last executing test programs: 2.606336797s ago: executing program 0 (id=3948): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, @void, @value}, 0x94) r2 = accept4$packet(0xffffffffffffffff, &(0x7f0000000740)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000780)=0x14, 0x0) sendmmsg$sock(r2, &(0x7f0000000e00)=[{{&(0x7f00000008c0)=@in={0x2, 0x4e23, @broadcast}, 0x80, &(0x7f0000000a40)=[{&(0x7f00000009c0)="5203308c362122dd99262e2d7930f79aa80830daa4f911ae4e675814b78991b55adf53c55f1e081958114aa8e0e61b634146abbe2ef3ddc2d40e0c43c944ca9f795f0c40caec42a72f4cdf329d80278e5cedb472908434933e00c159a3a1baa0aa5356329b31497f6fdc01eb1919dd6af5d2014561f990f94ebb66ba", 0x7c}], 0x1, &(0x7f0000000ac0)=[@mark={{0x14, 0x1, 0x24, 0x20000000}}, @mark={{0x14, 0x1, 0x24, 0x8b2}}, @mark={{0x14, 0x1, 0x24, 0x7a79}}, @timestamping={{0x14, 0x1, 0x25, 0x7ff}}, @txtime={{0x18, 0x1, 0x3d, 0x7}}], 0x78}}, {{&(0x7f0000000b40)=@ethernet={0x6, @local}, 0x80, &(0x7f0000000d00)=[{&(0x7f0000000bc0)="8e2c13f5b3049f4e55a12cd21399ad26d5c33e760e2a9e1bcd87073fc916f06e934b490dc63e4ad64051752c89af8a7e5af5b6ab36edd32f8a60aad69b044c0a8ff7c1db5f0e905e0555b8489b962b6b0b874da802dac6198f76b0f2051d6a667ebc1de7bb8f119271c320f950888263532eb2148d98", 0x76}], 0x1, &(0x7f0000000d40)=[@timestamping={{0x14, 0x1, 0x25, 0x4}}, @timestamping={{0x14, 0x1, 0x25, 0x101}}, @timestamping={{0x14, 0x1, 0x25, 0xffff}}, @mark={{0x14, 0x1, 0x24, 0xfffffffe}}, @mark={{0x14, 0x1, 0x24, 0xfffffffc}}, @mark={{0x14, 0x1, 0x24, 0x5e}}, @txtime={{0x18, 0x1, 0x3d, 0x8}}], 0xa8}}], 0x2, 0x44098) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1800403, &(0x7f0000000940), 0x2, 0x5ad, &(0x7f0000000180)="$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") bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) add_key$user(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f00000005c0)={0x1, 0x80, 0x1, 0x10, 0x0, 0x0, 0x0, 0x100, 0x10020, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x180, 0x0, @perf_config_ext={0x4, 0xe}, 0x9, 0x7, 0x5, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x7, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r4}, 0x10) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000000)={0xffffffffffffffff}, 0x111, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r5, &(0x7f0000000280)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x7fe, @empty, 0x1}, {0xa, 0x4e20, 0x1ff, @dev={0xfe, 0x80, '\x00', 0x1d}, 0x2}, r6, 0xb}}, 0x48) write$RDMA_USER_CM_CMD_DESTROY_ID(r5, &(0x7f0000000f80)={0x1, 0xe, 0xfa00, {&(0x7f0000000300), r6}}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000001000)={0x11, 0x4, &(0x7f0000001000)=ANY=[], &(0x7f0000000fc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7fff, @void, @value}, 0xfffffffffffffe34) r7 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3f, 0x1, 0x0, 0x0, 0x0, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, @perf_bp={0x0, 0x13}, 0x400, 0xffffffff, 0x6, 0x6, 0x0, 0x1, 0xfff9, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, 0xffffffffffffffff) sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000700)=ANY=[@ANYBLOB="0203000310000000000000000000000002000900080000000a0000000000000005000600000000000a0000000000004000000000000000000000000000000001000000000000000002000100000000000000060c0000000005000500000000000a00000000000000000000000000000000000000000000010000000000000000"], 0x80}, 0x1, 0x7}, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r8, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x3c1, 0x3, 0x370, 0x0, 0x6c, 0x0, 0x0, 0x0, 0x2a0, 0x258, 0x258, 0x2a0, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @private0, [], [], 'wlan1\x00', '\x00', {}, {}, 0x11}, 0x0, 0x128, 0x170, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x3, 0x0, 0x7}}, @common=@inet=@multiport={{0x50}, {0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4e21, 0x4e23]}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x5, 0x3, 0x7}}}, {{@ipv6={@private0, @empty, [0x0, 0x0, 0xff], [], 'lo\x00', 'erspan0\x00', {}, {}, 0x0, 0x0, 0x6, 0x4a}, 0x0, 0xf8, 0x130, 0x0, {}, [@common=@hl={{0x28}}, @inet=@rpfilter={{0x28}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x0, 0x6}, {0x2}}}}], {{'\x00', 0x0, 0xa8, 0xd0, 0x0, {0x0, 0x2001}}, {0x28}}}}, 0x3d0) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x1f, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="2100000000000000000000000000000085000000b90000009500000000000000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) truncate(&(0x7f00000001c0)='./file2\x00', 0xaeb3) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="14000000100001000000f5ffffffffffffff000a14000000060a0000000000000000000002"], 0x3c}}, 0x0) 2.328336931s ago: executing program 2 (id=3951): bpf$TOKEN_CREATE(0x24, &(0x7f0000000080), 0x8) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x9) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[], 0x48) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f0000000280)={{0x1, 0x1, 0x18, r1, {0x5cce0883}}, './file1\x00'}) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYRES8=r2, @ANYRES32=r2, @ANYRESOCT=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x34, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r4, 0x84, 0x6, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0xfe, 0x0, 0x7ffc9ffe}]}) rseq(&(0x7f0000000300), 0x20, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000002c0)={'syztnl2\x00', &(0x7f0000000680)={'gretap0\x00', 0x0, 0x7, 0x7800, 0xc5, 0x1, {{0x32, 0x4, 0x0, 0x38, 0xc8, 0x68, 0x0, 0x7, 0x29, 0x0, @loopback, @broadcast, {[@cipso={0x86, 0x44, 0x2, [{0x6, 0x8, "50398ceb7f87"}, {0x7, 0xa, "1f1657dec4835fdd"}, {0x7, 0xf, "d61272aea4db83a33f37087427"}, {0x0, 0x9, "97c120c2b1bbf1"}, {0x1, 0x2}, {0x6, 0x9, "b036ff8764f193"}, {0x5, 0x9, "6e3bfa782a5851"}]}, @timestamp_prespec={0x44, 0x14, 0x65, 0x3, 0x0, [{@multicast1, 0x6}, {@remote, 0x2}]}, @timestamp_addr={0x44, 0x44, 0x69, 0x1, 0xd, [{@remote}, {@empty, 0x3}, {@empty, 0x34}, {@broadcast, 0x3}, {@rand_addr=0x64010101, 0x7}, {@broadcast, 0x40}, {@private=0xa010101, 0x7}, {@broadcast, 0x4}]}, @timestamp={0x44, 0x10, 0x71, 0x0, 0x5, [0xd1294e9, 0xffffff19, 0xd]}, @timestamp={0x44, 0x8, 0xe7, 0x0, 0x2, [0x3]}]}}}}}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r5, @fallback=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r7}, 0x10) r8 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r8, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x29}, './file0\x00'}) 2.245590383s ago: executing program 2 (id=3954): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181200", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, @void, @value}, 0x94) r2 = accept4$packet(0xffffffffffffffff, &(0x7f0000000740)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000780)=0x14, 0x0) sendmmsg$sock(r2, &(0x7f0000000e00)=[{{&(0x7f00000008c0)=@in={0x2, 0x4e23, @broadcast}, 0x80, &(0x7f0000000a40)=[{&(0x7f0000000980)="ccc6b89250a3950761c7ed889d4d398af712c7", 0x13}, {&(0x7f00000009c0)="5203308c362122dd99262e2d7930f79aa80830daa4f911ae4e675814b78991b55adf53c55f1e081958114aa8e0e61b634146abbe2ef3ddc2d40e0c43c944ca9f795f0c40caec42a72f4cdf329d80278e5cedb472908434933e00c159a3a1baa0aa5356329b31497f6fdc01eb1919dd6af5d2014561f990f94ebb66ba6d8f", 0x7e}], 0x2, &(0x7f0000000ac0)=[@mark={{0x14, 0x1, 0x24, 0x20000000}}, @mark={{0x14, 0x1, 0x24, 0x8b2}}, @mark={{0x14, 0x1, 0x24, 0x7a79}}, @timestamping={{0x14, 0x1, 0x25, 0x7ff}}, @txtime={{0x18, 0x1, 0x3d, 0x7}}], 0x78}}, {{&(0x7f0000000b40)=@ethernet={0x6, @local}, 0x80, 0x0, 0x0, &(0x7f0000000d40)=[@timestamping={{0x14, 0x1, 0x25, 0x4}}, @timestamping={{0x14, 0x1, 0x25, 0x101}}, @timestamping={{0x14, 0x1, 0x25, 0xffff}}, @mark={{0x14, 0x1, 0x24, 0xfffffffe}}, @mark={{0x14, 0x1, 0x24, 0xfffffffc}}, @mark={{0x14, 0x1, 0x24, 0x5e}}, @txtime={{0x18, 0x1, 0x3d, 0x8}}], 0xa8}}], 0x2, 0x44098) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1800403, &(0x7f0000000940), 0x2, 0x5ad, &(0x7f0000000180)="$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") bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) add_key$user(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f00000005c0)={0x1, 0x80, 0x1, 0x10, 0x0, 0x0, 0x0, 0x100, 0x10020, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x180, 0x0, @perf_config_ext={0x4, 0xe}, 0x9, 0x7, 0x5, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x7, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r4}, 0x10) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000000)={0xffffffffffffffff}, 0x111, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r5, &(0x7f0000000280)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x7fe, @empty, 0x1}, {0xa, 0x4e20, 0x1ff, @dev={0xfe, 0x80, '\x00', 0x1d}, 0x2}, r6, 0xb}}, 0x48) write$RDMA_USER_CM_CMD_DESTROY_ID(r5, &(0x7f0000000f80)={0x1, 0xe, 0xfa00, {&(0x7f0000000300), r6}}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000001000)={0x11, 0x4, &(0x7f0000001000)=ANY=[], &(0x7f0000000fc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7fff, @void, @value}, 0xfffffffffffffe34) r7 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3f, 0x1, 0x0, 0x0, 0x0, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, @perf_bp={0x0, 0x13}, 0x400, 0xffffffff, 0x6, 0x6, 0x0, 0x1, 0xfff9, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, 0xffffffffffffffff) sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000700)=ANY=[@ANYBLOB="0203000310000000000000000000000002000900080000000a0000000000000005000600000000000a0000000000004000000000000000000000000000000001000000000000000002000100000000000000060c0000000005000500000000000a00000000000000000000000000000000000000000000010000000000000000"], 0x80}, 0x1, 0x7}, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r8, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x3c1, 0x3, 0x370, 0x0, 0x6c, 0x0, 0x0, 0x0, 0x2a0, 0x258, 0x258, 0x2a0, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @private0, [], [], 'wlan1\x00', '\x00', {}, {}, 0x11}, 0x0, 0x128, 0x170, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x3, 0x0, 0x7}}, @common=@inet=@multiport={{0x50}, {0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4e21, 0x4e23]}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x5, 0x3, 0x7}}}, {{@ipv6={@private0, @empty, [0x0, 0x0, 0xff], [], 'lo\x00', 'erspan0\x00', {}, {}, 0x0, 0x0, 0x6, 0x4a}, 0x0, 0xf8, 0x130, 0x0, {}, [@common=@hl={{0x28}}, @inet=@rpfilter={{0x28}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x0, 0x6}, {0x2}}}}], {{'\x00', 0x0, 0xa8, 0xd0, 0x0, {0x0, 0x2001}}, {0x28}}}}, 0x3d0) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x1f, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="2100000000000000000000000000000085000000b90000009500000000000000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) truncate(&(0x7f00000001c0)='./file2\x00', 0xaeb3) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="14000000100001000000f5ffffffffffffff000a14000000060a0000000000000000000002"], 0x3c}}, 0x0) 2.160841365s ago: executing program 0 (id=3957): r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x2, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, 0x0, 0x0) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f0000000400)}}], 0x1, 0x9200000000000000) r2 = dup3(r1, r0, 0x0) recvmmsg(r2, &(0x7f0000008840)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000040)=""/8, 0x8}], 0x1}, 0xffffffff}], 0x1, 0x40000001, 0x0) 2.072902326s ago: executing program 2 (id=3959): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="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"/467], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000001c6a000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r3 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000ac0)=@filter={'filter\x00', 0xe, 0x4, 0x430, 0xffffffff, 0x118, 0x0, 0x0, 0xffffffff, 0xffffffff, 0x360, 0x360, 0x360, 0xffffffff, 0x4, &(0x7f0000000000), {[{{@ipv6={@private2, @loopback, [0x0, 0x0, 0xff000000, 0xffffff00], [0xff, 0xffffffff, 0xff, 0xffffff00], 'vlan0\x00', 'wg1\x00', {0xff}, {}, 0x62, 0x2b, 0x1}, 0x0, 0xf0, 0x118, 0x0, {}, [@common=@hbh={{0x48}, {0xd2, 0x4, 0x0, [0x2, 0x4, 0x4, 0x2000, 0x1, 0x8000, 0x9, 0x9, 0x0, 0x5, 0x3, 0x8, 0x2, 0x7, 0xfff8, 0x7], 0xb}}]}, @common=@unspec=@AUDIT={0x28, 'AUDIT\x00', 0x0, {0x1}}}, {{@ipv6={@private2={0xfc, 0x2, '\x00', 0x1}, @mcast1, [0xff000000, 0x0, 0xff], [0xff, 0xff, 0xff, 0xff000000], 'team0\x00', 'pimreg1\x00', {0xff}, {0xff}, 0x5c, 0x7, 0x1}, 0x0, 0x120, 0x148, 0x0, {}, [@common=@dst={{0x48}, {0x5, 0x4, 0x0, [0x100, 0x886, 0x473, 0x8, 0x4, 0x3ff, 0x0, 0x5, 0x0, 0x1, 0x5, 0x3ff, 0x10, 0x6, 0x7ff, 0x2], 0x2}}, @common=@frag={{0x30}, {[0x31c6, 0x4], 0xfffffff8, 0x4, 0x2}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x7}}}, {{@uncond, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@frag={{0x30}, {[0x4], 0x2, 0x1, 0x3}}]}, @common=@unspec=@CLASSIFY={0x28, 'CLASSIFY\x00', 0x0, {0xd2}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x490) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a5c000000060a0904000000000000000002000800000007401ed4325c79bb12f361efc223127fdfc438ff330fe67bcdb8c4386d9cfbaf7128c001f21ed6969e99e2de22b6a7419cbca8ebfe7a5423c08e0201432bffa79e86e2085939a6c98380d3eba3537a0000090002007304802c0001800c00f7ff7061796c6f616400140000001100010000000000000000000000000a000000000000000000"], 0x84}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) socket$nl_xfrm(0x10, 0x3, 0x6) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = syz_open_dev$usbfs(&(0x7f0000000080), 0x74, 0x101301) ioctl$USBDEVFS_IOCTL(r5, 0xc0105512, &(0x7f0000000200)) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, @void, @value}, 0x94) ioctl$USBDEVFS_IOCTL(r5, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) 1.713985872s ago: executing program 3 (id=3965): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000640)='>', 0x1}], 0x1, &(0x7f0000001040)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="0000000030000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="1c000000000000000100000402000000", @ANYRES32, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32, @ANYBLOB="e5ffff6e18"], 0xa0}, 0x4004881) r2 = open(&(0x7f0000000080)='./bus\x00', 0x147842, 0x49) preadv2(r2, &(0x7f0000000040)=[{&(0x7f0000001200)=""/4086, 0xff6}], 0x1, 0x0, 0x0, 0x0) 1.696375692s ago: executing program 3 (id=3966): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="61128c00000000006113900000000000bf20000000000000070000000f0000003d030100000000003400ffb1000000006926000000000000bf67000000000000160602000fff52007607000010000000d60600000ee60000bf050000000000001f63000000000000650700000200000007070000fbffffff1f75000000000000bf54000000000000070400000410f900bd430100000000009500000000000000050000000000000095000000000000001c15a3ce747c693a74b62fd0758b15f09429c09074bc4b2bd2dc480dd7a064b8673e2060162cc43bcba1060999f9d60bb39d0af449deaa27ea949e8f9000d885dfea2783835e29eb532ba8546fc020c1966f8b5f32b095f566edf66b7751828da9dbd5b996b9e8d897e461c01c697671d100000000400036c17fb01dde179c1f2686ee970d6482a2e7ddbf51c74ccac1c7b21bde7d1af255d6ebff9bff35e3888a0e356d82e43407a6d7fa94b2100204000000000000009ab62d7b07ba0a71a72145edade9941f04000000000000004ea9e4c70ef8b7407740ab3312edee62a4dc2fc85755d387bfa1bc8eb71fbe11b2216cc8d1f0160c237d929b49da28724b95555b74be2f76fb5f330b015a68587a75c01300"/467], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000001c6a000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r3 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000ac0)=@filter={'filter\x00', 0xe, 0x4, 0x430, 0xffffffff, 0x118, 0x0, 0x0, 0xffffffff, 0xffffffff, 0x360, 0x360, 0x360, 0xffffffff, 0x4, &(0x7f0000000000), {[{{@ipv6={@private2, @loopback, [0x0, 0x0, 0xff000000, 0xffffff00], [0xff, 0xffffffff, 0xff, 0xffffff00], 'vlan0\x00', 'wg1\x00', {0xff}, {}, 0x62, 0x2b, 0x1}, 0x0, 0xf0, 0x118, 0x0, {}, [@common=@hbh={{0x48}, {0xd2, 0x4, 0x0, [0x2, 0x4, 0x4, 0x2000, 0x1, 0x8000, 0x9, 0x9, 0x0, 0x5, 0x3, 0x8, 0x2, 0x7, 0xfff8, 0x7], 0xb}}]}, @common=@unspec=@AUDIT={0x28, 'AUDIT\x00', 0x0, {0x1}}}, {{@ipv6={@private2={0xfc, 0x2, '\x00', 0x1}, @mcast1, [0xff000000, 0x0, 0xff], [0xff, 0xff, 0xff, 0xff000000], 'team0\x00', 'pimreg1\x00', {0xff}, {0xff}, 0x5c, 0x7, 0x1}, 0x0, 0x120, 0x148, 0x0, {}, [@common=@dst={{0x48}, {0x5, 0x4, 0x0, [0x100, 0x886, 0x473, 0x8, 0x4, 0x3ff, 0x0, 0x5, 0x0, 0x1, 0x5, 0x3ff, 0x10, 0x6, 0x7ff, 0x2], 0x2}}, @common=@frag={{0x30}, {[0x31c6, 0x4], 0xfffffff8, 0x4, 0x2}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x7}}}, {{@uncond, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@frag={{0x30}, {[0x4], 0x2, 0x1, 0x3}}]}, @common=@unspec=@CLASSIFY={0x28, 'CLASSIFY\x00', 0x0, {0xd2}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x490) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a5c000000060a0904000000000000000002000800000007401ed4325c79bb12f361efc223127fdfc438ff330fe67bcdb8c4386d9cfbaf7128c001f21ed6969e99e2de22b6a7419cbca8ebfe7a5423c08e0201432bffa79e86e2085939a6c98380d3eba3537a0000090002007304802c0001800c00f7ff7061796c6f616400140000001100010000000000000000000000000a000000000000000000"], 0x84}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) socket$nl_xfrm(0x10, 0x3, 0x6) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = syz_open_dev$usbfs(&(0x7f0000000080), 0x74, 0x101301) ioctl$USBDEVFS_IOCTL(r5, 0xc0105512, &(0x7f0000000200)) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000005c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$USBDEVFS_IOCTL(r5, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) 1.652484023s ago: executing program 1 (id=3967): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r1, 0x8914, 0x0) write$cgroup_devices(r0, &(0x7f0000000000)=ANY=[], 0xffdd) r2 = add_key$keyring(&(0x7f00000000c0), &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) request_key(&(0x7f0000000340)='keyring\x00', &(0x7f0000000380)={'syz', 0x3}, 0x0, r2) 1.597773794s ago: executing program 1 (id=3968): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181200", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, @void, @value}, 0x94) r2 = accept4$packet(0xffffffffffffffff, &(0x7f0000000740)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000780)=0x14, 0x0) sendmmsg$sock(r2, &(0x7f0000000e00)=[{{&(0x7f00000008c0)=@in={0x2, 0x4e23, @broadcast}, 0x80, &(0x7f0000000a40)=[{&(0x7f00000009c0)="5203308c362122dd99262e2d7930f79aa80830daa4f911ae4e675814b78991b55adf53c55f1e081958114aa8e0e61b634146abbe2ef3ddc2d40e0c43c944ca9f795f0c40caec42a72f4cdf329d80278e5cedb472908434933e00c159a3a1baa0aa5356329b31497f6fdc01eb1919dd6af5d2014561f990f94ebb66ba6d8f08", 0x7f}], 0x1, &(0x7f0000000ac0)=[@mark={{0x14, 0x1, 0x24, 0x20000000}}, @mark={{0x14, 0x1, 0x24, 0x8b2}}, @mark={{0x14, 0x1, 0x24, 0x7a79}}, @timestamping={{0x14, 0x1, 0x25, 0x7ff}}, @txtime={{0x18, 0x1, 0x3d, 0x7}}], 0x78}}, {{&(0x7f0000000b40)=@ethernet={0x6, @local}, 0x80, 0x0, 0x0, &(0x7f0000000d40)=[@timestamping={{0x14, 0x1, 0x25, 0x4}}, @timestamping={{0x14, 0x1, 0x25, 0x101}}, @timestamping={{0x14, 0x1, 0x25, 0xffff}}, @mark={{0x14, 0x1, 0x24, 0xfffffffe}}, @mark={{0x14, 0x1, 0x24, 0xfffffffc}}, @mark={{0x14, 0x1, 0x24, 0x5e}}, @txtime={{0x18, 0x1, 0x3d, 0x8}}], 0xa8}}], 0x2, 0x44098) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1800403, &(0x7f0000000940), 0x2, 0x5ad, &(0x7f0000000180)="$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") bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) add_key$user(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f00000005c0)={0x1, 0x80, 0x1, 0x10, 0x0, 0x0, 0x0, 0x100, 0x10020, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x180, 0x0, @perf_config_ext={0x4, 0xe}, 0x9, 0x7, 0x5, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x7, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r4}, 0x10) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000000)={0xffffffffffffffff}, 0x111, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r5, &(0x7f0000000280)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x7fe, @empty, 0x1}, {0xa, 0x4e20, 0x1ff, @dev={0xfe, 0x80, '\x00', 0x1d}, 0x2}, r6, 0xb}}, 0x48) write$RDMA_USER_CM_CMD_DESTROY_ID(r5, &(0x7f0000000f80)={0x1, 0xe, 0xfa00, {&(0x7f0000000300), r6}}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000001000)={0x11, 0x4, &(0x7f0000001000)=ANY=[], &(0x7f0000000fc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7fff, @void, @value}, 0xfffffffffffffe34) r7 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3f, 0x1, 0x0, 0x0, 0x0, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, @perf_bp={0x0, 0x13}, 0x400, 0xffffffff, 0x6, 0x6, 0x0, 0x1, 0xfff9, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, 0xffffffffffffffff) sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000700)=ANY=[@ANYBLOB="0203000310000000000000000000000002000900080000000a0000000000000005000600000000000a0000000000004000000000000000000000000000000001000000000000000002000100000000000000060c0000000005000500000000000a00000000000000000000000000000000000000000000010000000000000000"], 0x80}, 0x1, 0x7}, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r8, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x3c1, 0x3, 0x370, 0x0, 0x6c, 0x0, 0x0, 0x0, 0x2a0, 0x258, 0x258, 0x2a0, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @private0, [], [], 'wlan1\x00', '\x00', {}, {}, 0x11}, 0x0, 0x128, 0x170, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x3, 0x0, 0x7}}, @common=@inet=@multiport={{0x50}, {0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4e21, 0x4e23]}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x5, 0x3, 0x7}}}, {{@ipv6={@private0, @empty, [0x0, 0x0, 0xff], [], 'lo\x00', 'erspan0\x00', {}, {}, 0x0, 0x0, 0x6, 0x4a}, 0x0, 0xf8, 0x130, 0x0, {}, [@common=@hl={{0x28}}, @inet=@rpfilter={{0x28}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x0, 0x6}, {0x2}}}}], {{'\x00', 0x0, 0xa8, 0xd0, 0x0, {0x0, 0x2001}}, {0x28}}}}, 0x3d0) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x1f, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="2100000000000000000000000000000085000000b90000009500000000000000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) truncate(&(0x7f00000001c0)='./file2\x00', 0xaeb3) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="14000000100001000000f5ffffffffffffff000a14000000060a0000000000000000000002"], 0x3c}}, 0x0) 1.433727936s ago: executing program 1 (id=3969): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) sendto$inet6(r0, &(0x7f0000000040)="b5ed3e26a9755014f1", 0x9, 0x400c0d4, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) 1.416995817s ago: executing program 1 (id=3970): r0 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xb, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000080000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000a3850000007000000095"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) getpeername$packet(r0, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000006c0)={{r0, 0xffffffffffffffff}, &(0x7f0000000640), &(0x7f0000000680)='%pS \x00'}, 0x20) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc018937e, &(0x7f0000000700)={{0x1, 0x1, 0x18, r1, {0x2}}, './file0\x00'}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000009c0)={0x11, 0xd, &(0x7f00000004c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xe11, 0x0, 0x0, 0x0, 0x9}, [@call={0x85, 0x0, 0x0, 0x62}, @tail_call={{0x18, 0x2, 0x1, 0x0, r0}}, @map_idx={0x18, 0xb, 0x5, 0x0, 0xd}, @map_idx_val={0x18, 0x8, 0x6, 0x0, 0xa, 0x0, 0x0, 0x0, 0x6f}]}, &(0x7f0000000240)='GPL\x00', 0x7, 0x0, 0x0, 0x41100, 0x48, '\x00', r2, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000580)={0x1, 0x2}, 0x8, 0x10, &(0x7f0000000600)={0x5, 0xe, 0xf, 0x80000000}, 0x10, 0x0, 0x0, 0x8, &(0x7f0000000740)=[r0, r0, r0, r0, r3, r4, r0], &(0x7f00000007c0)=[{0x2, 0x1, 0xd, 0xc}, {0x1, 0x2, 0x1, 0xb}, {0x4, 0x5, 0x10, 0x9}, {0x4, 0x5, 0xa}, {0x2, 0x3, 0x7, 0xb}, {0x5, 0x3, 0x3, 0x6}, {0x5, 0x1, 0xf, 0xa}, {0x3, 0x1, 0xc, 0xa}], 0x10, 0x1, @void, @value}, 0x94) r5 = socket(0x10, 0x3, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fcntl$notify(r7, 0x402, 0x4) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) renameat2(0xffffffffffffff9c, &(0x7f00000007c0)='./file1\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./file3\x00', 0x4) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r8}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r6}, &(0x7f0000000000), &(0x7f00000005c0)=r8}, 0x20) sendmsg$nl_route_sched(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000880)=@newqdisc={0x50, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, 0x0, {0x0, 0x2}, {0xffff, 0xffff}, {0x4}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x20, 0x2, {{0x10, 0x2d, 0x1, 0x1, 0x400, 0x8}, [@TCA_NETEM_DELAY_DIST={0x4}]}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x40001d4}, 0x4c8d0) 1.399359027s ago: executing program 1 (id=3971): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18090000002300810000000000"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001380)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x3f, &(0x7f00000001c0)={&(0x7f0000000000)=@delchain={0x24, 0x11, 0x1, 0x1f, 0x0, {0x0, 0x0, 0x0, r4}}, 0x24}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) 1.321913738s ago: executing program 1 (id=3972): socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x5, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) set_mempolicy(0x1, &(0x7f0000000080)=0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94) r1 = syz_clone(0x25000000, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) rseq(&(0x7f0000000300), 0x20, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r3 = syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x11, &(0x7f0000000100)={[{@noblock_validity}, {@stripe={'stripe', 0x3d, 0x2}}, {@norecovery}, {@min_batch_time={'min_batch_time', 0x3d, 0x71d}}, {@abort}]}, 0x1, 0x610, &(0x7f0000000a40)="$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") mlockall(0x2) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SET_FLAGS(r4, &(0x7f00000004c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000480)={&(0x7f00000002c0)={0x1c, r5, 0x400, 0x70bd2c, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x880}, 0x4000) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3000003, 0x200000006c832, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) r6 = syz_pidfd_open(r1, 0x0) r7 = socket(0xa, 0x3, 0x3a) setsockopt$PNPIPE_HANDLE(r7, 0x113, 0x3, &(0x7f0000000000)=0x4b9, 0x4) setns(r6, 0x24020000) syz_mount_image$ext4(&(0x7f00000000c0)='ext3\x00', &(0x7f0000000040)='./file0\x00', 0x2008885, &(0x7f0000000440)={[], [{@obj_type={'obj_type', 0x3d, 'min_batch_time'}}, {@dont_hash}, {@fsname={'fsname', 0x3d, '#:^\''}}, {@smackfsdef={'smackfsdef', 0x3d, 'ext4\x00'}}]}, 0x1, 0x652, &(0x7f0000002440)="$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") bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x10, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x13}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) gettid() signalfd4(r3, &(0x7f0000000240)={[0x8]}, 0x8, 0x800) r8 = socket(0x10, 0x3, 0x0) getsockopt$sock_buf(r8, 0x1, 0x1c, &(0x7f0000000240)=""/117, &(0x7f00000002c0)=0x75) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="d8000000180081054e81f782db44b904021d005c06007c09e8fe55a10a0015400500142603600e1208000b0000000401a8001600a400014002000000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360d070100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffec", 0xbd}, {&(0x7f0000000080)="dd4289470cce256876f2c9b17d97b68f2726ed8a10148545240f9f", 0x1b}], 0x2}, 0x410) 1.262161s ago: executing program 0 (id=3973): r0 = syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x3000406, &(0x7f00000006c0), 0x1, 0x512, &(0x7f0000000c40)="$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") name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="14"], &(0x7f0000000000), 0x0) mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x21, 0x0) open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x0) getresgid(&(0x7f0000000140), &(0x7f0000000180), &(0x7f00000001c0)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240), &(0x7f0000000280)=0xc) getresgid(&(0x7f0000000400)=0x0, &(0x7f00000005c0), &(0x7f00000007c0)) getresgid(&(0x7f0000000800)=0x0, &(0x7f0000000840), &(0x7f0000000880)) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f00000008c0)=@filter={'filter\x00', 0xe, 0x6, 0x91c, [0x0, 0x200000002700, 0x200000002a84, 0x200000002d78], 0x0, 0x0, &(0x7f0000002700)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x2, [{0x3, 0x62265f716228eb5c, 0x10, 'xfrm0\x00', 'caif0\x00', 'veth1_to_batadv\x00', 'veth0_to_hsr\x00', @random="3cb81e8a856c", [0xff, 0xff, 0x0, 0x0, 0xff], @empty, [0x0, 0x0, 0xff, 0x0, 0x0, 0xff], 0x9e, 0x9e, 0x1ce, [@m802_3={{'802_3\x00', 0x0, 0x8}, {{0x8e, 0x6f, 0x0, 0x1}}}], [], @common=@SECMARK={'SECMARK\x00', 0x108, {{0x1, 0x1, 'system_u:object_r:insmod_exec_t:s0\x00'}}}}, {0x3, 0x4, 0x9, 'veth1_vlan\x00', 'netdevsim0\x00', 'netpci0\x00', 'veth0_to_batadv\x00', @empty, [0x0, 0xff, 0x0, 0x101, 0x0, 0xff], @empty, [0x0, 0x0, 0x0, 0x0, 0xff, 0xff], 0xd6, 0x11e, 0x14e, [@cluster={{'cluster\x00', 0x0, 0x10}, {{0x80000001, 0x5c, 0x4, 0x1}}}, @cgroup0={{'cgroup\x00', 0x0, 0x8}, {{0xfffffff8}}}], [@common=@ERROR={'ERROR\x00', 0x20, {"11f2d39a4ef7534af99f33e7fda766b51340533be7b53938127a5f6f7ff6"}}], @common=@STANDARD={'\x00', 0x8, {0xfffffffffffffffe}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe, 0x2, [{0x9, 0x40, 0x0, 'veth0_virt_wifi\x00', 'batadv_slave_0\x00', 'bridge_slave_0\x00', 'wg1\x00', @local, [0x0, 0x0, 0x0, 0xff, 0x0, 0xff], @empty, [0xff, 0xff, 0xff, 0xff, 0x0, 0xff], 0x6e, 0x6e, 0x19e, [], [], @common=@SECMARK={'SECMARK\x00', 0x108, {{0x1, 0x4, 'system_u:object_r:hostname_exec_t:s0\x00'}}}}, {0x11, 0x2a, 0x22eb, 'veth0_to_bridge\x00', 'batadv_slave_0\x00', 'vlan0\x00', 'bridge_slave_0\x00', @multicast, [0xff, 0x0, 0xff, 0xff, 0xff], @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, [0x0, 0x0, 0x0, 0xff], 0xf6, 0xf6, 0x126, [@nfacct={{'nfacct\x00', 0x0, 0x28}, {{'syz0\x00', 0x100000001}}}, @realm={{'realm\x00', 0x0, 0x10}, {{0x7, 0x7, 0x1}}}], [], @common=@NFQUEUE0={'NFQUEUE\x00', 0x8, {{0x6}}}}]}, {0x0, '\x00', 0x4, 0xfffffffffffffffc, 0x2, [{0x5, 0x40, 0x8884, 'tunl0\x00', 'pimreg\x00', 'veth0_macvtap\x00', 'ip6gre0\x00', @local, [0x0, 0xff, 0x0, 0xff, 0xff], @remote, [0x0, 0xff, 0x0, 0xff, 0xff], 0x6e, 0xbe, 0xee, [], [@common=@LED={'LED\x00', 0x28, {{'syz1\x00', 0x0, 0x2, {0x10000}}}}], @common=@AUDIT={'AUDIT\x00', 0x8, {{0x2}}}}, {0x5, 0x31, 0x88be, 'veth0_to_bridge\x00', 'bridge_slave_1\x00', 'team_slave_1\x00', 'bond0\x00', @remote, [0x0, 0xff, 0xff, 0x0, 0x0, 0xff], @remote, [0xff, 0x0, 0xff, 0xd5eef8dd195adb80, 0x0, 0xff], 0x11e, 0x16e, 0x1be, [@stp={{'stp\x00', 0x0, 0x48}, {{0x5, {0xe4, 0x81, 0x4, @empty, [0xff, 0xff, 0xff, 0xff, 0xff, 0xff], 0xc7a, 0x1b70, 0x129, 0x3, @local, [0xff, 0xff, 0x0, 0xff, 0x0, 0xff], 0x4e21, 0x4e23, 0xfffb, 0x6, 0xffff, 0xc, 0xf0, 0x5, 0x0, 0x81}, 0x5c3, 0xc0}}}, @owner={{'owner\x00', 0x0, 0x18}, {{0x0, 0x0, r1, r2, 0x1, 0x4}}}], [@common=@IDLETIMER={'IDLETIMER\x00', 0x28, {{0x3, 'syz0\x00', {0x5}}}}], @common=@IDLETIMER={'IDLETIMER\x00', 0x28, {{0x54, 'syz1\x00', {0x5}}}}}]}]}, 0x994) setgroups(0x1, &(0x7f0000000740)=[r1]) lstat(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)) getgroups(0x5, &(0x7f0000000380)=[0xffffffffffffffff, 0xee00, 0xee00, 0x0, 0xffffffffffffffff]) getegid() r3 = syz_open_procfs(0x0, &(0x7f0000000140)='cgroup\x00') r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000002c0000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x62, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r5}, 0x10) preadv(r3, &(0x7f00000001c0)=[{&(0x7f0000000380)=""/138, 0x8a}], 0x1, 0x130, 0x4) newfstatat(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0x0) statx(r0, &(0x7f0000000480)='./file0\x00', 0x4000, 0x8, &(0x7f00000004c0)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000005c0), &(0x7f0000000600)=0xc) 1.167460281s ago: executing program 2 (id=3975): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="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"/467], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000001c6a000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r3 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000ac0)=@filter={'filter\x00', 0xe, 0x4, 0x430, 0xffffffff, 0x118, 0x0, 0x0, 0xffffffff, 0xffffffff, 0x360, 0x360, 0x360, 0xffffffff, 0x4, &(0x7f0000000000), {[{{@ipv6={@private2, @loopback, [0x0, 0x0, 0xff000000, 0xffffff00], [0xff, 0xffffffff, 0xff, 0xffffff00], 'vlan0\x00', 'wg1\x00', {0xff}, {}, 0x62, 0x2b, 0x1}, 0x0, 0xf0, 0x118, 0x0, {}, [@common=@hbh={{0x48}, {0xd2, 0x4, 0x0, [0x2, 0x4, 0x4, 0x2000, 0x1, 0x8000, 0x9, 0x9, 0x0, 0x5, 0x3, 0x8, 0x2, 0x7, 0xfff8, 0x7], 0xb}}]}, @common=@unspec=@AUDIT={0x28, 'AUDIT\x00', 0x0, {0x1}}}, {{@ipv6={@private2={0xfc, 0x2, '\x00', 0x1}, @mcast1, [0xff000000, 0x0, 0xff], [0xff, 0xff, 0xff, 0xff000000], 'team0\x00', 'pimreg1\x00', {0xff}, {0xff}, 0x5c, 0x7, 0x1}, 0x0, 0x120, 0x148, 0x0, {}, [@common=@dst={{0x48}, {0x5, 0x4, 0x0, [0x100, 0x886, 0x473, 0x8, 0x4, 0x3ff, 0x0, 0x5, 0x0, 0x1, 0x5, 0x3ff, 0x10, 0x6, 0x7ff, 0x2], 0x2}}, @common=@frag={{0x30}, {[0x31c6, 0x4], 0xfffffff8, 0x4, 0x2}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x7}}}, {{@uncond, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@frag={{0x30}, {[0x4], 0x2, 0x1, 0x3}}]}, @common=@unspec=@CLASSIFY={0x28, 'CLASSIFY\x00', 0x0, {0xd2}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x490) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a5c000000060a0904000000000000000002000800000007401ed4325c79bb12f361efc223127fdfc438ff330fe67bcdb8c4386d9cfbaf7128c001f21ed6969e99e2de22b6a7419cbca8ebfe7a5423c08e0201432bffa79e86e2085939a6c98380d3eba3537a0000090002007304802c0001800c00f7ff7061796c6f616400140000001100010000000000000000000000000a000000000000000000"], 0x84}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) socket$nl_xfrm(0x10, 0x3, 0x6) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = syz_open_dev$usbfs(&(0x7f0000000080), 0x74, 0x101301) ioctl$USBDEVFS_IOCTL(r5, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r5, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) 845.750656ms ago: executing program 0 (id=3977): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000005c0)={r0, 0x0, 0x0}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@bloom_filter={0x1e, 0x9, 0x8, 0xb58d, 0x4120a, r1, 0x42, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x2, 0x2, 0xa, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x48, 0x5, 0x0, 0x0, 0x0, 0x101, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x4}, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0xedba}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf5ff}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r3}, 0x10) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000080)='mem\x00\x10\x00\x00\x00\x00\x00\x00I\xa2l') r4 = syz_open_procfs$namespace(0x0, &(0x7f0000000080)) write$cgroup_subtree(r4, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_freezer_state(r5, 0x0, 0x2, 0x0) write$cgroup_freezer_state(r6, &(0x7f0000000040)='FROZEN\x00', 0x7) mkdirat$cgroup(r5, &(0x7f0000000100)='syz0\x00', 0x1ff) bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=@base={0x5, 0x1, 0x3, 0xae, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000980)='percpu_alloc_percpu\x00', r7}, 0x10) open$dir(&(0x7f0000000300)='./file0\x00', 0x151000, 0x8) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000001c0)={0x1, &(0x7f0000000200)=[{0x200000000006, 0x0, 0x20, 0x7ffc0001}]}) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000009900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 831.044767ms ago: executing program 3 (id=3978): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181200", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, @void, @value}, 0x94) r2 = accept4$packet(0xffffffffffffffff, &(0x7f0000000740)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000780)=0x14, 0x0) sendmmsg$sock(r2, &(0x7f0000000e00)=[{{&(0x7f00000008c0)=@in={0x2, 0x4e23, @broadcast}, 0x80, &(0x7f0000000a40)=[{&(0x7f0000000980)="ccc6b89250a3950761c7ed889d4d398af712c7", 0x13}, {&(0x7f00000009c0)="5203308c362122dd99262e2d7930f79aa80830daa4f911ae4e675814b78991b55adf53c55f1e081958114aa8e0e61b634146abbe2ef3ddc2d40e0c43c944ca9f795f0c40caec42a72f4cdf329d80278e5cedb472908434933e00c159a3a1baa0aa5356329b31497f6fdc01eb1919dd6af5d2014561f990f94ebb66ba6d8f", 0x7e}], 0x2, &(0x7f0000000ac0)=[@mark={{0x14, 0x1, 0x24, 0x20000000}}, @mark={{0x14, 0x1, 0x24, 0x8b2}}, @mark={{0x14, 0x1, 0x24, 0x7a79}}, @timestamping={{0x14, 0x1, 0x25, 0x7ff}}, @txtime={{0x18, 0x1, 0x3d, 0x7}}], 0x78}}, {{&(0x7f0000000b40)=@ethernet={0x6, @local}, 0x80, 0x0, 0x0, &(0x7f0000000d40)=[@timestamping={{0x14, 0x1, 0x25, 0x4}}, @timestamping={{0x14, 0x1, 0x25, 0x101}}, @timestamping={{0x14, 0x1, 0x25, 0xffff}}, @mark={{0x14, 0x1, 0x24, 0xfffffffe}}, @mark={{0x14, 0x1, 0x24, 0xfffffffc}}, @mark={{0x14, 0x1, 0x24, 0x5e}}, @txtime={{0x18, 0x1, 0x3d, 0x8}}], 0xa8}}], 0x2, 0x44098) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1800403, &(0x7f0000000940), 0x2, 0x5ad, &(0x7f0000000180)="$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") bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) add_key$user(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f00000005c0)={0x1, 0x80, 0x1, 0x10, 0x0, 0x0, 0x0, 0x100, 0x10020, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x180, 0x0, @perf_config_ext={0x4, 0xe}, 0x9, 0x7, 0x5, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x7, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r4}, 0x10) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000000)={0xffffffffffffffff}, 0x111, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r5, &(0x7f0000000280)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x7fe, @empty, 0x1}, {0xa, 0x4e20, 0x1ff, @dev={0xfe, 0x80, '\x00', 0x1d}, 0x2}, r6, 0xb}}, 0x48) write$RDMA_USER_CM_CMD_DESTROY_ID(r5, &(0x7f0000000f80)={0x1, 0xe, 0xfa00, {&(0x7f0000000300), r6}}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000001000)={0x11, 0x4, &(0x7f0000001000)=ANY=[], &(0x7f0000000fc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7fff, @void, @value}, 0xfffffffffffffe34) r7 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3f, 0x1, 0x0, 0x0, 0x0, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, @perf_bp={0x0, 0x13}, 0x400, 0xffffffff, 0x6, 0x6, 0x0, 0x1, 0xfff9, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, 0xffffffffffffffff) sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000700)=ANY=[@ANYBLOB="0203000310000000000000000000000002000900080000000a0000000000000005000600000000000a0000000000004000000000000000000000000000000001000000000000000002000100000000000000060c0000000005000500000000000a00000000000000000000000000000000000000000000010000000000000000"], 0x80}, 0x1, 0x7}, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r8, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x3c1, 0x3, 0x370, 0x0, 0x6c, 0x0, 0x0, 0x0, 0x2a0, 0x258, 0x258, 0x2a0, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @private0, [], [], 'wlan1\x00', '\x00', {}, {}, 0x11}, 0x0, 0x128, 0x170, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x3, 0x0, 0x7}}, @common=@inet=@multiport={{0x50}, {0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4e21, 0x4e23]}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x5, 0x3, 0x7}}}, {{@ipv6={@private0, @empty, [0x0, 0x0, 0xff], [], 'lo\x00', 'erspan0\x00', {}, {}, 0x0, 0x0, 0x6, 0x4a}, 0x0, 0xf8, 0x130, 0x0, {}, [@common=@hl={{0x28}}, @inet=@rpfilter={{0x28}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x0, 0x6}, {0x2}}}}], {{'\x00', 0x0, 0xa8, 0xd0, 0x0, {0x0, 0x2001}}, {0x28}}}}, 0x3d0) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x1f, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="2100000000000000000000000000000085000000b90000009500000000000000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) truncate(&(0x7f00000001c0)='./file2\x00', 0xaeb3) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="14000000100001000000f5ffffffffffffff000a14000000060a0000000000000000000002"], 0x3c}}, 0x0) 703.210419ms ago: executing program 0 (id=3980): syz_mount_image$ext4(&(0x7f0000000040)='ext2\x00', &(0x7f0000000340)='./bus\x00', 0x20c006, &(0x7f0000000180)={[{@dioread_nolock}, {@oldalloc}, {@quota}, {@max_batch_time={'max_batch_time', 0x3d, 0x1}}, {@nobh}, {@errors_remount}]}, 0x1, 0x43d, &(0x7f0000000900)="$eJzs281vG0UbAPBn7SR9+/FSU5WPpgUCBRHxkTRpKT1wAYHEASQkOJRjSNIq1G1QEyRaRRAQKkdUiTviiMRfwAkuCDghcYU7qlShXFrgYrTZ3cR27LQOTlzw7ydtMrM7zszj3bFnZ7IB9K2R9EcSsS8ifomI/Vm2scBI9uvmytL0HytL00nUaq//nqyWu7GyNF0ULV63t8gMRJQ+TuJwi3oXLl0+N1Wtzl7M8+OL598ZX7h0+em581NnZ8/OXpg8derE8YlnT04+05U407huDL8/f+TQy29efXX69NW3fvgqKeJviqNLRjY7+Fit1uXqeuv/delkoIcNoSPlrJvG4Gr/3x/lWD95++Olj3raOGBb1Wq12r3tDy/XgP+wJHrdAqA3ii/69P632HZo6HFHuP58dgOUxn0z37IjA1HKyww23d9200hEnF7+8/N0i+2ZhwAAaPBNOv55Kh//NSz8lKJ+XuiufA2lEhF3R8SBiDgZEQcj4p6I1bL3RcT9HdbfvEiycfxTutbhn+xIOv57Ll/bahz/FaO/qJQj/iqGy5UYTM7MVWeP5e/JaAzuSvMTm9Tx7Ys/f9ruWP34L93S+ouxYN6OawO7Gl8zM7U49U9irnf9w4jhgVbxJ2srAellcSgihrdYx9wTXx5pd+zW8Tcaqs90YZ2p9kXE49n5X46m+AvJ5uuT4/+L6uyx8eKq2OjHn6681q7+TuPvtvT872l5/a/FX0nq12sXOq/jyq+ftL2n2er1P5S80bDvvanFxYsTEUPJK1mj6/dPNpWbXC+fxj96tHX/PxDr78ThiEgv4gci4sGIeChv+8MR8UhEHN0k/u9fePTtxj1JB/FvrzT+mY7O/3piKJr3tE6Uz333dUOllegg/vT8n1hNjeZ7bufz73batbWrGQAAAP59ShGxL5LS2Fq6VBoby/6H/2DsKVXnFxafPDP/7oWZ7BmBSgyWipmubD44mw+dyG/ri/xkU/54Pm/8WXn3an5ser460+vgoc/tbdP/U7+Ve906YNt5Xgv6l/4P/Uv/h/6l/0P/atH/d/eiHcDOa/X9/0EP2gHsvKb+b9kP+oj7f+hf+j/0L/0f+tLC7rj1Q/ISEhsSUbojmiGxTYlefzIBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB0x98BAAD///1B6is=") bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x5000000, &(0x7f00000009c0)=ANY=[], 0x18) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="02000000040000000100000022bf"], 0x48) r2 = perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000440)={{r1, 0xffffffffffffffff}, &(0x7f00000003c0), &(0x7f0000000400)}, 0x20) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000740), &(0x7f0000000840), 0xffffd6c0, r3}, 0x38) fsconfig$FSCONFIG_CMD_RECONFIGURE(0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='net_dev_xmit\x00', r4}, 0x10) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x70, &(0x7f0000000180)=ANY=[@ANYRES32=r1, @ANYRESDEC, @ANYRESHEX=r4, @ANYRES16=r2, @ANYRESHEX=r5, @ANYRES16=r0], 0x0, 0x7, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100cb3a, @void, @value}, 0x94) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x200008, &(0x7f00000001c0)={[{@grpquota}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800}}, {@quota}]}, 0x1, 0x504, &(0x7f0000001000)="$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") prlimit64(0xffffffffffffffff, 0x7c1a280e768f1140, &(0x7f0000000200)={0x8, 0xec00000000004}, 0x0) r7 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f00000008c0)={[{@bsdgroups}, {@nodiscard}, {@noblock_validity}, {@grpjquota}, {@grpjquota}, {@orlov}, {@abort}, {@nombcache}, {@stripe={'stripe', 0x3d, 0x10}}]}, 0x64, 0x50a, &(0x7f0000000940)="$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") ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x80044940, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r7, 0x81f8943c, 0x0) syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000f00)='.\x00', 0x1a4a438, &(0x7f00000008c0)=ANY=[], 0xb, 0x0, &(0x7f0000000000)) syz_genetlink_get_family_id$mptcp(&(0x7f0000000340), r6) socket$nl_route(0x10, 0x3, 0x0) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r8}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r10, 0x0, r11, 0x0, 0x1, 0x0) vmsplice(r11, &(0x7f00000005c0)=[{&(0x7f0000000180)="04", 0x1}], 0x1, 0x6) ioctl$sock_inet_udp_SIOCINQ(r11, 0x541b, 0x0) write(r9, 0x0, 0x0) 575.532511ms ago: executing program 3 (id=3981): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d000000"], 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000f40)=ANY=[@ANYBLOB="4000000010001fff00"/18, @ANYRES32=0x0, @ANYBLOB="81ffffff00000000180012800e000100776972656775617264000000040002"], 0x40}}, 0x0) r1 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r1, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r1, &(0x7f0000000b00)={&(0x7f0000001340)=@hci={0x1f, 0x0, 0x6}, 0x80, &(0x7f0000000100)=[{0x0}], 0x1}, 0x40c6) r2 = syz_open_procfs(0x0, &(0x7f0000000300)='net/llc/core\x00') bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYRES32, @ANYBLOB], 0x48) bpf$ITER_CREATE(0x21, &(0x7f0000000800), 0x8) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={0x0, r4}, 0x18) pread64(r2, 0x0, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000a7"], &(0x7f0000000100)='GPL\x00', 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) munlockall() 487.668033ms ago: executing program 3 (id=3982): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) sendto$inet6(r0, &(0x7f0000000040)="b5ed3e26a9755014f1", 0x9, 0x400c0d4, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) 485.416542ms ago: executing program 4 (id=3983): r0 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xb, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000080000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000a3850000007000000095"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) getpeername$packet(r0, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000006c0)={{r0, 0xffffffffffffffff}, &(0x7f0000000640), &(0x7f0000000680)='%pS \x00'}, 0x20) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc018937e, &(0x7f0000000700)={{0x1, 0x1, 0x18, r1, {0x2}}, './file0\x00'}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000009c0)={0x11, 0xd, &(0x7f00000004c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xe11, 0x0, 0x0, 0x0, 0x9}, [@call={0x85, 0x0, 0x0, 0x62}, @tail_call={{0x18, 0x2, 0x1, 0x0, r0}}, @map_idx={0x18, 0xb, 0x5, 0x0, 0xd}, @map_idx_val={0x18, 0x8, 0x6, 0x0, 0xa, 0x0, 0x0, 0x0, 0x6f}]}, &(0x7f0000000240)='GPL\x00', 0x7, 0x0, 0x0, 0x41100, 0x48, '\x00', r2, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000580)={0x1, 0x2}, 0x8, 0x10, &(0x7f0000000600)={0x5, 0xe, 0xf, 0x80000000}, 0x10, 0x0, 0x0, 0x8, &(0x7f0000000740)=[r0, r0, r0, r0, r3, r4, r0], &(0x7f00000007c0)=[{0x2, 0x1, 0xd, 0xc}, {0x1, 0x2, 0x1, 0xb}, {0x4, 0x5, 0x10, 0x9}, {0x4, 0x5, 0xa}, {0x2, 0x3, 0x7, 0xb}, {0x5, 0x3, 0x3, 0x6}, {0x5, 0x1, 0xf, 0xa}, {0x3, 0x1, 0xc, 0xa}], 0x10, 0x1, @void, @value}, 0x94) r5 = socket(0x10, 0x3, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fcntl$notify(r7, 0x402, 0x4) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) renameat2(0xffffffffffffff9c, &(0x7f00000007c0)='./file1\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./file3\x00', 0x4) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r8}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r6}, &(0x7f0000000000), &(0x7f00000005c0)=r8}, 0x20) sendmsg$nl_route_sched(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000880)=@newqdisc={0x50, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, 0x0, {0x0, 0x2}, {0xffff, 0xffff}, {0x4}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x20, 0x2, {{0x10, 0x2d, 0x1, 0x1, 0x400, 0x8}, [@TCA_NETEM_DELAY_DIST={0x4}]}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x40001d4}, 0x4c8d0) 439.358853ms ago: executing program 4 (id=3984): bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000380)='kfree\x00', r0, 0x0, 0x8}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r1, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)=[0x9], 0x0, 0x2000000, 0x1, 0x1}}, 0x40) 436.763163ms ago: executing program 3 (id=3985): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="61128c00000000006113900000000000bf20000000000000070000000f0000003d030100000000003400ffb1000000006926000000000000bf67000000000000160602000fff52007607000010000000d60600000ee60000bf050000000000001f63000000000000650700000200000007070000fbffffff1f75000000000000bf54000000000000070400000410f900bd430100000000009500000000000000050000000000000095000000000000001c15a3ce747c693a74b62fd0758b15f09429c09074bc4b2bd2dc480dd7a064b8673e2060162cc43bcba1060999f9d60bb39d0af449deaa27ea949e8f9000d885dfea2783835e29eb532ba8546fc020c1966f8b5f32b095f566edf66b7751828da9dbd5b996b9e8d897e461c01c697671d100000000400036c17fb01dde179c1f2686ee970d6482a2e7ddbf51c74ccac1c7b21bde7d1af255d6ebff9bff35e3888a0e356d82e43407a6d7fa94b2100204000000000000009ab62d7b07ba0a71a72145edade9941f04000000000000004ea9e4c70ef8b7407740ab3312edee62a4dc2fc85755d387bfa1bc8eb71fbe11b2216cc8d1f0160c237d929b49da28724b95555b74be2f76fb5f330b015a68587a75c01300"/467], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000001c6a000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r3 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000ac0)=@filter={'filter\x00', 0xe, 0x4, 0x430, 0xffffffff, 0x118, 0x0, 0x0, 0xffffffff, 0xffffffff, 0x360, 0x360, 0x360, 0xffffffff, 0x4, &(0x7f0000000000), {[{{@ipv6={@private2, @loopback, [0x0, 0x0, 0xff000000, 0xffffff00], [0xff, 0xffffffff, 0xff, 0xffffff00], 'vlan0\x00', 'wg1\x00', {0xff}, {}, 0x62, 0x2b, 0x1}, 0x0, 0xf0, 0x118, 0x0, {}, [@common=@hbh={{0x48}, {0xd2, 0x4, 0x0, [0x2, 0x4, 0x4, 0x2000, 0x1, 0x8000, 0x9, 0x9, 0x0, 0x5, 0x3, 0x8, 0x2, 0x7, 0xfff8, 0x7], 0xb}}]}, @common=@unspec=@AUDIT={0x28, 'AUDIT\x00', 0x0, {0x1}}}, {{@ipv6={@private2={0xfc, 0x2, '\x00', 0x1}, @mcast1, [0xff000000, 0x0, 0xff], [0xff, 0xff, 0xff, 0xff000000], 'team0\x00', 'pimreg1\x00', {0xff}, {0xff}, 0x5c, 0x7, 0x1}, 0x0, 0x120, 0x148, 0x0, {}, [@common=@dst={{0x48}, {0x5, 0x4, 0x0, [0x100, 0x886, 0x473, 0x8, 0x4, 0x3ff, 0x0, 0x5, 0x0, 0x1, 0x5, 0x3ff, 0x10, 0x6, 0x7ff, 0x2], 0x2}}, @common=@frag={{0x30}, {[0x31c6, 0x4], 0xfffffff8, 0x4, 0x2}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x7}}}, {{@uncond, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@frag={{0x30}, {[0x4], 0x2, 0x1, 0x3}}]}, @common=@unspec=@CLASSIFY={0x28, 'CLASSIFY\x00', 0x0, {0xd2}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x490) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a5c000000060a0904000000000000000002000800000007401ed4325c79bb12f361efc223127fdfc438ff330fe67bcdb8c4386d9cfbaf7128c001f21ed6969e99e2de22b6a7419cbca8ebfe7a5423c08e0201432bffa79e86e2085939a6c98380d3eba3537a0000090002007304802c0001800c00f7ff7061796c6f616400140000001100010000000000000000000000000a000000000000000000"], 0x84}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) socket$nl_xfrm(0x10, 0x3, 0x6) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r4 = syz_open_dev$usbfs(&(0x7f0000000080), 0x74, 0x101301) ioctl$USBDEVFS_IOCTL(r4, 0xc0105512, &(0x7f0000000200)) 394.030144ms ago: executing program 4 (id=3986): bpf$TOKEN_CREATE(0x24, &(0x7f0000000080), 0x8) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x9) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[], 0x48) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f0000000280)={{0x1, 0x1, 0x18, r1, {0x5cce0883}}, './file1\x00'}) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYRES8=r2, @ANYRES32=r2, @ANYRESOCT=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x34, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$inet_sctp(0x2, 0x1, 0x84) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r4}, 0x10) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r5 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r5, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x29}, './file0\x00'}) 319.530485ms ago: executing program 2 (id=3987): r0 = syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x3000406, &(0x7f00000006c0), 0x1, 0x512, &(0x7f0000000c40)="$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") name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="14"], &(0x7f0000000000), 0x0) mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x21, 0x0) open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x0) getresgid(&(0x7f0000000140), &(0x7f0000000180), &(0x7f00000001c0)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240), &(0x7f0000000280)=0xc) getresgid(&(0x7f0000000400)=0x0, &(0x7f00000005c0), &(0x7f00000007c0)) getresgid(&(0x7f0000000800)=0x0, &(0x7f0000000840), &(0x7f0000000880)) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f00000008c0)=@filter={'filter\x00', 0xe, 0x6, 0x91c, [0x0, 0x200000002700, 0x200000002a84, 0x200000002d78], 0x0, 0x0, &(0x7f0000002700)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x2, [{0x3, 0x62265f716228eb5c, 0x10, 'xfrm0\x00', 'caif0\x00', 'veth1_to_batadv\x00', 'veth0_to_hsr\x00', @random="3cb81e8a856c", [0xff, 0xff, 0x0, 0x0, 0xff], @empty, [0x0, 0x0, 0xff, 0x0, 0x0, 0xff], 0x9e, 0x9e, 0x1ce, [@m802_3={{'802_3\x00', 0x0, 0x8}, {{0x8e, 0x6f, 0x0, 0x1}}}], [], @common=@SECMARK={'SECMARK\x00', 0x108, {{0x1, 0x1, 'system_u:object_r:insmod_exec_t:s0\x00'}}}}, {0x3, 0x4, 0x9, 'veth1_vlan\x00', 'netdevsim0\x00', 'netpci0\x00', 'veth0_to_batadv\x00', @empty, [0x0, 0xff, 0x0, 0x101, 0x0, 0xff], @empty, [0x0, 0x0, 0x0, 0x0, 0xff, 0xff], 0xd6, 0x11e, 0x14e, [@cluster={{'cluster\x00', 0x0, 0x10}, {{0x80000001, 0x5c, 0x4, 0x1}}}, @cgroup0={{'cgroup\x00', 0x0, 0x8}, {{0xfffffff8}}}], [@common=@ERROR={'ERROR\x00', 0x20, {"11f2d39a4ef7534af99f33e7fda766b51340533be7b53938127a5f6f7ff6"}}], @common=@STANDARD={'\x00', 0x8, {0xfffffffffffffffe}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe, 0x2, [{0x9, 0x40, 0x0, 'veth0_virt_wifi\x00', 'batadv_slave_0\x00', 'bridge_slave_0\x00', 'wg1\x00', @local, [0x0, 0x0, 0x0, 0xff, 0x0, 0xff], @empty, [0xff, 0xff, 0xff, 0xff, 0x0, 0xff], 0x6e, 0x6e, 0x19e, [], [], @common=@SECMARK={'SECMARK\x00', 0x108, {{0x1, 0x4, 'system_u:object_r:hostname_exec_t:s0\x00'}}}}, {0x11, 0x2a, 0x22eb, 'veth0_to_bridge\x00', 'batadv_slave_0\x00', 'vlan0\x00', 'bridge_slave_0\x00', @multicast, [0xff, 0x0, 0xff, 0xff, 0xff], @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, [0x0, 0x0, 0x0, 0xff], 0xf6, 0xf6, 0x126, [@nfacct={{'nfacct\x00', 0x0, 0x28}, {{'syz0\x00', 0x100000001}}}, @realm={{'realm\x00', 0x0, 0x10}, {{0x7, 0x7, 0x1}}}], [], @common=@NFQUEUE0={'NFQUEUE\x00', 0x8, {{0x6}}}}]}, {0x0, '\x00', 0x4, 0xfffffffffffffffc, 0x2, [{0x5, 0x40, 0x8884, 'tunl0\x00', 'pimreg\x00', 'veth0_macvtap\x00', 'ip6gre0\x00', @local, [0x0, 0xff, 0x0, 0xff, 0xff], @remote, [0x0, 0xff, 0x0, 0xff, 0xff], 0x6e, 0xbe, 0xee, [], [@common=@LED={'LED\x00', 0x28, {{'syz1\x00', 0x0, 0x2, {0x10000}}}}], @common=@AUDIT={'AUDIT\x00', 0x8, {{0x2}}}}, {0x5, 0x31, 0x88be, 'veth0_to_bridge\x00', 'bridge_slave_1\x00', 'team_slave_1\x00', 'bond0\x00', @remote, [0x0, 0xff, 0xff, 0x0, 0x0, 0xff], @remote, [0xff, 0x0, 0xff, 0xd5eef8dd195adb80, 0x0, 0xff], 0x11e, 0x16e, 0x1be, [@stp={{'stp\x00', 0x0, 0x48}, {{0x5, {0xe4, 0x81, 0x4, @empty, [0xff, 0xff, 0xff, 0xff, 0xff, 0xff], 0xc7a, 0x1b70, 0x129, 0x3, @local, [0xff, 0xff, 0x0, 0xff, 0x0, 0xff], 0x4e21, 0x4e23, 0xfffb, 0x6, 0xffff, 0xc, 0xf0, 0x5, 0x0, 0x81}, 0x5c3, 0xc0}}}, @owner={{'owner\x00', 0x0, 0x18}, {{0x0, 0x0, r1, r2, 0x1, 0x4}}}], [@common=@IDLETIMER={'IDLETIMER\x00', 0x28, {{0x3, 'syz0\x00', {0x5}}}}], @common=@IDLETIMER={'IDLETIMER\x00', 0x28, {{0x54, 'syz1\x00', {0x5}}}}}]}]}, 0x994) setgroups(0x1, &(0x7f0000000740)=[r1]) lstat(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)) getgroups(0x5, &(0x7f0000000380)=[0xffffffffffffffff, 0xee00, 0xee00, 0x0, 0xffffffffffffffff]) getegid() r3 = syz_open_procfs(0x0, &(0x7f0000000140)='cgroup\x00') r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000002c0000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x62, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r5}, 0x10) preadv(r3, &(0x7f00000001c0)=[{&(0x7f0000000380)=""/138, 0x8a}], 0x1, 0x130, 0x4) newfstatat(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0x0) statx(r0, &(0x7f0000000480)='./file0\x00', 0x4000, 0x8, &(0x7f00000004c0)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000005c0), &(0x7f0000000600)=0xc) 316.382156ms ago: executing program 4 (id=3988): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r1, 0x8914, 0x0) write$cgroup_devices(r0, &(0x7f0000000000)=ANY=[], 0xffdd) r2 = add_key$keyring(&(0x7f00000000c0), &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) request_key(&(0x7f0000000340)='keyring\x00', &(0x7f0000000380)={'syz', 0x3}, 0x0, r2) 170.281978ms ago: executing program 2 (id=3989): r0 = syz_clone(0x800000, 0x0, 0x0, &(0x7f0000000080), &(0x7f00000001c0), &(0x7f00000003c0)="bcaa12a045ce3ccc7ecadc79f0342e2b4b37ef061efbc880543d0add22a6c15bc51da4e3671ddf5b56d8d01e7f3d7f377e74c9b774185750dc1a51a3fed69da7d8944005c10556974a0cd0b8d2825b7e28b26a82e34414f100b364f8bb6914f919f11f1f45c5510124031f1afbca028fd6a81a81048573e9657e9dc00cfebabf20678e0906b663e7") r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x131, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x102b0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1000}, 0x0, 0xffffffffffbfffff, 0xffffffffffffffff, 0x8) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r3 = socket$netlink(0x10, 0x3, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), r3) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r3, 0x10e, 0x8, &(0x7f0000000280)=0xfffffffa, 0x4) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r3, 0x10e, 0x1, &(0x7f00000002c0)=0x1, 0x4) syz_clone(0x40200400, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000001200)={0x1, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x16, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r2}, 0x0, &(0x7f00000001c0)=r1}, 0x20) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/syz0\x00', 0x1ff) r5 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r5, &(0x7f0000000000)={0x2a, 0x2}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kmem_cache_free\x00', r4, 0x0, 0x1000}, 0x18) r6 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x2000) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x56) ioctl$SG_GET_VERSION_NUM(r6, 0x2284, &(0x7f0000000080)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0}, 0x18) bind$qrtr(r5, &(0x7f00000000c0)={0x2a, 0x1, 0x7fff}, 0xc) getpriority(0x0, r0) r7 = socket$kcm(0xa, 0x5, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) ioctl$sock_kcm_SIOCKCMCLONE(r7, 0x890b, &(0x7f0000000000)={r3}) r8 = msgget$private(0x0, 0x0) msgrcv(r8, 0x0, 0x0, 0x1, 0x2000) msgctl$IPC_SET(r8, 0x1, 0x0) stat(0x0, 0x0) socket$netlink(0x10, 0x3, 0x14) 146.548728ms ago: executing program 4 (id=3990): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000005c0)={r0, 0x0, 0x0}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@bloom_filter={0x1e, 0x9, 0x8, 0xb58d, 0x4120a, r1, 0x42, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x2, 0x2, 0xa, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x48, 0x5, 0x0, 0x0, 0x0, 0x101, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0x4}, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0xedba}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf5ff}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r3}, 0x10) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000080)='mem\x00\x10\x00\x00\x00\x00\x00\x00I\xa2l') r4 = syz_open_procfs$namespace(0x0, &(0x7f0000000080)) write$cgroup_subtree(r4, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_freezer_state(r5, 0x0, 0x2, 0x0) write$cgroup_freezer_state(r6, &(0x7f0000000040)='FROZEN\x00', 0x7) mkdirat$cgroup(r5, &(0x7f0000000100)='syz0\x00', 0x1ff) bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=@base={0x5, 0x1, 0x3, 0xae, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000980)='percpu_alloc_percpu\x00', r7}, 0x10) open$dir(&(0x7f0000000300)='./file0\x00', 0x151000, 0x8) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000001c0)={0x1, &(0x7f0000000200)=[{0x200000000006, 0x0, 0x20, 0x7ffc0001}]}) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000009900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 29.64711ms ago: executing program 4 (id=3991): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1/file2\x00', 0x81c0, 0x0) linkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1/file2\x00', 0xffffffffffffff9c, &(0x7f00000003c0)='./file0/file2\x00', 0xf6ff) 0s ago: executing program 0 (id=3992): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d000000"], 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000f40)=ANY=[@ANYBLOB="4000000010001fff00"/18, @ANYRES32=0x0, @ANYBLOB="81ffffff00000000180012800e000100776972656775617264000000040002"], 0x40}}, 0x0) r1 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r1, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r1, &(0x7f0000000b00)={&(0x7f0000001340)=@hci={0x1f, 0x0, 0x6}, 0x80, &(0x7f0000000100)=[{0x0}], 0x1}, 0x40c6) r2 = syz_open_procfs(0x0, &(0x7f0000000300)='net/llc/core\x00') bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYRES32, @ANYBLOB], 0x48) bpf$ITER_CREATE(0x21, &(0x7f0000000800), 0x8) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={0x0, r4}, 0x18) pread64(r2, 0x0, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000a7"], &(0x7f0000000100)='GPL\x00', 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) munlockall() kernel console output (not intermixed with test programs): .763588][T13405] netlink: 'syz.2.3525': attribute type 17 has an invalid length. [ 294.771203][T11248] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 294.820930][T13397] Cannot find add_set index 0 as target [ 294.842722][T13414] IPVS: stopping master sync thread 13417 ... [ 294.912528][T13423] loop0: detected capacity change from 0 to 1024 [ 294.925670][T13423] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 294.948381][T13412] dummy0: entered promiscuous mode [ 294.956829][T13423] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 294.973092][T13423] EXT4-fs (loop0): orphan cleanup on readonly fs [ 294.984363][T13427] loop2: detected capacity change from 0 to 1024 [ 295.008558][T13423] EXT4-fs error (device loop0): __ext4_get_inode_loc:4792: comm syz.0.3533: Invalid inode table block 0 in block_group 0 [ 295.030377][T13412] dummy0: left promiscuous mode [ 295.057667][T13427] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 295.068813][T13427] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 295.120227][T13423] EXT4-fs (loop0): Remounting filesystem read-only [ 295.127002][T13427] JBD2: no valid journal superblock found [ 295.132826][T13427] EXT4-fs (loop2): Could not load journal inode [ 295.139318][T13423] EXT4-fs (loop0): 1 truncate cleaned up [ 295.160638][T13427] Cannot find del_set index 2 as target [ 295.169504][T13423] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 295.203308][T12906] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 295.303322][T13437] loop2: detected capacity change from 0 to 1024 [ 295.312015][T13437] EXT4-fs: dax option not supported [ 295.321843][T13437] loop2: detected capacity change from 0 to 128 [ 295.328554][T13437] vfat: Unknown parameter 'ÿÿÿÿÿÿÿÿÿÿÿÿ00000000000000000000' [ 295.417279][T13451] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 295.422862][T13450] IPVS: stopping master sync thread 13451 ... [ 295.524541][T13453] loop1: detected capacity change from 0 to 1024 [ 295.533451][T13453] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 295.544519][T13453] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 295.557509][T13453] JBD2: no valid journal superblock found [ 295.563463][T13453] EXT4-fs (loop1): Could not load journal inode [ 295.588863][T13453] Cannot find del_set index 2 as target [ 295.595138][T13458] loop3: detected capacity change from 0 to 1024 [ 295.602593][T13458] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 295.613700][T13458] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 295.626861][T13458] JBD2: no valid journal superblock found [ 295.632705][T13458] EXT4-fs (loop3): Could not load journal inode [ 295.881218][T13478] loop2: detected capacity change from 0 to 2048 [ 295.901109][T13481] __nla_validate_parse: 37 callbacks suppressed [ 295.901130][T13481] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3556'. [ 295.933078][T13483] loop1: detected capacity change from 0 to 1024 [ 295.948977][T13478] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 295.970088][T13483] EXT4-fs: dax option not supported [ 295.987883][T13478] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 295.995051][T13483] loop1: detected capacity change from 0 to 128 [ 296.013537][T13483] vfat: Unknown parameter 'ÿÿÿÿÿÿÿÿÿÿÿÿ00000000000000000000' [ 296.032193][T13489] loop3: detected capacity change from 0 to 1024 [ 296.041835][T13489] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 296.052943][T13489] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 296.067238][T13489] JBD2: no valid journal superblock found [ 296.073113][T13489] EXT4-fs (loop3): Could not load journal inode [ 296.079192][T13491] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3560'. [ 296.107062][T13493] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3561'. [ 296.127707][T13493] loop2: detected capacity change from 0 to 1024 [ 296.149500][T13493] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 296.161711][T13493] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 296.163518][T13497] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3562'. [ 296.172377][T13493] EXT4-fs (loop2): orphan cleanup on readonly fs [ 296.182207][T13497] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3562'. [ 296.185627][T13493] EXT4-fs error (device loop2): __ext4_get_inode_loc:4792: comm syz.2.3561: Invalid inode table block 0 in block_group 0 [ 296.209188][T13493] EXT4-fs (loop2): Remounting filesystem read-only [ 296.215851][T13493] EXT4-fs (loop2): 1 truncate cleaned up [ 296.225273][T13493] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 296.251461][T13501] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3564'. [ 296.299263][T13501] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3564'. [ 296.316532][T11436] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 296.389432][T13509] loop2: detected capacity change from 0 to 1024 [ 296.396609][T13511] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3568'. [ 296.397697][T13503] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3565'. [ 296.408367][T13509] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 296.425951][T13509] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 296.426030][T13503] bridge_slave_1: left allmulticast mode [ 296.440031][T13509] JBD2: no valid journal superblock found [ 296.441418][T13503] bridge_slave_1: left promiscuous mode [ 296.447005][T13509] EXT4-fs (loop2): Could not load journal inode [ 296.452765][T13503] bridge0: port 2(bridge_slave_1) entered disabled state [ 296.475280][T13511] loop3: detected capacity change from 0 to 1024 [ 296.498536][T13511] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 296.502869][T13509] set_target_v3_checkentry: 2 callbacks suppressed [ 296.502891][T13509] Cannot find del_set index 2 as target [ 296.547358][T13503] bridge_slave_0: left allmulticast mode [ 296.553103][T13503] bridge_slave_0: left promiscuous mode [ 296.559182][T13503] bridge0: port 1(bridge_slave_0) entered disabled state [ 296.588119][T13511] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 296.610988][T13511] EXT4-fs (loop3): orphan cleanup on readonly fs [ 296.618759][ T29] kauditd_printk_skb: 381 callbacks suppressed [ 296.618786][ T29] audit: type=1400 audit(1749588240.997:18752): avc: denied { create } for pid=13521 comm="syz.2.3572" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 296.656972][T13511] EXT4-fs error (device loop3): __ext4_get_inode_loc:4792: comm syz.3.3568: Invalid inode table block 0 in block_group 0 [ 296.687598][ T29] audit: type=1400 audit(1749588241.027:18753): avc: denied { bind } for pid=13521 comm="syz.2.3572" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 296.713437][T13511] EXT4-fs (loop3): Remounting filesystem read-only [ 296.720130][T13511] Quota error (device loop3): write_blk: dquota write failed [ 296.727541][T13511] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 296.747699][ T29] audit: type=1326 audit(1749588241.117:18754): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13502 comm="syz.1.3565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6c60ee929 code=0x7ffc0000 [ 296.771429][ T29] audit: type=1326 audit(1749588241.117:18755): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13502 comm="syz.1.3565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6c60ee929 code=0x7ffc0000 [ 296.776847][T13511] EXT4-fs (loop3): 1 truncate cleaned up [ 296.850717][T13511] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 296.876501][T13529] loop1: detected capacity change from 0 to 1024 [ 296.886015][T13531] loop0: detected capacity change from 0 to 1024 [ 296.886811][T13529] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 296.898584][T13531] EXT4-fs: dax option not supported [ 296.903488][T13529] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 296.920847][T13532] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3574'. [ 296.922746][T13531] loop0: detected capacity change from 0 to 128 [ 296.937832][T13529] JBD2: no valid journal superblock found [ 296.943757][T13529] EXT4-fs (loop1): Could not load journal inode [ 296.961438][T11248] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 296.988396][T13531] vfat: Unknown parameter 'ÿÿÿÿÿÿÿÿÿÿÿÿ00000000000000000000' [ 296.997795][T13529] Cannot find del_set index 2 as target [ 297.126714][T13547] loop1: detected capacity change from 0 to 1024 [ 297.134313][T13547] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 297.145336][T13547] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 297.157800][T13547] JBD2: no valid journal superblock found [ 297.163619][T13547] EXT4-fs (loop1): Could not load journal inode [ 297.310415][T13532] binfmt_misc: register: failed to install interpreter file ./cgroup.cpu/cpuset.cpus [ 297.322419][T13556] Cannot find del_set index 2 as target [ 297.335684][T13558] FAULT_INJECTION: forcing a failure. [ 297.335684][T13558] name failslab, interval 1, probability 0, space 0, times 0 [ 297.348548][T13558] CPU: 1 UID: 0 PID: 13558 Comm: syz.4.3587 Not tainted 6.16.0-rc1-syzkaller-00003-gf09079bd04a9 #0 PREEMPT(voluntary) [ 297.348587][T13558] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 297.348610][T13558] Call Trace: [ 297.348618][T13558] [ 297.348702][T13558] __dump_stack+0x1d/0x30 [ 297.348732][T13558] dump_stack_lvl+0xe8/0x140 [ 297.348753][T13558] dump_stack+0x15/0x1b [ 297.348770][T13558] should_fail_ex+0x265/0x280 [ 297.348877][T13558] ? selinux_netlbl_sock_genattr+0x88/0x260 [ 297.348901][T13558] should_failslab+0x8c/0xb0 [ 297.348924][T13558] __kmalloc_cache_noprof+0x4c/0x320 [ 297.349095][T13558] selinux_netlbl_sock_genattr+0x88/0x260 [ 297.349126][T13558] selinux_netlbl_socket_post_create+0x68/0x100 [ 297.349159][T13558] selinux_socket_post_create+0x214/0x2a0 [ 297.349250][T13558] security_socket_post_create+0x5d/0xb0 [ 297.349297][T13558] __sock_create+0x362/0x5b0 [ 297.349412][T13558] sock_create_kern+0x38/0x50 [ 297.349483][T13558] smc_create+0xc6/0x150 [ 297.349523][T13558] __sock_create+0x2ec/0x5b0 [ 297.349585][T13558] __sys_socket+0xb0/0x180 [ 297.349624][T13558] __x64_sys_socket+0x3f/0x50 [ 297.349705][T13558] x64_sys_call+0x285a/0x2fb0 [ 297.349731][T13558] do_syscall_64+0xd2/0x200 [ 297.349753][T13558] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 297.349822][T13558] ? clear_bhb_loop+0x40/0x90 [ 297.349896][T13558] ? clear_bhb_loop+0x40/0x90 [ 297.349925][T13558] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 297.349953][T13558] RIP: 0033:0x7f2a95d9e929 [ 297.349977][T13558] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 297.350069][T13558] RSP: 002b:00007f2a94407038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 297.350099][T13558] RAX: ffffffffffffffda RBX: 00007f2a95fc5fa0 RCX: 00007f2a95d9e929 [ 297.350115][T13558] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 000000000000002b [ 297.350206][T13558] RBP: 00007f2a94407090 R08: 0000000000000000 R09: 0000000000000000 [ 297.350224][T13558] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 297.350238][T13558] R13: 0000000000000000 R14: 00007f2a95fc5fa0 R15: 00007ffc0c678a68 [ 297.350261][T13558] [ 297.617016][T13564] loop4: detected capacity change from 0 to 1024 [ 297.632752][T13567] loop1: detected capacity change from 0 to 1024 [ 297.655413][T13567] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 297.666441][T13567] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 297.682357][T13564] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 297.695570][T13567] JBD2: no valid journal superblock found [ 297.701439][T13567] EXT4-fs (loop1): Could not load journal inode [ 297.726427][T13567] Cannot find del_set index 2 as target [ 297.740590][T13564] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 297.792280][T13564] EXT4-fs (loop4): orphan cleanup on readonly fs [ 297.807032][T13564] EXT4-fs error (device loop4): __ext4_get_inode_loc:4792: comm syz.4.3589: Invalid inode table block 0 in block_group 0 [ 297.839984][T13564] EXT4-fs (loop4): Remounting filesystem read-only [ 297.846655][T13564] Quota error (device loop4): write_blk: dquota write failed [ 297.854151][T13564] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 297.864341][T13564] EXT4-fs (loop4): 1 truncate cleaned up [ 297.883691][T13564] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 297.923300][ T3416] hid-generic 0000:0000:0000.0093: unknown main item tag 0x0 [ 297.930791][ T3416] hid-generic 0000:0000:0000.0093: unknown main item tag 0x0 [ 297.930914][T13585] loop0: detected capacity change from 0 to 1024 [ 297.938252][ T3416] hid-generic 0000:0000:0000.0093: unknown main item tag 0x0 [ 297.945117][T13585] EXT4-fs: dax option not supported [ 297.959094][ T29] audit: type=1326 audit(1749588242.277:18756): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13582 comm="syz.1.3598" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6c60ee929 code=0x7ffc0000 [ 297.983036][ T29] audit: type=1326 audit(1749588242.277:18757): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13582 comm="syz.1.3598" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6c60ee929 code=0x7ffc0000 [ 298.008472][ T3416] hid-generic 0000:0000:0000.0093: unknown main item tag 0x0 [ 298.015914][ T3416] hid-generic 0000:0000:0000.0093: unknown main item tag 0x0 [ 298.023427][ T3416] hid-generic 0000:0000:0000.0093: unknown main item tag 0x0 [ 298.030942][ T3416] hid-generic 0000:0000:0000.0093: unknown main item tag 0x0 [ 298.038432][ T3416] hid-generic 0000:0000:0000.0093: unknown main item tag 0x0 [ 298.043401][T13585] loop0: detected capacity change from 0 to 128 [ 298.045828][ T3416] hid-generic 0000:0000:0000.0093: unknown main item tag 0x0 [ 298.059599][ T3416] hid-generic 0000:0000:0000.0093: unknown main item tag 0x0 [ 298.067105][ T3416] hid-generic 0000:0000:0000.0093: unknown main item tag 0x0 [ 298.072997][T13580] loop3: detected capacity change from 0 to 1024 [ 298.074707][ T3416] hid-generic 0000:0000:0000.0093: unknown main item tag 0x0 [ 298.082501][T13585] vfat: Unknown parameter 'ÿÿÿÿÿÿÿÿÿÿÿÿ00000000000000000000' [ 298.088707][ T3416] hid-generic 0000:0000:0000.0093: unknown main item tag 0x0 [ 298.089058][ T3416] hid-generic 0000:0000:0000.0093: unknown main item tag 0x0 [ 298.097020][T11626] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 298.103763][ T3416] hid-generic 0000:0000:0000.0093: unknown main item tag 0x0 [ 298.127753][ T3416] hid-generic 0000:0000:0000.0093: unknown main item tag 0x0 [ 298.129121][T13580] EXT4-fs: dax option not supported [ 298.135311][ T3416] hid-generic 0000:0000:0000.0093: unknown main item tag 0x0 [ 298.147948][ T3416] hid-generic 0000:0000:0000.0093: unknown main item tag 0x0 [ 298.155502][ T3416] hid-generic 0000:0000:0000.0093: unknown main item tag 0x0 [ 298.162988][ T3416] hid-generic 0000:0000:0000.0093: unknown main item tag 0x0 [ 298.170470][ T3416] hid-generic 0000:0000:0000.0093: unknown main item tag 0x0 [ 298.177887][ T3416] hid-generic 0000:0000:0000.0093: unknown main item tag 0x0 [ 298.185368][ T3416] hid-generic 0000:0000:0000.0093: unknown main item tag 0x0 [ 298.192996][ T3416] hid-generic 0000:0000:0000.0093: unknown main item tag 0x0 [ 298.200481][ T3416] hid-generic 0000:0000:0000.0093: unknown main item tag 0x0 [ 298.207903][ T3416] hid-generic 0000:0000:0000.0093: unknown main item tag 0x0 [ 298.215405][ T3416] hid-generic 0000:0000:0000.0093: unknown main item tag 0x0 [ 298.222866][ T3416] hid-generic 0000:0000:0000.0093: unknown main item tag 0x0 [ 298.233388][T13580] loop3: detected capacity change from 0 to 128 [ 298.238349][ T3416] hid-generic 0000:0000:0000.0093: hidraw0: HID v0.00 Device [syz0] on syz1 [ 298.251251][T13580] vfat: Unknown parameter 'ÿÿÿÿÿÿÿÿÿÿÿÿ00000000000000000000' [ 298.342158][T13597] loop1: detected capacity change from 0 to 1024 [ 298.377497][T13597] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 298.388673][T13597] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 298.416227][T13597] JBD2: no valid journal superblock found [ 298.422099][T13597] EXT4-fs (loop1): Could not load journal inode [ 298.423029][T13606] loop2: detected capacity change from 0 to 1024 [ 298.435677][T13606] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 298.446665][T13606] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 298.447767][T13597] Cannot find del_set index 2 as target [ 298.459079][T13606] JBD2: no valid journal superblock found [ 298.467758][T13606] EXT4-fs (loop2): Could not load journal inode [ 298.504425][T13606] Cannot find del_set index 2 as target [ 298.513450][T13610] FAULT_INJECTION: forcing a failure. [ 298.513450][T13610] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 298.527714][T13610] CPU: 0 UID: 0 PID: 13610 Comm: syz.4.3606 Not tainted 6.16.0-rc1-syzkaller-00003-gf09079bd04a9 #0 PREEMPT(voluntary) [ 298.527744][T13610] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 298.527764][T13610] Call Trace: [ 298.527771][T13610] [ 298.527780][T13610] __dump_stack+0x1d/0x30 [ 298.527807][T13610] dump_stack_lvl+0xe8/0x140 [ 298.527907][T13610] dump_stack+0x15/0x1b [ 298.527936][T13610] should_fail_ex+0x265/0x280 [ 298.527972][T13610] should_fail+0xb/0x20 [ 298.528003][T13610] should_fail_usercopy+0x1a/0x20 [ 298.528078][T13610] _copy_to_user+0x20/0xa0 [ 298.528109][T13610] simple_read_from_buffer+0xb5/0x130 [ 298.528149][T13610] proc_fail_nth_read+0x100/0x140 [ 298.528217][T13610] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 298.528244][T13610] vfs_read+0x19d/0x6f0 [ 298.528267][T13610] ? __rcu_read_unlock+0x4f/0x70 [ 298.528355][T13610] ? __fget_files+0x184/0x1c0 [ 298.528381][T13610] ksys_read+0xda/0x1a0 [ 298.528405][T13610] __x64_sys_read+0x40/0x50 [ 298.528430][T13610] x64_sys_call+0x2d77/0x2fb0 [ 298.528550][T13610] do_syscall_64+0xd2/0x200 [ 298.528576][T13610] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 298.528674][T13610] ? clear_bhb_loop+0x40/0x90 [ 298.528697][T13610] ? clear_bhb_loop+0x40/0x90 [ 298.528726][T13610] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 298.528753][T13610] RIP: 0033:0x7f2a95d9d33c [ 298.528773][T13610] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 298.528873][T13610] RSP: 002b:00007f2a94407030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 298.528893][T13610] RAX: ffffffffffffffda RBX: 00007f2a95fc5fa0 RCX: 00007f2a95d9d33c [ 298.528905][T13610] RDX: 000000000000000f RSI: 00007f2a944070a0 RDI: 0000000000000007 [ 298.528918][T13610] RBP: 00007f2a94407090 R08: 0000000000000000 R09: 0000000000000000 [ 298.528936][T13610] R10: 0001000000201005 R11: 0000000000000246 R12: 0000000000000001 [ 298.528949][T13610] R13: 0000000000000000 R14: 00007f2a95fc5fa0 R15: 00007ffc0c678a68 [ 298.528973][T13610] [ 298.796712][T13614] loop3: detected capacity change from 0 to 1024 [ 298.842949][T13618] loop0: detected capacity change from 0 to 1024 [ 298.855598][T13614] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 298.866656][T13614] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 298.889342][T13614] JBD2: no valid journal superblock found [ 298.895162][T13614] EXT4-fs (loop3): Could not load journal inode [ 298.896312][T13618] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 298.945493][T13614] Cannot find del_set index 2 as target [ 298.952796][T13618] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 298.978342][T13618] EXT4-fs (loop0): orphan cleanup on readonly fs [ 299.034502][T13618] EXT4-fs error (device loop0): __ext4_get_inode_loc:4792: comm syz.0.3610: Invalid inode table block 0 in block_group 0 [ 299.058134][T13633] FAULT_INJECTION: forcing a failure. [ 299.058134][T13633] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 299.071349][T13633] CPU: 1 UID: 0 PID: 13633 Comm: syz.1.3614 Not tainted 6.16.0-rc1-syzkaller-00003-gf09079bd04a9 #0 PREEMPT(voluntary) [ 299.071388][T13633] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 299.071482][T13633] Call Trace: [ 299.071491][T13633] [ 299.071501][T13633] __dump_stack+0x1d/0x30 [ 299.071547][T13633] dump_stack_lvl+0xe8/0x140 [ 299.071570][T13633] dump_stack+0x15/0x1b [ 299.071586][T13633] should_fail_ex+0x265/0x280 [ 299.071695][T13633] should_fail+0xb/0x20 [ 299.071728][T13633] should_fail_usercopy+0x1a/0x20 [ 299.071752][T13633] _copy_from_user+0x1c/0xb0 [ 299.071785][T13633] ___sys_sendmsg+0xc1/0x1d0 [ 299.071868][T13633] __x64_sys_sendmsg+0xd4/0x160 [ 299.071895][T13633] x64_sys_call+0x2999/0x2fb0 [ 299.071950][T13633] do_syscall_64+0xd2/0x200 [ 299.071979][T13633] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 299.072012][T13633] ? clear_bhb_loop+0x40/0x90 [ 299.072041][T13633] ? clear_bhb_loop+0x40/0x90 [ 299.072070][T13633] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 299.072099][T13633] RIP: 0033:0x7fa6c60ee929 [ 299.072126][T13633] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 299.072168][T13633] RSP: 002b:00007fa6c4736038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 299.072191][T13633] RAX: ffffffffffffffda RBX: 00007fa6c6316080 RCX: 00007fa6c60ee929 [ 299.072204][T13633] RDX: 0000000000000000 RSI: 0000200000000380 RDI: 0000000000000006 [ 299.072225][T13633] RBP: 00007fa6c4736090 R08: 0000000000000000 R09: 0000000000000000 [ 299.072238][T13633] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 299.072255][T13633] R13: 0000000000000000 R14: 00007fa6c6316080 R15: 00007ffc56ff0918 [ 299.072280][T13633] [ 299.256354][T13618] EXT4-fs (loop0): Remounting filesystem read-only [ 299.259269][T13634] loop4: detected capacity change from 0 to 512 [ 299.264676][T13618] EXT4-fs (loop0): 1 truncate cleaned up [ 299.275105][T13634] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 299.279627][T13618] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 299.307095][T13621] loop2: detected capacity change from 0 to 512 [ 299.314373][T13621] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 299.325836][T12906] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 299.326272][T13634] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 299.348708][T13634] ext4 filesystem being mounted at /169/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 299.349598][T13636] vhci_hcd: default hub control req: 1f0b v0004 i0000 l0 [ 299.369945][T13621] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 299.382720][T13621] ext4 filesystem being mounted at /143/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 299.405460][T13623] FAULT_INJECTION: forcing a failure. [ 299.405460][T13623] name failslab, interval 1, probability 0, space 0, times 0 [ 299.418723][T13623] CPU: 0 UID: 0 PID: 13623 Comm: syz.4.3612 Not tainted 6.16.0-rc1-syzkaller-00003-gf09079bd04a9 #0 PREEMPT(voluntary) [ 299.418758][T13623] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 299.418772][T13623] Call Trace: [ 299.418778][T13623] [ 299.418801][T13623] __dump_stack+0x1d/0x30 [ 299.418824][T13623] dump_stack_lvl+0xe8/0x140 [ 299.418844][T13623] dump_stack+0x15/0x1b [ 299.418862][T13623] should_fail_ex+0x265/0x280 [ 299.419002][T13623] should_failslab+0x8c/0xb0 [ 299.419028][T13623] kmem_cache_alloc_noprof+0x50/0x310 [ 299.419065][T13623] ? getname_flags+0x80/0x3b0 [ 299.419149][T13623] getname_flags+0x80/0x3b0 [ 299.419175][T13623] user_path_at+0x28/0x130 [ 299.419207][T13623] __se_sys_quotactl+0xb6/0x670 [ 299.419295][T13623] __x64_sys_quotactl+0x55/0x70 [ 299.419327][T13623] x64_sys_call+0x2886/0x2fb0 [ 299.419368][T13623] do_syscall_64+0xd2/0x200 [ 299.419424][T13623] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 299.419452][T13623] ? clear_bhb_loop+0x40/0x90 [ 299.419476][T13623] ? clear_bhb_loop+0x40/0x90 [ 299.419500][T13623] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 299.419630][T13623] RIP: 0033:0x7f2a95d9e929 [ 299.419647][T13623] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 299.419667][T13623] RSP: 002b:00007f2a94407038 EFLAGS: 00000246 ORIG_RAX: 00000000000000b3 [ 299.419687][T13623] RAX: ffffffffffffffda RBX: 00007f2a95fc5fa0 RCX: 00007f2a95d9e929 [ 299.419701][T13623] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: ffffffff80000200 [ 299.419715][T13623] RBP: 00007f2a94407090 R08: 0000000000000000 R09: 0000000000000000 [ 299.419728][T13623] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 299.419743][T13623] R13: 0000000000000000 R14: 00007f2a95fc5fa0 R15: 00007ffc0c678a68 [ 299.419837][T13623] [ 299.630066][T13647] loop3: detected capacity change from 0 to 1024 [ 299.637129][T13647] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 299.648100][T13647] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 299.659241][T13647] JBD2: no valid journal superblock found [ 299.665039][T13647] EXT4-fs (loop3): Could not load journal inode [ 299.676879][T13647] Cannot find del_set index 2 as target [ 299.721413][T11436] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 299.730938][T13649] loop3: detected capacity change from 0 to 512 [ 299.751075][T13649] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 299.763959][T13649] ext4 filesystem being mounted at /158/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 299.777441][T13649] EXT4-fs error (device loop3): ext4_do_update_inode:5568: inode #2: comm syz.3.3620: corrupted inode contents [ 299.789615][T13649] EXT4-fs error (device loop3): ext4_dirty_inode:6459: inode #2: comm syz.3.3620: mark_inode_dirty error [ 299.801265][T13649] EXT4-fs error (device loop3): ext4_do_update_inode:5568: inode #2: comm syz.3.3620: corrupted inode contents [ 299.801671][T11626] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 299.813670][T13649] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #2: comm syz.3.3620: mark_inode_dirty error [ 299.855220][T13658] netlink: 'syz.1.3623': attribute type 1 has an invalid length. [ 299.863696][T13655] loop4: detected capacity change from 0 to 2048 [ 299.872418][T13649] netlink: 'syz.3.3620': attribute type 4 has an invalid length. [ 299.872961][T13658] 8021q: adding VLAN 0 to HW filter on device bond1 [ 299.891635][T13655] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 299.915530][T13655] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 299.926574][T11248] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 299.977359][ T10] hid-generic 0000:0000:0000.0094: unknown main item tag 0x0 [ 299.985020][ T10] hid-generic 0000:0000:0000.0094: unknown main item tag 0x0 [ 299.992495][ T10] hid-generic 0000:0000:0000.0094: unknown main item tag 0x0 [ 300.000320][ T10] hid-generic 0000:0000:0000.0094: unknown main item tag 0x0 [ 300.007772][ T10] hid-generic 0000:0000:0000.0094: unknown main item tag 0x0 [ 300.015258][ T10] hid-generic 0000:0000:0000.0094: unknown main item tag 0x0 [ 300.022786][ T10] hid-generic 0000:0000:0000.0094: unknown main item tag 0x0 [ 300.030319][ T10] hid-generic 0000:0000:0000.0094: unknown main item tag 0x0 [ 300.037757][ T10] hid-generic 0000:0000:0000.0094: unknown main item tag 0x0 [ 300.045226][ T10] hid-generic 0000:0000:0000.0094: unknown main item tag 0x0 [ 300.052771][ T10] hid-generic 0000:0000:0000.0094: unknown main item tag 0x0 [ 300.056993][T13671] loop1: detected capacity change from 0 to 2048 [ 300.060236][ T10] hid-generic 0000:0000:0000.0094: unknown main item tag 0x0 [ 300.060264][ T10] hid-generic 0000:0000:0000.0094: unknown main item tag 0x0 [ 300.060575][ T10] hid-generic 0000:0000:0000.0094: unknown main item tag 0x0 [ 300.089241][ T10] hid-generic 0000:0000:0000.0094: unknown main item tag 0x0 [ 300.096787][ T10] hid-generic 0000:0000:0000.0094: unknown main item tag 0x0 [ 300.104330][ T10] hid-generic 0000:0000:0000.0094: unknown main item tag 0x0 [ 300.111782][ T10] hid-generic 0000:0000:0000.0094: unknown main item tag 0x0 [ 300.119234][ T10] hid-generic 0000:0000:0000.0094: unknown main item tag 0x0 [ 300.120688][T13671] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 300.126642][ T10] hid-generic 0000:0000:0000.0094: unknown main item tag 0x0 [ 300.140910][T13671] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 300.146153][ T10] hid-generic 0000:0000:0000.0094: unknown main item tag 0x0 [ 300.162585][ T10] hid-generic 0000:0000:0000.0094: unknown main item tag 0x0 [ 300.170066][ T10] hid-generic 0000:0000:0000.0094: unknown main item tag 0x0 [ 300.177485][ T10] hid-generic 0000:0000:0000.0094: unknown main item tag 0x0 [ 300.184912][ T10] hid-generic 0000:0000:0000.0094: unknown main item tag 0x0 [ 300.192333][ T10] hid-generic 0000:0000:0000.0094: unknown main item tag 0x0 [ 300.199746][ T10] hid-generic 0000:0000:0000.0094: unknown main item tag 0x0 [ 300.207234][ T10] hid-generic 0000:0000:0000.0094: unknown main item tag 0x0 [ 300.215217][ T10] hid-generic 0000:0000:0000.0094: hidraw0: HID v0.00 Device [syz0] on syz1 [ 300.270773][T13679] loop1: detected capacity change from 0 to 1024 [ 300.289617][T13679] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 300.300743][T13679] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 300.311859][T13679] JBD2: no valid journal superblock found [ 300.317889][T13679] EXT4-fs (loop1): Could not load journal inode [ 300.318043][T13686] loop4: detected capacity change from 0 to 1024 [ 300.333356][T13686] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 300.333496][T13687] x_tables: duplicate underflow at hook 2 [ 300.344336][T13686] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 300.362651][T13686] JBD2: no valid journal superblock found [ 300.368599][T13686] EXT4-fs (loop4): Could not load journal inode [ 300.379178][T13679] Cannot find del_set index 2 as target [ 300.411843][T13686] Cannot find del_set index 2 as target [ 300.447462][T13687] hub 6-0:1.0: USB hub found [ 300.463133][T13687] hub 6-0:1.0: 8 ports detected [ 300.646759][T13707] loop3: detected capacity change from 0 to 1024 [ 300.667573][T13707] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 300.711405][T13714] loop2: detected capacity change from 0 to 1024 [ 300.739500][T13714] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 300.750496][T13714] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 300.760434][T13707] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 300.766895][T13714] JBD2: no valid journal superblock found [ 300.774281][T13714] EXT4-fs (loop2): Could not load journal inode [ 300.785822][T13707] EXT4-fs (loop3): orphan cleanup on readonly fs [ 300.795892][T13707] EXT4-fs error (device loop3): __ext4_get_inode_loc:4792: comm syz.3.3642: Invalid inode table block 0 in block_group 0 [ 300.821371][T13707] EXT4-fs (loop3): Remounting filesystem read-only [ 300.834647][T13707] EXT4-fs (loop3): 1 truncate cleaned up [ 300.846802][T13707] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 300.850193][T13726] loop4: detected capacity change from 0 to 1024 [ 300.884102][T13726] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 300.895149][T13726] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 300.906332][T13728] loop1: detected capacity change from 0 to 1024 [ 300.915981][T13731] __nla_validate_parse: 13 callbacks suppressed [ 300.915996][T13731] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3651'. [ 300.929399][T13726] JBD2: no valid journal superblock found [ 300.937215][T13726] EXT4-fs (loop4): Could not load journal inode [ 300.957025][T13728] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 300.985810][T13728] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 300.985810][T13733] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3652'. [ 301.014660][T13728] EXT4-fs (loop1): orphan cleanup on readonly fs [ 301.030680][T13728] EXT4-fs error (device loop1): __ext4_get_inode_loc:4792: comm syz.1.3649: Invalid inode table block 0 in block_group 0 [ 301.043261][T13736] serio: Serial port ptm2 [ 301.056448][T13728] EXT4-fs (loop1): Remounting filesystem read-only [ 301.069772][T13728] EXT4-fs (loop1): 1 truncate cleaned up [ 301.181158][T13748] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3658'. [ 301.201213][T13748] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3658'. [ 301.209625][T13746] netlink: 'syz.1.3657': attribute type 1 has an invalid length. [ 301.231616][T13746] 8021q: adding VLAN 0 to HW filter on device bond2 [ 301.243200][T13750] loop3: detected capacity change from 0 to 2048 [ 301.243179][T13746] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3657'. [ 301.335494][T13764] loop1: detected capacity change from 0 to 1024 [ 301.348718][T13764] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 301.359875][T13764] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 301.363232][T13766] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3664'. [ 301.371945][T13764] JBD2: no valid journal superblock found [ 301.384556][T13764] EXT4-fs (loop1): Could not load journal inode [ 301.483633][T13772] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3666'. [ 301.524716][T13774] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3668'. [ 301.542881][T13774] loop1: detected capacity change from 0 to 1024 [ 301.553550][T13774] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 301.582702][T13774] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 301.631755][ T29] kauditd_printk_skb: 196 callbacks suppressed [ 301.631771][ T29] audit: type=1400 audit(1749588246.007:18948): avc: denied { read } for pid=13775 comm="syz.4.3667" name="event0" dev="devtmpfs" ino=242 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 301.638038][T13774] EXT4-fs (loop1): orphan cleanup on readonly fs [ 301.650113][T13767] binfmt_misc: register: failed to install interpreter file ./cgroup.cpu/cpuset.cpus [ 301.679880][T13774] EXT4-fs error (device loop1): __ext4_get_inode_loc:4792: comm syz.1.3668: Invalid inode table block 0 in block_group 0 [ 301.762681][T13787] netlink: 'syz.4.3671': attribute type 1 has an invalid length. [ 301.773144][T13774] EXT4-fs (loop1): Remounting filesystem read-only [ 301.779814][T13774] Quota error (device loop1): write_blk: dquota write failed [ 301.787383][T13774] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 301.798559][T13787] 8021q: adding VLAN 0 to HW filter on device bond3 [ 301.798995][T13774] EXT4-fs (loop1): 1 truncate cleaned up [ 301.824252][T13787] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3671'. [ 301.838744][T13790] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3672'. [ 301.881540][ T29] audit: type=1400 audit(1749588246.257:18949): avc: denied { mount } for pid=13793 comm="syz.3.3675" name="/" dev="configfs" ino=1238 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 301.932233][ T29] audit: type=1400 audit(1749588246.277:18950): avc: denied { search } for pid=13793 comm="syz.3.3675" name="/" dev="configfs" ino=1238 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 301.954977][ T29] audit: type=1400 audit(1749588246.277:18951): avc: denied { read } for pid=13793 comm="syz.3.3675" name="loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 301.979799][ T29] audit: type=1400 audit(1749588246.277:18952): avc: denied { open } for pid=13793 comm="syz.3.3675" path="/dev/loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 302.034403][T13809] loop4: detected capacity change from 0 to 128 [ 302.112613][T13815] loop2: detected capacity change from 0 to 1024 [ 302.123174][T13815] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 302.134452][T13815] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 302.144986][T13820] netlink: 'syz.1.3685': attribute type 1 has an invalid length. [ 302.147513][T13815] JBD2: no valid journal superblock found [ 302.158685][T13815] EXT4-fs (loop2): Could not load journal inode [ 302.166087][T13820] 8021q: adding VLAN 0 to HW filter on device bond3 [ 302.173134][T13817] loop3: detected capacity change from 0 to 1024 [ 302.189322][T13820] bond3: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 302.201816][T13820] bond3: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 302.215484][T13820] bond3: (slave ipvlan2): Error -95 calling set_mac_address [ 302.223920][T13815] set_target_v3_checkentry: 3 callbacks suppressed [ 302.223940][T13815] Cannot find del_set index 2 as target [ 302.236684][T13817] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 302.302747][T13823] dummy0: entered promiscuous mode [ 302.311629][T13823] dummy0: left promiscuous mode [ 302.318115][T13817] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 302.331403][T13817] EXT4-fs (loop3): orphan cleanup on readonly fs [ 302.344208][T13817] EXT4-fs error (device loop3): __ext4_get_inode_loc:4792: comm syz.3.3684: Invalid inode table block 0 in block_group 0 [ 302.357214][T13817] EXT4-fs (loop3): Remounting filesystem read-only [ 302.363870][T13817] Quota error (device loop3): write_blk: dquota write failed [ 302.371301][T13817] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 302.384219][T13817] EXT4-fs (loop3): 1 truncate cleaned up [ 302.408958][T13830] FAULT_INJECTION: forcing a failure. [ 302.408958][T13830] name failslab, interval 1, probability 0, space 0, times 0 [ 302.421847][T13830] CPU: 0 UID: 0 PID: 13830 Comm: syz.0.3689 Not tainted 6.16.0-rc1-syzkaller-00003-gf09079bd04a9 #0 PREEMPT(voluntary) [ 302.421886][T13830] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 302.421903][T13830] Call Trace: [ 302.421910][T13830] [ 302.421920][T13830] __dump_stack+0x1d/0x30 [ 302.421989][T13830] dump_stack_lvl+0xe8/0x140 [ 302.422013][T13830] dump_stack+0x15/0x1b [ 302.422035][T13830] should_fail_ex+0x265/0x280 [ 302.422158][T13830] should_failslab+0x8c/0xb0 [ 302.422184][T13830] kmem_cache_alloc_noprof+0x50/0x310 [ 302.422234][T13830] ? security_file_alloc+0x32/0x100 [ 302.422293][T13830] security_file_alloc+0x32/0x100 [ 302.422322][T13830] init_file+0x5c/0x1d0 [ 302.422358][T13830] alloc_empty_file+0x8b/0x200 [ 302.422458][T13830] path_openat+0x68/0x2170 [ 302.422498][T13830] ? should_fail_ex+0x30/0x280 [ 302.422536][T13830] ? should_fail_ex+0xdb/0x280 [ 302.422619][T13830] ? try_charge_memcg+0x200/0x9e0 [ 302.422643][T13830] ? css_rstat_updated+0xcd/0x5b0 [ 302.422687][T13830] do_filp_open+0x109/0x230 [ 302.422738][T13830] io_openat2+0x272/0x390 [ 302.422779][T13830] io_openat+0x1b/0x30 [ 302.422831][T13830] __io_issue_sqe+0xfb/0x2e0 [ 302.422884][T13830] ? io_wq_submit_work+0x572/0x5f0 [ 302.422926][T13830] io_issue_sqe+0x53/0x970 [ 302.422965][T13830] ? io_openat_prep+0x26a/0x2b0 [ 302.423038][T13830] io_submit_sqes+0x667/0xfd0 [ 302.423080][T13830] __se_sys_io_uring_enter+0x1c1/0x1b70 [ 302.423116][T13830] ? 0xffffffff81000000 [ 302.423196][T13830] ? __rcu_read_unlock+0x4f/0x70 [ 302.423224][T13830] ? get_pid_task+0x96/0xd0 [ 302.423250][T13830] ? proc_fail_nth_write+0x12d/0x160 [ 302.423278][T13830] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 302.423302][T13830] ? vfs_write+0x75e/0x8e0 [ 302.423341][T13830] ? __rcu_read_unlock+0x4f/0x70 [ 302.423368][T13830] ? __fget_files+0x184/0x1c0 [ 302.423398][T13830] ? fput+0x8f/0xc0 [ 302.423510][T13830] __x64_sys_io_uring_enter+0x78/0x90 [ 302.423546][T13830] x64_sys_call+0x28c8/0x2fb0 [ 302.423573][T13830] do_syscall_64+0xd2/0x200 [ 302.423597][T13830] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 302.423681][T13830] ? clear_bhb_loop+0x40/0x90 [ 302.423710][T13830] ? clear_bhb_loop+0x40/0x90 [ 302.423733][T13830] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 302.423755][T13830] RIP: 0033:0x7f804adbe929 [ 302.423776][T13830] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 302.423807][T13830] RSP: 002b:00007f8049427038 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 302.423831][T13830] RAX: ffffffffffffffda RBX: 00007f804afe5fa0 RCX: 00007f804adbe929 [ 302.423848][T13830] RDX: 00000000000012b2 RSI: 0000000000000d6a RDI: 0000000000000003 [ 302.423863][T13830] RBP: 00007f8049427090 R08: 0000000000000000 R09: 0000000000000000 [ 302.423878][T13830] R10: 0000000000000024 R11: 0000000000000246 R12: 0000000000000001 [ 302.423962][T13830] R13: 0000000000000000 R14: 00007f804afe5fa0 R15: 00007ffd53b20058 [ 302.423982][T13830] [ 302.824665][T13840] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 302.843926][T13837] IPVS: stopping master sync thread 13840 ... [ 302.885956][ T29] audit: type=1326 audit(1749588247.274:18953): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13847 comm="syz.3.3696" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5aa4cce929 code=0x7ffc0000 [ 302.927457][ T3416] hid-generic 0000:0000:0000.0095: unknown main item tag 0x0 [ 302.935125][ T3416] hid-generic 0000:0000:0000.0095: unknown main item tag 0x0 [ 302.942637][ T3416] hid-generic 0000:0000:0000.0095: unknown main item tag 0x0 [ 302.971697][ T3416] hid-generic 0000:0000:0000.0095: unknown main item tag 0x0 [ 302.979300][ T3416] hid-generic 0000:0000:0000.0095: unknown main item tag 0x0 [ 302.986773][ T3416] hid-generic 0000:0000:0000.0095: unknown main item tag 0x0 [ 302.994251][ T3416] hid-generic 0000:0000:0000.0095: unknown main item tag 0x0 [ 303.002062][ T3416] hid-generic 0000:0000:0000.0095: unknown main item tag 0x0 [ 303.008373][T13857] loop1: detected capacity change from 0 to 256 [ 303.009538][ T3416] hid-generic 0000:0000:0000.0095: unknown main item tag 0x0 [ 303.016778][T13857] FAT-fs (loop1): invalid media value (0x00) [ 303.023387][ T3416] hid-generic 0000:0000:0000.0095: unknown main item tag 0x0 [ 303.029231][T13857] FAT-fs (loop1): Can't find a valid FAT filesystem [ 303.036667][ T3416] hid-generic 0000:0000:0000.0095: unknown main item tag 0x0 [ 303.050855][ T3416] hid-generic 0000:0000:0000.0095: unknown main item tag 0x0 [ 303.058350][ T3416] hid-generic 0000:0000:0000.0095: unknown main item tag 0x0 [ 303.067614][ T3416] hid-generic 0000:0000:0000.0095: unknown main item tag 0x0 [ 303.075096][ T3416] hid-generic 0000:0000:0000.0095: unknown main item tag 0x0 [ 303.082609][ T3416] hid-generic 0000:0000:0000.0095: unknown main item tag 0x0 [ 303.090225][ T3416] hid-generic 0000:0000:0000.0095: unknown main item tag 0x0 [ 303.097708][ T3416] hid-generic 0000:0000:0000.0095: unknown main item tag 0x0 [ 303.105302][ T3416] hid-generic 0000:0000:0000.0095: unknown main item tag 0x0 [ 303.112827][ T3416] hid-generic 0000:0000:0000.0095: unknown main item tag 0x0 [ 303.114390][T13858] loop4: detected capacity change from 0 to 2048 [ 303.120415][ T3416] hid-generic 0000:0000:0000.0095: unknown main item tag 0x0 [ 303.134312][ T3416] hid-generic 0000:0000:0000.0095: unknown main item tag 0x0 [ 303.141738][ T3416] hid-generic 0000:0000:0000.0095: unknown main item tag 0x0 [ 303.149352][ T3416] hid-generic 0000:0000:0000.0095: unknown main item tag 0x0 [ 303.156955][ T3416] hid-generic 0000:0000:0000.0095: unknown main item tag 0x0 [ 303.164515][ T3416] hid-generic 0000:0000:0000.0095: unknown main item tag 0x0 [ 303.172248][ T3416] hid-generic 0000:0000:0000.0095: unknown main item tag 0x0 [ 303.180020][ T3416] hid-generic 0000:0000:0000.0095: unknown main item tag 0x0 [ 303.188612][ T3416] hid-generic 0000:0000:0000.0095: hidraw0: HID v0.00 Device [syz0] on syz1 [ 303.246453][T13867] loop4: detected capacity change from 0 to 1024 [ 303.270898][T13867] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 303.294806][T13867] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 303.314483][T13867] EXT4-fs (loop4): orphan cleanup on readonly fs [ 303.322744][T13867] EXT4-fs error (device loop4): __ext4_get_inode_loc:4792: comm syz.4.3702: Invalid inode table block 0 in block_group 0 [ 303.335845][T13867] EXT4-fs (loop4): Remounting filesystem read-only [ 303.342878][T13867] EXT4-fs (loop4): 1 truncate cleaned up [ 303.483515][T13880] loop4: detected capacity change from 0 to 1024 [ 303.498778][T13880] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 303.517972][T13880] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 303.532921][T13880] EXT4-fs (loop4): orphan cleanup on readonly fs [ 303.539895][T13880] EXT4-fs error (device loop4): __ext4_get_inode_loc:4792: comm syz.4.3707: Invalid inode table block 0 in block_group 0 [ 303.558870][T13880] EXT4-fs (loop4): Remounting filesystem read-only [ 303.589700][T13880] EXT4-fs (loop4): 1 truncate cleaned up [ 303.680145][T13892] loop2: detected capacity change from 0 to 1024 [ 303.687944][T13892] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 303.698987][T13892] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 303.699075][T13894] loop4: detected capacity change from 0 to 2048 [ 303.711675][T13892] JBD2: no valid journal superblock found [ 303.721352][T13892] EXT4-fs (loop2): Could not load journal inode [ 303.735091][T13892] Cannot find del_set index 2 as target [ 303.925602][T13915] loop1: detected capacity change from 0 to 512 [ 304.018359][T13915] ext4 filesystem being mounted at /82/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 304.036876][T13915] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.3719: bg 0: block 96: padding at end of block bitmap is not set [ 304.058942][T13925] bridge0: entered promiscuous mode [ 304.064495][T13925] macvlan3: entered promiscuous mode [ 304.072070][T13928] loop0: detected capacity change from 0 to 1024 [ 304.097003][T13929] loop3: detected capacity change from 0 to 1024 [ 304.101677][T13928] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 304.104485][T13929] EXT4-fs: dax option not supported [ 304.114387][T13928] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 304.128847][T13929] loop3: detected capacity change from 0 to 128 [ 304.131843][T13928] JBD2: no valid journal superblock found [ 304.137213][T13929] vfat: Unknown parameter 'ÿÿÿÿÿÿÿÿÿÿÿÿ00000000000000000000' [ 304.141277][T13928] EXT4-fs (loop0): Could not load journal inode [ 304.215008][T13928] Cannot find del_set index 2 as target [ 304.269893][T13949] FAULT_INJECTION: forcing a failure. [ 304.269893][T13949] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 304.283140][T13949] CPU: 0 UID: 0 PID: 13949 Comm: syz.0.3732 Not tainted 6.16.0-rc1-syzkaller-00003-gf09079bd04a9 #0 PREEMPT(voluntary) [ 304.283179][T13949] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 304.283195][T13949] Call Trace: [ 304.283201][T13949] [ 304.283209][T13949] __dump_stack+0x1d/0x30 [ 304.283231][T13949] dump_stack_lvl+0xe8/0x140 [ 304.283362][T13949] dump_stack+0x15/0x1b [ 304.283378][T13949] should_fail_ex+0x265/0x280 [ 304.283414][T13949] should_fail+0xb/0x20 [ 304.283455][T13949] should_fail_usercopy+0x1a/0x20 [ 304.283482][T13949] _copy_from_iter+0xcf/0xe40 [ 304.283588][T13949] ? __build_skb_around+0x1a0/0x200 [ 304.283632][T13949] ? __alloc_skb+0x223/0x320 [ 304.283712][T13949] netlink_sendmsg+0x471/0x6b0 [ 304.283741][T13949] ? __pfx_netlink_sendmsg+0x10/0x10 [ 304.283789][T13949] __sock_sendmsg+0x142/0x180 [ 304.283823][T13949] ____sys_sendmsg+0x31e/0x4e0 [ 304.283848][T13949] ___sys_sendmsg+0x17b/0x1d0 [ 304.283904][T13949] __x64_sys_sendmsg+0xd4/0x160 [ 304.284033][T13949] x64_sys_call+0x2999/0x2fb0 [ 304.284059][T13949] do_syscall_64+0xd2/0x200 [ 304.284081][T13949] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 304.284108][T13949] ? clear_bhb_loop+0x40/0x90 [ 304.284129][T13949] ? clear_bhb_loop+0x40/0x90 [ 304.284199][T13949] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 304.284225][T13949] RIP: 0033:0x7f804adbe929 [ 304.284244][T13949] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 304.284369][T13949] RSP: 002b:00007f8049427038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 304.284392][T13949] RAX: ffffffffffffffda RBX: 00007f804afe5fa0 RCX: 00007f804adbe929 [ 304.284409][T13949] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 304.284424][T13949] RBP: 00007f8049427090 R08: 0000000000000000 R09: 0000000000000000 [ 304.284436][T13949] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 304.284449][T13949] R13: 0000000000000000 R14: 00007f804afe5fa0 R15: 00007ffd53b20058 [ 304.284474][T13949] [ 304.535846][T13952] IPVS: stopping master sync thread 13953 ... [ 304.544676][T13953] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 304.651193][T13968] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 304.684826][T13968] vhci_hcd: default hub control req: 1f03 v0017 i0001 l0 [ 304.719065][T13971] loop4: detected capacity change from 0 to 512 [ 304.758114][T13971] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 304.796299][T13971] EXT4-fs (loop4): 1 truncate cleaned up [ 304.801344][T13980] loop2: detected capacity change from 0 to 1024 [ 304.814959][T13980] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 304.826117][T13980] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 304.844780][T13980] JBD2: no valid journal superblock found [ 304.850608][T13980] EXT4-fs (loop2): Could not load journal inode [ 304.927247][T13990] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 304.991468][T13980] Cannot find del_set index 2 as target [ 305.002961][T13995] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 305.012520][T13995] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 305.889847][T14011] loop3: detected capacity change from 0 to 2048 [ 306.230636][ T3416] hid-generic 0000:0000:0000.0096: unknown main item tag 0x0 [ 306.238305][ T3416] hid-generic 0000:0000:0000.0096: unknown main item tag 0x0 [ 306.245822][ T3416] hid-generic 0000:0000:0000.0096: unknown main item tag 0x0 [ 306.310076][ T3416] hid-generic 0000:0000:0000.0096: unknown main item tag 0x0 [ 306.317635][ T3416] hid-generic 0000:0000:0000.0096: unknown main item tag 0x0 [ 306.325077][ T3416] hid-generic 0000:0000:0000.0096: unknown main item tag 0x0 [ 306.332490][ T3416] hid-generic 0000:0000:0000.0096: unknown main item tag 0x0 [ 306.339930][ T3416] hid-generic 0000:0000:0000.0096: unknown main item tag 0x0 [ 306.347572][ T3416] hid-generic 0000:0000:0000.0096: unknown main item tag 0x0 [ 306.355059][ T3416] hid-generic 0000:0000:0000.0096: unknown main item tag 0x0 [ 306.362678][ T3416] hid-generic 0000:0000:0000.0096: unknown main item tag 0x0 [ 306.370293][ T3416] hid-generic 0000:0000:0000.0096: unknown main item tag 0x0 [ 306.377936][ T3416] hid-generic 0000:0000:0000.0096: unknown main item tag 0x0 [ 306.505136][T14045] loop0: detected capacity change from 0 to 2048 [ 306.532302][ T29] kauditd_printk_skb: 376 callbacks suppressed [ 306.532318][ T29] audit: type=1326 audit(1749588251.007:19326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14036 comm="syz.4.3764" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2a95d9e929 code=0x7ffc0000 [ 306.562307][ T29] audit: type=1326 audit(1749588251.007:19327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14036 comm="syz.4.3764" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a95d9e929 code=0x7ffc0000 [ 306.586067][ T29] audit: type=1326 audit(1749588251.007:19328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14036 comm="syz.4.3764" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a95d9e929 code=0x7ffc0000 [ 306.609774][ T29] audit: type=1326 audit(1749588251.007:19329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14036 comm="syz.4.3764" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2a95d9e929 code=0x7ffc0000 [ 306.610848][T14039] dummy0: entered promiscuous mode [ 306.633564][ T29] audit: type=1326 audit(1749588251.007:19330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14036 comm="syz.4.3764" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a95d9e929 code=0x7ffc0000 [ 306.633606][ T29] audit: type=1326 audit(1749588251.007:19331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14036 comm="syz.4.3764" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a95d9e929 code=0x7ffc0000 [ 306.633644][ T29] audit: type=1326 audit(1749588251.007:19332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14036 comm="syz.4.3764" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a95d9e929 code=0x7ffc0000 [ 306.633681][ T29] audit: type=1326 audit(1749588251.007:19333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14036 comm="syz.4.3764" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a95d9e929 code=0x7ffc0000 [ 306.633769][ T29] audit: type=1326 audit(1749588251.007:19334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14036 comm="syz.4.3764" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2a95d9e929 code=0x7ffc0000 [ 306.633804][ T29] audit: type=1326 audit(1749588251.007:19335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14036 comm="syz.4.3764" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a95d9e929 code=0x7ffc0000 [ 306.634020][ T3416] hid-generic 0000:0000:0000.0096: unknown main item tag 0x0 [ 306.634051][ T3416] hid-generic 0000:0000:0000.0096: unknown main item tag 0x0 [ 306.634141][ T3416] hid-generic 0000:0000:0000.0096: unknown main item tag 0x0 [ 306.634165][ T3416] hid-generic 0000:0000:0000.0096: unknown main item tag 0x0 [ 306.634195][ T3416] hid-generic 0000:0000:0000.0096: unknown main item tag 0x0 [ 306.634225][ T3416] hid-generic 0000:0000:0000.0096: unknown main item tag 0x0 [ 306.634253][ T3416] hid-generic 0000:0000:0000.0096: unknown main item tag 0x0 [ 306.792921][T14039] dummy0: left promiscuous mode [ 306.796986][ T3416] hid-generic 0000:0000:0000.0096: unknown main item tag 0x0 [ 306.797018][ T3416] hid-generic 0000:0000:0000.0096: unknown main item tag 0x0 [ 306.797087][ T3416] hid-generic 0000:0000:0000.0096: unknown main item tag 0x0 [ 306.797194][ T3416] hid-generic 0000:0000:0000.0096: unknown main item tag 0x0 [ 306.797220][ T3416] hid-generic 0000:0000:0000.0096: unknown main item tag 0x0 [ 306.797248][ T3416] hid-generic 0000:0000:0000.0096: unknown main item tag 0x0 [ 306.797272][ T3416] hid-generic 0000:0000:0000.0096: unknown main item tag 0x0 [ 306.868161][T14050] loop1: detected capacity change from 0 to 512 [ 306.869455][ T3416] hid-generic 0000:0000:0000.0096: unknown main item tag 0x0 [ 306.878169][T14050] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 306.898183][ T3416] hid-generic 0000:0000:0000.0096: hidraw0: HID v0.00 Device [syz0] on syz1 [ 306.967640][T14050] EXT4-fs (loop1): 1 truncate cleaned up [ 306.984102][T14056] loop4: detected capacity change from 0 to 2048 [ 307.053601][T14062] loop0: detected capacity change from 0 to 512 [ 307.075164][T14061] netlink: 'syz.3.3772': attribute type 1 has an invalid length. [ 307.095773][T14061] 8021q: adding VLAN 0 to HW filter on device bond1 [ 307.121264][T14066] __nla_validate_parse: 25 callbacks suppressed [ 307.121281][T14066] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3773'. [ 307.128554][T14061] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3772'. [ 307.168312][T14061] bond1: (slave ipvlan1): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 307.180825][T14061] bond1: (slave ipvlan1): The slave device specified does not support setting the MAC address [ 307.192992][T14047] binfmt_misc: register: failed to install interpreter file ./cgroup.cpu/cpuset.cpus [ 307.203593][T14061] bond1: (slave ipvlan1): Error -95 calling set_mac_address [ 307.213541][T14062] EXT4-fs (loop0): 1 orphan inode deleted [ 307.220022][T14062] ext4 filesystem being mounted at /64/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 307.232032][ T37] EXT4-fs error (device loop0): ext4_release_dquot:6969: comm kworker/u8:2: Failed to release dquot type 1 [ 307.253485][T14062] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 307.305622][T14073] loop4: detected capacity change from 0 to 1024 [ 307.307853][T14075] loop3: detected capacity change from 0 to 1024 [ 307.314172][T14073] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 307.319322][T14075] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 307.329507][T14073] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 307.340310][T14075] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 307.352746][T14075] JBD2: no valid journal superblock found [ 307.365573][T14075] EXT4-fs (loop3): Could not load journal inode [ 307.366354][T14073] JBD2: no valid journal superblock found [ 307.377823][T14073] EXT4-fs (loop4): Could not load journal inode [ 307.399792][T14075] Cannot find del_set index 2 as target [ 307.450870][T14073] Cannot find del_set index 2 as target [ 307.487178][T14084] loop3: detected capacity change from 0 to 1024 [ 307.523581][T14090] loop2: detected capacity change from 0 to 256 [ 307.533064][T14084] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 307.542967][T14084] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 307.552585][T14090] FAT-fs (loop2): invalid media value (0x00) [ 307.558641][T14090] FAT-fs (loop2): Can't find a valid FAT filesystem [ 307.565614][T14084] EXT4-fs (loop3): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 307.578924][T14084] EXT4-fs error (device loop3): ext4_get_journal_inode:5796: inode #5: comm syz.3.3779: unexpected bad inode w/o EXT4_IGET_BAD [ 307.595149][T14084] EXT4-fs (loop3): no journal found [ 307.600428][T14084] EXT4-fs (loop3): can't get journal size [ 307.615103][T14094] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3782'. [ 307.645824][T14094] loop4: detected capacity change from 0 to 1024 [ 307.689993][T14094] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 307.701954][T14094] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 307.726795][T14094] EXT4-fs (loop4): orphan cleanup on readonly fs [ 307.735550][T14098] loop0: detected capacity change from 0 to 512 [ 307.763249][T14098] EXT4-fs (loop0): 1 orphan inode deleted [ 307.778829][ T37] EXT4-fs error (device loop0): ext4_release_dquot:6969: comm kworker/u8:2: Failed to release dquot type 1 [ 307.791938][T14094] EXT4-fs error (device loop4): __ext4_get_inode_loc:4792: comm syz.4.3782: Invalid inode table block 0 in block_group 0 [ 307.806841][T14098] ext4 filesystem being mounted at /68/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 307.831484][T14098] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 307.869426][T14094] EXT4-fs (loop4): Remounting filesystem read-only [ 307.885399][T14094] EXT4-fs (loop4): 1 truncate cleaned up [ 307.910221][T14112] loop0: detected capacity change from 0 to 2368 [ 307.933317][T14114] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3787'. [ 307.962709][T14114] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3787'. [ 307.982812][T14118] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3789'. [ 308.004121][T14118] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3789'. [ 308.049297][T14122] loop4: detected capacity change from 0 to 1024 [ 308.056766][T14122] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 308.068007][T14122] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 308.080503][T14122] JBD2: no valid journal superblock found [ 308.086508][T14122] EXT4-fs (loop4): Could not load journal inode [ 308.110243][T14122] Cannot find del_set index 2 as target [ 308.270475][ T3416] hid-generic 0000:0000:0000.0097: unknown main item tag 0x0 [ 308.278146][ T3416] hid-generic 0000:0000:0000.0097: unknown main item tag 0x0 [ 308.285567][ T3416] hid-generic 0000:0000:0000.0097: unknown main item tag 0x0 [ 308.315618][ T3416] hid-generic 0000:0000:0000.0097: unknown main item tag 0x0 [ 308.323121][ T3416] hid-generic 0000:0000:0000.0097: unknown main item tag 0x0 [ 308.330698][ T3416] hid-generic 0000:0000:0000.0097: unknown main item tag 0x0 [ 308.338144][ T3416] hid-generic 0000:0000:0000.0097: unknown main item tag 0x0 [ 308.345765][ T3416] hid-generic 0000:0000:0000.0097: unknown main item tag 0x0 [ 308.353206][ T3416] hid-generic 0000:0000:0000.0097: unknown main item tag 0x0 [ 308.360660][ T3416] hid-generic 0000:0000:0000.0097: unknown main item tag 0x0 [ 308.368095][ T3416] hid-generic 0000:0000:0000.0097: unknown main item tag 0x0 [ 308.375572][ T3416] hid-generic 0000:0000:0000.0097: unknown main item tag 0x0 [ 308.382979][ T3416] hid-generic 0000:0000:0000.0097: unknown main item tag 0x0 [ 308.392121][ T3416] hid-generic 0000:0000:0000.0097: unknown main item tag 0x0 [ 308.399641][ T3416] hid-generic 0000:0000:0000.0097: unknown main item tag 0x0 [ 308.407358][ T3416] hid-generic 0000:0000:0000.0097: unknown main item tag 0x0 [ 308.414914][ T3416] hid-generic 0000:0000:0000.0097: unknown main item tag 0x0 [ 308.422327][ T3416] hid-generic 0000:0000:0000.0097: unknown main item tag 0x0 [ 308.429800][ T3416] hid-generic 0000:0000:0000.0097: unknown main item tag 0x0 [ 308.437250][ T3416] hid-generic 0000:0000:0000.0097: unknown main item tag 0x0 [ 308.444707][ T3416] hid-generic 0000:0000:0000.0097: unknown main item tag 0x0 [ 308.452250][ T3416] hid-generic 0000:0000:0000.0097: unknown main item tag 0x0 [ 308.459687][ T3416] hid-generic 0000:0000:0000.0097: unknown main item tag 0x0 [ 308.467426][ T3416] hid-generic 0000:0000:0000.0097: unknown main item tag 0x0 [ 308.475024][ T3416] hid-generic 0000:0000:0000.0097: unknown main item tag 0x0 [ 308.482584][ T3416] hid-generic 0000:0000:0000.0097: unknown main item tag 0x0 [ 308.489997][ T3416] hid-generic 0000:0000:0000.0097: unknown main item tag 0x0 [ 308.497594][ T3416] hid-generic 0000:0000:0000.0097: unknown main item tag 0x0 [ 308.509119][T14123] binfmt_misc: register: failed to install interpreter file ./cgroup.cpu/cpuset.cpus [ 308.520188][ T3416] hid-generic 0000:0000:0000.0097: hidraw0: HID v0.00 Device [syz0] on syz1 [ 308.604243][T14152] x_tables: duplicate underflow at hook 2 [ 308.617616][T14151] loop2: detected capacity change from 0 to 1024 [ 308.623621][T14152] netlink: 72 bytes leftover after parsing attributes in process `syz.0.3799'. [ 308.634115][T14151] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 308.645197][T14151] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 308.646795][T14149] loop4: detected capacity change from 0 to 2048 [ 308.665643][T14151] JBD2: no valid journal superblock found [ 308.671611][T14151] EXT4-fs (loop2): Could not load journal inode [ 308.703977][T14151] Cannot find del_set index 2 as target [ 308.733921][T14157] loop4: detected capacity change from 0 to 1024 [ 308.741272][T14157] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 308.752679][T14157] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 308.783488][T14157] JBD2: no valid journal superblock found [ 308.789347][T14157] EXT4-fs (loop4): Could not load journal inode [ 308.798876][T14159] netlink: 'syz.2.3804': attribute type 1 has an invalid length. [ 308.807411][T14157] Cannot find del_set index 2 as target [ 308.821342][T14159] 8021q: adding VLAN 0 to HW filter on device bond3 [ 308.851797][T14159] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3804'. [ 308.868086][T14159] bond3: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 308.880626][T14159] bond3: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 308.896849][T14159] bond3: (slave ipvlan2): Error -95 calling set_mac_address [ 309.040739][T14174] loop2: detected capacity change from 0 to 256 [ 309.051534][T14174] FAT-fs (loop2): invalid media value (0x00) [ 309.057650][T14174] FAT-fs (loop2): Can't find a valid FAT filesystem [ 309.096959][T14170] vhci_hcd: invalid port number 224 [ 309.122064][T14180] loop4: detected capacity change from 0 to 2048 [ 309.167138][T14189] loop1: detected capacity change from 0 to 1024 [ 309.180672][T14189] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 309.191748][T14189] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 309.203631][T14189] JBD2: no valid journal superblock found [ 309.209541][T14189] EXT4-fs (loop1): Could not load journal inode [ 309.225321][T14189] Cannot find del_set index 2 as target [ 309.279352][T14191] dummy0: entered promiscuous mode [ 309.302586][T14196] loop1: detected capacity change from 0 to 1024 [ 309.313755][T14191] dummy0: left promiscuous mode [ 309.322265][T14196] EXT4-fs: dax option not supported [ 309.343635][T14196] loop1: detected capacity change from 0 to 128 [ 309.358565][T14196] vfat: Unknown parameter 'ÿÿÿÿÿÿÿÿÿÿÿÿ00000000000000000000' [ 309.409364][T14198] loop0: detected capacity change from 0 to 1024 [ 309.418009][T14198] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 309.427949][T14198] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 309.438555][T14198] EXT4-fs (loop0): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 309.450880][T14198] EXT4-fs error (device loop0): ext4_get_journal_inode:5796: inode #5: comm syz.0.3820: unexpected bad inode w/o EXT4_IGET_BAD [ 309.479068][T14198] EXT4-fs (loop0): no journal found [ 309.484510][T14198] EXT4-fs (loop0): can't get journal size [ 309.546971][T14194] binfmt_misc: register: failed to install interpreter file ./cgroup.cpu/cpuset.cpus [ 309.584624][T14208] loop1: detected capacity change from 0 to 2048 [ 309.599566][T14206] dummy0: entered promiscuous mode [ 309.629882][T14206] dummy0: left promiscuous mode [ 309.773742][T14219] FAULT_INJECTION: forcing a failure. [ 309.773742][T14219] name failslab, interval 1, probability 0, space 0, times 0 [ 309.786484][T14219] CPU: 0 UID: 0 PID: 14219 Comm: syz.3.3827 Not tainted 6.16.0-rc1-syzkaller-00003-gf09079bd04a9 #0 PREEMPT(voluntary) [ 309.786514][T14219] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 309.786526][T14219] Call Trace: [ 309.786533][T14219] [ 309.786541][T14219] __dump_stack+0x1d/0x30 [ 309.786566][T14219] dump_stack_lvl+0xe8/0x140 [ 309.786600][T14219] dump_stack+0x15/0x1b [ 309.786622][T14219] should_fail_ex+0x265/0x280 [ 309.786663][T14219] should_failslab+0x8c/0xb0 [ 309.786751][T14219] kmem_cache_alloc_noprof+0x50/0x310 [ 309.786879][T14219] ? getname_flags+0x80/0x3b0 [ 309.786905][T14219] ? fput+0x8f/0xc0 [ 309.786998][T14219] getname_flags+0x80/0x3b0 [ 309.787030][T14219] __x64_sys_execve+0x42/0x70 [ 309.787048][T14219] x64_sys_call+0x13ab/0x2fb0 [ 309.787070][T14219] do_syscall_64+0xd2/0x200 [ 309.787119][T14219] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 309.787152][T14219] ? clear_bhb_loop+0x40/0x90 [ 309.787179][T14219] ? clear_bhb_loop+0x40/0x90 [ 309.787208][T14219] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 309.787232][T14219] RIP: 0033:0x7f5aa4cce929 [ 309.787260][T14219] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 309.787278][T14219] RSP: 002b:00007f5aa3337038 EFLAGS: 00000246 ORIG_RAX: 000000000000003b [ 309.787300][T14219] RAX: ffffffffffffffda RBX: 00007f5aa4ef5fa0 RCX: 00007f5aa4cce929 [ 309.787316][T14219] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000400 [ 309.787330][T14219] RBP: 00007f5aa3337090 R08: 0000000000000000 R09: 0000000000000000 [ 309.787361][T14219] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 309.787373][T14219] R13: 0000000000000000 R14: 00007f5aa4ef5fa0 R15: 00007ffcaec85c78 [ 309.787391][T14219] [ 310.076323][T14234] dummy0: entered promiscuous mode [ 310.082805][T14236] loop1: detected capacity change from 0 to 1024 [ 310.083256][T14234] dummy0: left promiscuous mode [ 310.103051][T14236] EXT4-fs: dax option not supported [ 310.122093][T14236] loop1: detected capacity change from 0 to 128 [ 310.131502][T14240] loop2: detected capacity change from 0 to 1024 [ 310.148434][T14240] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 310.151165][T14236] vfat: Unknown parameter 'ÿÿÿÿÿÿÿÿÿÿÿÿ00000000000000000000' [ 310.159369][T14240] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 310.217141][T14240] JBD2: no valid journal superblock found [ 310.222934][T14240] EXT4-fs (loop2): Could not load journal inode [ 310.243778][T14243] loop3: detected capacity change from 0 to 1024 [ 310.276191][T14240] Cannot find del_set index 2 as target [ 310.280773][T14241] loop4: detected capacity change from 0 to 512 [ 310.289512][T14243] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 310.300530][T14243] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 310.321503][T14243] JBD2: no valid journal superblock found [ 310.327384][T14243] EXT4-fs (loop3): Could not load journal inode [ 310.342248][T14246] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3837'. [ 310.352359][T14243] Cannot find del_set index 2 as target [ 310.380637][ T10] hid-generic 0000:0000:0000.0098: unknown main item tag 0x0 [ 310.388228][ T10] hid-generic 0000:0000:0000.0098: unknown main item tag 0x0 [ 310.395936][ T10] hid-generic 0000:0000:0000.0098: unknown main item tag 0x0 [ 310.470008][T14241] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -13 [ 310.483060][T14255] loop3: detected capacity change from 0 to 256 [ 310.500321][T14255] FAT-fs (loop3): invalid media value (0x00) [ 310.506807][T14255] FAT-fs (loop3): Can't find a valid FAT filesystem [ 310.513920][T14241] EXT4-fs error (device loop4): ext4_orphan_get:1393: inode #13: comm syz.4.3835: iget: bad i_size value: 12154757448730 [ 310.527232][ T10] hid-generic 0000:0000:0000.0098: unknown main item tag 0x0 [ 310.534717][ T10] hid-generic 0000:0000:0000.0098: unknown main item tag 0x0 [ 310.542199][ T10] hid-generic 0000:0000:0000.0098: unknown main item tag 0x0 [ 310.549634][ T10] hid-generic 0000:0000:0000.0098: unknown main item tag 0x0 [ 310.557102][ T10] hid-generic 0000:0000:0000.0098: unknown main item tag 0x0 [ 310.564627][ T10] hid-generic 0000:0000:0000.0098: unknown main item tag 0x0 [ 310.572327][ T10] hid-generic 0000:0000:0000.0098: unknown main item tag 0x0 [ 310.580114][ T10] hid-generic 0000:0000:0000.0098: unknown main item tag 0x0 [ 310.587529][ T10] hid-generic 0000:0000:0000.0098: unknown main item tag 0x0 [ 310.595189][ T10] hid-generic 0000:0000:0000.0098: unknown main item tag 0x0 [ 310.604438][T14241] EXT4-fs error (device loop4): ext4_orphan_get:1398: comm syz.4.3835: couldn't read orphan inode 13 (err -117) [ 310.611705][T14259] loop2: detected capacity change from 0 to 1024 [ 310.616678][ T10] hid-generic 0000:0000:0000.0098: unknown main item tag 0x0 [ 310.630242][ T10] hid-generic 0000:0000:0000.0098: unknown main item tag 0x0 [ 310.637712][ T10] hid-generic 0000:0000:0000.0098: unknown main item tag 0x0 [ 310.645160][ T10] hid-generic 0000:0000:0000.0098: unknown main item tag 0x0 [ 310.652677][ T10] hid-generic 0000:0000:0000.0098: unknown main item tag 0x0 [ 310.660132][ T10] hid-generic 0000:0000:0000.0098: unknown main item tag 0x0 [ 310.667605][ T10] hid-generic 0000:0000:0000.0098: unknown main item tag 0x0 [ 310.675059][ T10] hid-generic 0000:0000:0000.0098: unknown main item tag 0x0 [ 310.682495][ T10] hid-generic 0000:0000:0000.0098: unknown main item tag 0x0 [ 310.689976][ T10] hid-generic 0000:0000:0000.0098: unknown main item tag 0x0 [ 310.697426][ T10] hid-generic 0000:0000:0000.0098: unknown main item tag 0x0 [ 310.704853][ T10] hid-generic 0000:0000:0000.0098: unknown main item tag 0x0 [ 310.712453][ T10] hid-generic 0000:0000:0000.0098: unknown main item tag 0x0 [ 310.719879][ T10] hid-generic 0000:0000:0000.0098: unknown main item tag 0x0 [ 310.727372][ T10] hid-generic 0000:0000:0000.0098: unknown main item tag 0x0 [ 310.737740][T14259] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 310.748864][T14259] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 310.751598][T14239] SELinux: Context system_u:object_r:fsadm_exec_t:s0 is not valid (left unmapped). [ 310.767670][T14259] JBD2: no valid journal superblock found [ 310.773754][T14259] EXT4-fs (loop2): Could not load journal inode [ 310.794135][T14239] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 310.814705][T14259] Cannot find del_set index 2 as target [ 310.821773][ T10] hid-generic 0000:0000:0000.0098: hidraw0: HID v0.00 Device [syz0] on syz1 [ 311.119413][T14277] loop2: detected capacity change from 0 to 1024 [ 311.129851][T14279] hub 6-0:1.0: USB hub found [ 311.135909][T14277] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 311.138922][T14279] hub 6-0:1.0: 8 ports detected [ 311.146883][T14277] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 311.165554][T14280] binfmt_misc: register: failed to install interpreter file ./cgroup.cpu/cpuset.cpus [ 311.195677][T14277] JBD2: no valid journal superblock found [ 311.201539][T14277] EXT4-fs (loop2): Could not load journal inode [ 311.238782][T14277] Cannot find del_set index 2 as target [ 311.275768][ T10] hid-generic 0000:0000:0000.0099: unknown main item tag 0x0 [ 311.283330][ T10] hid-generic 0000:0000:0000.0099: unknown main item tag 0x0 [ 311.290830][ T10] hid-generic 0000:0000:0000.0099: unknown main item tag 0x0 [ 311.298890][ T10] hid-generic 0000:0000:0000.0099: unknown main item tag 0x0 [ 311.306418][ T10] hid-generic 0000:0000:0000.0099: unknown main item tag 0x0 [ 311.314096][ T10] hid-generic 0000:0000:0000.0099: unknown main item tag 0x0 [ 311.321746][ T10] hid-generic 0000:0000:0000.0099: unknown main item tag 0x0 [ 311.329395][ T10] hid-generic 0000:0000:0000.0099: unknown main item tag 0x0 [ 311.336938][ T10] hid-generic 0000:0000:0000.0099: unknown main item tag 0x0 [ 311.344560][ T10] hid-generic 0000:0000:0000.0099: unknown main item tag 0x0 [ 311.352204][ T10] hid-generic 0000:0000:0000.0099: unknown main item tag 0x0 [ 311.359728][ T10] hid-generic 0000:0000:0000.0099: unknown main item tag 0x0 [ 311.367192][ T10] hid-generic 0000:0000:0000.0099: unknown main item tag 0x0 [ 311.378101][ T10] hid-generic 0000:0000:0000.0099: unknown main item tag 0x0 [ 311.385622][ T10] hid-generic 0000:0000:0000.0099: unknown main item tag 0x0 [ 311.393218][ T10] hid-generic 0000:0000:0000.0099: unknown main item tag 0x0 [ 311.400737][ T10] hid-generic 0000:0000:0000.0099: unknown main item tag 0x0 [ 311.408387][ T10] hid-generic 0000:0000:0000.0099: unknown main item tag 0x0 [ 311.411526][T14299] loop2: detected capacity change from 0 to 1024 [ 311.415836][ T10] hid-generic 0000:0000:0000.0099: unknown main item tag 0x0 [ 311.425065][T14299] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 311.429766][ T10] hid-generic 0000:0000:0000.0099: unknown main item tag 0x0 [ 311.440654][T14299] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 311.448059][ T10] hid-generic 0000:0000:0000.0099: unknown main item tag 0x0 [ 311.465373][ T10] hid-generic 0000:0000:0000.0099: unknown main item tag 0x0 [ 311.468612][T14296] loop3: detected capacity change from 0 to 1024 [ 311.472829][ T10] hid-generic 0000:0000:0000.0099: unknown main item tag 0x0 [ 311.482456][T14296] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 311.486615][ T10] hid-generic 0000:0000:0000.0099: unknown main item tag 0x0 [ 311.501246][T14299] JBD2: no valid journal superblock found [ 311.504293][ T10] hid-generic 0000:0000:0000.0099: unknown main item tag 0x0 [ 311.510021][T14299] EXT4-fs (loop2): Could not load journal inode [ 311.517402][ T10] hid-generic 0000:0000:0000.0099: unknown main item tag 0x0 [ 311.531232][ T10] hid-generic 0000:0000:0000.0099: unknown main item tag 0x0 [ 311.538666][ T10] hid-generic 0000:0000:0000.0099: unknown main item tag 0x0 [ 311.547628][ T10] hid-generic 0000:0000:0000.0099: hidraw0: HID v0.00 Device [syz0] on syz1 [ 311.572661][T14296] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 311.580894][T14296] EXT4-fs (loop3): orphan cleanup on readonly fs [ 311.597804][T14296] EXT4-fs error (device loop3): __ext4_get_inode_loc:4792: comm syz.3.3857: Invalid inode table block 0 in block_group 0 [ 311.634078][ T29] kauditd_printk_skb: 625 callbacks suppressed [ 311.634098][ T29] audit: type=1326 audit(1749588256.225:19957): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14288 comm="syz.4.3854" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a95d9e929 code=0x7ffc0000 [ 311.669078][ T29] audit: type=1326 audit(1749588256.256:19958): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14303 comm="syz.4.3854" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f2a95dd11e5 code=0x7ffc0000 [ 311.674164][T14296] EXT4-fs (loop3): Remounting filesystem read-only [ 311.699562][T14296] Quota error (device loop3): write_blk: dquota write failed [ 311.707254][T14296] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 311.712011][ T29] audit: type=1326 audit(1749588256.296:19959): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14306 comm="syz.4.3860" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a95d9e929 code=0x7ffc0000 [ 311.743749][ T3398] hid-generic 0000:0000:0000.009A: unknown main item tag 0x0 [ 311.751208][ T3398] hid-generic 0000:0000:0000.009A: unknown main item tag 0x0 [ 311.755539][T14296] EXT4-fs (loop3): 1 truncate cleaned up [ 311.758649][ T3398] hid-generic 0000:0000:0000.009A: unknown main item tag 0x0 [ 311.777317][ T3398] hid-generic 0000:0000:0000.009A: unknown main item tag 0x0 [ 311.784861][ T3398] hid-generic 0000:0000:0000.009A: unknown main item tag 0x0 [ 311.792322][ T3398] hid-generic 0000:0000:0000.009A: unknown main item tag 0x0 [ 311.799837][ T3398] hid-generic 0000:0000:0000.009A: unknown main item tag 0x0 [ 311.807268][ T3398] hid-generic 0000:0000:0000.009A: unknown main item tag 0x0 [ 311.814671][ T3398] hid-generic 0000:0000:0000.009A: unknown main item tag 0x0 [ 311.822168][ T3398] hid-generic 0000:0000:0000.009A: unknown main item tag 0x0 [ 311.829762][ T3398] hid-generic 0000:0000:0000.009A: unknown main item tag 0x0 [ 311.835953][ T29] audit: type=1326 audit(1749588256.337:19960): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14306 comm="syz.4.3860" exe="/root/syz-executor" sig=0 arch=c000003e syscall=141 compat=0 ip=0x7f2a95d9e929 code=0x7ffc0000 [ 311.837461][ T3398] hid-generic 0000:0000:0000.009A: unknown main item tag 0x0 [ 311.861168][ T29] audit: type=1326 audit(1749588256.337:19961): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14306 comm="syz.4.3860" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a95d9e929 code=0x7ffc0000 [ 311.868243][ T3398] hid-generic 0000:0000:0000.009A: unknown main item tag 0x0 [ 311.891749][ T29] audit: type=1326 audit(1749588256.337:19962): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14306 comm="syz.4.3860" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f2a95d9e929 code=0x7ffc0000 [ 311.922809][ T29] audit: type=1326 audit(1749588256.337:19963): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14306 comm="syz.4.3860" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a95d9e929 code=0x7ffc0000 [ 311.925309][ T3398] hid-generic 0000:0000:0000.009A: unknown main item tag 0x0 [ 311.946492][ T29] audit: type=1326 audit(1749588256.337:19964): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14306 comm="syz.4.3860" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a95d9e929 code=0x7ffc0000 [ 311.977729][ T3398] hid-generic 0000:0000:0000.009A: unknown main item tag 0x0 [ 311.985171][ T3398] hid-generic 0000:0000:0000.009A: unknown main item tag 0x0 [ 311.992597][ T3398] hid-generic 0000:0000:0000.009A: unknown main item tag 0x0 [ 312.000048][ T3398] hid-generic 0000:0000:0000.009A: unknown main item tag 0x0 [ 312.007596][ T3398] hid-generic 0000:0000:0000.009A: unknown main item tag 0x0 [ 312.015074][ T3398] hid-generic 0000:0000:0000.009A: unknown main item tag 0x0 [ 312.022477][ T3398] hid-generic 0000:0000:0000.009A: unknown main item tag 0x0 [ 312.029932][ T3398] hid-generic 0000:0000:0000.009A: unknown main item tag 0x0 [ 312.037386][ T3398] hid-generic 0000:0000:0000.009A: unknown main item tag 0x0 [ 312.044795][ T3398] hid-generic 0000:0000:0000.009A: unknown main item tag 0x0 [ 312.052250][ T3398] hid-generic 0000:0000:0000.009A: unknown main item tag 0x0 [ 312.059721][ T3398] hid-generic 0000:0000:0000.009A: unknown main item tag 0x0 [ 312.067285][ T3398] hid-generic 0000:0000:0000.009A: unknown main item tag 0x0 [ 312.074809][ T3398] hid-generic 0000:0000:0000.009A: unknown main item tag 0x0 [ 312.141511][T11248] EXT4-fs unmount: 48 callbacks suppressed [ 312.141533][T11248] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 312.179895][T14313] __nla_validate_parse: 5 callbacks suppressed [ 312.179915][T14313] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3862'. [ 312.214877][ T3398] hid-generic 0000:0000:0000.009A: hidraw0: HID v0.00 Device [syz0] on syz1 [ 312.274323][T14319] loop4: detected capacity change from 0 to 1024 [ 312.285164][T14319] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 312.296151][T14319] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 312.312879][T14315] vhci_hcd: invalid port number 224 [ 312.325648][T14321] loop1: detected capacity change from 0 to 256 [ 312.331910][T14319] JBD2: no valid journal superblock found [ 312.331980][T14319] EXT4-fs (loop4): Could not load journal inode [ 312.351091][T14319] set_target_v3_checkentry: 1 callbacks suppressed [ 312.351106][T14319] Cannot find del_set index 2 as target [ 312.354879][T14321] FAT-fs (loop1): invalid media value (0x00) [ 312.370079][T14321] FAT-fs (loop1): Can't find a valid FAT filesystem [ 312.386518][T14323] loop2: detected capacity change from 0 to 1024 [ 312.393365][T14323] EXT4-fs: dax option not supported [ 312.410849][T14323] loop2: detected capacity change from 0 to 128 [ 312.417393][T14323] vfat: Unknown parameter 'ÿÿÿÿÿÿÿÿÿÿÿÿ00000000000000000000' [ 312.447913][T14332] hub 6-0:1.0: USB hub found [ 312.490839][T14332] hub 6-0:1.0: 8 ports detected [ 312.548039][T14339] netem: change failed [ 312.683265][T14348] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3877'. [ 312.694847][T14343] loop0: detected capacity change from 0 to 1024 [ 312.782444][T14343] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 312.831019][T14343] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 312.877146][T14343] EXT4-fs (loop0): orphan cleanup on readonly fs [ 312.907250][T14356] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3879'. [ 312.918459][T14343] EXT4-fs error (device loop0): __ext4_get_inode_loc:4792: comm syz.0.3874: Invalid inode table block 0 in block_group 0 [ 312.948621][T14358] vhci_hcd: invalid port number 224 [ 312.964018][T14354] binfmt_misc: register: failed to install interpreter file ./cgroup.cpu/cpuset.cpus [ 312.983513][T14343] EXT4-fs (loop0): Remounting filesystem read-only [ 312.993117][T14356] loop3: detected capacity change from 0 to 1024 [ 313.003924][T14343] EXT4-fs (loop0): 1 truncate cleaned up [ 313.021497][T14356] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 313.060593][T14343] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 313.075033][T14356] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 313.083445][T14356] EXT4-fs (loop3): orphan cleanup on readonly fs [ 313.099078][T14356] EXT4-fs error (device loop3): __ext4_get_inode_loc:4792: comm syz.3.3879: Invalid inode table block 0 in block_group 0 [ 313.116998][T14364] loop2: detected capacity change from 0 to 1024 [ 313.127091][T12906] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 313.140526][T14364] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 313.150515][T14356] EXT4-fs (loop3): Remounting filesystem read-only [ 313.151497][T14364] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 313.158034][T14356] EXT4-fs (loop3): 1 truncate cleaned up [ 313.174767][T14356] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 313.208669][T11248] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 313.218112][T14364] JBD2: no valid journal superblock found [ 313.223931][T14364] EXT4-fs (loop2): Could not load journal inode [ 313.240263][T14372] FAULT_INJECTION: forcing a failure. [ 313.240263][T14372] name failslab, interval 1, probability 0, space 0, times 0 [ 313.253052][T14372] CPU: 0 UID: 0 PID: 14372 Comm: syz.1.3887 Not tainted 6.16.0-rc1-syzkaller-00003-gf09079bd04a9 #0 PREEMPT(voluntary) [ 313.253145][T14372] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 313.253162][T14372] Call Trace: [ 313.253169][T14372] [ 313.253178][T14372] __dump_stack+0x1d/0x30 [ 313.253204][T14372] dump_stack_lvl+0xe8/0x140 [ 313.253250][T14372] dump_stack+0x15/0x1b [ 313.253269][T14372] should_fail_ex+0x265/0x280 [ 313.253309][T14372] should_failslab+0x8c/0xb0 [ 313.253372][T14372] __kmalloc_node_track_caller_noprof+0xa4/0x410 [ 313.253407][T14372] ? v9fs_session_init+0x4b/0xde0 [ 313.253442][T14372] kstrdup+0x3e/0xd0 [ 313.253474][T14372] v9fs_session_init+0x4b/0xde0 [ 313.253557][T14372] ? obj_cgroup_charge_account+0x122/0x1a0 [ 313.253595][T14372] ? __rcu_read_unlock+0x4f/0x70 [ 313.253622][T14372] ? should_fail_ex+0xdb/0x280 [ 313.253731][T14372] ? v9fs_mount+0x51/0x590 [ 313.253772][T14372] ? should_failslab+0x8c/0xb0 [ 313.253801][T14372] ? __kmalloc_cache_noprof+0x189/0x320 [ 313.253912][T14372] v9fs_mount+0x67/0x590 [ 313.253950][T14372] ? __pfx_v9fs_mount+0x10/0x10 [ 313.254021][T14372] legacy_get_tree+0x75/0xd0 [ 313.254070][T14372] vfs_get_tree+0x54/0x1d0 [ 313.254132][T14364] Cannot find del_set index 2 as target [ 313.254193][T14372] do_new_mount+0x207/0x680 [ 313.254227][T14372] path_mount+0x4a4/0xb20 [ 313.254256][T14372] ? user_path_at+0x109/0x130 [ 313.254303][T14372] __se_sys_mount+0x28f/0x2e0 [ 313.254333][T14372] ? fput+0x8f/0xc0 [ 313.254397][T14372] __x64_sys_mount+0x67/0x80 [ 313.254427][T14372] x64_sys_call+0xd36/0x2fb0 [ 313.254469][T14372] do_syscall_64+0xd2/0x200 [ 313.254638][T14372] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 313.254677][T14372] ? clear_bhb_loop+0x40/0x90 [ 313.254787][T14372] ? clear_bhb_loop+0x40/0x90 [ 313.254819][T14372] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 313.254851][T14372] RIP: 0033:0x7fa6c60ee929 [ 313.254873][T14372] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 313.254962][T14372] RSP: 002b:00007fa6c4757038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 313.255048][T14372] RAX: ffffffffffffffda RBX: 00007fa6c6315fa0 RCX: 00007fa6c60ee929 [ 313.255067][T14372] RDX: 00002000000004c0 RSI: 0000200000000300 RDI: 0000000000000000 [ 313.255085][T14372] RBP: 00007fa6c4757090 R08: 0000200000000280 R09: 0000000000000000 [ 313.255104][T14372] R10: 0000000000000008 R11: 0000000000000246 R12: 0000000000000002 [ 313.255122][T14372] R13: 0000000000000000 R14: 00007fa6c6315fa0 R15: 00007ffc56ff0918 [ 313.255149][T14372] [ 313.310182][T14375] netlink: 'syz.1.3889': attribute type 1 has an invalid length. [ 313.342491][T14378] loop3: detected capacity change from 0 to 1024 [ 313.382905][T14381] loop0: detected capacity change from 0 to 1024 [ 313.385585][T14378] EXT4-fs: dax option not supported [ 313.397989][T14375] 8021q: adding VLAN 0 to HW filter on device bond4 [ 313.405291][T14378] loop3: detected capacity change from 0 to 128 [ 313.410647][T14381] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 313.412606][T14378] vfat: Unknown parameter 'ÿÿÿÿÿÿÿÿÿÿÿÿ00000000000000000000' [ 313.416745][T14381] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 313.494532][T14375] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3889'. [ 313.501963][T14381] JBD2: no valid journal superblock found [ 313.595630][T14381] EXT4-fs (loop0): Could not load journal inode [ 313.610989][T14375] bond4: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 313.623464][T14375] bond4: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 313.636316][T14375] bond4: (slave ipvlan2): Error -95 calling set_mac_address [ 313.655329][T14381] Cannot find del_set index 2 as target [ 313.707088][T14385] loop3: detected capacity change from 0 to 1024 [ 313.722219][T14385] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 313.724014][T14387] netlink: 14593 bytes leftover after parsing attributes in process `syz.4.3893'. [ 313.733565][T14385] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 313.749210][T14387] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3893'. [ 313.763196][T14385] JBD2: no valid journal superblock found [ 313.769059][T14389] loop0: detected capacity change from 0 to 256 [ 313.769081][T14385] EXT4-fs (loop3): Could not load journal inode [ 313.782498][T14389] FAT-fs (loop0): invalid media value (0x00) [ 313.788561][T14389] FAT-fs (loop0): Can't find a valid FAT filesystem [ 313.799866][T14385] Cannot find del_set index 2 as target [ 313.831224][T14391] loop1: detected capacity change from 0 to 1024 [ 313.838417][T14391] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 313.906263][T14391] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 313.921047][T14397] loop3: detected capacity change from 0 to 1024 [ 313.942880][T14397] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 313.953832][T14397] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 313.965812][T14391] EXT4-fs (loop1): orphan cleanup on readonly fs [ 313.984908][T14391] EXT4-fs error (device loop1): __ext4_get_inode_loc:4792: comm syz.1.3895: Invalid inode table block 0 in block_group 0 [ 313.998993][T14397] JBD2: no valid journal superblock found [ 314.004845][T14397] EXT4-fs (loop3): Could not load journal inode [ 314.051672][T14391] EXT4-fs (loop1): Remounting filesystem read-only [ 314.066561][T14397] Cannot find del_set index 2 as target [ 314.082495][T14395] infiniband syz!: set active [ 314.087325][T14395] infiniband syz!: added team_slave_0 [ 314.100389][T14391] EXT4-fs (loop1): 1 truncate cleaned up [ 314.106601][T14391] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 314.116768][T14395] RDS/IB: syz!: added [ 314.123119][T14395] smc: adding ib device syz! with port count 1 [ 314.129411][T14395] smc: ib device syz! port 1 has pnetid [ 314.167011][T14406] loop0: detected capacity change from 0 to 1024 [ 314.190942][T12655] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 314.208992][T14406] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 314.220234][T14406] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 314.251943][T14406] JBD2: no valid journal superblock found [ 314.257890][T14406] EXT4-fs (loop0): Could not load journal inode [ 314.265730][T14408] loop3: detected capacity change from 0 to 1024 [ 314.273786][T14408] EXT4-fs: dax option not supported [ 314.284458][T14408] loop3: detected capacity change from 0 to 128 [ 314.293738][T14408] vfat: Unknown parameter 'ÿÿÿÿÿÿÿÿÿÿÿÿ00000000000000000000' [ 314.351398][T14410] netem: change failed [ 314.373392][T14412] netlink: 'syz.0.3903': attribute type 1 has an invalid length. [ 314.388396][T14412] 8021q: adding VLAN 0 to HW filter on device bond1 [ 314.405115][T14412] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3903'. [ 314.417293][T14412] bond1: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 314.420885][T14417] loop1: detected capacity change from 0 to 1024 [ 314.429799][T14412] bond1: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 314.440959][T14412] bond1: (slave ipvlan2): Error -95 calling set_mac_address [ 314.456510][T14417] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 314.467706][T14417] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 314.484042][ T3389] hid-generic 0000:0000:0000.009B: unknown main item tag 0x0 [ 314.491605][ T3389] hid-generic 0000:0000:0000.009B: unknown main item tag 0x0 [ 314.499119][ T3389] hid-generic 0000:0000:0000.009B: unknown main item tag 0x0 [ 314.511383][T14421] loop2: detected capacity change from 0 to 1024 [ 314.520493][ T3389] hid-generic 0000:0000:0000.009B: unknown main item tag 0x0 [ 314.524202][T14417] JBD2: no valid journal superblock found [ 314.528236][ T3389] hid-generic 0000:0000:0000.009B: unknown main item tag 0x0 [ 314.533901][T14417] EXT4-fs (loop1): Could not load journal inode [ 314.541423][ T3389] hid-generic 0000:0000:0000.009B: unknown main item tag 0x0 [ 314.555164][ T3389] hid-generic 0000:0000:0000.009B: unknown main item tag 0x0 [ 314.562718][ T3389] hid-generic 0000:0000:0000.009B: unknown main item tag 0x0 [ 314.563060][T14421] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 314.570257][ T3389] hid-generic 0000:0000:0000.009B: unknown main item tag 0x0 [ 314.570283][ T3389] hid-generic 0000:0000:0000.009B: unknown main item tag 0x0 [ 314.581205][T14421] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 314.588625][ T3389] hid-generic 0000:0000:0000.009B: unknown main item tag 0x0 [ 314.613274][ T3389] hid-generic 0000:0000:0000.009B: unknown main item tag 0x0 [ 314.613461][T14421] JBD2: no valid journal superblock found [ 314.620683][ T3389] hid-generic 0000:0000:0000.009B: unknown main item tag 0x0 [ 314.621975][ T3389] hid-generic 0000:0000:0000.009B: unknown main item tag 0x0 [ 314.626511][T14421] EXT4-fs (loop2): Could not load journal inode [ 314.633889][ T3389] hid-generic 0000:0000:0000.009B: unknown main item tag 0x0 [ 314.655113][ T3389] hid-generic 0000:0000:0000.009B: unknown main item tag 0x0 [ 314.662785][ T3389] hid-generic 0000:0000:0000.009B: unknown main item tag 0x0 [ 314.670279][ T3389] hid-generic 0000:0000:0000.009B: unknown main item tag 0x0 [ 314.677766][ T3389] hid-generic 0000:0000:0000.009B: unknown main item tag 0x0 [ 314.685316][ T3389] hid-generic 0000:0000:0000.009B: unknown main item tag 0x0 [ 314.693057][ T3389] hid-generic 0000:0000:0000.009B: unknown main item tag 0x0 [ 314.700536][ T3389] hid-generic 0000:0000:0000.009B: unknown main item tag 0x0 [ 314.707954][ T3389] hid-generic 0000:0000:0000.009B: unknown main item tag 0x0 [ 314.714002][T14423] Cannot find del_set index 2 as target [ 314.715414][ T3389] hid-generic 0000:0000:0000.009B: unknown main item tag 0x0 [ 314.724778][T14424] Cannot find del_set index 2 as target [ 314.728321][ T3389] hid-generic 0000:0000:0000.009B: unknown main item tag 0x0 [ 314.741530][ T3389] hid-generic 0000:0000:0000.009B: unknown main item tag 0x0 [ 314.748979][ T3389] hid-generic 0000:0000:0000.009B: unknown main item tag 0x0 [ 314.756535][ T3389] hid-generic 0000:0000:0000.009B: unknown main item tag 0x0 [ 314.764935][ T3389] hid-generic 0000:0000:0000.009B: hidraw0: HID v0.00 Device [syz0] on syz1 [ 314.837684][T14433] loop2: detected capacity change from 0 to 1024 [ 314.853809][T14433] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 314.864877][T14433] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 314.868137][T14429] loop4: detected capacity change from 0 to 2048 [ 314.880871][T14433] JBD2: no valid journal superblock found [ 314.886697][T14433] EXT4-fs (loop2): Could not load journal inode [ 314.899690][T14438] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3912'. [ 314.907425][T14435] vhci_hcd: invalid port number 224 [ 314.973527][T14433] Cannot find del_set index 2 as target [ 314.996959][T14429] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 315.013881][T14440] loop1: detected capacity change from 0 to 1024 [ 315.028909][T14429] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 315.050633][T14440] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 315.061578][T14440] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 315.108988][T14440] JBD2: no valid journal superblock found [ 315.115133][T14440] EXT4-fs (loop1): Could not load journal inode [ 315.124222][T14444] dummy0: entered promiscuous mode [ 315.150023][T14444] dummy0: left promiscuous mode [ 315.191635][T14451] loop1: detected capacity change from 0 to 2048 [ 315.220734][T14447] netem: change failed [ 315.228816][ T3389] hid-generic 0000:0000:0000.009C: unknown main item tag 0x0 [ 315.236444][ T3389] hid-generic 0000:0000:0000.009C: unknown main item tag 0x0 [ 315.243917][ T3389] hid-generic 0000:0000:0000.009C: unknown main item tag 0x0 [ 315.268917][T14451] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 315.289394][T14451] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 315.310246][T14449] dummy0: entered promiscuous mode [ 315.335361][ T3389] hid-generic 0000:0000:0000.009C: unknown main item tag 0x0 [ 315.342836][ T3389] hid-generic 0000:0000:0000.009C: unknown main item tag 0x0 [ 315.344182][T14462] loop0: detected capacity change from 0 to 1024 [ 315.350276][ T3389] hid-generic 0000:0000:0000.009C: unknown main item tag 0x0 [ 315.350309][ T3389] hid-generic 0000:0000:0000.009C: unknown main item tag 0x0 [ 315.371530][ T3389] hid-generic 0000:0000:0000.009C: unknown main item tag 0x0 [ 315.378962][ T3389] hid-generic 0000:0000:0000.009C: unknown main item tag 0x0 [ 315.386457][ T3389] hid-generic 0000:0000:0000.009C: unknown main item tag 0x0 [ 315.391873][T14449] dummy0: left promiscuous mode [ 315.393879][ T3389] hid-generic 0000:0000:0000.009C: unknown main item tag 0x0 [ 315.393946][ T3389] hid-generic 0000:0000:0000.009C: unknown main item tag 0x0 [ 315.393973][ T3389] hid-generic 0000:0000:0000.009C: unknown main item tag 0x0 [ 315.394587][T14462] EXT4-fs: dax option not supported [ 315.406896][ T3389] hid-generic 0000:0000:0000.009C: unknown main item tag 0x0 [ 315.436445][ T3389] hid-generic 0000:0000:0000.009C: unknown main item tag 0x0 [ 315.443952][ T3389] hid-generic 0000:0000:0000.009C: unknown main item tag 0x0 [ 315.451448][ T3389] hid-generic 0000:0000:0000.009C: unknown main item tag 0x0 [ 315.458982][ T3389] hid-generic 0000:0000:0000.009C: unknown main item tag 0x0 [ 315.466458][ T3389] hid-generic 0000:0000:0000.009C: unknown main item tag 0x0 [ 315.474043][ T3389] hid-generic 0000:0000:0000.009C: unknown main item tag 0x0 [ 315.481557][ T3389] hid-generic 0000:0000:0000.009C: unknown main item tag 0x0 [ 315.489042][ T3389] hid-generic 0000:0000:0000.009C: unknown main item tag 0x0 [ 315.496542][ T3389] hid-generic 0000:0000:0000.009C: unknown main item tag 0x0 [ 315.503988][ T3389] hid-generic 0000:0000:0000.009C: unknown main item tag 0x0 [ 315.511599][ T3389] hid-generic 0000:0000:0000.009C: unknown main item tag 0x0 [ 315.511883][T14464] loop0: detected capacity change from 0 to 128 [ 315.519105][ T3389] hid-generic 0000:0000:0000.009C: unknown main item tag 0x0 [ 315.527099][T14464] vfat: Unknown parameter 'ÿÿÿÿÿÿÿÿÿÿÿÿ00000000000000000000' [ 315.532847][ T3389] hid-generic 0000:0000:0000.009C: unknown main item tag 0x0 [ 315.547812][ T3389] hid-generic 0000:0000:0000.009C: unknown main item tag 0x0 [ 315.560849][ T3389] hid-generic 0000:0000:0000.009C: hidraw0: HID v0.00 Device [syz0] on syz1 [ 315.703738][T14473] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3926'. [ 315.739971][T14470] vhci_hcd: invalid port number 224 [ 315.749106][T14477] loop4: detected capacity change from 0 to 1024 [ 315.772192][T14480] loop2: detected capacity change from 0 to 256 [ 315.791263][T14477] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 315.802472][T14477] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 315.814031][T14480] FAT-fs (loop2): invalid media value (0x00) [ 315.820565][T14480] FAT-fs (loop2): Can't find a valid FAT filesystem [ 315.854569][T14477] JBD2: no valid journal superblock found [ 315.860523][T14477] EXT4-fs (loop4): Could not load journal inode [ 315.886510][T14486] netem: change failed [ 315.917341][T14477] Cannot find del_set index 2 as target [ 315.936822][T14494] x_tables: duplicate underflow at hook 2 [ 315.942804][T14494] netlink: 72 bytes leftover after parsing attributes in process `syz.0.3930'. [ 315.981959][T14488] loop1: detected capacity change from 0 to 1024 [ 315.996982][T14488] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 316.006865][T14488] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 316.008709][T14502] netlink: 'syz.3.3938': attribute type 1 has an invalid length. [ 316.018842][T14488] EXT4-fs (loop1): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 316.029505][ T3479] hid-generic 0000:0000:0000.009D: unknown main item tag 0x0 [ 316.036591][T14488] EXT4-fs error (device loop1): ext4_get_journal_inode:5796: inode #5: comm syz.1.3932: unexpected bad inode w/o EXT4_IGET_BAD [ 316.041651][ T3479] hid-generic 0000:0000:0000.009D: unknown main item tag 0x0 [ 316.056168][T14488] EXT4-fs (loop1): no journal found [ 316.062250][ T3479] hid-generic 0000:0000:0000.009D: unknown main item tag 0x0 [ 316.067367][T14488] EXT4-fs (loop1): can't get journal size [ 316.086104][ T3479] hid-generic 0000:0000:0000.009D: unknown main item tag 0x0 [ 316.086939][T14488] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 316.093598][ T3479] hid-generic 0000:0000:0000.009D: unknown main item tag 0x0 [ 316.093628][ T3479] hid-generic 0000:0000:0000.009D: unknown main item tag 0x0 [ 316.093657][ T3479] hid-generic 0000:0000:0000.009D: unknown main item tag 0x0 [ 316.093681][ T3479] hid-generic 0000:0000:0000.009D: unknown main item tag 0x0 [ 316.093703][ T3479] hid-generic 0000:0000:0000.009D: unknown main item tag 0x0 [ 316.143731][ T3479] hid-generic 0000:0000:0000.009D: unknown main item tag 0x0 [ 316.151172][ T3479] hid-generic 0000:0000:0000.009D: unknown main item tag 0x0 [ 316.158589][ T3479] hid-generic 0000:0000:0000.009D: unknown main item tag 0x0 [ 316.166012][ T3479] hid-generic 0000:0000:0000.009D: unknown main item tag 0x0 [ 316.175459][T14502] 8021q: adding VLAN 0 to HW filter on device bond2 [ 316.195414][T14504] bond2: (slave ipvlan1): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 316.207881][T14504] bond2: (slave ipvlan1): The slave device specified does not support setting the MAC address [ 316.220643][T14504] bond2: (slave ipvlan1): Error -95 calling set_mac_address [ 316.231457][ T3479] hid-generic 0000:0000:0000.009D: unknown main item tag 0x0 [ 316.238983][ T3479] hid-generic 0000:0000:0000.009D: unknown main item tag 0x0 [ 316.246423][ T3479] hid-generic 0000:0000:0000.009D: unknown main item tag 0x0 [ 316.254326][ T3479] hid-generic 0000:0000:0000.009D: unknown main item tag 0x0 [ 316.261902][ T3479] hid-generic 0000:0000:0000.009D: unknown main item tag 0x0 [ 316.269703][ T3479] hid-generic 0000:0000:0000.009D: unknown main item tag 0x0 [ 316.277154][ T3479] hid-generic 0000:0000:0000.009D: unknown main item tag 0x0 [ 316.284621][ T3479] hid-generic 0000:0000:0000.009D: unknown main item tag 0x0 [ 316.292109][ T3479] hid-generic 0000:0000:0000.009D: unknown main item tag 0x0 [ 316.299547][ T3479] hid-generic 0000:0000:0000.009D: unknown main item tag 0x0 [ 316.307027][ T3479] hid-generic 0000:0000:0000.009D: unknown main item tag 0x0 [ 316.314475][ T3479] hid-generic 0000:0000:0000.009D: unknown main item tag 0x0 [ 316.321930][ T3479] hid-generic 0000:0000:0000.009D: unknown main item tag 0x0 [ 316.329367][ T3479] hid-generic 0000:0000:0000.009D: unknown main item tag 0x0 [ 316.336773][ T3479] hid-generic 0000:0000:0000.009D: unknown main item tag 0x0 [ 316.416265][ T3479] hid-generic 0000:0000:0000.009D: hidraw0: HID v0.00 Device [syz0] on syz1 [ 316.480646][T14511] loop4: detected capacity change from 0 to 1024 [ 316.487713][T14511] EXT4-fs: dax option not supported [ 316.496740][T14511] loop4: detected capacity change from 0 to 128 [ 316.504848][T14511] vfat: Unknown parameter 'ÿÿÿÿÿÿÿÿÿÿÿÿ00000000000000000000' [ 316.656250][T14524] FAULT_INJECTION: forcing a failure. [ 316.656250][T14524] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 316.669419][T14524] CPU: 1 UID: 0 PID: 14524 Comm: syz.3.3943 Not tainted 6.16.0-rc1-syzkaller-00003-gf09079bd04a9 #0 PREEMPT(voluntary) [ 316.669509][T14524] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 316.669527][T14524] Call Trace: [ 316.669536][T14524] [ 316.669546][T14524] __dump_stack+0x1d/0x30 [ 316.669573][T14524] dump_stack_lvl+0xe8/0x140 [ 316.669599][T14524] dump_stack+0x15/0x1b [ 316.669680][T14524] should_fail_ex+0x265/0x280 [ 316.669727][T14524] should_fail+0xb/0x20 [ 316.669801][T14524] should_fail_usercopy+0x1a/0x20 [ 316.669828][T14524] _copy_to_user+0x20/0xa0 [ 316.669858][T14524] simple_read_from_buffer+0xb5/0x130 [ 316.669975][T14524] proc_fail_nth_read+0x100/0x140 [ 316.670004][T14524] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 316.670093][T14524] vfs_read+0x19d/0x6f0 [ 316.670136][T14524] ? __rcu_read_unlock+0x4f/0x70 [ 316.670168][T14524] ? __fget_files+0x184/0x1c0 [ 316.670199][T14524] ksys_read+0xda/0x1a0 [ 316.670226][T14524] __x64_sys_read+0x40/0x50 [ 316.670252][T14524] x64_sys_call+0x2d77/0x2fb0 [ 316.670301][T14524] do_syscall_64+0xd2/0x200 [ 316.670323][T14524] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 316.670420][T14524] ? clear_bhb_loop+0x40/0x90 [ 316.670449][T14524] ? clear_bhb_loop+0x40/0x90 [ 316.670485][T14524] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 316.670514][T14524] RIP: 0033:0x7f5aa4ccd33c [ 316.670534][T14524] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 316.670557][T14524] RSP: 002b:00007f5aa3337030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 316.670638][T14524] RAX: ffffffffffffffda RBX: 00007f5aa4ef5fa0 RCX: 00007f5aa4ccd33c [ 316.670655][T14524] RDX: 000000000000000f RSI: 00007f5aa33370a0 RDI: 0000000000000006 [ 316.670670][T14524] RBP: 00007f5aa3337090 R08: 0000000000000000 R09: 0000000000000000 [ 316.670682][T14524] R10: 0000000000000036 R11: 0000000000000246 R12: 0000000000000001 [ 316.670695][T14524] R13: 0000000000000000 R14: 00007f5aa4ef5fa0 R15: 00007ffcaec85c78 [ 316.670715][T14524] [ 316.954497][T14530] loop0: detected capacity change from 0 to 1024 [ 316.961197][ T29] kauditd_printk_skb: 306 callbacks suppressed [ 316.961215][ T29] audit: type=1326 audit(1749588261.605:20265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14525 comm="syz.2.3947" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f443030e929 code=0x7ffc0000 [ 316.991242][ T29] audit: type=1326 audit(1749588261.605:20266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14525 comm="syz.2.3947" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f443030e929 code=0x7ffc0000 [ 317.014976][ T29] audit: type=1326 audit(1749588261.605:20267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14525 comm="syz.2.3947" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f443030e929 code=0x7ffc0000 [ 317.038633][ T29] audit: type=1326 audit(1749588261.605:20268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14525 comm="syz.2.3947" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f443030e929 code=0x7ffc0000 [ 317.062323][ T29] audit: type=1326 audit(1749588261.605:20269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14525 comm="syz.2.3947" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f443030e929 code=0x7ffc0000 [ 317.085962][ T29] audit: type=1326 audit(1749588261.605:20270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14525 comm="syz.2.3947" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f443030e929 code=0x7ffc0000 [ 317.109665][ T29] audit: type=1326 audit(1749588261.605:20271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14525 comm="syz.2.3947" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f443030e929 code=0x7ffc0000 [ 317.133310][ T29] audit: type=1326 audit(1749588261.605:20272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14525 comm="syz.2.3947" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f443030e929 code=0x7ffc0000 [ 317.156969][ T29] audit: type=1326 audit(1749588261.605:20273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14525 comm="syz.2.3947" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f443030e929 code=0x7ffc0000 [ 317.180649][ T29] audit: type=1326 audit(1749588261.605:20274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14525 comm="syz.2.3947" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f443030e929 code=0x7ffc0000 [ 317.205240][T14530] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 317.216195][T14530] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 317.227249][T14530] JBD2: no valid journal superblock found [ 317.233045][T14530] EXT4-fs (loop0): Could not load journal inode [ 317.250267][T14537] netem: change failed [ 317.294006][T14530] Cannot find del_set index 2 as target [ 317.298835][T14545] loop2: detected capacity change from 0 to 1024 [ 317.307574][T14545] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 317.318725][T14545] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 317.356928][T14547] loop3: detected capacity change from 0 to 512 [ 317.368882][T14545] JBD2: no valid journal superblock found [ 317.374779][T14545] EXT4-fs (loop2): Could not load journal inode [ 317.389024][T14550] loop4: detected capacity change from 0 to 256 [ 317.396804][T14545] Cannot find del_set index 2 as target [ 317.404771][T14550] FAT-fs (loop4): invalid media value (0x00) [ 317.410843][T14550] FAT-fs (loop4): Can't find a valid FAT filesystem [ 317.434486][T14547] EXT4-fs (loop3): 1 orphan inode deleted [ 317.459319][T14547] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 317.474270][ T4957] EXT4-fs error (device loop3): ext4_release_dquot:6969: comm kworker/u8:9: Failed to release dquot type 1 [ 317.490653][T14547] ext4 filesystem being mounted at /234/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 317.509337][T14547] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 317.524682][T14559] x_tables: duplicate underflow at hook 2 [ 317.530795][T14559] __nla_validate_parse: 2 callbacks suppressed [ 317.530808][T14559] netlink: 72 bytes leftover after parsing attributes in process `syz.2.3959'. [ 317.553402][T14560] x_tables: duplicate underflow at hook 2 [ 317.559366][T14560] netlink: 72 bytes leftover after parsing attributes in process `syz.4.3958'. [ 317.575485][T11248] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 317.606286][T14559] hub 6-0:1.0: USB hub found [ 317.617360][T14559] hub 6-0:1.0: 8 ports detected [ 317.674751][T12655] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 317.708563][T14565] dummy0: entered promiscuous mode [ 317.724473][T14565] dummy0: left promiscuous mode [ 317.860810][T14571] vhci_hcd: invalid port number 224 [ 317.889455][T14578] x_tables: duplicate underflow at hook 2 [ 317.895503][T14578] netlink: 72 bytes leftover after parsing attributes in process `syz.3.3966'. [ 317.910840][T14578] hub 6-0:1.0: USB hub found [ 317.915564][T14578] hub 6-0:1.0: 8 ports detected [ 317.941524][T14580] loop1: detected capacity change from 0 to 1024 [ 317.949880][T14580] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 317.960904][T14580] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 317.971455][T14580] JBD2: no valid journal superblock found [ 317.977770][T14580] EXT4-fs (loop1): Could not load journal inode [ 317.989436][T14580] Cannot find del_set index 2 as target [ 318.136076][T14586] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3971'. [ 318.152129][T14586] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3971'. [ 318.222673][T14588] loop1: detected capacity change from 0 to 1024 [ 318.230571][T14588] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 318.240695][T14588] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 318.247993][T14591] loop0: detected capacity change from 0 to 512 [ 318.250456][T14588] EXT4-fs (loop1): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 318.267733][T14588] EXT4-fs error (device loop1): ext4_get_journal_inode:5796: inode #5: comm syz.1.3972: unexpected bad inode w/o EXT4_IGET_BAD [ 318.281512][T14588] EXT4-fs (loop1): no journal found [ 318.286907][T14588] EXT4-fs (loop1): can't get journal size [ 318.289817][T14591] EXT4-fs (loop0): 1 orphan inode deleted [ 318.294123][T14588] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 318.315661][T14591] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 318.328605][ T2023] EXT4-fs error (device loop0): ext4_release_dquot:6969: comm kworker/u8:6: Failed to release dquot type 1 [ 318.369700][T14591] ext4 filesystem being mounted at /97/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 318.393174][ T3177] hid-generic 0000:0000:0000.009E: unknown main item tag 0x0 [ 318.400731][ T3177] hid-generic 0000:0000:0000.009E: unknown main item tag 0x0 [ 318.408245][ T3177] hid-generic 0000:0000:0000.009E: unknown main item tag 0x0 [ 318.435114][T14601] x_tables: duplicate underflow at hook 2 [ 318.442760][T14591] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 318.451559][T14601] netlink: 72 bytes leftover after parsing attributes in process `syz.2.3975'. [ 318.472877][ T3177] hid-generic 0000:0000:0000.009E: unknown main item tag 0x0 [ 318.475593][T14601] hub 6-0:1.0: USB hub found [ 318.480367][ T3177] hid-generic 0000:0000:0000.009E: unknown main item tag 0x0 [ 318.491369][T14601] hub 6-0:1.0: 8 ports detected [ 318.492441][ T3177] hid-generic 0000:0000:0000.009E: unknown main item tag 0x0 [ 318.492467][ T3177] hid-generic 0000:0000:0000.009E: unknown main item tag 0x0 [ 318.492492][ T3177] hid-generic 0000:0000:0000.009E: unknown main item tag 0x0 [ 318.519715][ T3177] hid-generic 0000:0000:0000.009E: unknown main item tag 0x0 [ 318.527176][ T3177] hid-generic 0000:0000:0000.009E: unknown main item tag 0x0 [ 318.534609][ T3177] hid-generic 0000:0000:0000.009E: unknown main item tag 0x0 [ 318.542134][ T3177] hid-generic 0000:0000:0000.009E: unknown main item tag 0x0 [ 318.549553][ T3177] hid-generic 0000:0000:0000.009E: unknown main item tag 0x0 [ 318.561095][ T3177] hid-generic 0000:0000:0000.009E: unknown main item tag 0x0 [ 318.568589][ T3177] hid-generic 0000:0000:0000.009E: unknown main item tag 0x0 [ 318.576035][ T3177] hid-generic 0000:0000:0000.009E: unknown main item tag 0x0 [ 318.583480][ T3177] hid-generic 0000:0000:0000.009E: unknown main item tag 0x0 [ 318.590993][ T3177] hid-generic 0000:0000:0000.009E: unknown main item tag 0x0 [ 318.598492][ T3177] hid-generic 0000:0000:0000.009E: unknown main item tag 0x0 [ 318.605964][ T3177] hid-generic 0000:0000:0000.009E: unknown main item tag 0x0 [ 318.613455][ T3177] hid-generic 0000:0000:0000.009E: unknown main item tag 0x0 [ 318.620999][ T3177] hid-generic 0000:0000:0000.009E: unknown main item tag 0x0 [ 318.628413][ T3177] hid-generic 0000:0000:0000.009E: unknown main item tag 0x0 [ 318.635898][ T3177] hid-generic 0000:0000:0000.009E: unknown main item tag 0x0 [ 318.643393][ T3177] hid-generic 0000:0000:0000.009E: unknown main item tag 0x0 [ 318.650827][ T3177] hid-generic 0000:0000:0000.009E: unknown main item tag 0x0 [ 318.658241][ T3177] hid-generic 0000:0000:0000.009E: unknown main item tag 0x0 [ 318.665668][ T3177] hid-generic 0000:0000:0000.009E: unknown main item tag 0x0 [ 318.673538][T12906] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 318.697630][ T3177] hid-generic 0000:0000:0000.009E: hidraw0: HID v0.00 Device [syz0] on syz1 [ 318.745454][T14610] loop4: detected capacity change from 0 to 1024 [ 318.748969][T14608] loop3: detected capacity change from 0 to 1024 [ 318.752252][T14610] EXT4-fs: dax option not supported [ 318.767742][T14608] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 318.778968][T14608] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 318.779459][T14610] loop4: detected capacity change from 0 to 128 [ 318.800282][T14608] JBD2: no valid journal superblock found [ 318.806054][T14608] EXT4-fs (loop3): Could not load journal inode [ 318.808116][T14610] vfat: Unknown parameter 'ÿÿÿÿÿÿÿÿÿÿÿÿ00000000000000000000' [ 318.839338][T14612] loop0: detected capacity change from 0 to 512 [ 318.846019][T14612] EXT4-fs: Ignoring removed oldalloc option [ 318.852161][T14612] EXT4-fs: Ignoring removed nobh option [ 318.858088][T14612] EXT4-fs: Mount option(s) incompatible with ext2 [ 318.883199][T14608] Cannot find del_set index 2 as target [ 318.942434][T14612] loop0: detected capacity change from 0 to 512 [ 318.962722][T14615] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3981'. [ 318.998127][T14612] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 319.059152][T14612] ext4 filesystem being mounted at /99/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 319.160587][T14628] x_tables: duplicate underflow at hook 2 [ 319.166721][T14628] netlink: 72 bytes leftover after parsing attributes in process `syz.3.3985'. [ 319.219252][T14612] EXT4-fs: Ignoring removed orlov option [ 319.227725][T14630] loop2: detected capacity change from 0 to 512 [ 319.244725][T14612] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 319.257532][T14612] EXT4-fs (loop0): can't enable nombcache during remount [ 319.264354][T14630] EXT4-fs (loop2): 1 orphan inode deleted [ 319.271672][T14630] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 319.284398][ T2023] EXT4-fs error (device loop2): ext4_release_dquot:6969: comm kworker/u8:6: Failed to release dquot type 1 [ 319.299663][T14630] ext4 filesystem being mounted at /201/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 319.331579][T14630] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 319.360340][T11436] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 319.473446][T14642] sd 0:0:1:0: device reset [ 319.519132][T12906] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 319.561826][T14647] ================================================================== [ 319.570000][T14647] BUG: KCSAN: data-race in memcpy_and_pad / release_task [ 319.577063][T14647] [ 319.579415][T14647] write to 0xffff888108949508 of 8 bytes by task 11626 on cpu 1: [ 319.587155][T14647] release_task+0x6f9/0xb60 [ 319.591704][T14647] wait_consider_task+0x113f/0x1650 [ 319.596939][T14647] __do_wait+0xfa/0x510 [ 319.601124][T14647] do_wait+0xb7/0x260 [ 319.605135][T14647] kernel_wait4+0x16b/0x1e0 [ 319.609666][T14647] __x64_sys_wait4+0x91/0x120 [ 319.614368][T14647] x64_sys_call+0x26c8/0x2fb0 [ 319.619066][T14647] do_syscall_64+0xd2/0x200 [ 319.623623][T14647] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 319.629537][T14647] [ 319.631906][T14647] read to 0xffff888108949040 of 3200 bytes by task 14647 on cpu 0: [ 319.639878][T14647] memcpy_and_pad+0x48/0x80 [ 319.644498][T14647] arch_dup_task_struct+0x2c/0x40 [ 319.649543][T14647] dup_task_struct+0x83/0x6a0 [ 319.654246][T14647] copy_process+0x399/0x1fe0 [ 319.658860][T14647] kernel_clone+0x16c/0x5b0 [ 319.663390][T14647] __se_sys_clone3+0x1c2/0x200 [ 319.668183][T14647] __x64_sys_clone3+0x31/0x40 [ 319.672891][T14647] x64_sys_call+0x10c9/0x2fb0 [ 319.677585][T14647] do_syscall_64+0xd2/0x200 [ 319.682115][T14647] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 319.688035][T14647] [ 319.690380][T14647] Reported by Kernel Concurrency Sanitizer on: [ 319.696553][T14647] CPU: 0 UID: 0 PID: 14647 Comm: syz.0.3992 Not tainted 6.16.0-rc1-syzkaller-00003-gf09079bd04a9 #0 PREEMPT(voluntary) [ 319.709336][T14647] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 319.719411][T14647] ================================================================== [ 319.742801][T14648] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3992'. [ 319.774105][T12655] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.