706601][T19499] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.3652: Failed to acquire dquot type 1 [ 290.741149][T19509] EXT4-fs (loop2): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 290.752477][T19499] EXT4-fs (loop4): 1 truncate cleaned up [ 290.759028][T19499] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 290.777610][T19516] random: crng reseeded on system resumption [ 290.822772][T19509] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 290.835554][T19499] EXT4-fs (loop4): warning: mounting fs with errors, running e2fsck is recommended [ 290.889821][T19509] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4113: comm syz.2.3653: Allocating blocks 385-513 which overlap fs metadata [ 290.907001][T19509] EXT4-fs (loop2): pa ffff8881069645b0: logic 16, phys. 129, len 24 [ 290.915162][T19509] EXT4-fs error (device loop2): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 8 [ 290.943551][T19499] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 291.004325][T14504] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 291.338383][T19580] FAULT_INJECTION: forcing a failure. [ 291.338383][T19580] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 291.351490][T19580] CPU: 0 UID: 0 PID: 19580 Comm: syz.4.3671 Tainted: G W 6.16.0-rc5-syzkaller-00121-gbc9ff192a6c9 #0 PREEMPT(voluntary) [ 291.351526][T19580] Tainted: [W]=WARN [ 291.351533][T19580] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 291.351544][T19580] Call Trace: [ 291.351548][T19580] [ 291.351554][T19580] __dump_stack+0x1d/0x30 [ 291.351647][T19580] dump_stack_lvl+0xe8/0x140 [ 291.351669][T19580] dump_stack+0x15/0x1b [ 291.351687][T19580] should_fail_ex+0x265/0x280 [ 291.351718][T19580] should_fail+0xb/0x20 [ 291.351743][T19580] should_fail_usercopy+0x1a/0x20 [ 291.351841][T19580] _copy_from_user+0x1c/0xb0 [ 291.351858][T19580] ___sys_sendmsg+0xc1/0x1d0 [ 291.351899][T19580] __x64_sys_sendmsg+0xd4/0x160 [ 291.352034][T19580] x64_sys_call+0x2999/0x2fb0 [ 291.352057][T19580] do_syscall_64+0xd2/0x200 [ 291.352126][T19580] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 291.352227][T19580] ? clear_bhb_loop+0x40/0x90 [ 291.352247][T19580] ? clear_bhb_loop+0x40/0x90 [ 291.352265][T19580] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 291.352282][T19580] RIP: 0033:0x7f1c5560e929 [ 291.352295][T19580] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 291.352344][T19580] RSP: 002b:00007f1c53c56038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 291.352364][T19580] RAX: ffffffffffffffda RBX: 00007f1c55836080 RCX: 00007f1c5560e929 [ 291.352396][T19580] RDX: 0000000000000000 RSI: 0000200000000480 RDI: 0000000000000004 [ 291.352410][T19580] RBP: 00007f1c53c56090 R08: 0000000000000000 R09: 0000000000000000 [ 291.352425][T19580] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 291.352443][T19580] R13: 0000000000000000 R14: 00007f1c55836080 R15: 00007ffdf6a976a8 [ 291.352517][T19580] [ 291.583848][T18756] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 291.609096][T19586] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3672'. [ 291.750066][T19589] netlink: 332 bytes leftover after parsing attributes in process `syz.2.3673'. [ 292.405480][T19613] IPv6: Can't replace route, no match found [ 292.521259][T19629] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 292.532729][T19628] IPVS: stopping master sync thread 19629 ... [ 292.550939][T19630] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3674'. [ 292.559949][T19630] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3674'. [ 293.163058][T19656] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3692'. [ 293.205254][ T29] kauditd_printk_skb: 345 callbacks suppressed [ 293.205271][ T29] audit: type=1326 audit(293.188:20470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19666 comm="syz.5.3697" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3b0f7e929 code=0x7ffc0000 [ 293.239800][ T29] audit: type=1326 audit(293.188:20471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19666 comm="syz.5.3697" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3b0f7e929 code=0x7ffc0000 [ 293.262825][ T29] audit: type=1326 audit(293.188:20472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19666 comm="syz.5.3697" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fb3b0f7e929 code=0x7ffc0000 [ 293.285937][ T29] audit: type=1326 audit(293.218:20473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19666 comm="syz.5.3697" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3b0f7e929 code=0x7ffc0000 [ 293.309054][ T29] audit: type=1326 audit(293.218:20474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19666 comm="syz.5.3697" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3b0f7e929 code=0x7ffc0000 [ 293.332040][ T29] audit: type=1326 audit(293.218:20475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19666 comm="syz.5.3697" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fb3b0f7e929 code=0x7ffc0000 [ 293.355001][ T29] audit: type=1326 audit(293.218:20476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19666 comm="syz.5.3697" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3b0f7e929 code=0x7ffc0000 [ 293.377989][ T29] audit: type=1326 audit(293.218:20477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19666 comm="syz.5.3697" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3b0f7e929 code=0x7ffc0000 [ 293.401018][ T29] audit: type=1326 audit(293.218:20478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19666 comm="syz.5.3697" exe="/root/syz-executor" sig=0 arch=c000003e syscall=440 compat=0 ip=0x7fb3b0f7e929 code=0x7ffc0000 [ 293.423991][ T29] audit: type=1326 audit(293.218:20479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19666 comm="syz.5.3697" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3b0f7e929 code=0x7ffc0000 [ 293.549915][T19696] IPVS: stopping master sync thread 19699 ... [ 293.584884][T19694] loop5: detected capacity change from 0 to 256 [ 293.644355][T19694] FAT-fs (loop5): Directory bread(block 64) failed [ 293.650999][T19694] FAT-fs (loop5): Directory bread(block 65) failed [ 293.671177][T19694] FAT-fs (loop5): Directory bread(block 66) failed [ 293.688988][T19713] FAULT_INJECTION: forcing a failure. [ 293.688988][T19713] name failslab, interval 1, probability 0, space 0, times 0 [ 293.701749][T19713] CPU: 1 UID: 0 PID: 19713 Comm: syz.1.3703 Tainted: G W 6.16.0-rc5-syzkaller-00121-gbc9ff192a6c9 #0 PREEMPT(voluntary) [ 293.701804][T19713] Tainted: [W]=WARN [ 293.701825][T19713] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 293.701840][T19713] Call Trace: [ 293.701846][T19713] [ 293.701859][T19713] __dump_stack+0x1d/0x30 [ 293.701881][T19713] dump_stack_lvl+0xe8/0x140 [ 293.701903][T19713] dump_stack+0x15/0x1b [ 293.701966][T19713] should_fail_ex+0x265/0x280 [ 293.701997][T19713] should_failslab+0x8c/0xb0 [ 293.702021][T19713] kmem_cache_alloc_noprof+0x50/0x310 [ 293.702106][T19713] ? getname_flags+0x80/0x3b0 [ 293.702128][T19713] ? fput+0x8f/0xc0 [ 293.702194][T19713] getname_flags+0x80/0x3b0 [ 293.702216][T19713] __x64_sys_unlinkat+0x70/0xb0 [ 293.702249][T19713] x64_sys_call+0x2438/0x2fb0 [ 293.702331][T19713] do_syscall_64+0xd2/0x200 [ 293.702350][T19713] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 293.702378][T19713] ? clear_bhb_loop+0x40/0x90 [ 293.702401][T19713] ? clear_bhb_loop+0x40/0x90 [ 293.702430][T19713] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 293.702452][T19713] RIP: 0033:0x7f5510c4e929 [ 293.702452][T19694] FAT-fs (loop5): Directory bread(block 67) failed [ 293.702468][T19713] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 293.702520][T19713] RSP: 002b:00007f550f296038 EFLAGS: 00000246 ORIG_RAX: 0000000000000107 [ 293.702545][T19713] RAX: ffffffffffffffda RBX: 00007f5510e76080 RCX: 00007f5510c4e929 [ 293.702560][T19713] RDX: 0000000000000200 RSI: 0000200000000080 RDI: 0000000000000003 [ 293.702651][T19713] RBP: 00007f550f296090 R08: 0000000000000000 R09: 0000000000000000 [ 293.702666][T19713] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 293.702680][T19713] R13: 0000000000000000 R14: 00007f5510e76080 R15: 00007ffd60176138 [ 293.702702][T19713] [ 293.896371][T19694] FAT-fs (loop5): Directory bread(block 68) failed [ 293.903128][T19694] FAT-fs (loop5): Directory bread(block 69) failed [ 293.909736][T19694] FAT-fs (loop5): Directory bread(block 70) failed [ 293.916541][T19694] FAT-fs (loop5): Directory bread(block 71) failed [ 293.923102][T19694] FAT-fs (loop5): Directory bread(block 72) failed [ 293.929793][T19694] FAT-fs (loop5): Directory bread(block 73) failed [ 293.947002][T19718] IPv6: Can't replace route, no match found [ 294.224388][T19757] loop4: detected capacity change from 0 to 512 [ 294.255916][T19757] EXT4-fs error (device loop4): ext4_orphan_get:1393: inode #15: comm syz.4.3711: casefold flag without casefold feature [ 294.292315][T19757] EXT4-fs error (device loop4): ext4_orphan_get:1398: comm syz.4.3711: couldn't read orphan inode 15 (err -117) [ 294.500094][T19757] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 294.557683][T14504] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 294.581118][T19771] FAULT_INJECTION: forcing a failure. [ 294.581118][T19771] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 294.594451][T19771] CPU: 1 UID: 0 PID: 19771 Comm: syz.5.3714 Tainted: G W 6.16.0-rc5-syzkaller-00121-gbc9ff192a6c9 #0 PREEMPT(voluntary) [ 294.594546][T19771] Tainted: [W]=WARN [ 294.594554][T19771] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 294.594600][T19771] Call Trace: [ 294.594660][T19771] [ 294.594667][T19771] __dump_stack+0x1d/0x30 [ 294.594692][T19771] dump_stack_lvl+0xe8/0x140 [ 294.594725][T19771] dump_stack+0x15/0x1b [ 294.594786][T19771] should_fail_ex+0x265/0x280 [ 294.594811][T19771] should_fail+0xb/0x20 [ 294.594832][T19771] should_fail_usercopy+0x1a/0x20 [ 294.594932][T19771] _copy_from_user+0x1c/0xb0 [ 294.594993][T19771] memdup_user+0x5e/0xd0 [ 294.595017][T19771] __se_sys_kexec_load+0x109/0x160 [ 294.595063][T19771] __x64_sys_kexec_load+0x55/0x70 [ 294.595100][T19771] x64_sys_call+0xa36/0x2fb0 [ 294.595124][T19771] do_syscall_64+0xd2/0x200 [ 294.595143][T19771] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 294.595194][T19771] ? clear_bhb_loop+0x40/0x90 [ 294.595218][T19771] ? clear_bhb_loop+0x40/0x90 [ 294.595242][T19771] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 294.595310][T19771] RIP: 0033:0x7fb3b0f7e929 [ 294.595323][T19771] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 294.595339][T19771] RSP: 002b:00007fb3af5e7038 EFLAGS: 00000246 ORIG_RAX: 00000000000000f6 [ 294.595357][T19771] RAX: ffffffffffffffda RBX: 00007fb3b11a5fa0 RCX: 00007fb3b0f7e929 [ 294.595372][T19771] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 294.595385][T19771] RBP: 00007fb3af5e7090 R08: 0000000000000000 R09: 0000000000000000 [ 294.595399][T19771] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 294.595482][T19771] R13: 0000000000000000 R14: 00007fb3b11a5fa0 R15: 00007fff4278d4a8 [ 294.595502][T19771] [ 294.841170][T19773] loop4: detected capacity change from 0 to 128 [ 294.941618][T19773] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (30846!=65535) [ 294.974040][T19773] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 ro without journal. Quota mode: none. [ 294.988369][T19773] EXT4-fs error (device loop4): __ext4_find_entry:1626: inode #2: comm syz.4.3713: checksumming directory block 0 [ 295.013399][T19773] EXT4-fs error (device loop4): __ext4_find_entry:1626: inode #2: comm syz.4.3713: checksumming directory block 0 [ 295.039255][T19773] IPVS: stopping master sync thread 19785 ... [ 295.042453][T19785] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 295.070692][T14504] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 295.091392][T19787] xt_hashlimit: size too large, truncated to 1048576 [ 295.098167][T19787] xt_hashlimit: Unknown mode mask 80FF, kernel too old? [ 295.184783][T19800] loop4: detected capacity change from 0 to 1024 [ 295.212146][T19800] EXT4-fs: Ignoring removed orlov option [ 295.217855][T19800] EXT4-fs: Ignoring removed nomblk_io_submit option [ 295.240826][T19797] IPv6: Can't replace route, no match found [ 295.254210][T19800] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 295.285482][T14504] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 295.324169][T19811] loop4: detected capacity change from 0 to 512 [ 295.332341][T19811] EXT4-fs error (device loop4): ext4_orphan_get:1393: inode #15: comm syz.4.3724: casefold flag without casefold feature [ 295.345657][T19811] EXT4-fs error (device loop4): ext4_orphan_get:1398: comm syz.4.3724: couldn't read orphan inode 15 (err -117) [ 295.358166][T19811] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 295.382105][T14504] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 295.417802][T19819] serio: Serial port ptm0 [ 295.911137][T19836] loop2: detected capacity change from 0 to 128 [ 295.918013][T19836] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (30846!=65535) [ 295.929478][T19836] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 ro without journal. Quota mode: none. [ 295.945933][T19836] EXT4-fs error (device loop2): __ext4_find_entry:1626: inode #2: comm syz.2.3730: checksumming directory block 0 [ 295.958337][T19836] EXT4-fs error (device loop2): __ext4_find_entry:1626: inode #2: comm syz.2.3730: checksumming directory block 0 [ 295.972464][T19839] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 295.983926][T19836] IPVS: stopping master sync thread 19839 ... [ 296.001706][T18756] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 296.064448][T19853] loop2: detected capacity change from 0 to 512 [ 296.073317][T19853] EXT4-fs error (device loop2): ext4_orphan_get:1393: inode #15: comm syz.2.3735: casefold flag without casefold feature [ 296.086152][T19853] EXT4-fs error (device loop2): ext4_orphan_get:1398: comm syz.2.3735: couldn't read orphan inode 15 (err -117) [ 296.098810][T19853] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 296.111393][T19856] loop5: detected capacity change from 0 to 1024 [ 296.111813][T19856] EXT4-fs: Ignoring removed oldalloc option [ 296.124181][T19856] EXT4-fs: Ignoring removed orlov option [ 296.130302][T19856] EXT4-fs (loop5): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 296.140700][T18756] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 296.154628][T19856] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 296.176892][T19856] EXT4-fs error (device loop5): ext4_mb_mark_diskspace_used:4113: comm syz.5.3733: Allocating blocks 385-513 which overlap fs metadata [ 296.193291][T19856] EXT4-fs (loop5): pa ffff888106964620: logic 16, phys. 129, len 24 [ 296.201417][T19856] EXT4-fs error (device loop5): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 8 [ 296.295225][T19873] loop2: detected capacity change from 0 to 256 [ 296.308518][T19873] FAT-fs (loop2): Directory bread(block 64) failed [ 296.315182][T19873] FAT-fs (loop2): Directory bread(block 65) failed [ 296.321717][T19873] FAT-fs (loop2): Directory bread(block 66) failed [ 296.328270][T19873] FAT-fs (loop2): Directory bread(block 67) failed [ 296.334907][T19873] FAT-fs (loop2): Directory bread(block 68) failed [ 296.341484][T19873] FAT-fs (loop2): Directory bread(block 69) failed [ 296.348045][T19873] FAT-fs (loop2): Directory bread(block 70) failed [ 296.354635][T19873] FAT-fs (loop2): Directory bread(block 71) failed [ 296.361177][T19873] FAT-fs (loop2): Directory bread(block 72) failed [ 296.367746][T19873] FAT-fs (loop2): Directory bread(block 73) failed [ 296.398603][T19877] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 296.409757][T19876] IPVS: stopping master sync thread 19877 ... [ 296.518574][T19891] serio: Serial port ptm0 [ 296.521238][T19893] serio: Serial port ptm1 [ 296.959755][T19909] loop4: detected capacity change from 0 to 128 [ 296.989285][T19909] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (30846!=65535) [ 297.001042][T19909] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 ro without journal. Quota mode: none. [ 297.014535][T19909] EXT4-fs error (device loop4): __ext4_find_entry:1626: inode #2: comm syz.4.3754: checksumming directory block 0 [ 297.026990][T19909] EXT4-fs error (device loop4): __ext4_find_entry:1626: inode #2: comm syz.4.3754: checksumming directory block 0 [ 297.041315][T19917] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 297.052340][T19909] IPVS: stopping master sync thread 19917 ... [ 297.053539][T17710] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 297.077931][T14504] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 297.133092][T19926] loop5: detected capacity change from 0 to 1024 [ 297.140510][T19926] EXT4-fs: Ignoring removed orlov option [ 297.146298][T19926] EXT4-fs: Ignoring removed nomblk_io_submit option [ 297.170504][T19941] loop2: detected capacity change from 0 to 512 [ 297.178496][T19926] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 297.200229][T19941] EXT4-fs error (device loop2): __ext4_iget:5379: inode #4: block 193290: comm syz.2.3759: invalid block [ 297.212848][T19941] EXT4-fs error (device loop2): ext4_quota_enable:7127: comm syz.2.3759: Bad quota inode: 4, type: 1 [ 297.213695][T17710] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 297.233103][T19941] EXT4-fs warning (device loop2): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 297.248383][T19941] EXT4-fs (loop2): mount failed [ 297.278585][T19949] loop4: detected capacity change from 0 to 8192 [ 297.285515][T19949] vfat: Unknown parameter '' [ 297.287949][T19941] netlink: '+}[@': attribute type 13 has an invalid length. [ 297.341272][T19941] bridge0: port 2(bridge_slave_1) entered disabled state [ 297.348537][T19941] bridge0: port 1(bridge_slave_0) entered disabled state [ 297.415173][T19941] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 297.434800][T19941] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 297.448052][T19970] loop4: detected capacity change from 0 to 128 [ 297.468840][T19970] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (30846!=65535) [ 297.472125][T19964] IPv6: Can't replace route, no match found [ 297.481997][T19970] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 ro without journal. Quota mode: none. [ 297.498055][T19970] EXT4-fs error (device loop4): __ext4_find_entry:1626: inode #2: comm syz.4.3766: checksumming directory block 0 [ 297.510848][T19970] EXT4-fs error (device loop4): __ext4_find_entry:1626: inode #2: comm syz.4.3766: checksumming directory block 0 [ 297.523349][T19941] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 297.532259][T19941] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 297.541327][T19941] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 297.550256][T19941] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 297.565218][T19973] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 297.565356][T19970] IPVS: stopping master sync thread 19973 ... [ 297.592790][T14504] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 297.670887][T19981] serio: Serial port ptm0 [ 297.781324][T19994] loop4: detected capacity change from 0 to 1024 [ 297.788359][T19994] EXT4-fs: Ignoring removed orlov option [ 297.794117][T19994] EXT4-fs: Ignoring removed nomblk_io_submit option [ 297.803879][T19994] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 297.825426][T14504] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 298.088051][T20011] IPv6: Can't replace route, no match found [ 298.195943][T20014] IPv6: Can't replace route, no match found [ 298.320981][T20019] loop4: detected capacity change from 0 to 256 [ 298.333262][T20017] xt_connbytes: Forcing CT accounting to be enabled [ 298.334303][T20019] FAT-fs (loop4): Directory bread(block 64) failed [ 298.340132][T20017] Cannot find set identified by id 0 to match [ 298.346938][T20019] FAT-fs (loop4): Directory bread(block 65) failed [ 298.359309][T20019] FAT-fs (loop4): Directory bread(block 66) failed [ 298.366379][T20019] FAT-fs (loop4): Directory bread(block 67) failed [ 298.372994][T20019] FAT-fs (loop4): Directory bread(block 68) failed [ 298.379553][T20019] FAT-fs (loop4): Directory bread(block 69) failed [ 298.386643][T20019] FAT-fs (loop4): Directory bread(block 70) failed [ 298.393377][T20019] FAT-fs (loop4): Directory bread(block 71) failed [ 298.399962][T20019] FAT-fs (loop4): Directory bread(block 72) failed [ 298.407009][T20019] FAT-fs (loop4): Directory bread(block 73) failed [ 298.566534][ T29] kauditd_printk_skb: 246 callbacks suppressed [ 298.566548][ T29] audit: type=1326 audit(298.548:20726): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20031 comm="syz.5.3783" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3b0f7e929 code=0x7ffc0000 [ 298.596328][ T29] audit: type=1326 audit(298.548:20727): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20031 comm="syz.5.3783" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3b0f7e929 code=0x7ffc0000 [ 298.619449][ T29] audit: type=1326 audit(298.548:20728): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20031 comm="syz.5.3783" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb3b0f7e929 code=0x7ffc0000 [ 298.642747][ T29] audit: type=1326 audit(298.548:20729): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20031 comm="syz.5.3783" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3b0f7e929 code=0x7ffc0000 [ 298.665904][ T29] audit: type=1326 audit(298.548:20730): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20031 comm="syz.5.3783" exe="/root/syz-executor" sig=0 arch=c000003e syscall=131 compat=0 ip=0x7fb3b0f7e929 code=0x7ffc0000 [ 298.688990][ T29] audit: type=1326 audit(298.548:20731): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20031 comm="syz.5.3783" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3b0f7e929 code=0x7ffc0000 [ 298.712035][ T29] audit: type=1326 audit(298.548:20732): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20031 comm="syz.5.3783" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7fb3b0f7e929 code=0x7ffc0000 [ 298.735037][ T29] audit: type=1326 audit(298.548:20733): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20031 comm="syz.5.3783" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3b0f7e929 code=0x7ffc0000 [ 298.758017][ T29] audit: type=1326 audit(298.548:20734): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20031 comm="syz.5.3783" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fb3b0f7e929 code=0x7ffc0000 [ 298.780943][ T29] audit: type=1326 audit(298.548:20735): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20031 comm="syz.5.3783" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3b0f7e929 code=0x7ffc0000 [ 298.829990][T20032] loop5: detected capacity change from 0 to 1024 [ 298.905518][T20032] EXT4-fs: Ignoring removed orlov option [ 298.911309][T20032] EXT4-fs: Ignoring removed nomblk_io_submit option [ 299.044704][T20032] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 299.080340][T17710] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 299.141420][T20053] serio: Serial port ptm0 [ 299.160881][T20054] loop2: detected capacity change from 0 to 1024 [ 299.170832][T20054] EXT4-fs: Ignoring removed oldalloc option [ 299.177318][T20054] EXT4-fs: Ignoring removed orlov option [ 299.185623][T20061] loop4: detected capacity change from 0 to 256 [ 299.193629][T20054] EXT4-fs (loop2): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 299.209884][T20061] FAT-fs (loop4): Directory bread(block 64) failed [ 299.217083][T20061] FAT-fs (loop4): Directory bread(block 65) failed [ 299.224047][T20061] FAT-fs (loop4): Directory bread(block 66) failed [ 299.248302][T20061] FAT-fs (loop4): Directory bread(block 67) failed [ 299.251941][T20054] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4113: comm syz.2.3785: Allocating blocks 385-513 which overlap fs metadata [ 299.255002][T20061] FAT-fs (loop4): Directory bread(block 68) failed [ 299.279882][T20061] FAT-fs (loop4): Directory bread(block 69) failed [ 299.283723][T20054] EXT4-fs (loop2): pa ffff888100496cb0: logic 16, phys. 129, len 24 [ 299.286456][T20061] FAT-fs (loop4): Directory bread(block 70) failed [ 299.294427][T20054] EXT4-fs error (device loop2): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 8 [ 299.301274][T20061] FAT-fs (loop4): Directory bread(block 71) failed [ 299.317599][T20061] FAT-fs (loop4): Directory bread(block 72) failed [ 299.324179][T20061] FAT-fs (loop4): Directory bread(block 73) failed [ 300.101911][T20097] loop4: detected capacity change from 0 to 1024 [ 300.110369][T20102] loop5: detected capacity change from 0 to 512 [ 300.111819][T20097] EXT4-fs: Ignoring removed orlov option [ 300.122509][T20097] EXT4-fs: Ignoring removed nomblk_io_submit option [ 300.131079][T20102] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 300.142183][T20102] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=884ee02c, mo2=0102] [ 300.151168][T20102] EXT4-fs (loop5): orphan cleanup on readonly fs [ 300.158082][T20102] EXT4-fs error (device loop5): ext4_get_branch:178: inode #11: block 33619980: comm syz.5.3800: invalid block [ 300.171599][T20102] EXT4-fs (loop5): Remounting filesystem read-only [ 300.179084][T20102] EXT4-fs (loop5): 1 truncate cleaned up [ 300.219233][ T37] ================================================================== [ 300.227330][ T37] BUG: KCSAN: data-race in alloc_pid / copy_process [ 300.233926][ T37] [ 300.236273][ T37] read-write to 0xffffffff868608e0 of 4 bytes by task 16198 on cpu 0: [ 300.244461][ T37] alloc_pid+0x539/0x720 [ 300.248704][ T37] copy_process+0xe0e/0x1f90 [ 300.253313][ T37] kernel_clone+0x16c/0x5b0 [ 300.257833][ T37] __x64_sys_clone+0xe6/0x120 [ 300.262525][ T37] x64_sys_call+0x2c59/0x2fb0 [ 300.267204][ T37] do_syscall_64+0xd2/0x200 [ 300.271717][ T37] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 300.277611][ T37] [ 300.279939][ T37] read to 0xffffffff868608e0 of 4 bytes by task 37 on cpu 1: [ 300.287321][ T37] copy_process+0x1790/0x1f90 [ 300.292018][ T37] kernel_clone+0x16c/0x5b0 [ 300.296546][ T37] user_mode_thread+0x7d/0xb0 [ 300.301231][ T37] call_usermodehelper_exec_work+0x41/0x160 [ 300.307145][ T37] process_scheduled_works+0x4cb/0x9d0 [ 300.312619][ T37] worker_thread+0x582/0x770 [ 300.317214][ T37] kthread+0x489/0x510 [ 300.321293][ T37] ret_from_fork+0xda/0x150 [ 300.325804][ T37] ret_from_fork_asm+0x1a/0x30 [ 300.330592][ T37] [ 300.332915][ T37] value changed: 0x800000c7 -> 0x800000c8 [ 300.338622][ T37] [ 300.340947][ T37] Reported by Kernel Concurrency Sanitizer on: [ 300.347107][ T37] CPU: 1 UID: 0 PID: 37 Comm: kworker/u8:2 Tainted: G W 6.16.0-rc5-syzkaller-00121-gbc9ff192a6c9 #0 PREEMPT(voluntary) [ 300.361095][ T37] Tainted: [W]=WARN [ 300.364903][ T37] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 300.374973][ T37] Workqueue: events_unbound call_usermodehelper_exec_work [ 300.382097][ T37] ================================================================== [ 300.404075][T20120] serio: Serial port ptm0