last executing test programs: 3m35.267234757s ago: executing program 32 (id=21): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000003c0)=ANY=[@ANYRESHEX=0x0, @ANYBLOB="7cf913e3aeebe911be73214ac4de362738eec422ff8981a67ab1df237430349fe20ed4faac848a6690f65111e786fa044da1d527d74d85af10db0e41d5e0d83e74a0300b475d422df2eea92264f0cb4e8e8d6723ec54e624fdbe5a22f1cc372b6f9f5c6e55ef642b64738a0ef3193c72247976e5f9db1dcd15f5fda6c76ea0fbd10eb25d76ce468150573f5beb9316d8af371dd96c7e215a79d9ba88cb2b4d66f8ee78d3d2370d3f2c94897ded1672e14a6e382542641c61ebb5b59ddc", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000900850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kfree\x00', r2}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="2c0000003b00090000000000cd0000000100000018000380"], 0x2c}}, 0x0) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYRESHEX=r1], 0xc0}}, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x35, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x1ff}, 0x0, 0xf5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/bus/input/devices\x00', 0x0, 0x0) read$char_usb(r6, &(0x7f00000030c0)=""/4110, 0x100e) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r7}, 0x10) r8 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000640)=ANY=[@ANYBLOB="9feb010018000000000000003400000034000000060000000400000000000007000000000000000000000001050000018000000000000000010000851000000000000000020000000000000000000100da"], 0x0, 0x52, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000e00)={0x18, 0x3, &(0x7f0000000bc0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x6}}, &(0x7f0000000980)='syzkaller\x00', 0x1, 0x0, 0x0, 0x41000, 0x23, '\x00', 0x0, 0x0, r8, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000d00)={0x2, 0x2, 0x7fff, 0x31b}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='snd_soc_jack_notify\x00', r0, 0x0, 0x8}, 0x18) 3m31.097049627s ago: executing program 3 (id=57): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000040"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) socket$kcm(0x10, 0x3, 0x10) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = syz_io_uring_setup(0xd8, &(0x7f0000000000)={0x0, 0x0, 0x40}, &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_RESTRICTIONS(r2, 0xb, &(0x7f0000000140)=[@ioring_restriction_sqe_flags_required, @ioring_restriction_sqe_op={0x1, 0x18}], 0x2) r3 = syz_io_uring_setup(0x6906, &(0x7f00000004c0)={0x0, 0xfffffffd, 0x80, 0x0, 0x52}, &(0x7f0000000200), &(0x7f0000000140)=0x0) syz_io_uring_setup(0x1868, &(0x7f00000003c0)={0x0, 0xe209}, &(0x7f0000000240)=0x0, &(0x7f0000000180)) syz_io_uring_submit(r5, r4, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x4004, @fd, 0x0, 0x0}) io_uring_enter(r3, 0x184c, 0x0, 0x0, 0x0, 0x0) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f0000000140)={0x0, @in6={{0xa, 0x4e21, 0x6, @remote, 0xb2a}}, 0x84000, 0x200, 0x3fc, 0x0, 0x50}, 0x9c) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r6, 0x84, 0x13, &(0x7f0000000000)=0x29, 0x4) bind$inet6(r6, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r6, 0x84, 0x72, &(0x7f0000000100)={0x0, 0x0, 0x20}, 0xc) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mprotect(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0) writev(r7, &(0x7f00000024c0)=[{&(0x7f0000000240)="0d850ecd33a42b86f08a86e396e0af7133653b85edbd976c2a338c922a667eae1c94c629c93d8fda25f9670238c3ed769485a3df4c091e882367ad5d9caedcd48a50ea7b", 0x44}], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r7, 0x0) mincore(&(0x7f0000000000/0x2000)=nil, 0x2000, &(0x7f00000002c0)=""/48) setsockopt$inet_sctp6_SCTP_EVENTS(r6, 0x84, 0xb, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xb}, 0xe) sendto$inet6(r6, &(0x7f0000847fff)='X', 0x34c8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) unshare(0x22020600) r8 = syz_open_dev$loop(&(0x7f0000000000), 0x7fffffff, 0x0) fadvise64(r8, 0x4, 0x7, 0x4) 3m30.833877008s ago: executing program 3 (id=60): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1e, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_REMOVE(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x14, r3, 0x1, 0x0, 0x0, {0x4}}, 0x14}, 0x1, 0xfcffffff00000000}, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) listen(r4, 0x6) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r6 = memfd_secret(0x0) r7 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) r8 = fcntl$dupfd(r7, 0x0, r6) ioctl$SCSI_IOCTL_GET_PCI(r8, 0x2284, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0xffffffffffffffc0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r9 = getpid() r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x1, 0x4, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r10}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000040)='kmem_cache_free\x00', r11}, 0x10) r12 = syz_pidfd_open(r9, 0x0) setns(r12, 0x24020000) syz_clone3(&(0x7f00000008c0)={0x14840000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000880)=[0x0], 0x1}, 0x58) getpeername$packet(r8, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f00000000c0)=0x14) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) close(r4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x0) 3m30.527889613s ago: executing program 3 (id=63): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r0, 0x89fb, &(0x7f0000000040)={'sit0\x00', 0x0}) socket$caif_seqpacket(0x25, 0x5, 0x0) (async) r1 = socket$caif_seqpacket(0x25, 0x5, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x529000, 0x0) (async) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x529000, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') (async) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r2) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f00000000c0)) r4 = socket(0x40000000015, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r4, 0x114, 0x8, &(0x7f0000000080), 0x4) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r5}, 0x0, &(0x7f00000002c0)}, 0x20) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r6}, 0x10) bind$inet(r4, &(0x7f0000000340)={0x2, 0x4e20, @local}, 0x10) pwritev(r3, &(0x7f0000000180)=[{&(0x7f0000000140)='\x00!', 0x2}], 0x1, 0xfffffffe, 0x8) (async) pwritev(r3, &(0x7f0000000180)=[{&(0x7f0000000140)='\x00!', 0x2}], 0x1, 0xfffffffe, 0x8) inotify_init1(0x0) (async) r7 = inotify_init1(0x0) fcntl$setown(r7, 0x8, 0xffffffffffffffff) fcntl$getownex(r7, 0x10, &(0x7f0000000140)) (async) fcntl$getownex(r7, 0x10, &(0x7f0000000140)={0x0, 0x0}) r9 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_INITMSG(r9, 0x84, 0x2, &(0x7f0000000000)={0x7, 0xe, 0x10}, 0x8) r10 = syz_open_procfs(r8, &(0x7f0000000600)='fd/4\x00') open_by_handle_at(r10, &(0x7f0000000380)=ANY=[@ANYBLOB="5000000002000000c801"], 0x410902) (async) open_by_handle_at(r10, &(0x7f0000000380)=ANY=[@ANYBLOB="5000000002000000c801"], 0x410902) close_range(r1, 0xffffffffffffffff, 0x0) 3m30.470838759s ago: executing program 33 (id=64): r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$KDSKBSENT(r0, 0x4b49, &(0x7f0000000b00)={0xab, "2c73dbac7b69926625a4d74e929d7a0d9fe8bdbeffeebbe6aebf7fc33dad3ea47c634e4851946a11fec9e6e570b9a7c7d07182b4208138325a00a730b4a1a10d35ff9ddaa7f928350d072864d58247b784ec9400fc77d64d1f68fe514770b5301492fd53b56f51c0e439839d5b448c14e07d3831cefbda7cd1b702e9e21cf8a6a12041392505afc4967d34590ba9bb31fce79c96bec862cf3833c2f35a192fb2359db5bd0340b8428daf9f8d92f2ea551e998c8ae53e794ca8b11f819e6190e1eb62efd7110b7de948073650c53fcdeb660f22dc79b65fcfe2d0a528deb695f751694ab1f7c92130e655cb233939ff728676fe2428e5f70a11f647b768a0258a22c4b3994d2c6e928b81374834714cb149acf11daca690b6cd78b73ec1283e2ff04ee7bfec1e75ba3352acf9fea46ae2f7eda1af2b3801690011401abe7c762634f9b87e9fb5602b62ae6b1186f61f2883c9cea21dc38afc24a84a5f12eb11f5fcc47c0a1eaaa78204b7a997f0d57ee4c3a456460ef0580ca5127031f6dea64d81a3c3981f13f119e02b4407d20624cb3968f031e777882bbb48ad354d4f22007c815989dc8c44de8ed8532dc4521a68c9213e57f2c519a296450fd67a072b1f84858c060f971dccda1c7c4d2f833ed9597f88df7714d7dd9de267bd4cfe4f7876b8ab372b3674bc3afa5856015726c165b3ba9f1d56a12eba0baa9edf8bee3a"}) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000540), 0x84) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0xffffffff, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r4 = syz_open_dev$usbmon(&(0x7f0000000900), 0x7, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff00000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000800000000000000000800000e200000000"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r6}, 0x10) ioctl$MON_IOCX_MFETCH(r4, 0xc0109207, &(0x7f0000000080)={0x0, 0x6}) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000001040)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000200)='mm_page_free\x00', r7, 0x0, 0x2}, 0x18) mmap$IORING_OFF_SQ_RING(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x12, r2, 0x0) perf_event_open(&(0x7f0000000400)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 3m30.213609229s ago: executing program 3 (id=67): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0x3, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) perf_event_open(&(0x7f0000000400)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf8a, 0xd881c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x2a88, 0xffffffffffffffff, 0x0, 0x0, 0x100000000000000, 0x2, 0x0, 0x0, 0x1, 0x0, 0x2}, 0x0, 0x9, 0xffffffffffffffff, 0x0) r3 = syz_io_uring_setup(0x1f87, &(0x7f0000000080)={0x0, 0x0, 0x13580, 0x0, 0x28f}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000140)=@IORING_OP_MSG_RING={0x28, 0x4, 0x0, r3, 0x0, 0x0}) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0\x00', &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x2081c80, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f0000000440)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x80000, 0x0) umount2(&(0x7f0000000100)='./file0\x00', 0xb) io_uring_enter(r3, 0x58, 0xfe60, 0x5, 0x0, 0xfffffe58) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000040"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r7}, 0x10) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) open$dir(&(0x7f00000000c0)='./file0\x00', 0x2, 0x0) 3m30.125996919s ago: executing program 3 (id=69): r0 = syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0xc0ed4003, &(0x7f00000000c0)={[{@usrjquota}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4}}, {@stripe={'stripe', 0x3d, 0x1}}, {@data_writeback}, {@user_xattr}, {@journal_dev={'journal_dev', 0x3d, 0x74b}}]}, 0xfe, 0x47e, &(0x7f00000004c0)="$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") fchdir(r0) 3m29.828281483s ago: executing program 3 (id=75): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) openat$random(0xffffffffffffff9c, 0x0, 0xc6082, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = epoll_create1(0x0) perf_event_open$cgroup(&(0x7f0000000100)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/wakeup_count', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f00000000c0)={0x6000001f}) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="9bd1d39f485245af24eb6914fa2c14b7ef61a2f680ed02c1fe3b0ce6dde3504ec14b14779eb8b3915be334c0fd999f3ea07396d6fdf049d395c164ab22e435a9e1bfd5096cf2ddc1d1115f46ea8a06f547610bd491daa3386cd1f332f90ee2e2d3d52b1d6ce1c2e177748a9f6cd7532d9ebe75392401cfc7fdc75c9a35579496c6908cbd3106d5f3470aa58575c32c873f519ecff1c94585bcc2b551d1590730a535338cf0fb549ed275e8180af3909b", @ANYRES32=r1, @ANYRES16=r3], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x2d) read$char_usb(r3, &(0x7f00000004c0)=""/185, 0xb9) epoll_pwait(r2, &(0x7f0000000300), 0x55, 0x0, 0x0, 0x0) mlockall(0x1) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r6 = socket$igmp6(0xa, 0x3, 0x2) r7 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r6, 0x8918, &(0x7f0000000280)={@mcast2, 0x4f, r8}) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mbind(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2, &(0x7f0000000440)=0x942e, 0x56, 0x2) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x4, &(0x7f00000000c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000005c0)='kmem_cache_free\x00', r9, 0x0, 0x8}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) unshare(0x2c020400) msgget$private(0x0, 0x0) msgsnd(0x0, &(0x7f00000000c0)=ANY=[], 0x2000, 0x0) 3m29.827514743s ago: executing program 34 (id=75): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) openat$random(0xffffffffffffff9c, 0x0, 0xc6082, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = epoll_create1(0x0) perf_event_open$cgroup(&(0x7f0000000100)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/wakeup_count', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f00000000c0)={0x6000001f}) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="9bd1d39f485245af24eb6914fa2c14b7ef61a2f680ed02c1fe3b0ce6dde3504ec14b14779eb8b3915be334c0fd999f3ea07396d6fdf049d395c164ab22e435a9e1bfd5096cf2ddc1d1115f46ea8a06f547610bd491daa3386cd1f332f90ee2e2d3d52b1d6ce1c2e177748a9f6cd7532d9ebe75392401cfc7fdc75c9a35579496c6908cbd3106d5f3470aa58575c32c873f519ecff1c94585bcc2b551d1590730a535338cf0fb549ed275e8180af3909b", @ANYRES32=r1, @ANYRES16=r3], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x2d) read$char_usb(r3, &(0x7f00000004c0)=""/185, 0xb9) epoll_pwait(r2, &(0x7f0000000300), 0x55, 0x0, 0x0, 0x0) mlockall(0x1) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r6 = socket$igmp6(0xa, 0x3, 0x2) r7 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r6, 0x8918, &(0x7f0000000280)={@mcast2, 0x4f, r8}) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mbind(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2, &(0x7f0000000440)=0x942e, 0x56, 0x2) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x4, &(0x7f00000000c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000005c0)='kmem_cache_free\x00', r9, 0x0, 0x8}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) unshare(0x2c020400) msgget$private(0x0, 0x0) msgsnd(0x0, &(0x7f00000000c0)=ANY=[], 0x2000, 0x0) 3m8.219208892s ago: executing program 2 (id=340): r0 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001040)={0x38, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}}, 0x0) 3m8.192208185s ago: executing program 2 (id=341): mkdir(&(0x7f0000000580)='./file0\x00', 0xaa6f6396d0ed07f2) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x2000, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1) 3m8.173011827s ago: executing program 2 (id=342): connect$pppl2tp(0xffffffffffffffff, &(0x7f00000001c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2, 0x4, {0xa, 0x4e21, 0x8, @dev={0xfe, 0x80, '\x00', 0xd}, 0x7}}}, 0x3a) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000010000304000000000000000000000400", @ANYRES32=0x0, @ANYBLOB="00000000009000002400128009000100626f6e640000000014000280050016000000000008000b"], 0x44}}, 0x0) (fail_nth: 3) 3m8.108193874s ago: executing program 2 (id=343): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180200000020702500000000002020207b1af8ff00000000bfa10000000d00000701000080000000000000b7030000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0], 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0xc, 0x0, 0x7ffc1ffb}]}) ustat(0x2, &(0x7f0000000040)) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb702000008000000182300", @ANYRES32=r0, @ANYBLOB="0000000000000000b705000008"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) r2 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r2, 0x65, 0x1, &(0x7f0000000080)=[{{0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x1}}, {{}, {0x0, 0x0, 0x1, 0x1}}], 0x10) setsockopt$CAN_RAW_FILTER(r2, 0x65, 0x1, &(0x7f0000000000)=[{{0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x1}}], 0x8) syz_mount_image$ext4(&(0x7f0000000080)='ext2\x00', &(0x7f0000000340)='./file0\x00', 0x2404, &(0x7f0000001c40), 0x3, 0x43e, &(0x7f00000004c0)="$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") r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r3) sendmsg$NLBL_MGMT_C_ADDDEF(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000380)={0x44, r4, 0x1, 0x0, 0x0, {}, [@NLBL_MGMT_A_IPV6MASK={0x0, 0x6, @private1}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast2}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_IPV6ADDR={0x0, 0x5, @loopback}, @NLBL_MGMT_A_FAMILY={0x42, 0xb, 0x2f}]}, 0x44}}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) mount(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='sysfs\x00', 0x0, 0x0) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r5, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) getsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000200)={@ipv4={""/10, ""/2, @broadcast}}, &(0x7f0000000300)=0x14) set_mempolicy(0x1, 0x0, 0x10001) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="580000001000010400"/20, @ANYRES32=r8, @ANYBLOB="0000000000800200380012800b0001006272696467650000280002800c002300fbffffffffffffff05002400000000010500240001000000060027"], 0x58}}, 0x0) unshare(0x40000200) 3m8.06493994s ago: executing program 2 (id=344): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendto$inet6(r0, &(0x7f00000000c0)="eb", 0x1, 0x0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 3m7.930782285s ago: executing program 2 (id=346): syz_clone(0x22023500, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000001000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x4, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x33, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe, @void, @value}, 0x94) r1 = io_uring_setup(0x2e35, &(0x7f0000000180)) r2 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) accept4(0xffffffffffffffff, 0x0, 0x0, 0x80000) close_range(r1, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x200000005c831, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, 0x0) socket$can_raw(0x1d, 0x3, 0x1) 3m7.930542825s ago: executing program 35 (id=346): syz_clone(0x22023500, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000001000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x4, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x33, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe, @void, @value}, 0x94) r1 = io_uring_setup(0x2e35, &(0x7f0000000180)) r2 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) accept4(0xffffffffffffffff, 0x0, 0x0, 0x80000) close_range(r1, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x200000005c831, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, 0x0) socket$can_raw(0x1d, 0x3, 0x1) 3m1.237699316s ago: executing program 5 (id=426): syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800700, &(0x7f0000000880)={[{@errors_remount}, {@bsdgroups}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5e}}, {@noauto_da_alloc}, {@bsdgroups}, {@oldalloc}, {@errors_continue}]}, 0x2, 0x44a, &(0x7f0000000400)="$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") r0 = mq_open(&(0x7f0000000a00)='!\x7f\x00\xca\x00\x00\x00\f\x00\x00\x01E!T\xeeux\x00\xbf@\xf4\x1c\xbce\xca\x97\xd5pkv\x88L\xe8$\xef\xfeI\xdaW1\xfcg\xa1\xdb$,0y$\xcd{zl.\xae\x805\xa8\xd6\x85\x15\xd2\x0e~\xcc\x90\x97\xe8h\v\x1a9X\a\xca{\x11#\x95m{U\xe5-\xabRw\xcafy\xe6\aNhX4Ll[\x14\x150x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000140)=@IORING_OP_MSG_RING={0x28, 0x4, 0x0, r3, 0x0, 0x0}) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0\x00', &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x2081c80, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f0000000440)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x80000, 0x0) umount2(&(0x7f0000000100)='./file0\x00', 0xb) io_uring_enter(r3, 0x58, 0xfe60, 0x5, 0x0, 0xfffffe58) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000040"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r7}, 0x10) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) open$dir(&(0x7f00000000c0)='./file0\x00', 0x2, 0x0) 2m59.686644024s ago: executing program 5 (id=441): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="9feb010018200000000000006c0000006c0000000200000000000000000000070000000000000000070000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d700000000000000000000000000000000a1d8faf5bd23dd800008"], 0x0, 0x86, 0x0, 0x1, 0x980, 0x10000, @value}, 0x28) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000000)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_PMKSA(r2, &(0x7f0000000580)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000440)={&(0x7f0000000100)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="00022cbd7000fbdbdf253500000008000300", @ANYRES32=r4, @ANYBLOB="08001f01825c9e544f2a4f66e3196a0d0000"], 0x24}, 0x1, 0x0, 0x0, 0x140}, 0x440c0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r5) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r6}, 0x4) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1c, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000009b79ecc20000000000000000b7080000000000007b8af8ff00000000a9080000000000007b8af0ff00000000bfa100000000f8ffffffbfa400000000000007040000f0ffffffb702000000000000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r7}, 0x10) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000018c0)=ANY=[@ANYBLOB="0a000000150000003d36000002"], 0x48) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000380)={r8, &(0x7f0000001940), 0x0}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) r9 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="02000000040000000800", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r0, @ANYBLOB="000000000000000000000000000000000000c136494c7b754551825a85567cd485aa3018aa91e3bf08766bbe6ce7918014989fb8835bf5fcd0019835a67eaee3c9acbf9ed1e3fed5fc3fe7f2f49fcff24f01c1fa5f3bca0578093899bbfbe61fb70ddd05e96989c51eb2c6e75b68e653dd98b2e95a394023d7b2b2e7e48cde1c63273de86f562a6d9438726fcd0f6a6bae71ae161e6f486174a182af4bebb0cb848fd643dce1b8bf84a89a85e921c3d8d5c8c4402c2aa9c51566eca1257ff70ddff93413c0647d79301c2da5d157779a09be424f26408c4c6ab2b974fba40329e4b64f"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r9, 0xffffffffffffffff}, 0x4) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000001b40)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r10, @ANYBLOB="0000000000000000b70500000800000585000000690000009500000000000000"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000640)='percpu_alloc_percpu\x00', r11}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0xa, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r12 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x2, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r12, 0x0, 0x9135}, 0x18) r13 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) ioctl$TUNSETIFF(r13, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r14 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r14, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000006c0)=ANY=[@ANYBLOB="380000000314010000000000000008000900020073797a310000000008004100736977001400330073797a6b616c6c657230"], 0x38}}, 0x0) write$cgroup_subtree(r1, &(0x7f0000000380)=ANY=[@ANYBLOB="8fedcb5d07081196f37538e486dd6372ce22667f2f"], 0x3e) 2m59.445510232s ago: executing program 5 (id=445): r0 = socket(0xa, 0x3, 0x3a) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18080000000000000000000000000002850000000f000000850000002a00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001940)=@newtaction={0xe98, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0xe84, 0x1, [@m_pedit={0xe80, 0x1, 0x0, 0x0, {{0xa}, {0xe54, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe50, 0x2, {{{}, 0x97, 0x0, [{}, {}]}, [{}, {}, {}, {}, {}, {0x448eade7}, {0x0, 0x0, 0x80000000}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0xfffffffb}, {0x0, 0x0, 0x0, 0x3}, {}, {0x7, 0x1}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {0xfffffffc}, {}, {}, {}, {0x0, 0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0xfffffffe}, {}, {0xd5}, {0x0, 0x0, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x10}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfd2}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0xd1e00}, {}, {}, {0x4}, {}, {}, {0x4}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x10000, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0xfffffffe}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xb}], [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe98}}, 0x4000000) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'macvlan0\x00', 0x0}) setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000000)={0x4, 0x1, 0x7, r3, 0x5}, 0xc) setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000080)={0x1, 0x0, 0x0, r3, 0x267a4e37}, 0xc) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="2000000011000100"/20, @ANYRES32=r3], 0x20}, 0x1, 0x0, 0x0, 0x24008050}, 0x20008000) 2m59.403072427s ago: executing program 36 (id=445): r0 = socket(0xa, 0x3, 0x3a) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18080000000000000000000000000002850000000f000000850000002a00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001940)=@newtaction={0xe98, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0xe84, 0x1, [@m_pedit={0xe80, 0x1, 0x0, 0x0, {{0xa}, {0xe54, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe50, 0x2, {{{}, 0x97, 0x0, [{}, {}]}, [{}, {}, {}, {}, {}, {0x448eade7}, {0x0, 0x0, 0x80000000}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0xfffffffb}, {0x0, 0x0, 0x0, 0x3}, {}, {0x7, 0x1}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {0xfffffffc}, {}, {}, {}, {0x0, 0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0xfffffffe}, {}, {0xd5}, {0x0, 0x0, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x10}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfd2}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0xd1e00}, {}, {}, {0x4}, {}, {}, {0x4}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x10000, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0xfffffffe}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xb}], [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe98}}, 0x4000000) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'macvlan0\x00', 0x0}) setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000000)={0x4, 0x1, 0x7, r3, 0x5}, 0xc) setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000080)={0x1, 0x0, 0x0, r3, 0x267a4e37}, 0xc) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="2000000011000100"/20, @ANYRES32=r3], 0x20}, 0x1, 0x0, 0x0, 0x24008050}, 0x20008000) 2m43.903491392s ago: executing program 8 (id=745): bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x4f) openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x149a82, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_tables_matches\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x9, 0xd, &(0x7f0000000180)=ANY=[@ANYRES8, @ANYRES32, @ANYBLOB="0000000000000000b7"], 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r4 = socket$kcm(0x10, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020000008500000082"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001280)={&(0x7f0000000500)='percpu_free_percpu\x00'}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$kcm(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="2e00000011008188040f80ec59acbc0413a181003f000000000100000010001f0e0027000f00000000800200121f", 0x2e}], 0x1}, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r6}, 0x10) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000040)={0x53, 0x0, 0x6, 0x0, @buffer={0x17, 0x51, &(0x7f00000000c0)=""/81}, &(0x7f0000000380)="259374c96ee3", 0x0, 0x0, 0x0, 0x0, 0x0}) preadv(r0, &(0x7f0000002240)=[{&(0x7f0000001180)=""/4096, 0x1000}], 0x1, 0x29d3, 0x0) 2m43.816620022s ago: executing program 8 (id=747): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000180)=0x9) r1 = syz_io_uring_setup(0x516c, &(0x7f0000000200)={0x0, 0x73fc, 0x10100}, &(0x7f0000000100), &(0x7f0000000000)=0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kfree\x00', r3}, 0x10) syz_io_uring_setup(0xa94, &(0x7f0000000300), &(0x7f00000000c0)=0x0, &(0x7f00000005c0)) syz_io_uring_submit(r4, r2, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0}) io_uring_enter(r1, 0xb15, 0x0, 0x0, 0x0, 0x0) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000380)={0x0, 0x0, 0x0, 0xffffeffe, 0x0, "155638ed5494dac2c9221cf91c5d674e152438"}) 2m43.780082056s ago: executing program 8 (id=748): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="a1b3a90577e10f2b00000000000000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, @void, @value}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32, @ANYRES32, @ANYBLOB="0000000000000000b7020000f3ffff"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) (async, rerun: 32) ioctl$SG_NEXT_CMD_LEN(0xffffffffffffffff, 0xc0481273, &(0x7f0000000000)) (rerun: 32) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) (async, rerun: 64) r1 = syz_clone(0x308d3000, &(0x7f00000004c0)="536bf910efcbf279d1a662c740e20a0b35eb4c1035e2c87b9ef0d4f767d5f04f3b75c92baa3eaa06faa5ed5aee178f01a1ee03ab8431095eab2b66bf492a9ea3a9cff1981578a37eab60ead89a47e1348b315cb8995b0d6653e4f3f1366ae1000501ff538a0ecce377b5eb93a484732515e23bcff0b5d39b371e8a5304ab6de144771d3683357a8165686500"/153, 0x99, &(0x7f0000000340), &(0x7f0000000700), &(0x7f0000000600)="8493681b6b7ee1c78311ed7211127aff1d4076dc7270bb209e02aa78b304df5aa22c6e82b603927340a71640b7dd6289046dfa1acc86bf9416c5c54f444565927eec958f68b98622a16b22cfbbb2fa1b382cab141a39839d9c1c4f7101236c9147a7ea3e46b5f282963dba1ed580a9f244f6df32c3dea089a812930f7b57de940381ef77ca01697375d6dccce13c6e8181a3b3f8ec98f8e8d1963c58f9e147d9d6469bf3a9081b41cb94edf768d0957f1147367919068d438eb1828a293999d380909d9afc0fe8b2804faa4f") (rerun: 64) ioctl$BINDER_FREEZE(0xffffffffffffffff, 0x400c620e, &(0x7f0000000740)={r1, 0x1, 0x4da}) socket(0xa, 0x40000000002, 0x0) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0a00000004000000ff0f00000700000000000000", @ANYRES32, @ANYBLOB="00000000003b3198274bd3c9a1b4fd9447aefbe3891f7d221724835b2500000000000000ebe703340309157b65d6da664f0f", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001440)={{r2}, &(0x7f0000000300), &(0x7f0000000580)='%pB \x00'}, 0x20) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async) socketpair$unix(0x1, 0x0, 0x0, 0x0) (async) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f0000000780)={[{@noinit_itable}, {}, {@sysvgroups}, {@norecovery}, {@user_xattr}, {@nobh}, {@nogrpid}, {@noauto_da_alloc}, {@nomblk_io_submit}]}, 0x3, 0x57a, &(0x7f0000000800)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x26e1, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x0) write$cgroup_type(r3, &(0x7f0000000000), 0x180600) (async, rerun: 64) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) (async, rerun: 64) mount(0x0, &(0x7f0000000380)='./bus\x00', &(0x7f0000000440)='ramfs\x00', 0x0, 0x0) (async) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='sys_enter\x00', r5}, 0x10) (async) waitid(0x3, 0x0, 0x0, 0x60000009, 0x0) (async, rerun: 32) chdir(&(0x7f0000000480)='./bus\x00') (rerun: 32) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x2040, 0x0) (async) openat(0xffffffffffffff9c, &(0x7f00000001c0)='.\x00', 0x0, 0x0) (async) r6 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0, 0x0) fcntl$setlease(r6, 0x400, 0x0) 2m43.754563319s ago: executing program 8 (id=749): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r2 = syz_mount_image$vfat(&(0x7f00000001c0), &(0x7f0000000000)='./file0\x00', 0x810082, &(0x7f0000000040)=ANY=[@ANYBLOB="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"], 0x0, 0x2ad, &(0x7f0000000280)="$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") name_to_handle_at(r2, &(0x7f0000000540)='./file2\x00', &(0x7f0000000200)=ANY=[], 0x0, 0x1400) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000006bd0d5ecd663ea920024207242a1f67dd9c0b9800d0c60"], 0x48) r3 = syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000900)='./file2\x00', 0x14001, &(0x7f0000000740)={[], [], 0x3d}, 0x64, 0x51c, &(0x7f0000000200)="$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") r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xf, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRESHEX=r3, @ANYBLOB="0000000000000000b702000014000080b7000000bf0900000000000055090100000000009500000000000000bf91000000000000b702000000000000009533fa9a5d523267dc599159029a45e34d3b3e2587379c7802d7"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r4}, 0x10) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x9, 0xf, &(0x7f0000000940)=ANY=[@ANYBLOB="180000000000000000000000000000001811000011c4c157036404e12c58f7ff28aa86d0e296b5e476514b262f63eee225db4cff3759d770045ec90cad50f0904b5d819ee8b327e9a9", @ANYRES32=r5, @ANYBLOB="0000000000000000b7020000111e6ca5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000340)='kfree\x00', r6}, 0x10) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_CE_THRESHOLD={0x4}]}}]}, 0x40}}, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) setresgid(0xee01, 0x0, 0xffffffffffffffff) r10 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r11 = syz_pidfd_open(r10, 0x0) socket$netlink(0x10, 0x3, 0x0) process_madvise(r11, 0x0, 0x0, 0x19, 0x0) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r12, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=@deltaction={0x40, 0x18, 0x1, 0x0, 0x0, {0xa}, [@TCA_ACT_TAB={0x2c, 0x1, [{0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0x10, 0x8, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}, {0xc, 0x9, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}]}]}, 0x40}}, 0x0) r13 = socket$nl_netfilter(0x10, 0x3, 0xc) r14 = socket$nl_netfilter(0x10, 0x3, 0xc) brk(0x7) sendmsg$NFT_BATCH(r14, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a300000000048000000030a05020000000000000000010000000900030073797a320000000014000480080002400000000008000140000000000900010073797a3000000000080007006e6174003c000000060a01040000000000000000010000001400048010000180090001006d617371000000000800"], 0xcc}}, 0x0) sendmsg$NFT_MSG_GETRULE(r13, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000500)=ANY=[@ANYBLOB="20000000070a010200000011e94c0000000000020000000900010073797a3000000000fb464a309fe315adf2bc7507f0e863dfefc3b578681cca7e9979d3d0e7471d41aa695b3a7718f8df51425ea249d3e96db0246c589a444bb5122d0a711ae2b748df14"], 0x20}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='kfree\x00', r0}, 0x10) 2m43.57628982s ago: executing program 8 (id=752): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) r2 = syz_open_dev$usbfs(&(0x7f0000000100), 0x206, 0x8401) ioctl$USBDEVFS_ALLOW_SUSPEND(r2, 0x5522) 2m42.849540613s ago: executing program 8 (id=765): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000280)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x800700, &(0x7f0000000380)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x5}}, {@usrjquota}, {@user_xattr}, {@usrjquota}, {@resgid}, {@norecovery}, {@usrjquota}, {@init_itable}]}, 0x3, 0x467, &(0x7f0000002280)="$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") bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) r0 = gettid() process_vm_readv(r0, &(0x7f0000001140)=[{&(0x7f0000000000)=""/87, 0x62}, {&(0x7f0000001200)=""/4096, 0x100a}], 0x2, &(0x7f00000011c0)=[{0xfffffffffffffffc, 0x19000}], 0x1, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in6=@private0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x60, 0x30, 0x0, 0x0, 0xee01}}}, 0xb8}}, 0x0) 2m42.848785173s ago: executing program 37 (id=765): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000280)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x800700, &(0x7f0000000380)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x5}}, {@usrjquota}, {@user_xattr}, {@usrjquota}, {@resgid}, {@norecovery}, {@usrjquota}, {@init_itable}]}, 0x3, 0x467, &(0x7f0000002280)="$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") bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) r0 = gettid() process_vm_readv(r0, &(0x7f0000001140)=[{&(0x7f0000000000)=""/87, 0x62}, {&(0x7f0000001200)=""/4096, 0x100a}], 0x2, &(0x7f00000011c0)=[{0xfffffffffffffffc, 0x19000}], 0x1, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in6=@private0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x60, 0x30, 0x0, 0x0, 0xee01}}}, 0xb8}}, 0x0) 1m32.510298702s ago: executing program 6 (id=2463): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) close(0xffffffffffffffff) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r0}, 0x0, &(0x7f0000000040)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) link(0x0, 0x0) 1m32.488497204s ago: executing program 6 (id=2465): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x275a, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) writev(r1, &(0x7f0000000300)=[{&(0x7f00000000c0)="c0", 0x1}], 0x1) r2 = creat(&(0x7f0000000080)='./bus\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000000240)={'erspan0\x00', &(0x7f0000000540)={'syztnl1\x00', 0x0, 0x20, 0x0, 0xffff0000, 0x2000000, {{0xf, 0x4, 0x2, 0x0, 0x3c, 0x64, 0x0, 0x7, 0x4, 0x0, @loopback, @broadcast, {[@end, @ssrr={0x89, 0xb, 0xf5, [@multicast1, @local]}, @end, @rr={0x7, 0x1b, 0x3b, [@loopback, @local, @local, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, @remote]}]}}}}}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=@base={0xb, 0x5, 0xfffff45c, 0x9, 0x1, r2, 0x0, '\x00', r3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x4018}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 1m31.567543131s ago: executing program 6 (id=2493): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) r1 = socket(0x15, 0x5, 0x0) getsockname$packet(r1, 0x0, &(0x7f0000000240)) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r2, 0x0, 0x4}, 0x18) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000000)="890704", 0x3) 1m31.512560096s ago: executing program 6 (id=2498): r0 = perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x34, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = signalfd(r0, &(0x7f00000000c0)={[0xffffffffffffffff]}, 0xfffffffffffffea6) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000280)={'vlan0\x00', 0x0}) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) bind$packet(r3, &(0x7f0000000040)={0x11, 0x0, r4, 0x1, 0x4, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x15}}, 0x14) bind$can_j1939(r1, &(0x7f0000000080)={0x1d, r4, 0x0, {0x1, 0x1, 0x3}}, 0x18) r5 = socket$inet_smc(0x2b, 0x1, 0x0) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r6, 0x0) r7 = socket(0x2, 0x80805, 0x0) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f00000001c0)={r1, 0xffffffffffffffff, 0x4}, 0x67) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0x18, &(0x7f00000002c0)=@assoc_value, &(0x7f0000000040)=0x8) syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x400c84, &(0x7f0000000340), 0x1, 0x786, &(0x7f0000001900)="$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") mount(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0) open(&(0x7f0000001780)='./bus\x00', 0x64842, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000340)='./bus\x00', 0x0, 0x1000, 0x0) r8 = open(&(0x7f00000005c0)='./bus\x00', 0x321042, 0x1) syz_io_uring_setup(0x1526, &(0x7f0000000100), 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r8, 0x4c02, &(0x7f0000000140)) r9 = creat(&(0x7f00000003c0)='./file0\x00', 0x9f) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) r10 = socket(0x2, 0x80805, 0x0) socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r9, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000240)=0x8) setsockopt$inet_sctp_SCTP_MAX_BURST(r10, 0x84, 0x23, &(0x7f00000003c0)=@assoc_value={r11}, 0x8) bind$inet(r5, &(0x7f0000000140)={0x2, 0x4e22, @multicast2}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) 1m31.13158275s ago: executing program 6 (id=2507): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) link(0x0, 0x0) 1m30.540344119s ago: executing program 6 (id=2517): r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020000008500000082"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) ioctl$SG_IO(r1, 0x2285, 0x0) 1m30.540201069s ago: executing program 38 (id=2517): r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020000008500000082"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) ioctl$SG_IO(r1, 0x2285, 0x0) 1.812883662s ago: executing program 4 (id=4437): ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="4400000010000104a5270b7357000000925e4a44", @ANYRES32, @ANYBLOB="0dfa130016000000240012000c00010000000000000000000c0002f608000000011800"], 0x44}}, 0x0) r0 = socket(0x10, 0x803, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507"], 0x48}}, 0x0) 1.780011815s ago: executing program 4 (id=4439): syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800700, &(0x7f0000000880)={[{@errors_remount}, {@bsdgroups}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5e}}, {@noauto_da_alloc}, {@bsdgroups}, {@oldalloc}, {@errors_continue}]}, 0x2, 0x44a, &(0x7f0000000400)="$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") r0 = mq_open(&(0x7f0000000a00)='!\x7f\x00\xca\x00\x00\x00\f\x00\x00\x01E!T\xeeux\x00\xbf@\xf4\x1c\xbce\xca\x97\xd5pkv\x88L\xe8$\xef\xfeI\xdaW1\xfcg\xa1\xdb$,0y$\xcd{zl.\xae\x805\xa8\xd6\x85\x15\xd2\x0e~\xcc\x90\x97\xe8h\v\x1a9X\a\xca{\x11#\x95m{U\xe5-\xabRw\xcafy\xe6\aNhX4Ll[\x14\x150xffffffffffffffff, 0xffffffffffffffff}) getrandom(&(0x7f0000000500)=""/107, 0x6b, 0x2) pipe(0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r2, &(0x7f0000000180)="1a", 0x1, 0x0, &(0x7f00000004c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) write$binfmt_elf64(r2, 0x0, 0x2df) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f0000000080)={0x0, 0x2}, 0x8) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000020000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000340)='kfree\x00', r3}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x12, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001900)=ANY=[@ANYBLOB="580000001000030400"/20, @ANYRES32=0x0, @ANYRES16=0x0, @ANYRES32=r6, @ANYBLOB='\x00', @ANYRES32=r6, @ANYBLOB], 0x58}}, 0x4008000) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x8ec0, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYRESHEX=r7, @ANYRES32, @ANYRES8=r7, @ANYRES32=0x0, @ANYRESOCT=r3, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000004e8100000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x2040400) dup3(r1, 0xffffffffffffffff, 0x80000) dup2(0xffffffffffffffff, 0xffffffffffffffff) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000a80)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=@newqdisc={0x24, 0x24, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0x7}}}, 0x24}, 0x1, 0x0, 0x0, 0x48000}, 0x40) r9 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) fcntl$dupfd(r9, 0x0, r9) 1.505247697s ago: executing program 1 (id=4453): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) (async) open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) (async) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r2, 0xc0189374, &(0x7f0000000240)={{0x1, 0x1, 0x5f, 0xffffffffffffffff, {0x29}}, './file0\x00'}) (async) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) (async) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000180)={r4, 0x0, 0x0}, 0x20) (async) r5 = socket(0x10, 0x803, 0x0) write$binfmt_elf64(r5, 0x0, 0x78) getsockname$packet(r5, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000009f910000000000000000000018110000", @ANYRES8=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r6}, 0x10) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@newtaction={0xe68, 0x30, 0x25, 0x0, 0x0, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{0xffffffff}, 0x2}, [{0x0, 0x0, 0x3}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0xf}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x2000000}, {}, {}, {0x0, 0x1000000, 0x0, 0x4}, {}, {0x0, 0x4}, {}, {}, {0x0, 0x0, 0xfffffffd}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0xfffffffe, 0x0, 0x400000}, {0x0, 0x7fffffff}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x3}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x10}, {0x0, 0x0, 0x0, 0x0, 0x7c4}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0xfffffffc}, {}, {}, {}, {}, {0x0, 0x0, 0xd}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {}, {}, {0x0, 0x200}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x8000}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0xffffffff}, {0x4}], [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe68}}, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'batadv0\x00'}) (async) unshare(0x42000000) (async) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000280)={0x1, 0x7}, 0x4) (async) r8 = socket$nl_generic(0x10, 0x3, 0x10) (async) r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_SET(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)={0x34, r9, 0x1, 0x0, 0x0, {0x2c}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x0) 1.432362225s ago: executing program 1 (id=4455): r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000202070250000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000300)={0x1b, 0x0, 0x0, 0x3, 0x0, 0x1, 0x4, '\x00', 0x0, r0, 0x4, 0x0, 0x4, 0x0, @void, @value, @void, @value}, 0x50) r3 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000200)={'netdevsim0\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000190000000000000000000000050000000000000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r4, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000480), 0x4) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000006c0)={0xffffffffffffffff, 0x20, &(0x7f0000000680)={&(0x7f0000000500)=""/232, 0xe8, 0x0, &(0x7f0000000600)=""/75, 0x4b}}, 0x10) timer_create(0xfffffffd, 0x0, &(0x7f00000011c0)) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, 0x0) timer_gettime(0x0, &(0x7f00000000c0)) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000000000100000000000000000850000007d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x52) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000003c0)='kmem_cache_free\x00', r7}, 0x10) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=@base={0x1a, 0x3, 0x401, 0xffff0000, 0x18000, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0, @value, @void, @value}, 0x50) r10 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000780)='.pending_reads\x00', 0x101000, 0x2) r11 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x2, 0xc, 0x1400, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r11, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r12 = fcntl$dupfd(r1, 0x0, r1) r13 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x0, 0x5, 0x0, @void, @value, @void, @value}, 0x50) r14 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000840)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x2, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0xc, 0x13, &(0x7f0000000380)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x5}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@func={0x85, 0x0, 0x1, 0x0, 0x1}, @exit, @map_fd={0x18, 0x0, 0x1, 0x0, 0x1}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000440)='GPL\x00', 0x6, 0x0, 0x0, 0x41100, 0x60, '\x00', r4, @fallback=0x35, r5, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0)={0x2, 0x9, 0x200, 0x81}, 0x10, r6, r7, 0x1, &(0x7f00000008c0)=[r8, r9, r10, r11, r12, 0xffffffffffffffff, 0x1, r13, r14], &(0x7f0000000900)=[{0x0, 0x2, 0x0, 0x9}], 0x10, 0x1000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r15 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r15}, 0x10) signalfd4(0xffffffffffffffff, &(0x7f0000000180)={[0x4]}, 0x8, 0x80000) 895.906397ms ago: executing program 0 (id=4471): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r1) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000780)=ANY=[@ANYBLOB="380000001000390400"/19, @ANYRES32=0x0, @ANYBLOB="00000000000000001800128008000100736974000c00028008000100", @ANYRES32=r2], 0x38}}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r3}, 0x10) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000040)={'sit0\x00', &(0x7f0000000400)={'sit0\x00', r2, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @empty}}}}) 850.086883ms ago: executing program 0 (id=4473): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r0}, 0x18) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000240)={0x0, 0xfffffffc, 0x30}, 0xc) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=ANY=[@ANYBLOB="5c0000001000390400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000003c0012800b000100697036746e6c00002c0002801400030020fd000000000000000000000000000114000200"], 0x5c}}, 0x0) sendto$inet6(r1, &(0x7f0000000180)="1a", 0x1, 0x0, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r1, &(0x7f0000000d80)='R', 0x1, 0x8000, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000100)={0x0, 0x10000000}, 0xc) sendto$inet6(r1, &(0x7f0000000040)="93", 0x34000, 0x0, 0x0, 0x44) 808.189327ms ago: executing program 0 (id=4475): lsm_get_self_attr(0x67, &(0x7f0000001500)={0x0, 0x0, 0x1020, 0x1000, ""/4096}, 0x0, 0x0) 735.976916ms ago: executing program 0 (id=4476): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, 0x0, &(0x7f00000002c0)) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000780)=ANY=[@ANYBLOB="380000001000390400"/19, @ANYRES32=0x0, @ANYBLOB="0000000000000000180012800800010073697400"], 0x38}}, 0x0) 728.395387ms ago: executing program 0 (id=4479): r0 = syz_open_dev$sg(&(0x7f0000001600), 0x0, 0x22c01) setreuid(0x0, 0xee00) writev(r0, &(0x7f0000000000)=[{&(0x7f00000005c0)="58000000140019234083598082e59a49e8aefc0b45ff810500000000070058000b480400945f640094272d7061d328b92d000000004c8537db9600f854c8a4487c752f7020847ff67dcaf959222290bd34944133ac7658e000cae59ba172a68504db98e494b5ba8414c6d0373f2cfc597650b0f6f46c3dff31a28a7d4c9846ca547d6196ae21463f928a6db09257485ce2b118c97338a50c1c5821d29fd3dfe750000000000000", 0xa7}], 0x1) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000000)=ANY=[@ANYRES32=r0]) 671.068243ms ago: executing program 0 (id=4481): symlink(0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x2000}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) mkdir(&(0x7f0000000580)='./file0\x00', 0xaa6f6396d0ed07f2) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x3015800, 0x0) r2 = open(&(0x7f0000000100)='./file0\x00', 0x2000, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r3, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1) 663.814404ms ago: executing program 4 (id=4482): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r2, 0x0, 0x39000, 0x0) splice(r1, 0x0, r0, 0x0, 0x408cd, 0x0) 531.714689ms ago: executing program 1 (id=4485): syz_mount_image$ext4(0x0, &(0x7f0000000040)='./file0\x00', 0x1432ca, 0x0, 0x0, 0x0, &(0x7f00000002c0)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) ioctl$TUNSETPERSIST(0xffffffffffffffff, 0x400454cb, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='9p_protocol_dump\x00', r4}, 0x10) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x200000005c831, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000b14000/0x2000)=nil, 0x2000, 0x0, 0x5fd, 0x0) syz_open_dev$sg(&(0x7f0000001600), 0x0, 0x22c01) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0xa755, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000004f92c4e39554bcf116182bed2ab4b3c43107c861e85d4124da551ec4c601f3910f8c01c09a8634e7eb1fc87c3567658de99b350fea285a3f409361b20bb304b59d59f80d1ec671124e85ec4cad15278a514ca469", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r6}, 0x10) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='configfs\x00', 0x0, 0x0) r7 = openat$dir(0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', 0x0, 0x0) close_range(r7, 0xffffffffffffffff, 0x0) write$UHID_CREATE2(0xffffffffffffffff, &(0x7f00000001c0)=ANY=[@ANYBLOB='.'], 0x118) mmap(&(0x7f000069e000/0x3000)=nil, 0x3000, 0x5, 0x12, r0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000002700)=@base={0xb, 0x8, 0x10001, 0x9, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r9 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180), 0x80, 0x0) ioctl$LOOP_CTL_REMOVE(r9, 0x4c81, 0x2) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b70800007f0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='sched_switch\x00', r10}, 0x10) 388.421485ms ago: executing program 1 (id=4491): bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x8, 0x10005, 0xff, 0x1, 0xffffffffffffffff, 0xfffffffc, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={0xffffffffffffffff}, 0x13f}}, 0x7e) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{0xa, 0x3, 0x6c, @empty}, {0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, r2}}, 0x48) 388.186756ms ago: executing program 1 (id=4492): socket$nl_xfrm(0x10, 0x3, 0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000008000000000000001c2df6f27"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) getpgrp(0x0) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x4, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000240)={0x0, 0x80, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x3a) r1 = dup(r0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) pidfd_send_signal(0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000000)=0x3, 0x4) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = dup(r3) write$UHID_INPUT(r4, &(0x7f0000001040)={0xfc, {"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", 0xffffffffffffff34}}, 0x1006) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="400000ff15590000", @ANYRES32=0x0], 0x1c}}, 0x0) socket(0xa, 0x1, 0x0) r5 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) writev(r5, &(0x7f0000000080)=[{&(0x7f0000001740)='9', 0x1}, {&(0x7f0000000100)='\n', 0x1}], 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, &(0x7f0000000840)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r6 = socket$inet6(0xa, 0x1, 0x0) connect$inet6(r6, &(0x7f0000000000)={0xa, 0x0, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}}, 0x1c) 313.425624ms ago: executing program 1 (id=4495): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000700)={{}, &(0x7f0000000680), &(0x7f00000006c0)='%+9llu \x00'}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000740)='scsi_dispatch_cmd_start\x00'}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r0}, &(0x7f0000000000), &(0x7f0000000200)}, 0x20) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000010000100000000000000000000fc000a20000000000a09000000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000001c08000640ffffff000800034000000028580000000c0a01010000000000000000070000000900020073797a31000000000900010073797a30000000002c0003802800008008000340"], 0xec}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x21081e, &(0x7f00000002c0), 0x1, 0x4f2, &(0x7f0000000d40)="$eJzs3U1vW1kZAODXzpeTyUwywywAAVOGgYKqOok7E1VdQFkhhCohugSpDY4bRbHjKHZKE4qU/gckKrGCJT+AdVfs2SDYsSkLJD4iUFOJhdG9vkncxG4CSeNM/DzS1T3nXMfvOUnuOclr2SeAgXUlIrYjYjQi7kfEVNaey4643T6Sx73YeVze3XlczkWrdfcfufR60hYdX5N4K3vOQkT84DsRP84djdvY3FpZqFYr61l9pllbm2lsbl1fri0sVZYqq6XS/Nz87M0bn5TObKwf1Eaz0hef/377Gz9NujWZtXSO4yy1hz6yHyey7/n33kSwPhiKiOHs94dPn3xEvBcRH6b3/1QMpT9NAOAya7WmojXVWQcALrt8mgPL5YtZLmAy8vlisZ3Dez8m8tV6o3ntQX1jdbGdK5uOkfyD5WplNssVTsdILqnPpeWDeulQ/UZEvBsRPx8bT+vFcr262M8/fABggL11aP3/91h7/QcALrlCvzsAAJw76z8ADB7rPwAMHus/AAwe6z8ADB7rPwAMnLF+dwAAOFffv3MnOVq72edfLz7c3FipP7y+WGmsFGsb5WK5vr5WXKrXl9LP7Kkd93zVen1t7uPYeDT9zbVGc6axuXWvVt9Ybd5LP9f7XmXkXEYFALzOux88+1MuIrZvjadHdOzlYK2Gyy3f7w4AfTPU7w4AfWO3Lxhcp/gfX3oALokuW/S+ohAR44cbW61W6811CXjDrn5O/h8GVUf+37uAYMDI/8Pgkv+HwdVq5U6653+c9IEAwMUmxw/0eP3/vez8m+zFgR8tHn7E08MN3lEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADA4Njb/7eY7dwxGfl8sRjxdkRMx0juwXK1MhsR70TEH8dGxpL6XJ/7DACcVv6vuWz/r6tTH00evjqaezmWniPiJ7+8+4tHC83m+h+S9n/utzefZu2lfvQfADjO3jqdnjv+kX+x87i8d5xnf/727YgotOPv7ozG7n784RhOz4UYiYiJf+WyeluuI3dxGttPIuKz3cafi8k0B9Le+fRw/CT22+caP/9K/Hx6rX1OvhefOYO+wKB5lsw/t7vdf/m4kp673/+FdIY6vWz+S56qvJvOgQfx9+a/oR7z35WTxvj4d99tl8aPXnsS8fnhiL3Yux3zz178XI/4Hx19uq7+/IUvfdjrWutXEVejM/7PygcRDkozzdraTGNz6/pybWGpslRZLZXm5+Znb974pDST5qhneq8Gf7917Z1e15LxT0T38ReOGf9XTzb8+PV/7v/wy6+J//WvdIufj/dfEz9ZE792wvgLE78t9LqWxF/sMf7jfv7XThj/+V+2jmwbDgD0T2Nza2WhWq2sKyhc/ELyK3sButG18K3zijUa/9NXtVr/V6xeM8ZZZN2Ai2D/po+Il/3uDAAAAAAAAAAAAAAA0NV5vGOp32MEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADg8vpvAAAA//+sXtJf") msgrcv(0x0, &(0x7f0000000300)={0x0, ""/242}, 0xfa, 0x0, 0x3000) 312.939985ms ago: executing program 7 (id=4496): r0 = socket$inet6(0xa, 0x3, 0xff) setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x39, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00'], 0x18) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000400000000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000001000"/28], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='kmem_cache_free\x00', r1}, 0x10) bpf$OBJ_PIN_MAP(0x6, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) unshare(0x22020600) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x10, &(0x7f0000000680), 0xfe, 0x244, &(0x7f0000000400)="$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") bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00'}, 0x10) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0x1262, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000400)='.\x00', &(0x7f0000000440)='system.posix_acl_default\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0xee01, @ANYBLOB="02000000", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=0xee00, @ANYBLOB="0200", @ANYRES32=0x0, @ANYBLOB="040000000000800008000000", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="100000000000000020"], 0x5c, 0x0) r3 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/mnt\x00') setns(r3, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) 199.447477ms ago: executing program 9 (id=4497): r0 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r0, &(0x7f0000002dc0)={&(0x7f0000001640)=@l2tp6={0xa, 0x0, 0xfffffffd, @local, 0x3}, 0x80, &(0x7f00000029c0)=[{&(0x7f00000016c0)="83", 0x1}], 0x1}, 0x41) 197.717307ms ago: executing program 7 (id=4498): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000a40)={[{@stripe={'stripe', 0x3d, 0x3}}, {@noauto_da_alloc}, {@jqfmt_vfsold}, {@data_err_ignore}, {@noauto_da_alloc}, {@delalloc}, {@resuid}, {@oldalloc}, {@jqfmt_vfsv1}]}, 0xfc, 0x550, &(0x7f0000000b00)="$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") r0 = openat(0xffffffffffffff9c, 0x0, 0x101042, 0x0) pwrite64(r0, &(0x7f0000000140)='2', 0xfdef, 0xfecc) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x1, 0x4, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r3, 0x6628) 172.2327ms ago: executing program 9 (id=4499): r0 = socket$inet(0x2, 0x1, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB, @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r2, 0x0, 0x4}, 0x18) setsockopt$inet_opts(r0, 0x0, 0x4, 0x0, 0x0) 130.424976ms ago: executing program 9 (id=4500): bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0}, 0x18) openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x149a82, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_tables_matches\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x9, 0xd, &(0x7f0000000180)=ANY=[], 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r4 = socket$kcm(0x10, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020000008500000082"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001280)={&(0x7f0000000500)='percpu_free_percpu\x00'}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0xc, &(0x7f0000000300)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$kcm(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="2e00000011008188040f80ec59acbc0413a181003f000000000100000010001f0e0027000f00000000800200121f", 0x2e}], 0x1}, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r6}, 0x10) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000040)={0x53, 0x0, 0x3, 0x0, @buffer={0x17, 0x51, &(0x7f00000000c0)=""/81}, &(0x7f0000000380)="259374", 0x0, 0x0, 0x0, 0x0, 0x0}) preadv(r0, 0x0, 0x0, 0x29d3, 0x0) 130.247446ms ago: executing program 7 (id=4501): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) socket$inet_dccp(0x2, 0x6, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000ff010000850000000e000000850000005000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x9) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b, '\x00', 0x0, 0x9, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = syz_io_uring_setup(0x6167, &(0x7f0000000400)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) pipe(&(0x7f00000001c0)) write$UHID_CREATE2(0xffffffffffffffff, &(0x7f00000001c0)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r1, 0x2d3e, 0xea37, 0x0, 0x0, 0x0) 129.795505ms ago: executing program 9 (id=4502): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xd, &(0x7f0000000cc0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000affc15c944feefca36cf3678190ad7c37b8c9ddfbdd12ae6ffc318592518633b87a295e2923171808ba42d98adeca61f3a1cfd97753473221d06e5e62e660f1da882db5658504d6e29434ff4e416839ef6781b3508c0f7332446647de9f976736ed00696573beecd804c7790e87e7a3d5ecf368b9c766458940254a1b8a7d299107fc67158acc44cb2ff2aadd853cb", @ANYRES32, @ANYBLOB="0000000000000000b7080000000700007b"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) recvmmsg(r1, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}], 0x40000000000012d, 0x2, 0x0) setsockopt$inet_int(r1, 0x0, 0x6, &(0x7f0000000180)=0x6, 0x4) setsockopt$inet_int(r1, 0x0, 0x17, &(0x7f0000000140)=0x11, 0x4) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x90, &(0x7f0000000300)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000008004600008200000000780db46c52b1dae5001190787f000001000000000100000000004e20006a9078bf3f1efc0d3f01c88732bb827e9ea58240fe79ebb2a569cd0d8a864f3141fbb7b20e3e7a68ee0c91ca75923d4a6c3b7fdedf65cc807c0ea9bbd5d4e5195ca04b20f8bb56f6fa08a3370ba0ab49ac776ad3fc01e05e7072ada9daa0b0c8d14f64ad2a3341873f1671e9e50e43ebb826ab4edb619e406395f5e83f08932819a9b23146b65f80"], 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r2, 0x0, 0xb, &(0x7f0000000080)=0x80000001, 0x4) bind$inet(r2, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r2, &(0x7f0000000e00)=[{{&(0x7f0000000040)={0x2, 0x4e22, @multicast1}, 0x10, 0x0}}], 0x1, 0x240080a0) setsockopt$inet_mtu(r2, 0x0, 0xa, &(0x7f0000001140)=0x2, 0x4) sendmmsg$inet(r2, &(0x7f0000000b80)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000100)="3cdf9a0df115c376edfe5a129e71cc04a100846663b0fa4576b19cbb131cc17fb88f775547cd8571ace7c507ed037f2183abffd89ab8b4ca62ca863357b6b48d305c30d5b69887d2472f508896925e0660adb38902b29f791d95c838042f98b9", 0x60}, {&(0x7f0000000180)="eea99986e4f7ccb042247fe67856fc8e253ecb6f4fa3016ef0e762ac2738fb7f6a4346ac99b50fb421267a17645365b35e566b3354639752c01185e7f41e3d5c2672ea3c4624e84cabd527c74c9da01a2e0f5b964a2ad0f5fb9b740dd54086652a1ca05c64aa67ba434e688ef70287442299c908", 0x74}], 0x2}}, {{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000340)="49e045d1377f5f3ca1c84a498c94", 0xe}, {&(0x7f0000000380)="f3d064919ec3e096b13d306ef7b6c4ca11bfb2191bfe0e715fbe8337c71b05ba4a5015a3f3f3fe7b3464b5f0a76b4fc0594d7234cc6cae2bb3f49e0e671b3bb10d59e4c31a52ee84f26d336d696a43f49c626fc25ffd24cbd689046473665225ecab", 0x62}, {&(0x7f0000000440)="6d7ddccc0f4bde59f95c2f2f8e9f63bfd3bf597c226526ed889b6b4921b44e21a9e15c477b2fd46764ed28b5ec13f817dcf9926ae2d4ca4f3b90307305c94c2013cb0470c4c074b1e64dfae11d4a1f481e544b515582563e1bf7eff481deb32e35b59ba9320af0386c875d370ee2ac22283c2a5df00312c4708382afc65bb9367bd247df", 0x84}, {&(0x7f0000000500)="82ecd52e29fc43073eadc02b964dae38fd1a4dda4e8845559de2", 0x1a}, {&(0x7f0000000540)="2918e647a78743e1ab60dbe7e59065085e24f575e5b944ec946ab1f1b5b6c23cc289096b1ed2ba487aac4679a98b854e7b9405783efdaec6b9fa25bdce1f4ea4d08967466b4ad46acca659b2c3eb7568ea3ae4b08dea296cf35efde79dc9941a798b72545ac8ff4d25a62349c8b42975811fff007f74749382f452c1163ef2ade0bab7e7ff0e835f685f107593941da36c647c803d8cb574538d2d27263890dd94b3c9c6eab09e06b38b2e773cb328691a2c7bb7004fdbf2e4a58e41e2e75dbe63266050c0f906d5d9f24dc50072560a96ad1f02c3ecb022f9e9e249daea6a49940728d3b84a11", 0xe7}, {&(0x7f0000000640)="6576f33482e91c81", 0x8}, {&(0x7f0000000880)="3fde694efb6b43c17bf92103d75945c4668991b5a8b6b181db8705a39503a922e50e087b2df249cdc1924ef996bc941b10d8ad0fe3b9cebbd95618ae0bfffde89500f4df8b949435b2b1eadf771b73bbbb7df9872cb63cc5658772f49545175e5ab784c5130d46", 0x67}, {&(0x7f00000006c0)="5d5e0d1d45bc6a12144312041aca0360e3b269367b1ce7921eb6ab68f2e1c8eb352d6710e18688e3f497f17a85fa70d1b5ee5c1dd2c8cd3da4cf5e441c925a9db29858329a7458fce81f0c7afcf50f29539eb1528e5915134f63c899164844e88e2b71c76a4f3fcdc105b6c0bf7041f1e74cee", 0x73}, {&(0x7f0000000240)="b01bdc44f479626417868bd6d9cee7c3312817e415ec2b4cf10e19e2f8263018109c498ba0544c50a2ca9391d79cb6bb9b0450ca516679597197b47c4dca1c6e2844bdea6d9c5c0b49fc09333a7fc62839", 0x51}, {&(0x7f0000000780)="9bf4187f3847f98574142f7e6a924765", 0x10}], 0xa}}, {{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000ac0)="14e9eb2b4328892813f7a65cbad23a6a1484efeba29d36f200bf436d544c1d5f566464e8be16d1e0287842f7a547aa903342772221fcb36e448a980dcc9b46bdc8adad97ab335f8eb53a5931acdc2dd54674028b2a57b06db577355be0646070d18ec93f1ad96ffc497fec11e3cabecceb22504b118f62beea15b30d5f39e466652b2e60d66b39ed8f5c", 0x8a}, {&(0x7f0000000940)="faced4a3c55a0baee904aa452aadf862fbb1665f60bf5ef26c53d0fe2fb3b84cebdca71c7161135d8dfca94143a2cd93642230ea0568fe0687bc2b748fdebee6c271b4358c1cf71be8829dde3d4ed97f70c5ba8a5cd1ed9e", 0x58}, {&(0x7f00000009c0)="fd8af5e10c88a4544d81f9175dc1f0cddcd9501d8e0157b3fa05e888c2015ee5087ba1f4e9453adb7113f76f8aab87999da78bc4ff2637b6eb5110a460f52a631926f7d44be900e725411402ee71a20057642c6a61c07425483391521405a242af2671f5cc30c2a70d88a7b36d8425ad54b5adb03b43894dd70a61b3ad234193b78f629fa4746b89448ad8da47aee1d5733cb46ffa004b1af613612fb5608bcd01ab90f8d1c6c2761b0de2dfe2b1f23e9125603e543d08d64fd1b7a3d96f7b53a476ac2055c109f5d38b8267cd88a358ebc833", 0xd3}], 0x3}}], 0x3, 0x24048844) sendmsg$nl_xfrm(r0, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001540)={&(0x7f0000000e40)=ANY=[@ANYBLOB="fc000000160001040000000000000000fc000000000000000000000000000000fc00"/64, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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"/338], 0xfc}}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) (async) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xd, &(0x7f0000000cc0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000affc15c944feefca36cf3678190ad7c37b8c9ddfbdd12ae6ffc318592518633b87a295e2923171808ba42d98adeca61f3a1cfd97753473221d06e5e62e660f1da882db5658504d6e29434ff4e416839ef6781b3508c0f7332446647de9f976736ed00696573beecd804c7790e87e7a3d5ecf368b9c766458940254a1b8a7d299107fc67158acc44cb2ff2aadd853cb", @ANYRES32, @ANYBLOB="0000000000000000b7080000000700007b"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) (async) socket$inet_udp(0x2, 0x2, 0x0) (async) recvmmsg(r1, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}], 0x40000000000012d, 0x2, 0x0) (async) setsockopt$inet_int(r1, 0x0, 0x6, &(0x7f0000000180)=0x6, 0x4) (async) setsockopt$inet_int(r1, 0x0, 0x17, &(0x7f0000000140)=0x11, 0x4) (async) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) (async) syz_emit_ethernet(0x90, &(0x7f0000000300)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000008004600008200000000780db46c52b1dae5001190787f000001000000000100000000004e20006a9078bf3f1efc0d3f01c88732bb827e9ea58240fe79ebb2a569cd0d8a864f3141fbb7b20e3e7a68ee0c91ca75923d4a6c3b7fdedf65cc807c0ea9bbd5d4e5195ca04b20f8bb56f6fa08a3370ba0ab49ac776ad3fc01e05e7072ada9daa0b0c8d14f64ad2a3341873f1671e9e50e43ebb826ab4edb619e406395f5e83f08932819a9b23146b65f80"], 0x0) (async) socket$inet_udp(0x2, 0x2, 0x0) (async) setsockopt$inet_int(r2, 0x0, 0xb, &(0x7f0000000080)=0x80000001, 0x4) (async) bind$inet(r2, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) (async) sendmmsg$inet(r2, &(0x7f0000000e00)=[{{&(0x7f0000000040)={0x2, 0x4e22, @multicast1}, 0x10, 0x0}}], 0x1, 0x240080a0) (async) setsockopt$inet_mtu(r2, 0x0, 0xa, &(0x7f0000001140)=0x2, 0x4) (async) sendmmsg$inet(r2, &(0x7f0000000b80)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000100)="3cdf9a0df115c376edfe5a129e71cc04a100846663b0fa4576b19cbb131cc17fb88f775547cd8571ace7c507ed037f2183abffd89ab8b4ca62ca863357b6b48d305c30d5b69887d2472f508896925e0660adb38902b29f791d95c838042f98b9", 0x60}, {&(0x7f0000000180)="eea99986e4f7ccb042247fe67856fc8e253ecb6f4fa3016ef0e762ac2738fb7f6a4346ac99b50fb421267a17645365b35e566b3354639752c01185e7f41e3d5c2672ea3c4624e84cabd527c74c9da01a2e0f5b964a2ad0f5fb9b740dd54086652a1ca05c64aa67ba434e688ef70287442299c908", 0x74}], 0x2}}, {{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000340)="49e045d1377f5f3ca1c84a498c94", 0xe}, {&(0x7f0000000380)="f3d064919ec3e096b13d306ef7b6c4ca11bfb2191bfe0e715fbe8337c71b05ba4a5015a3f3f3fe7b3464b5f0a76b4fc0594d7234cc6cae2bb3f49e0e671b3bb10d59e4c31a52ee84f26d336d696a43f49c626fc25ffd24cbd689046473665225ecab", 0x62}, {&(0x7f0000000440)="6d7ddccc0f4bde59f95c2f2f8e9f63bfd3bf597c226526ed889b6b4921b44e21a9e15c477b2fd46764ed28b5ec13f817dcf9926ae2d4ca4f3b90307305c94c2013cb0470c4c074b1e64dfae11d4a1f481e544b515582563e1bf7eff481deb32e35b59ba9320af0386c875d370ee2ac22283c2a5df00312c4708382afc65bb9367bd247df", 0x84}, {&(0x7f0000000500)="82ecd52e29fc43073eadc02b964dae38fd1a4dda4e8845559de2", 0x1a}, {&(0x7f0000000540)="2918e647a78743e1ab60dbe7e59065085e24f575e5b944ec946ab1f1b5b6c23cc289096b1ed2ba487aac4679a98b854e7b9405783efdaec6b9fa25bdce1f4ea4d08967466b4ad46acca659b2c3eb7568ea3ae4b08dea296cf35efde79dc9941a798b72545ac8ff4d25a62349c8b42975811fff007f74749382f452c1163ef2ade0bab7e7ff0e835f685f107593941da36c647c803d8cb574538d2d27263890dd94b3c9c6eab09e06b38b2e773cb328691a2c7bb7004fdbf2e4a58e41e2e75dbe63266050c0f906d5d9f24dc50072560a96ad1f02c3ecb022f9e9e249daea6a49940728d3b84a11", 0xe7}, {&(0x7f0000000640)="6576f33482e91c81", 0x8}, {&(0x7f0000000880)="3fde694efb6b43c17bf92103d75945c4668991b5a8b6b181db8705a39503a922e50e087b2df249cdc1924ef996bc941b10d8ad0fe3b9cebbd95618ae0bfffde89500f4df8b949435b2b1eadf771b73bbbb7df9872cb63cc5658772f49545175e5ab784c5130d46", 0x67}, {&(0x7f00000006c0)="5d5e0d1d45bc6a12144312041aca0360e3b269367b1ce7921eb6ab68f2e1c8eb352d6710e18688e3f497f17a85fa70d1b5ee5c1dd2c8cd3da4cf5e441c925a9db29858329a7458fce81f0c7afcf50f29539eb1528e5915134f63c899164844e88e2b71c76a4f3fcdc105b6c0bf7041f1e74cee", 0x73}, {&(0x7f0000000240)="b01bdc44f479626417868bd6d9cee7c3312817e415ec2b4cf10e19e2f8263018109c498ba0544c50a2ca9391d79cb6bb9b0450ca516679597197b47c4dca1c6e2844bdea6d9c5c0b49fc09333a7fc62839", 0x51}, {&(0x7f0000000780)="9bf4187f3847f98574142f7e6a924765", 0x10}], 0xa}}, {{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000ac0)="14e9eb2b4328892813f7a65cbad23a6a1484efeba29d36f200bf436d544c1d5f566464e8be16d1e0287842f7a547aa903342772221fcb36e448a980dcc9b46bdc8adad97ab335f8eb53a5931acdc2dd54674028b2a57b06db577355be0646070d18ec93f1ad96ffc497fec11e3cabecceb22504b118f62beea15b30d5f39e466652b2e60d66b39ed8f5c", 0x8a}, {&(0x7f0000000940)="faced4a3c55a0baee904aa452aadf862fbb1665f60bf5ef26c53d0fe2fb3b84cebdca71c7161135d8dfca94143a2cd93642230ea0568fe0687bc2b748fdebee6c271b4358c1cf71be8829dde3d4ed97f70c5ba8a5cd1ed9e", 0x58}, {&(0x7f00000009c0)="fd8af5e10c88a4544d81f9175dc1f0cddcd9501d8e0157b3fa05e888c2015ee5087ba1f4e9453adb7113f76f8aab87999da78bc4ff2637b6eb5110a460f52a631926f7d44be900e725411402ee71a20057642c6a61c07425483391521405a242af2671f5cc30c2a70d88a7b36d8425ad54b5adb03b43894dd70a61b3ad234193b78f629fa4746b89448ad8da47aee1d5733cb46ffa004b1af613612fb5608bcd01ab90f8d1c6c2761b0de2dfe2b1f23e9125603e543d08d64fd1b7a3d96f7b53a476ac2055c109f5d38b8267cd88a358ebc833", 0xd3}], 0x3}}], 0x3, 0x24048844) (async) sendmsg$nl_xfrm(r0, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001540)={&(0x7f0000000e40)=ANY=[@ANYBLOB="fc000000160001040000000000000000fc000000000000000000000000000000fc00"/64, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="ff02000008000000000000000000000100000000330000000a01010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ff0100000000000000000000000000000000000000000000000000000000000000000000ab4078b10000000a00000000000000000200000000008000000000000000001b00a33bde0efb0afa66a37b35c574d999b0af4dfc34659b1a9db3fb61d0765fac06b5f9718c22b82aa727dcefa1e6b21fa290de764a7db2187f4a5157e7c19617c51f1dee0648bedace818199b903d563eb7e41ebecb0be8a36aa4e841d3f98b556c4c945dbe48619340d97a15de4718de04d925905814c761a4987c34c69e6b164f043b7237a44a38916f718889819d3bc1abc3726730eebded007b0b9f30900"/338], 0xfc}}, 0x0) (async) 105.994418ms ago: executing program 7 (id=4503): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_PMKSA(r1, &(0x7f0000000580)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000440)={&(0x7f0000000100)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="00022cbd7000fbdbdf253500000008000300", @ANYRES32=r3, @ANYBLOB="08001f01825c9e544f2a4f66e3196a0d0000"], 0x24}, 0x1, 0x0, 0x0, 0x140}, 0x440c0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r4) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r5}, 0x4) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1c, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000009b79ecc20000000000000000b7080000000000007b8af8ff00000000a9080000000000007b8af0ff00000000bfa100000000f8ffffffbfa400000000000007040000f0ffffffb702000000000000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb70200"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r6}, 0x10) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000018c0)=ANY=[@ANYBLOB="0a000000150000003d36000002"], 0x48) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000380)={r7, &(0x7f0000001940), 0x0}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000000000c136494c7b754551825a85567cd485aa3018aa91e3bf08766bbe6ce7918014989fb8835bf5fcd0019835a67eaee3c9acbf9ed1e3fed5fc3fe7f2f49fcff24f01c1fa5f3bca0578093899bbfbe61fb70ddd05e96989c51eb2c6e75b68e653dd98b2e95a394023d7b2b2e7e48cde1c63273de86f562a6d9438726fcd0f6a6bae71ae161e6f486174a182af4bebb0cb848fd643dce1b8bf84a89a85e921c3d8d5c8c4402c2aa9c51566eca1257ff70ddff93413c0647d79301c2da5d157779a09be424f26408c4c6ab2b974fba40329e4b64f"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r8, 0xffffffffffffffff}, 0x4) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000001b40)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r9, @ANYBLOB="0000000000000000b70500000800000585000000690000009500000000000000"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000640)='percpu_alloc_percpu\x00', r10}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0xa, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x5, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x2, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) ioctl$TUNSETIFF(r11, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r12 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r12, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000006c0)=ANY=[@ANYBLOB="380000000314010000000000000008000900020073797a310000000008004100736977001400330073797a6b616c6c657230"], 0x38}}, 0x0) 44.649215ms ago: executing program 9 (id=4504): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r1) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000780)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="00000000000000001800128008000100736974000c00028008000100", @ANYRES32=r2], 0x38}}, 0x0) 44.219296ms ago: executing program 7 (id=4505): socket$inet(0x2, 0x2, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000c80)=ANY=[@ANYBLOB="0600000004000000fc0f00000a"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000004c0)=@newtaction={0x140, 0x30, 0x1, 0x0, 0x0, {}, [{0x64, 0x1, [@m_tunnel_key={0x60, 0x1, 0x0, 0x0, {{0xf}, {0x30, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @loopback}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @initdev={0xac, 0x1e, 0x0, 0x0}}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{}, 0x1}}]}, {0x4}, {0xc}, {0xc}}}]}, {0xc8, 0x1, [@m_skbmod={0xc4, 0x6, 0x0, 0x0, {{0xb}, {0x4}, {0x98, 0x6, "bc8610382bede62e31a11e0db11decd6a513bc4595119315978a68de09ae4def136d3862ccd8ffdc74b582f8ab795c2fd023650c00593eada9f5284e15cff7f5e1d9775559f8a0defc207daa9f571220a417ba76d3b3b02a7fe1494bc3224faeff327ac2d1080a93b06e2b59c946f8b8473b868f19df5e970f1bddd887b29855b61cd3b0bea28681de9690abf0b2e9b5e566e920"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}]}, 0x140}}, 0x0) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000080), &(0x7f0000000100)=0x14) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x1, 0x5, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kmem_cache_free\x00', r5}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000900)={{r4}, &(0x7f0000000880), &(0x7f00000008c0)}, 0x20) r6 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r6, 0x10f, 0x87, &(0x7f0000000300)={0x43, 0x3, 0x3, 0x3}, 0x10) r7 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r7, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) sendmsg$tipc(r7, &(0x7f00000002c0)={&(0x7f00000003c0), 0x10, 0x0}, 0x4000) 37.315006ms ago: executing program 9 (id=4506): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000080000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000040008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000000)={0x11, @broadcast, 0x0, 0x0, 'none\x00'}, 0x2c) (async, rerun: 64) getsockopt$IP_VS_SO_GET_SERVICE(r2, 0x0, 0x483, &(0x7f0000000000), &(0x7f0000000180)=0x68) (async, rerun: 64) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) r3 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r3, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) r4 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000180)={0x42, 0x0, 0x2}, 0x10) (async, rerun: 64) sendmsg$tipc(r4, &(0x7f0000000540)={&(0x7f0000000200)=@name, 0x10, 0x0}, 0x0) (rerun: 64) 0s ago: executing program 7 (id=4507): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x1e, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='sys_enter\x00', r1}, 0x10) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): 202][T16142] loop1: detected capacity change from 0 to 1024 [ 221.815051][T16142] EXT4-fs: Ignoring removed oldalloc option [ 221.821908][T16142] EXT4-fs (loop1): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 221.857506][T16144] lo speed is unknown, defaulting to 1000 [ 221.913920][T16151] loop1: detected capacity change from 0 to 512 [ 221.960529][T16151] EXT4-fs (loop1): too many log groups per flexible block group [ 221.968409][T16151] EXT4-fs (loop1): failed to initialize mballoc (-12) [ 221.976701][T16151] EXT4-fs (loop1): mount failed [ 221.979987][T16160] loop4: detected capacity change from 0 to 512 [ 221.993240][T16160] EXT4-fs (loop4): too many log groups per flexible block group [ 222.001130][T16160] EXT4-fs (loop4): failed to initialize mballoc (-12) [ 222.007986][T16160] EXT4-fs (loop4): mount failed [ 222.103927][T16168] loop4: detected capacity change from 0 to 512 [ 222.110681][T16168] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 222.119430][T16168] EXT4-fs (loop4): invalid journal inode [ 222.125112][T16168] EXT4-fs (loop4): can't get journal size [ 222.131675][T16168] EXT4-fs (loop4): 1 truncate cleaned up [ 222.162595][T16171] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 222.233481][T16173] loop4: detected capacity change from 0 to 1024 [ 222.240496][T16173] EXT4-fs: Ignoring removed orlov option [ 222.246303][T16173] EXT4-fs: Ignoring removed nomblk_io_submit option [ 222.258789][T16173] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=8843c018, mo2=0002] [ 222.324605][T16179] lo speed is unknown, defaulting to 1000 [ 222.340386][T16173] Invalid ELF header magic: != ELF [ 222.401194][T16185] loop7: detected capacity change from 0 to 512 [ 222.409938][T16185] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 222.423630][T16185] EXT4-fs (loop7): 1 truncate cleaned up [ 222.435891][T16183] loop9: detected capacity change from 0 to 128 [ 222.510060][T16194] loop7: detected capacity change from 0 to 512 [ 222.540025][T16194] EXT4-fs (loop7): too many log groups per flexible block group [ 222.547991][T16194] EXT4-fs (loop7): failed to initialize mballoc (-12) [ 222.560922][T16194] EXT4-fs (loop7): mount failed [ 222.633375][T16201] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 222.729497][T16209] loop4: detected capacity change from 0 to 2048 [ 222.736244][T16209] EXT4-fs: Ignoring removed mblk_io_submit option [ 222.770263][T16213] lo speed is unknown, defaulting to 1000 [ 222.806245][T16213] netlink: 28 bytes leftover after parsing attributes in process `syz.7.3933'. [ 222.865586][ T29] kauditd_printk_skb: 778 callbacks suppressed [ 222.865602][ T29] audit: type=1400 audit(1730104846.041:34816): avc: denied { block_suspend } for pid=16217 comm="syz.7.3935" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 222.945795][T16220] loop7: detected capacity change from 0 to 2048 [ 222.961698][T16226] loop1: detected capacity change from 0 to 512 [ 222.969207][T16224] usb usb8: usbfs: process 16224 (syz.9.3938) did not claim interface 0 before use [ 222.983253][T16220] EXT4-fs error (device loop7): ext4_orphan_get:1414: comm syz.7.3935: bad orphan inode 8388608 [ 222.994179][T16209] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.3932: bg 0: block 234: padding at end of block bitmap is not set [ 223.008657][ T29] audit: type=1400 audit(1730104846.172:34817): avc: denied { map } for pid=16217 comm="syz.7.3935" path="/192/file0/blkio.bfq.io_queued_recursive" dev="loop7" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 223.011152][T16209] EXT4-fs (loop4): Remounting filesystem read-only [ 223.045044][T16226] EXT4-fs (loop1): too many log groups per flexible block group [ 223.052902][T16226] EXT4-fs (loop1): failed to initialize mballoc (-12) [ 223.059900][T16226] EXT4-fs (loop1): mount failed [ 223.092115][ T29] audit: type=1326 audit(1730104846.257:34818): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16235 comm="syz.1.3940" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff6a684e719 code=0x0 [ 223.159230][T16242] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 223.176288][T16243] loop9: detected capacity change from 0 to 2048 [ 223.184021][T16243] EXT4-fs: Ignoring removed mblk_io_submit option [ 223.248240][T16248] lo speed is unknown, defaulting to 1000 [ 223.267421][T16252] loop4: detected capacity change from 0 to 512 [ 223.280881][T16248] netlink: 28 bytes leftover after parsing attributes in process `syz.9.3945'. [ 223.293568][T16254] lo speed is unknown, defaulting to 1000 [ 223.302988][T16252] EXT4-fs (loop4): too many log groups per flexible block group [ 223.310803][T16252] EXT4-fs (loop4): failed to initialize mballoc (-12) [ 223.318902][T16252] EXT4-fs (loop4): mount failed [ 223.344577][T16261] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3947'. [ 223.361144][T16261] team1: entered promiscuous mode [ 223.366366][T16261] team1: entered allmulticast mode [ 223.382383][T16265] loop9: detected capacity change from 0 to 512 [ 223.392013][T16265] EXT4-fs (loop9): too many log groups per flexible block group [ 223.399819][T16265] EXT4-fs (loop9): failed to initialize mballoc (-12) [ 223.408170][T16265] EXT4-fs (loop9): mount failed [ 223.449411][T16271] loop7: detected capacity change from 0 to 1024 [ 223.457324][T16271] EXT4-fs: Ignoring removed oldalloc option [ 223.460831][T16273] netlink: 40 bytes leftover after parsing attributes in process `syz.9.3954'. [ 223.463841][T16271] EXT4-fs (loop7): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 223.515225][T16277] loop9: detected capacity change from 0 to 2048 [ 223.523108][T16277] EXT4-fs: Ignoring removed mblk_io_submit option [ 223.618470][T16287] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 223.649756][T16289] lo speed is unknown, defaulting to 1000 [ 223.678827][T16289] netlink: 28 bytes leftover after parsing attributes in process `syz.9.3959'. [ 223.689587][ T29] audit: type=1326 audit(1730104846.818:34819): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16282 comm="syz.7.3956" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd681b9e719 code=0x7ffc0000 [ 223.713783][ T29] audit: type=1326 audit(1730104846.818:34820): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16282 comm="syz.7.3956" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd681b9e719 code=0x7ffc0000 [ 223.737543][ T29] audit: type=1326 audit(1730104846.818:34821): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16282 comm="syz.7.3956" exe="/root/syz-executor" sig=0 arch=c000003e syscall=284 compat=0 ip=0x7fd681b9e719 code=0x7ffc0000 [ 223.761209][ T29] audit: type=1326 audit(1730104846.818:34822): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16282 comm="syz.7.3956" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd681b9e719 code=0x7ffc0000 [ 223.784892][ T29] audit: type=1326 audit(1730104846.818:34823): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16282 comm="syz.7.3956" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd681b9e719 code=0x7ffc0000 [ 223.808501][ T29] audit: type=1326 audit(1730104846.818:34824): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16282 comm="syz.7.3956" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd681b9e719 code=0x7ffc0000 [ 223.832134][ T29] audit: type=1326 audit(1730104846.818:34825): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16282 comm="syz.7.3956" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fd681b9e719 code=0x7ffc0000 [ 223.890296][T16298] netlink: '+}[@': attribute type 1 has an invalid length. [ 223.907508][T16300] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3963'. [ 223.922046][T16298] bond1: (slave ipip0): The slave device specified does not support setting the MAC address [ 223.932281][T16298] bond1: (slave ipip0): Setting fail_over_mac to active for active-backup mode [ 223.959301][T16298] bond1: (slave ipip0): making interface the new active one [ 223.974670][T16298] bond1: (slave ipip0): Enslaving as an active interface with an up link [ 224.011936][T16304] loop7: detected capacity change from 0 to 512 [ 224.019981][T16307] loop1: detected capacity change from 0 to 512 [ 224.028906][T16307] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 224.063065][T16304] EXT4-fs (loop7): too many log groups per flexible block group [ 224.070959][T16304] EXT4-fs (loop7): failed to initialize mballoc (-12) [ 224.081179][T16307] EXT4-fs (loop1): invalid journal inode [ 224.094589][T16307] EXT4-fs (loop1): can't get journal size [ 224.111670][T16307] EXT4-fs (loop1): 1 truncate cleaned up [ 224.119166][T16304] EXT4-fs (loop7): mount failed [ 224.190996][T16318] loop7: detected capacity change from 0 to 1024 [ 224.204443][T16320] loop1: detected capacity change from 0 to 512 [ 224.208908][T16318] EXT4-fs: Ignoring removed oldalloc option [ 224.227295][T16318] EXT4-fs (loop7): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 224.292123][T16320] ext4 filesystem being mounted at /258/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 224.387886][T16339] loop7: detected capacity change from 0 to 512 [ 224.418166][T16340] usb usb8: usbfs: process 16340 (syz.1.3974) did not claim interface 0 before use [ 224.429325][T16339] ext4 filesystem being mounted at /201/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 224.542779][T16349] loop7: detected capacity change from 0 to 2048 [ 224.556628][T16350] __nla_validate_parse: 2 callbacks suppressed [ 224.556708][T16350] netlink: 56 bytes leftover after parsing attributes in process `syz.1.3975'. [ 224.583413][T16349] EXT4-fs (loop7): failed to initialize system zone (-117) [ 224.592792][T16349] EXT4-fs (loop7): mount failed [ 224.775131][T16360] loop7: detected capacity change from 0 to 512 [ 224.793297][T16360] EXT4-fs (loop7): too many log groups per flexible block group [ 224.801339][T16360] EXT4-fs (loop7): failed to initialize mballoc (-12) [ 224.827710][T16360] EXT4-fs (loop7): mount failed [ 224.882077][T16364] loop7: detected capacity change from 0 to 512 [ 224.902531][T16364] EXT4-fs (loop7): mounting ext3 file system using the ext4 subsystem [ 224.921695][T16364] EXT4-fs (loop7): invalid journal inode [ 224.934578][T16364] EXT4-fs (loop7): can't get journal size [ 224.961788][T16364] EXT4-fs (loop7): 1 truncate cleaned up [ 225.095698][T16368] netlink: 56 bytes leftover after parsing attributes in process `syz.7.3980'. [ 225.147687][T16371] loop4: detected capacity change from 0 to 2048 [ 225.169384][T16371] EXT4-fs: Ignoring removed mblk_io_submit option [ 225.229062][T16376] sg_write: process 1419 (syz.0.3982) changed security contexts after opening file descriptor, this is not allowed. [ 225.255858][T16378] loop9: detected capacity change from 0 to 1024 [ 225.264424][T16378] EXT4-fs: Ignoring removed oldalloc option [ 225.270910][T16378] EXT4-fs (loop9): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 225.348698][T16385] usb usb8: usbfs: process 16385 (syz.0.3985) did not claim interface 0 before use [ 225.441081][T16394] lo speed is unknown, defaulting to 1000 [ 225.467693][T16401] loop1: detected capacity change from 0 to 512 [ 225.488451][T16401] EXT4-fs (loop1): too many log groups per flexible block group [ 225.496307][T16401] EXT4-fs (loop1): failed to initialize mballoc (-12) [ 225.511261][T16381] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 225.526998][T16401] EXT4-fs (loop1): mount failed [ 225.548205][T16381] loop4: detected capacity change from 0 to 128 [ 225.567503][T16381] ext4: Unknown parameter 'noacl' [ 225.579879][T16407] loop9: detected capacity change from 0 to 512 [ 225.612456][T16407] ext4 filesystem being mounted at /113/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 225.936657][T16415] netlink: 20 bytes leftover after parsing attributes in process `syz.9.3991'. [ 226.000991][T16421] lo speed is unknown, defaulting to 1000 [ 226.045645][T16421] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3993'. [ 226.072100][T16430] loop4: detected capacity change from 0 to 512 [ 226.090338][T16430] ext4 filesystem being mounted at /237/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 226.141504][T16437] netlink: 56 bytes leftover after parsing attributes in process `syz.7.3998'. [ 226.450044][T16459] loop1: detected capacity change from 0 to 2048 [ 226.610238][T16459] EXT4-fs (loop1): failed to initialize system zone (-117) [ 226.624046][T16459] EXT4-fs (loop1): mount failed [ 226.856669][T16479] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4014'. [ 226.984457][T16487] FAULT_INJECTION: forcing a failure. [ 226.984457][T16487] name failslab, interval 1, probability 0, space 0, times 0 [ 226.997138][T16487] CPU: 0 UID: 0 PID: 16487 Comm: syz.0.4016 Not tainted 6.12.0-rc4-syzkaller-00281-g284a2f899676 #0 [ 227.007916][T16487] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 227.018005][T16487] Call Trace: [ 227.021325][T16487] [ 227.024269][T16487] dump_stack_lvl+0xf2/0x150 [ 227.028982][T16487] dump_stack+0x15/0x20 [ 227.033184][T16487] should_fail_ex+0x223/0x230 [ 227.037934][T16487] ? sel_write_checkreqprot+0x12a/0x210 [ 227.043558][T16487] should_failslab+0x8f/0xb0 [ 227.048168][T16487] __kmalloc_node_track_caller_noprof+0xa6/0x380 [ 227.054614][T16487] memdup_user_nul+0x2c/0xd0 [ 227.059225][T16487] sel_write_checkreqprot+0x12a/0x210 [ 227.064699][T16487] ? __pfx_sel_write_checkreqprot+0x10/0x10 [ 227.070643][T16487] vfs_write+0x281/0x920 [ 227.074910][T16487] ? __pfx_kfree_link+0x10/0x10 [ 227.079984][T16487] ? __rcu_read_unlock+0x4e/0x70 [ 227.084937][T16487] ? __fget_files+0x1d4/0x210 [ 227.089682][T16487] ksys_write+0xeb/0x1b0 [ 227.093945][T16487] __x64_sys_write+0x42/0x50 [ 227.098559][T16487] x64_sys_call+0x27dd/0x2d60 [ 227.103299][T16487] do_syscall_64+0xc9/0x1c0 [ 227.107899][T16487] ? clear_bhb_loop+0x55/0xb0 [ 227.112594][T16487] ? clear_bhb_loop+0x55/0xb0 [ 227.117278][T16487] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 227.123260][T16487] RIP: 0033:0x7f7a7f62e719 [ 227.127695][T16487] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 227.147353][T16487] RSP: 002b:00007f7a7e2a1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 227.155830][T16487] RAX: ffffffffffffffda RBX: 00007f7a7f7e5f80 RCX: 00007f7a7f62e719 [ 227.163852][T16487] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 0000000000000003 [ 227.171833][T16487] RBP: 00007f7a7e2a1090 R08: 0000000000000000 R09: 0000000000000000 [ 227.179813][T16487] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 227.187805][T16487] R13: 0000000000000000 R14: 00007f7a7f7e5f80 R15: 00007ffd9cb1bbc8 [ 227.195867][T16487] [ 227.242930][T16490] loop7: detected capacity change from 0 to 512 [ 227.261775][T16490] EXT4-fs (loop7): too many log groups per flexible block group [ 227.269540][T16490] EXT4-fs (loop7): failed to initialize mballoc (-12) [ 227.285051][T16490] EXT4-fs (loop7): mount failed [ 227.364822][T16501] lo speed is unknown, defaulting to 1000 [ 227.425456][T16501] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4020'. [ 227.439719][T16501] team0: entered promiscuous mode [ 227.444886][T16501] team0: entered allmulticast mode [ 227.480468][T16508] loop9: detected capacity change from 0 to 128 [ 227.488405][T16510] loop1: detected capacity change from 0 to 128 [ 227.508250][T16508] ext4 filesystem being mounted at /116/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 227.554038][T16505] FAULT_INJECTION: forcing a failure. [ 227.554038][T16505] name failslab, interval 1, probability 0, space 0, times 0 [ 227.566736][T16505] CPU: 1 UID: 0 PID: 16505 Comm: syz.4.4022 Not tainted 6.12.0-rc4-syzkaller-00281-g284a2f899676 #0 [ 227.577518][T16505] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 227.587595][T16505] Call Trace: [ 227.590902][T16505] [ 227.593847][T16505] dump_stack_lvl+0xf2/0x150 [ 227.598476][T16505] dump_stack+0x15/0x20 [ 227.602667][T16505] should_fail_ex+0x223/0x230 [ 227.607398][T16505] ? __kvmalloc_node_noprof+0x72/0x170 [ 227.612897][T16505] should_failslab+0x8f/0xb0 [ 227.617559][T16505] __kmalloc_node_noprof+0xa8/0x380 [ 227.622801][T16505] __kvmalloc_node_noprof+0x72/0x170 [ 227.628100][T16505] pfifo_fast_init+0x196/0x360 [ 227.632959][T16505] qdisc_create_dflt+0xce/0x280 [ 227.637838][T16505] dev_activate+0x20e/0x9e0 [ 227.642433][T16505] __dev_open+0x263/0x2e0 [ 227.646819][T16505] __dev_change_flags+0x155/0x410 [ 227.651871][T16505] dev_change_flags+0x59/0xd0 [ 227.656567][T16505] dev_ifsioc+0x67f/0xa10 [ 227.658203][T16504] netlink: 20 bytes leftover after parsing attributes in process `syz.7.4023'. [ 227.660907][T16505] dev_ioctl+0x7fa/0xab0 [ 227.660941][T16505] sock_do_ioctl+0x11c/0x260 [ 227.660966][T16505] sock_ioctl+0x46a/0x640 [ 227.683249][T16505] ? __pfx_sock_ioctl+0x10/0x10 [ 227.688144][T16505] __se_sys_ioctl+0xcd/0x140 [ 227.692793][T16505] __x64_sys_ioctl+0x43/0x50 [ 227.697424][T16505] x64_sys_call+0x15cc/0x2d60 [ 227.702267][T16505] do_syscall_64+0xc9/0x1c0 [ 227.706833][T16505] ? clear_bhb_loop+0x55/0xb0 [ 227.711556][T16505] ? clear_bhb_loop+0x55/0xb0 [ 227.716293][T16505] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 227.722264][T16505] RIP: 0033:0x7f9f7cf4e719 [ 227.726720][T16505] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 227.746361][T16505] RSP: 002b:00007f9f7bba6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 227.754862][T16505] RAX: ffffffffffffffda RBX: 00007f9f7d106058 RCX: 00007f9f7cf4e719 [ 227.762833][T16505] RDX: 0000000020000100 RSI: 0000000000008914 RDI: 0000000000000007 [ 227.770803][T16505] RBP: 00007f9f7bba6090 R08: 0000000000000000 R09: 0000000000000000 [ 227.778848][T16505] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 227.786825][T16505] R13: 0000000000000000 R14: 00007f9f7d106058 R15: 00007ffdeaec1c68 [ 227.794809][T16505] [ 227.798228][T16505] pim6reg1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 227.812420][T16505] pim6reg1: entered promiscuous mode [ 227.817913][T16505] pim6reg1: entered allmulticast mode [ 227.954003][T16536] loop9: detected capacity change from 0 to 512 [ 227.959440][T16532] loop0: detected capacity change from 0 to 1024 [ 227.968533][T16532] EXT4-fs: Ignoring removed orlov option [ 227.973882][T16534] loop1: detected capacity change from 0 to 2048 [ 227.974327][T16532] EXT4-fs: Ignoring removed nomblk_io_submit option [ 227.983621][T16536] EXT4-fs error (device loop9): ext4_get_branch:178: inode #11: block 4294967295: comm syz.9.4032: invalid block [ 227.999958][T16536] EXT4-fs error (device loop9): ext4_free_branches:1023: inode #11: comm syz.9.4032: invalid indirect mapped block 4294967295 (level 1) [ 228.000632][T16534] EXT4-fs (loop1): failed to initialize system zone (-117) [ 228.017954][T16536] EXT4-fs error (device loop9): ext4_free_branches:1023: inode #11: comm syz.9.4032: invalid indirect mapped block 4294967295 (level 1) [ 228.021379][T16534] EXT4-fs (loop1): mount failed [ 228.039985][T16536] EXT4-fs (loop9): 2 truncates cleaned up [ 228.349875][ T29] kauditd_printk_skb: 373 callbacks suppressed [ 228.349915][ T29] audit: type=1326 audit(1730104851.167:35197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16560 comm="syz.4.4039" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f7cf4e719 code=0x7ffc0000 [ 228.395509][ T29] audit: type=1326 audit(1730104851.167:35198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16560 comm="syz.4.4039" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f7cf4e719 code=0x7ffc0000 [ 228.419192][ T29] audit: type=1326 audit(1730104851.167:35199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16560 comm="syz.4.4039" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f9f7cf4e719 code=0x7ffc0000 [ 228.443090][ T29] audit: type=1326 audit(1730104851.167:35200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16560 comm="syz.4.4039" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f7cf4e719 code=0x7ffc0000 [ 228.466723][ T29] audit: type=1326 audit(1730104851.167:35201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16560 comm="syz.4.4039" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9f7cf4e719 code=0x7ffc0000 [ 228.490370][ T29] audit: type=1326 audit(1730104851.167:35202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16560 comm="syz.4.4039" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f7cf4e719 code=0x7ffc0000 [ 228.514030][ T29] audit: type=1326 audit(1730104851.167:35203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16560 comm="syz.4.4039" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9f7cf4e719 code=0x7ffc0000 [ 228.537387][T16567] loop7: detected capacity change from 0 to 512 [ 228.537597][ T29] audit: type=1326 audit(1730104851.167:35204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16560 comm="syz.4.4039" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f7cf4e719 code=0x7ffc0000 [ 228.550334][T16567] EXT4-fs (loop7): mounting ext3 file system using the ext4 subsystem [ 228.567428][ T29] audit: type=1326 audit(1730104851.167:35205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16560 comm="syz.4.4039" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9f7cf4e719 code=0x7ffc0000 [ 228.567469][ T29] audit: type=1326 audit(1730104851.186:35206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16560 comm="syz.4.4039" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f7cf4e719 code=0x7ffc0000 [ 228.643075][T16567] EXT4-fs (loop7): invalid journal inode [ 228.653788][T16567] EXT4-fs (loop7): can't get journal size [ 228.665567][T16567] EXT4-fs (loop7): 1 truncate cleaned up [ 228.813096][T16566] lo speed is unknown, defaulting to 1000 [ 228.899621][T16589] loop0: detected capacity change from 0 to 1024 [ 228.906711][T16589] EXT4-fs: Ignoring removed oldalloc option [ 228.919839][T16590] lo speed is unknown, defaulting to 1000 [ 228.920430][T16589] EXT4-fs (loop0): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 228.936209][T16588] lo speed is unknown, defaulting to 1000 [ 228.948141][T16592] lo speed is unknown, defaulting to 1000 [ 228.957874][T16595] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4051'. [ 228.978853][T16595] team1: entered promiscuous mode [ 228.984108][T16595] team1: entered allmulticast mode [ 228.990826][T16593] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4049'. [ 229.012553][T16599] loop1: detected capacity change from 0 to 512 [ 229.013308][T16593] team2: entered promiscuous mode [ 229.020232][T16599] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 229.024044][T16593] team2: entered allmulticast mode [ 229.032864][T16599] EXT4-fs (loop1): invalid journal inode [ 229.059774][T16599] EXT4-fs (loop1): can't get journal size [ 229.081905][T16599] EXT4-fs (loop1): 1 truncate cleaned up [ 229.158408][T16615] lo speed is unknown, defaulting to 1000 [ 229.193454][T16615] lo speed is unknown, defaulting to 1000 [ 229.229284][T16615] lo speed is unknown, defaulting to 1000 [ 229.235349][T16615] lo speed is unknown, defaulting to 1000 [ 229.248797][T16615] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 229.268303][T16615] lo speed is unknown, defaulting to 1000 [ 229.274820][T16615] lo speed is unknown, defaulting to 1000 [ 229.281221][T16615] lo speed is unknown, defaulting to 1000 [ 229.289186][T16615] lo speed is unknown, defaulting to 1000 [ 229.296376][T16615] lo speed is unknown, defaulting to 1000 [ 229.305019][T16615] lo speed is unknown, defaulting to 1000 [ 229.311291][T16615] lo speed is unknown, defaulting to 1000 [ 229.317736][T16615] lo speed is unknown, defaulting to 1000 [ 229.334061][T16615] lo speed is unknown, defaulting to 1000 [ 229.347334][T16615] lo speed is unknown, defaulting to 1000 [ 229.365773][T16632] loop0: detected capacity change from 0 to 1024 [ 229.382553][T16632] EXT4-fs: Ignoring removed oldalloc option [ 229.394646][T16632] EXT4-fs (loop0): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 229.419675][T16639] loop7: detected capacity change from 0 to 512 [ 229.451866][T16643] loop1: detected capacity change from 0 to 512 [ 229.455701][T16639] ext4 filesystem being mounted at /224/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 229.471619][T16643] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 229.488530][T16643] EXT4-fs (loop1): invalid journal inode [ 229.494938][T16643] EXT4-fs (loop1): can't get journal size [ 229.507672][T16643] EXT4-fs (loop1): 1 truncate cleaned up [ 229.745740][T16663] loop1: detected capacity change from 0 to 8192 [ 229.753576][T16667] lo speed is unknown, defaulting to 1000 [ 229.759820][T16672] netem: change failed [ 229.771838][T16671] FAULT_INJECTION: forcing a failure. [ 229.771838][T16671] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 229.785032][T16671] CPU: 1 UID: 0 PID: 16671 Comm: syz.7.4077 Not tainted 6.12.0-rc4-syzkaller-00281-g284a2f899676 #0 [ 229.795816][T16671] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 229.805878][T16671] Call Trace: [ 229.809159][T16671] [ 229.812153][T16671] dump_stack_lvl+0xf2/0x150 [ 229.816753][T16671] dump_stack+0x15/0x20 [ 229.820960][T16671] should_fail_ex+0x223/0x230 [ 229.825684][T16671] should_fail+0xb/0x10 [ 229.829923][T16671] should_fail_usercopy+0x1a/0x20 [ 229.834949][T16671] _copy_to_user+0x20/0xa0 [ 229.839371][T16671] simple_read_from_buffer+0xa0/0x110 [ 229.844761][T16671] proc_fail_nth_read+0xf9/0x140 [ 229.849794][T16671] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 229.855353][T16671] vfs_read+0x1a2/0x700 [ 229.859554][T16671] ? __fget_files+0x1d4/0x210 [ 229.864255][T16671] ksys_read+0xeb/0x1b0 [ 229.868595][T16671] __x64_sys_read+0x42/0x50 [ 229.873133][T16671] x64_sys_call+0x27d3/0x2d60 [ 229.877869][T16671] do_syscall_64+0xc9/0x1c0 [ 229.882403][T16671] ? clear_bhb_loop+0x55/0xb0 [ 229.887082][T16671] ? clear_bhb_loop+0x55/0xb0 [ 229.891872][T16671] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 229.897840][T16671] RIP: 0033:0x7fd681b9d15c [ 229.902403][T16671] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8e 02 00 48 [ 229.922040][T16671] RSP: 002b:00007fd680811030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 229.930545][T16671] RAX: ffffffffffffffda RBX: 00007fd681d55f80 RCX: 00007fd681b9d15c [ 229.938520][T16671] RDX: 000000000000000f RSI: 00007fd6808110a0 RDI: 0000000000000005 [ 229.946490][T16671] RBP: 00007fd680811090 R08: 0000000000000000 R09: 0000000000000000 [ 229.954482][T16671] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 229.962452][T16671] R13: 0000000000000000 R14: 00007fd681d55f80 R15: 00007fff1c8da048 [ 229.970500][T16671] [ 230.004437][T16663] loop1: p1 p2 p3 < p5 p6 p7 p8 p9 p10 p11 p12 p13 p14 p15 p16 p17 p18 p19 p20 p21 p22 p23 p24 p25 p26 p27 p28 p29 p30 p31 p32 p33 p34 p35 p36 p37 p38 p39 p40 p41 p42 p43 p44 p45 p46 p47 p48 p49 p50 p51 p52 p53 p54 p55 p56 p57 p58 p59 p60 p61 p62 p63 p64 p65 p66 p67 p68 p69 p70 p71 p72 p73 p74 p75 p76 p77 p78 p79 p80 p81 p82 p83 p84 p85 p86 p87 p88 p89 p90 p91 p92 p93 p94 p95 p96 p97 p98 p99 p100 p101 p102 p103 p104 p105 p106 p107 p108 p109 p110 p111 p112 p113 p114 p115 p116 p117 p118 p119 p120 p121 p122 p123 p124 p125 p126 p127 p128 p129 p130 p131 p132 p133 p134 p135 p136 p137 p138 p139 p140 p141 p142 p143 p144 p145 p146 p147 p148 p149 p150 p151 p152 p153 p154 p155 p156 p157 p158 p159 p160 p161 p162 p163 p164 p165 p166 p167 p168 p169 p170 p171 p172 p173 p174 p175 p176 p177 p178 p179 p180 p181 p182 p183 p184 p185 p186 p187 p188 p189 p190 p191 p192 p193 p194 p195 p196 p197 p198 p199 p200 p201 p202 p203 p204 p205 p206 p207 p208 p209 p210 p211 p212 p213 p214 p215 p216 p217 p218 p219 p220 p221 p222 p223 p224 p2 [ 230.004727][T16663] loop1: p1 start 4177526784 is beyond EOD, truncated [ 230.103356][T16663] loop1: p2 start 8388612 is beyond EOD, truncated [ 230.116669][T16663] loop1: p4 size 32937 extends beyond EOD, truncated [ 230.117905][T16678] loop9: detected capacity change from 0 to 512 [ 230.123901][T16663] loop1: p5 start 4177526784 is beyond EOD, truncated [ 230.136595][T16663] loop1: p6 start 8388612 is beyond EOD, truncated [ 230.143203][T16663] loop1: p7 size 32937 extends beyond EOD, truncated [ 230.152081][T16677] loop7: detected capacity change from 0 to 512 [ 230.179829][T16677] EXT4-fs (loop7): mounting ext3 file system using the ext4 subsystem [ 230.183340][T16663] loop1: p8 start 4177526784 is beyond EOD, truncated [ 230.194892][T16663] loop1: p9 start 8388612 is beyond EOD, truncated [ 230.201632][T16663] loop1: p10 size 32937 extends beyond EOD, truncated [ 230.202259][T16685] __nla_validate_parse: 2 callbacks suppressed [ 230.202275][T16685] netlink: 100 bytes leftover after parsing attributes in process `syz.4.4081'. [ 230.214484][T16663] loop1: p11 start 4177526784 is beyond EOD, [ 230.220747][T16677] EXT4-fs (loop7): invalid journal inode [ 230.223744][T16663] truncated [ 230.231502][T16677] EXT4-fs (loop7): can't get journal size [ 230.235439][T16663] loop1: p12 start 8388612 is beyond EOD, [ 230.239349][T16677] EXT4-fs (loop7): 1 truncate cleaned up [ 230.244293][T16663] truncated [ 230.244302][T16663] loop1: p13 size 32937 extends beyond EOD, truncated [ 230.278319][T16663] loop1: p14 start 4177526784 is beyond EOD, truncated [ 230.285296][T16663] loop1: p15 start 8388612 is beyond EOD, truncated [ 230.292001][T16663] loop1: p16 size 32937 extends beyond EOD, truncated [ 230.312388][T16678] ext4 filesystem being mounted at /126/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 230.328826][T16663] loop1: p17 start 4177526784 is beyond EOD, truncated [ 230.335840][T16663] loop1: p18 start 8388612 is beyond EOD, truncated [ 230.342506][T16663] loop1: p19 size 32937 extends beyond EOD, truncated [ 230.355631][T16663] loop1: p20 start 4177526784 is beyond EOD, truncated [ 230.362698][T16663] loop1: p21 start 8388612 is beyond EOD, truncated [ 230.369365][T16663] loop1: p22 size 32937 extends beyond EOD, truncated [ 230.378405][T16663] loop1: p23 start 4177526784 is beyond EOD, truncated [ 230.385387][T16663] loop1: p24 start 8388612 is beyond EOD, truncated [ 230.392079][T16663] loop1: p25 size 32937 extends beyond EOD, truncated [ 230.401827][T16663] loop1: p26 start 4177526784 is beyond EOD, truncated [ 230.408751][T16663] loop1: p27 start 8388612 is beyond EOD, truncated [ 230.415387][T16663] loop1: p28 size 32937 extends beyond EOD, truncated [ 230.430421][T16663] loop1: p29 start 4177526784 is beyond EOD, truncated [ 230.437482][T16663] loop1: p30 start 8388612 is beyond EOD, truncated [ 230.444192][T16663] loop1: p31 size 32937 extends beyond EOD, truncated [ 230.482478][T16698] loop7: detected capacity change from 0 to 1024 [ 230.490520][T16699] netlink: 56 bytes leftover after parsing attributes in process `syz.4.4084'. [ 230.509773][T16698] EXT4-fs: Ignoring removed oldalloc option [ 230.516264][T16663] loop1: p32 start 4177526784 is beyond EOD, truncated [ 230.523226][T16663] loop1: p33 start 8388612 is beyond EOD, truncated [ 230.529861][T16663] loop1: p34 size 32937 extends beyond EOD, truncated [ 230.538371][T16698] EXT4-fs (loop7): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 230.548462][T16702] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 230.564846][T16663] loop1: p35 start 4177526784 is beyond EOD, truncated [ 230.571736][T16663] loop1: p36 start 8388612 is beyond EOD, truncated [ 230.578427][T16663] loop1: p37 size 32937 extends beyond EOD, truncated [ 230.598024][T16663] loop1: p38 start 4177526784 is beyond EOD, truncated [ 230.604933][T16663] loop1: p39 start 8388612 is beyond EOD, truncated [ 230.611602][T16663] loop1: p40 size 32937 extends beyond EOD, truncated [ 230.628863][T16663] loop1: p41 start 4177526784 is beyond EOD, truncated [ 230.635879][T16663] loop1: p42 start 8388612 is beyond EOD, truncated [ 230.642635][T16663] loop1: p43 size 32937 extends beyond EOD, truncated [ 230.701091][T16663] loop1: p44 start 4177526784 is beyond EOD, truncated [ 230.706714][T16711] lo speed is unknown, defaulting to 1000 [ 230.708057][T16663] loop1: p45 start 8388612 is beyond EOD, truncated [ 230.720386][T16663] loop1: p46 size 32937 extends beyond EOD, truncated [ 230.731526][T16717] netlink: 40 bytes leftover after parsing attributes in process `syz.9.4088'. [ 230.759082][T16718] loop0: detected capacity change from 0 to 128 [ 230.766821][T16663] loop1: p47 start 4177526784 is beyond EOD, truncated [ 230.773772][T16663] loop1: p48 start 8388612 is beyond EOD, truncated [ 230.780696][T16663] loop1: p49 size 32937 extends beyond EOD, truncated [ 230.811738][T16663] loop1: p50 start 4177526784 is beyond EOD, truncated [ 230.818678][T16663] loop1: p51 start 8388612 is beyond EOD, truncated [ 230.825406][T16663] loop1: p52 size 32937 extends beyond EOD, truncated [ 230.835242][T16718] ext4 filesystem being mounted at /598/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 230.878873][T16663] loop1: p53 start 4177526784 is beyond EOD, truncated [ 230.885901][T16663] loop1: p54 start 8388612 is beyond EOD, truncated [ 230.886997][T16720] usb usb8: usbfs: process 16720 (syz.9.4092) did not claim interface 0 before use [ 230.892512][T16663] loop1: p55 size 32937 extends beyond EOD, truncated [ 230.909529][T16663] loop1: p56 start 4177526784 is beyond EOD, truncated [ 230.916433][T16663] loop1: p57 start 8388612 is beyond EOD, truncated [ 230.923120][T16663] loop1: p58 size 32937 extends beyond EOD, truncated [ 230.930824][T16663] loop1: p59 start 4177526784 is beyond EOD, truncated [ 230.937726][T16663] loop1: p60 start 8388612 is beyond EOD, truncated [ 230.944613][T16663] loop1: p61 size 32937 extends beyond EOD, truncated [ 230.958695][T16663] loop1: p62 start 4177526784 is beyond EOD, truncated [ 230.965724][T16663] loop1: p63 start 8388612 is beyond EOD, truncated [ 230.972486][T16663] loop1: p64 size 32937 extends beyond EOD, truncated [ 230.982755][T16663] loop1: p65 start 4177526784 is beyond EOD, truncated [ 230.989680][T16663] loop1: p66 start 8388612 is beyond EOD, truncated [ 230.996409][T16663] loop1: p67 size 32937 extends beyond EOD, truncated [ 231.008179][T16663] loop1: p68 start 4177526784 is beyond EOD, truncated [ 231.015129][T16663] loop1: p69 start 8388612 is beyond EOD, truncated [ 231.021758][T16663] loop1: p70 size 32937 extends beyond EOD, truncated [ 231.046064][T16663] loop1: p71 start 4177526784 is beyond EOD, truncated [ 231.052972][T16663] loop1: p72 start 8388612 is beyond EOD, truncated [ 231.059672][T16663] loop1: p73 size 32937 extends beyond EOD, truncated [ 231.069802][T16663] loop1: p74 start 4177526784 is beyond EOD, truncated [ 231.076736][T16663] loop1: p75 start 8388612 is beyond EOD, truncated [ 231.083392][T16663] loop1: p76 size 32937 extends beyond EOD, truncated [ 231.095826][T16663] loop1: p77 start 4177526784 is beyond EOD, truncated [ 231.102855][T16663] loop1: p78 start 8388612 is beyond EOD, truncated [ 231.104188][T16731] lo speed is unknown, defaulting to 1000 [ 231.109464][T16663] loop1: p79 size 32937 extends beyond EOD, truncated [ 231.110196][T16663] loop1: p80 start 4177526784 is beyond EOD, truncated [ 231.129066][T16663] loop1: p81 start 8388612 is beyond EOD, truncated [ 231.135696][T16663] loop1: p82 size 32937 extends beyond EOD, truncated [ 231.139099][T16732] netlink: 4 bytes leftover after parsing attributes in process `syz.9.4093'. [ 231.143307][T16663] loop1: p83 start 4177526784 is beyond EOD, truncated [ 231.158423][T16663] loop1: p84 start 8388612 is beyond EOD, truncated [ 231.165067][T16663] loop1: p85 size 32937 extends beyond EOD, truncated [ 231.172572][T16663] loop1: p86 start 4177526784 is beyond EOD, truncated [ 231.179513][T16663] loop1: p87 start 8388612 is beyond EOD, truncated [ 231.180364][T16732] team1: entered promiscuous mode [ 231.186132][T16663] loop1: p88 size 32937 extends beyond EOD, [ 231.191164][T16732] team1: entered allmulticast mode [ 231.202320][T16663] truncated [ 231.206226][T16663] loop1: p89 start 4177526784 is beyond EOD, truncated [ 231.213117][T16663] loop1: p90 start 8388612 is beyond EOD, truncated [ 231.219757][T16663] loop1: p91 size 32937 extends beyond EOD, truncated [ 231.227310][T16663] loop1: p92 start 4177526784 is beyond EOD, truncated [ 231.234229][T16663] loop1: p93 start 8388612 is beyond EOD, truncated [ 231.240985][T16663] loop1: p94 size 32937 extends beyond EOD, truncated [ 231.250486][T16663] loop1: p95 start 4177526784 is beyond EOD, truncated [ 231.257424][T16663] loop1: p96 start 8388612 is beyond EOD, truncated [ 231.264154][T16663] loop1: p97 size 32937 extends beyond EOD, truncated [ 231.271562][T16663] loop1: p98 start 4177526784 is beyond EOD, truncated [ 231.278532][T16663] loop1: p99 start 8388612 is beyond EOD, truncated [ 231.285284][T16663] loop1: p100 size 32937 extends beyond EOD, truncated [ 231.292907][T16663] loop1: p101 start 4177526784 is beyond EOD, truncated [ 231.299893][T16663] loop1: p102 start 8388612 is beyond EOD, truncated [ 231.306615][T16663] loop1: p103 size 32937 extends beyond EOD, truncated [ 231.316474][T16663] loop1: p104 start 4177526784 is beyond EOD, truncated [ 231.323565][T16663] loop1: p105 start 8388612 is beyond EOD, truncated [ 231.330289][T16663] loop1: p106 size 32937 extends beyond EOD, truncated [ 231.339129][T16663] loop1: p107 start 4177526784 is beyond EOD, truncated [ 231.346132][T16663] loop1: p108 start 8388612 is beyond EOD, truncated [ 231.352878][T16663] loop1: p109 size 32937 extends beyond EOD, truncated [ 231.360807][T16663] loop1: p110 start 4177526784 is beyond EOD, truncated [ 231.367839][T16663] loop1: p111 start 8388612 is beyond EOD, truncated [ 231.374721][T16663] loop1: p112 size 32937 extends beyond EOD, truncated [ 231.376517][T16735] loop9: detected capacity change from 0 to 512 [ 231.387708][T16663] loop1: p113 start 4177526784 is beyond EOD, truncated [ 231.394875][T16663] loop1: p114 start 8388612 is beyond EOD, truncated [ 231.401712][T16663] loop1: p115 size 32937 extends beyond EOD, truncated [ 231.409255][T16663] loop1: p116 start 4177526784 is beyond EOD, truncated [ 231.410507][T16735] EXT4-fs (loop9): mounting ext3 file system using the ext4 subsystem [ 231.416208][T16663] loop1: p117 start 8388612 is beyond EOD, truncated [ 231.416230][T16663] loop1: p118 size 32937 extends beyond EOD, truncated [ 231.439374][T16663] loop1: p119 start 4177526784 is beyond EOD, truncated [ 231.441018][T16735] EXT4-fs (loop9): invalid journal inode [ 231.446450][T16663] loop1: p120 start 8388612 is beyond EOD, truncated [ 231.458793][T16663] loop1: p121 size 32937 extends beyond EOD, truncated [ 231.460302][T16735] EXT4-fs (loop9): can't get journal size [ 231.467129][T16663] loop1: p122 start 4177526784 is beyond EOD, truncated [ 231.478698][T16663] loop1: p123 start 8388612 is beyond EOD, truncated [ 231.485457][T16663] loop1: p124 size 32937 extends beyond EOD, truncated [ 231.491656][T16735] EXT4-fs (loop9): 1 truncate cleaned up [ 231.492990][T16663] loop1: p125 start 4177526784 is beyond EOD, truncated [ 231.504979][T16663] loop1: p126 start 8388612 is beyond EOD, truncated [ 231.511756][T16663] loop1: p127 size 32937 extends beyond EOD, truncated [ 231.522617][T16663] loop1: p128 start 4177526784 is beyond EOD, truncated [ 231.529632][T16663] loop1: p129 start 8388612 is beyond EOD, truncated [ 231.536355][T16663] loop1: p130 size 32937 extends beyond EOD, truncated [ 231.544134][T16663] loop1: p131 start 4177526784 is beyond EOD, truncated [ 231.551194][T16663] loop1: p132 start 8388612 is beyond EOD, truncated [ 231.557901][T16663] loop1: p133 size 32937 extends beyond EOD, truncated [ 231.579825][T16663] loop1: p134 start 4177526784 is beyond EOD, truncated [ 231.586872][T16663] loop1: p135 start 8388612 is beyond EOD, truncated [ 231.593693][T16663] loop1: p136 size 32937 extends beyond EOD, truncated [ 231.601233][T16663] loop1: p137 start 4177526784 is beyond EOD, truncated [ 231.608224][T16663] loop1: p138 start 8388612 is beyond EOD, truncated [ 231.615069][T16663] loop1: p139 size 32937 extends beyond EOD, truncated [ 231.622651][T16663] loop1: p140 start 4177526784 is beyond EOD, truncated [ 231.629673][T16663] loop1: p141 start 8388612 is beyond EOD, truncated [ 231.636515][T16663] loop1: p142 size 32937 extends beyond EOD, truncated [ 231.644082][T16663] loop1: p143 start 4177526784 is beyond EOD, truncated [ 231.651053][T16663] loop1: p144 start 8388612 is beyond EOD, truncated [ 231.657810][T16663] loop1: p145 size 32937 extends beyond EOD, truncated [ 231.665489][T16663] loop1: p146 start 4177526784 is beyond EOD, truncated [ 231.672458][T16663] loop1: p147 start 8388612 is beyond EOD, truncated [ 231.679304][T16663] loop1: p148 size 32937 extends beyond EOD, truncated [ 231.687411][T16663] loop1: p149 start 4177526784 is beyond EOD, truncated [ 231.689796][T16743] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 231.694426][T16663] loop1: p150 start 8388612 is beyond EOD, truncated [ 231.708161][T16663] loop1: p151 size 32937 extends beyond EOD, truncated [ 231.715881][T16663] loop1: p152 start 4177526784 is beyond EOD, truncated [ 231.722900][T16663] loop1: p153 start 8388612 is beyond EOD, truncated [ 231.729682][T16663] loop1: p154 size 32937 extends beyond EOD, truncated [ 231.740147][T16663] loop1: p155 start 4177526784 is beyond EOD, truncated [ 231.747185][T16663] loop1: p156 start 8388612 is beyond EOD, truncated [ 231.753917][T16663] loop1: p157 size 32937 extends beyond EOD, truncated [ 231.762159][T16663] loop1: p158 start 4177526784 is beyond EOD, truncated [ 231.769290][T16663] loop1: p159 start 8388612 is beyond EOD, truncated [ 231.776054][T16663] loop1: p160 size 32937 extends beyond EOD, truncated [ 231.785792][T16663] loop1: p161 start 4177526784 is beyond EOD, truncated [ 231.792820][T16663] loop1: p162 start 8388612 is beyond EOD, truncated [ 231.799587][T16663] loop1: p163 size 32937 extends beyond EOD, truncated [ 231.802419][T16748] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 231.808273][T16663] loop1: p164 start 4177526784 is beyond EOD, truncated [ 231.820685][T16663] loop1: p165 start 8388612 is beyond EOD, truncated [ 231.827517][T16663] loop1: p166 size 32937 extends beyond EOD, truncated [ 231.839572][T16663] loop1: p167 start 4177526784 is beyond EOD, truncated [ 231.846570][T16663] loop1: p168 start 8388612 is beyond EOD, truncated [ 231.853419][T16663] loop1: p169 size 32937 extends beyond EOD, truncated [ 231.864027][T16663] loop1: p170 start 4177526784 is beyond EOD, truncated [ 231.871143][T16663] loop1: p171 start 8388612 is beyond EOD, truncated [ 231.877941][T16663] loop1: p172 size 32937 extends beyond EOD, truncated [ 231.890274][T16663] loop1: p173 start 4177526784 is beyond EOD, truncated [ 231.897285][T16663] loop1: p174 start 8388612 is beyond EOD, truncated [ 231.904208][T16663] loop1: p175 size 32937 extends beyond EOD, truncated [ 231.907875][T16663] loop1: p176 start 4177526784 is beyond EOD, truncated [ 231.919050][T16663] loop1: p177 start 8388612 is beyond EOD, truncated [ 231.924071][T16755] loop4: detected capacity change from 0 to 2048 [ 231.925876][T16663] loop1: p178 size 32937 extends beyond EOD, truncated [ 231.942264][T16663] loop1: p179 start 4177526784 is beyond EOD, truncated [ 231.947079][T16758] loop7: detected capacity change from 0 to 512 [ 231.949328][T16663] loop1: p180 start 8388612 is beyond EOD, truncated [ 231.962328][T16663] loop1: p181 size 32937 extends beyond EOD, truncated [ 231.971277][T16663] loop1: p182 start 4177526784 is beyond EOD, truncated [ 231.978312][T16663] loop1: p183 start 8388612 is beyond EOD, truncated [ 231.985003][T16663] loop1: p184 size 32937 extends beyond EOD, truncated [ 231.988245][T16755] EXT4-fs (loop4): failed to initialize system zone (-117) [ 231.993669][T16663] loop1: p185 start 4177526784 is beyond EOD, truncated [ 231.999470][T16755] EXT4-fs (loop4): mount failed [ 232.006089][T16663] loop1: p186 start 8388612 is beyond EOD, truncated [ 232.006108][T16663] loop1: p187 size 32937 extends beyond EOD, truncated [ 232.026582][T16663] loop1: p188 start 4177526784 is beyond EOD, truncated [ 232.029242][T16758] EXT4-fs (loop7): too many log groups per flexible block group [ 232.033591][T16663] loop1: p189 start 8388612 is beyond EOD, truncated [ 232.041373][T16758] EXT4-fs (loop7): failed to initialize mballoc (-12) [ 232.047929][T16663] loop1: p190 size 32937 extends beyond EOD, truncated [ 232.048649][T16663] loop1: p191 start 4177526784 is beyond EOD, truncated [ 232.068603][T16663] loop1: p192 start 8388612 is beyond EOD, truncated [ 232.068759][T16758] EXT4-fs (loop7): mount failed [ 232.075344][T16663] loop1: p193 size 32937 extends beyond EOD, truncated [ 232.087778][T16663] loop1: p194 start 4177526784 is beyond EOD, truncated [ 232.094781][T16663] loop1: p195 start 8388612 is beyond EOD, truncated [ 232.101565][T16663] loop1: p196 size 32937 extends beyond EOD, truncated [ 232.110051][T16663] loop1: p197 start 4177526784 is beyond EOD, truncated [ 232.117068][T16663] loop1: p198 start 8388612 is beyond EOD, truncated [ 232.123767][T16663] loop1: p199 size 32937 extends beyond EOD, truncated [ 232.137755][T16663] loop1: p200 start 4177526784 is beyond EOD, truncated [ 232.144752][T16663] loop1: p201 start 8388612 is beyond EOD, truncated [ 232.151579][T16663] loop1: p202 size 32937 extends beyond EOD, truncated [ 232.163427][T16663] loop1: p203 start 4177526784 is beyond EOD, truncated [ 232.170467][T16663] loop1: p204 start 8388612 is beyond EOD, truncated [ 232.177177][T16663] loop1: p205 size 32937 extends beyond EOD, truncated [ 232.185600][T16663] loop1: p206 start 4177526784 is beyond EOD, truncated [ 232.192817][T16663] loop1: p207 start 8388612 is beyond EOD, truncated [ 232.193939][T16769] loop7: detected capacity change from 0 to 512 [ 232.199622][T16663] loop1: p208 size 32937 extends beyond EOD, truncated [ 232.200456][T16663] loop1: p209 start 4177526784 is beyond EOD, truncated [ 232.219955][T16663] loop1: p210 start 8388612 is beyond EOD, truncated [ 232.226720][T16663] loop1: p211 size 32937 extends beyond EOD, truncated [ 232.228612][T16769] EXT4-fs (loop7): mounting ext3 file system using the ext4 subsystem [ 232.234528][T16663] loop1: p212 start 4177526784 is beyond EOD, truncated [ 232.246130][T16769] EXT4-fs (loop7): invalid journal inode [ 232.248778][T16663] loop1: p213 start 8388612 is beyond EOD, truncated [ 232.258217][T16769] EXT4-fs (loop7): can't get journal size [ 232.261102][T16663] loop1: p214 size 32937 extends beyond EOD, truncated [ 232.267755][T16769] EXT4-fs (loop7): 1 truncate cleaned up [ 232.274333][T16663] loop1: p215 start 4177526784 is beyond EOD, truncated [ 232.286382][T16663] loop1: p216 start 8388612 is beyond EOD, truncated [ 232.288600][T16769] EXT4-fs mount: 89 callbacks suppressed [ 232.288696][T16769] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 232.293117][T16663] loop1: p217 size 32937 extends beyond EOD, truncated [ 232.293872][T16663] loop1: p218 start 4177526784 is beyond EOD, [ 232.309834][T16769] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 232.310841][T16663] truncated [ 232.336132][T16663] loop1: p219 start 8388612 is beyond EOD, truncated [ 232.336994][T16780] loop4: detected capacity change from 0 to 512 [ 232.342842][T16663] loop1: p220 size 32937 extends beyond EOD, truncated [ 232.343500][T16663] loop1: p221 start 4177526784 is beyond EOD, truncated [ 232.363040][T16663] loop1: p222 start 8388612 is beyond EOD, truncated [ 232.369732][T16663] loop1: p223 size 32937 extends beyond EOD, truncated [ 232.379550][T16780] EXT4-fs (loop4): too many log groups per flexible block group [ 232.386560][T16663] loop1: p224 start 4177526784 is beyond EOD, truncated [ 232.387422][T16780] EXT4-fs (loop4): failed to initialize mballoc (-12) [ 232.394240][T16663] loop1: p225 start 8388612 is beyond EOD, truncated [ 232.405673][T16780] EXT4-fs (loop4): mount failed [ 232.407712][T16663] loop1: p226 size 32937 extends beyond EOD, truncated [ 232.433710][T16663] loop1: p227 start 4177526784 is beyond EOD, truncated [ 232.440795][T16663] loop1: p228 start 8388612 is beyond EOD, truncated [ 232.447544][T16663] loop1: p229 size 32937 extends beyond EOD, truncated [ 232.455712][T16663] loop1: p230 start 4177526784 is beyond EOD, truncated [ 232.462826][T16663] loop1: p231 start 8388612 is beyond EOD, truncated [ 232.469576][T16663] loop1: p232 size 32937 extends beyond EOD, truncated [ 232.477946][T16663] loop1: p233 start 4177526784 is beyond EOD, truncated [ 232.485009][T16663] loop1: p234 start 8388612 is beyond EOD, truncated [ 232.491773][T16663] loop1: p235 size 32937 extends beyond EOD, truncated [ 232.498449][T16795] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 232.500957][T16663] loop1: p236 start 4177526784 is beyond EOD, truncated [ 232.512771][T16663] loop1: p237 start 8388612 is beyond EOD, truncated [ 232.519469][T16663] loop1: p238 size 32937 extends beyond EOD, truncated [ 232.530454][T16663] loop1: p239 start 4177526784 is beyond EOD, truncated [ 232.537486][T16663] loop1: p240 start 8388612 is beyond EOD, truncated [ 232.544280][T16663] loop1: p241 size 32937 extends beyond EOD, truncated [ 232.552045][T16663] loop1: p242 start 4177526784 is beyond EOD, truncated [ 232.559167][T16663] loop1: p243 start 8388612 is beyond EOD, truncated [ 232.565904][T16663] loop1: p244 size 32937 extends beyond EOD, truncated [ 232.589137][T16663] loop1: p245 start 4177526784 is beyond EOD, truncated [ 232.596299][T16663] loop1: p246 start 8388612 is beyond EOD, truncated [ 232.603005][T16663] loop1: p247 size 32937 extends beyond EOD, truncated [ 232.612590][T16663] loop1: p248 start 4177526784 is beyond EOD, truncated [ 232.619669][T16663] loop1: p249 start 8388612 is beyond EOD, truncated [ 232.626383][T16663] loop1: p250 size 32937 extends beyond EOD, truncated [ 232.636135][T16663] loop1: p251 start 4177526784 is beyond EOD, truncated [ 232.643232][T16663] loop1: p252 start 8388612 is beyond EOD, truncated [ 232.650019][T16663] loop1: p253 size 32937 extends beyond EOD, truncated [ 232.658429][T16663] loop1: p254 start 4177526784 is beyond EOD, truncated [ 232.665422][T16663] loop1: p255 start 8388612 is beyond EOD, truncated [ 232.672529][T16799] usb usb8: usbfs: process 16799 (syz.7.4118) did not claim interface 0 before use [ 232.724031][T16807] usb usb8: usbfs: process 16807 (syz.4.4121) did not claim interface 0 before use [ 232.750436][T16718] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 232.770178][T16813] loop7: detected capacity change from 0 to 512 [ 232.778764][T16813] EXT4-fs (loop7): mounting ext3 file system using the ext4 subsystem [ 232.789543][T16813] EXT4-fs (loop7): invalid journal inode [ 232.795232][T16813] EXT4-fs (loop7): can't get journal size [ 232.818275][T16819] loop1: detected capacity change from 0 to 512 [ 232.831834][T16813] EXT4-fs (loop7): 1 truncate cleaned up [ 232.838052][T16813] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 232.880425][T16819] EXT4-fs (loop1): too many log groups per flexible block group [ 232.888374][T16819] EXT4-fs (loop1): failed to initialize mballoc (-12) [ 232.905345][T16819] EXT4-fs (loop1): mount failed [ 232.909017][T16813] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 233.036336][T16826] lo speed is unknown, defaulting to 1000 [ 233.042147][T16841] loop4: detected capacity change from 0 to 128 [ 233.050382][T16841] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 233.065381][T16841] ext4 filesystem being mounted at /260/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 233.125705][T16841] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 233.155701][T16826] chnl_net:caif_netlink_parms(): no params data found [ 233.195483][T16853] loop7: detected capacity change from 0 to 4096 [ 233.207133][T16853] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 233.223520][T16859] loop4: detected capacity change from 0 to 2048 [ 233.230820][T16826] bridge0: port 1(bridge_slave_0) entered blocking state [ 233.238132][T16826] bridge0: port 1(bridge_slave_0) entered disabled state [ 233.246219][T16826] bridge_slave_0: entered allmulticast mode [ 233.253022][T16826] bridge_slave_0: entered promiscuous mode [ 233.262399][T16826] bridge0: port 2(bridge_slave_1) entered blocking state [ 233.263952][T16859] EXT4-fs (loop4): failed to initialize system zone (-117) [ 233.269559][T16826] bridge0: port 2(bridge_slave_1) entered disabled state [ 233.284276][T16826] bridge_slave_1: entered allmulticast mode [ 233.284830][T16859] EXT4-fs (loop4): mount failed [ 233.290946][T16826] bridge_slave_1: entered promiscuous mode [ 233.297752][T13547] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 233.324070][T16826] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 233.338374][T16826] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 233.358581][T16826] team0: Port device team_slave_0 added [ 233.365548][T16826] team0: Port device team_slave_1 added [ 233.377334][T16870] loop7: detected capacity change from 0 to 512 [ 233.384451][T16870] EXT4-fs (loop7): mounting ext3 file system using the ext4 subsystem [ 233.393232][T16870] EXT4-fs (loop7): invalid journal inode [ 233.393774][T16826] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 233.402432][T16870] EXT4-fs (loop7): can't get journal size [ 233.405931][T16826] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 233.412810][T16870] EXT4-fs (loop7): 1 truncate cleaned up [ 233.437574][T16826] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 233.441105][T16826] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 233.443788][T16870] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 233.453844][T16826] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 233.462429][T16870] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 233.472960][T16826] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 233.543685][T16826] hsr_slave_0: entered promiscuous mode [ 233.552189][T16826] hsr_slave_1: entered promiscuous mode [ 233.558257][T16826] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 233.565954][T16826] Cannot create hsr debugfs directory [ 233.626755][T16826] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 233.687873][T16826] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 233.716425][T16884] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4139'. [ 233.730679][T16826] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 233.749570][T16886] loop1: detected capacity change from 0 to 2048 [ 233.772574][T16826] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 233.772933][T16886] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 233.801433][T16886] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 233.811525][T16892] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4141'. [ 233.816374][T16886] EXT4-fs (loop1): Delayed block allocation failed for inode 16 at logical offset 16 with max blocks 16 with error 28 [ 233.837657][T16886] EXT4-fs (loop1): This should not happen!! Data will be lost [ 233.837657][T16886] [ 233.847322][T16886] EXT4-fs (loop1): Total free blocks count 0 [ 233.853301][T16886] EXT4-fs (loop1): Free/Dirty block details [ 233.859278][T16886] EXT4-fs (loop1): free_blocks=2415919104 [ 233.865097][T16886] EXT4-fs (loop1): dirty_blocks=48 [ 233.870344][T16886] EXT4-fs (loop1): Block reservation details [ 233.872164][ T29] kauditd_printk_skb: 727 callbacks suppressed [ 233.872180][ T29] audit: type=1400 audit(1730104856.331:35934): avc: denied { execute } for pid=16885 comm="syz.1.4140" path="/280/file1/net_prio.prioidx" dev="loop1" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 233.876324][T16886] EXT4-fs (loop1): i_reserved_data_blocks=1 [ 233.883088][T16893] EXT4-fs (loop1): Delayed block allocation failed for inode 16 at logical offset 16 with max blocks 16 with error 28 [ 233.906639][ T29] audit: type=1400 audit(1730104856.340:35935): avc: denied { getopt } for pid=16885 comm="" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 233.959879][T16826] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 233.969927][T16826] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 233.976793][ T29] audit: type=1326 audit(1730104856.434:35936): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16894 comm="syz.7.4143" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd681b9e719 code=0x0 [ 234.004078][T16826] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 234.018942][T16826] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 234.065710][T16826] 8021q: adding VLAN 0 to HW filter on device bond0 [ 234.079691][T16826] 8021q: adding VLAN 0 to HW filter on device team0 [ 234.091815][ T4473] bridge0: port 1(bridge_slave_0) entered blocking state [ 234.098893][ T4473] bridge0: port 1(bridge_slave_0) entered forwarding state [ 234.120718][T16826] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 234.131184][T16826] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 234.144574][ T4473] bridge0: port 2(bridge_slave_1) entered blocking state [ 234.151740][ T4473] bridge0: port 2(bridge_slave_1) entered forwarding state [ 234.214768][T16826] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 234.237321][ T29] audit: type=1326 audit(1730104856.677:35937): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16904 comm="syz.1.4144" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff6a684e719 code=0x7ffc0000 [ 234.253531][T16907] loop9: detected capacity change from 0 to 1024 [ 234.260974][ T29] audit: type=1326 audit(1730104856.677:35938): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16904 comm="syz.1.4144" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff6a684e719 code=0x7ffc0000 [ 234.269979][T16907] EXT4-fs: Ignoring removed oldalloc option [ 234.305668][ T29] audit: type=1326 audit(1730104856.742:35939): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16904 comm="syz.1.4144" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff6a684e719 code=0x7ffc0000 [ 234.314813][T16907] EXT4-fs (loop9): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 234.329299][ T29] audit: type=1326 audit(1730104856.742:35940): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16904 comm="syz.1.4144" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff6a684e719 code=0x7ffc0000 [ 234.329330][ T29] audit: type=1326 audit(1730104856.742:35941): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16904 comm="syz.1.4144" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff6a684e719 code=0x7ffc0000 [ 234.386324][ T29] audit: type=1326 audit(1730104856.742:35942): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16904 comm="syz.1.4144" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ff6a684e719 code=0x7ffc0000 [ 234.398369][T16907] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 234.409921][ T29] audit: type=1326 audit(1730104856.742:35943): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16904 comm="syz.1.4144" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff6a684e719 code=0x7ffc0000 [ 234.447596][T16905] loop1: detected capacity change from 0 to 512 [ 234.456372][T16905] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 234.474492][T16905] EXT4-fs (loop1): invalid journal inode [ 234.475819][T14644] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 234.480716][T16905] EXT4-fs (loop1): can't get journal size [ 234.501812][T16911] loop4: detected capacity change from 0 to 512 [ 234.503417][T16826] veth0_vlan: entered promiscuous mode [ 234.514601][T16905] EXT4-fs (loop1): 1 truncate cleaned up [ 234.517166][T16826] veth1_vlan: entered promiscuous mode [ 234.528474][T16911] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 234.534977][T16826] veth0_macvtap: entered promiscuous mode [ 234.543286][T16905] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 234.544941][T16826] veth1_macvtap: entered promiscuous mode [ 234.563067][T16911] EXT4-fs (loop4): invalid journal inode [ 234.568740][T16911] EXT4-fs (loop4): can't get journal size [ 234.578870][T16826] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 234.585462][T16905] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 234.589360][T16826] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 234.608144][T16826] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 234.618743][T16826] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 234.624865][T16911] EXT4-fs (loop4): 1 truncate cleaned up [ 234.628577][T16826] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 234.628595][T16826] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 234.628610][T16826] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 234.640379][T16911] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 234.644713][T16826] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 234.684763][T16911] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 234.686757][T16826] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 234.706193][T16826] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 234.717426][T16826] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 234.728382][T16826] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 234.738904][T16826] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 234.748817][T16826] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 234.759321][T16826] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 234.769180][T16826] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 234.779675][T16826] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 234.789529][T16826] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 234.800036][T16826] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 234.809880][T16826] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 234.820332][T16826] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 234.826629][T16934] loop4: detected capacity change from 0 to 128 [ 234.831306][T16826] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 234.847068][T16826] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 234.856083][T16826] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 234.864823][T16826] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 234.873557][T16826] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 234.894268][T16934] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 234.908187][T16929] netlink: 56 bytes leftover after parsing attributes in process `syz.9.4149'. [ 234.922355][T16934] ext4 filesystem being mounted at /265/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 235.075716][T16934] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 235.109456][T16952] loop0: detected capacity change from 0 to 512 [ 235.172331][T16956] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 235.198162][T16952] EXT4-fs (loop0): too many log groups per flexible block group [ 235.205911][T16952] EXT4-fs (loop0): failed to initialize mballoc (-12) [ 235.215707][T16952] EXT4-fs (loop0): mount failed [ 235.282688][T16969] loop0: detected capacity change from 0 to 512 [ 235.307024][T16971] loop7: detected capacity change from 0 to 512 [ 235.314185][T16971] EXT4-fs (loop7): mounting ext3 file system using the ext4 subsystem [ 235.324249][T16971] EXT4-fs (loop7): invalid journal inode [ 235.324756][T16969] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 235.329905][T16971] EXT4-fs (loop7): can't get journal size [ 235.350800][T16969] ext4 filesystem being mounted at /1/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 235.369575][T16971] EXT4-fs (loop7): 1 truncate cleaned up [ 235.375594][T16971] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 235.390166][T16971] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 235.436439][T16978] loop7: detected capacity change from 0 to 512 [ 235.454483][T16978] EXT4-fs (loop7): too many log groups per flexible block group [ 235.462382][T16978] EXT4-fs (loop7): failed to initialize mballoc (-12) [ 235.472155][T16978] EXT4-fs (loop7): mount failed [ 235.490432][T16826] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 235.516782][T16984] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 235.526612][T16984] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 235.563778][T16987] loop0: detected capacity change from 0 to 128 [ 235.572134][T16987] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 235.587569][T16987] ext4 filesystem being mounted at /2/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 235.618135][T16992] loop9: detected capacity change from 0 to 512 [ 235.627616][T16992] EXT4-fs (loop9): mounting ext3 file system using the ext4 subsystem [ 235.636478][T16992] EXT4-fs (loop9): invalid journal inode [ 235.642312][T16992] EXT4-fs (loop9): can't get journal size [ 235.648797][T16992] EXT4-fs (loop9): 1 truncate cleaned up [ 235.648925][T16987] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 235.656482][T16992] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 235.677430][T16992] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 235.686739][T16996] loop0: detected capacity change from 0 to 512 [ 235.693433][T16996] EXT4-fs: Ignoring removed oldalloc option [ 235.701554][T16996] EXT4-fs error (device loop0): ext4_xattr_inode_iget:436: comm syz.0.4167: Parent and EA inode have the same ino 15 [ 235.716762][T16996] EXT4-fs error (device loop0): ext4_xattr_inode_iget:436: comm syz.0.4167: Parent and EA inode have the same ino 15 [ 235.729779][T16996] EXT4-fs (loop0): 1 orphan inode deleted [ 235.735909][T16996] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 235.754314][T16996] siw: device registration error -23 [ 235.770175][T16826] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 235.790755][T17004] loop9: detected capacity change from 0 to 512 [ 235.799067][T17006] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 235.811428][T17004] EXT4-fs error (device loop9): ext4_xattr_ibody_find:2240: inode #15: comm syz.9.4169: corrupted in-inode xattr: invalid ea_ino [ 235.825053][T17004] EXT4-fs error (device loop9): ext4_orphan_get:1393: comm syz.9.4169: couldn't read orphan inode 15 (err -117) [ 235.838285][T17004] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 235.920147][T14644] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 235.966140][T17013] loop0: detected capacity change from 0 to 512 [ 235.973270][T17013] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 235.982091][T17013] EXT4-fs (loop0): invalid journal inode [ 235.987814][T17013] EXT4-fs (loop0): can't get journal size [ 235.994257][T17013] EXT4-fs (loop0): 1 truncate cleaned up [ 236.000727][T17013] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 236.013957][T17013] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 236.030363][T17018] loop4: detected capacity change from 0 to 512 [ 236.064699][T17018] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 236.081513][T17026] loop0: detected capacity change from 0 to 512 [ 236.087031][T17018] ext4 filesystem being mounted at /267/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 236.112048][T17030] loop7: detected capacity change from 0 to 512 [ 236.118351][T17028] loop9: detected capacity change from 0 to 512 [ 236.121655][T17028] EXT4-fs (loop9): mounting ext3 file system using the ext4 subsystem [ 236.136015][T17028] EXT4-fs (loop9): invalid journal inode [ 236.141696][T17028] EXT4-fs (loop9): can't get journal size [ 236.159197][T17026] EXT4-fs (loop0): too many log groups per flexible block group [ 236.159452][T17028] EXT4-fs (loop9): 1 truncate cleaned up [ 236.167005][T17026] EXT4-fs (loop0): failed to initialize mballoc (-12) [ 236.172963][T17028] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 236.181643][T17030] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 236.192725][T17026] EXT4-fs (loop0): mount failed [ 236.206613][T17030] ext4 filesystem being mounted at /258/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 236.216401][T17028] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 236.254320][T12958] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 236.343308][T13547] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 236.355727][T17055] loop1: detected capacity change from 0 to 512 [ 236.365508][T17055] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 236.379230][T17055] EXT4-fs (loop1): invalid journal inode [ 236.387312][T17060] loop4: detected capacity change from 0 to 128 [ 236.391863][T17061] net_ratelimit: 595 callbacks suppressed [ 236.391881][T17061] blackhole_netdev_xmit(): Dropping skb. [ 236.394635][T17055] EXT4-fs (loop1): can't get journal size [ 236.399447][T17061] blackhole_netdev_xmit(): Dropping skb. [ 236.416539][T17061] blackhole_netdev_xmit(): Dropping skb. [ 236.422205][T17061] blackhole_netdev_xmit(): Dropping skb. [ 236.427947][T17061] blackhole_netdev_xmit(): Dropping skb. [ 236.433731][T17061] blackhole_netdev_xmit(): Dropping skb. [ 236.439491][T17061] blackhole_netdev_xmit(): Dropping skb. [ 236.445291][T17061] blackhole_netdev_xmit(): Dropping skb. [ 236.450984][T17061] blackhole_netdev_xmit(): Dropping skb. [ 236.456765][T17061] blackhole_netdev_xmit(): Dropping skb. [ 236.490136][T17055] EXT4-fs (loop1): 1 truncate cleaned up [ 236.496094][T17055] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 236.512594][T17060] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 236.525963][T17067] netlink: 56 bytes leftover after parsing attributes in process `syz.7.4188'. [ 236.535913][T17060] ext4 filesystem being mounted at /270/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 236.572461][T17055] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 236.588262][T17060] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 236.707981][T17077] loop1: detected capacity change from 0 to 512 [ 236.714980][T17077] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 236.739801][T17076] netlink: 56 bytes leftover after parsing attributes in process `syz.4.4190'. [ 236.765666][T17077] EXT4-fs (loop1): invalid journal inode [ 236.777540][T17077] EXT4-fs (loop1): can't get journal size [ 236.793929][T17077] EXT4-fs (loop1): 1 truncate cleaned up [ 236.812059][T17077] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 236.847686][T17077] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 236.917422][T17084] loop1: detected capacity change from 0 to 128 [ 236.946400][T17084] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 236.962851][T17084] ext4 filesystem being mounted at /290/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 237.033559][T17084] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 237.246093][T17091] usb usb8: usbfs: process 17091 (syz.9.4195) did not claim interface 0 before use [ 237.302326][T17097] loop9: detected capacity change from 0 to 512 [ 237.344325][T17097] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 237.361562][T17097] ext4 filesystem being mounted at /155/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 237.459614][T14644] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 237.487181][T17104] loop7: detected capacity change from 0 to 512 [ 237.496570][T17104] EXT4-fs (loop7): mounting ext3 file system using the ext4 subsystem [ 237.506227][T17104] EXT4-fs (loop7): invalid journal inode [ 237.511894][T17104] EXT4-fs (loop7): can't get journal size [ 237.518845][T17104] EXT4-fs (loop7): 1 truncate cleaned up [ 237.524809][T17104] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 237.556700][T17107] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 237.564777][T17104] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 237.610295][T17112] netlink: 40 bytes leftover after parsing attributes in process `syz.7.4200'. [ 237.650392][T17116] loop9: detected capacity change from 0 to 512 [ 237.667101][T17116] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 237.682567][T17120] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4204'. [ 237.691692][T17116] ext4 filesystem being mounted at /157/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 237.741305][T17123] loop7: detected capacity change from 0 to 512 [ 237.749680][T17123] EXT4-fs (loop7): mounting ext3 file system using the ext4 subsystem [ 237.758542][T17123] EXT4-fs (loop7): invalid journal inode [ 237.764331][T17123] EXT4-fs (loop7): can't get journal size [ 237.785133][T14644] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 237.797575][T17123] EXT4-fs (loop7): 1 truncate cleaned up [ 237.805466][T17123] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 237.808789][T17127] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4207'. [ 237.819017][T17123] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 237.858533][T17129] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 237.866762][T17131] loop4: detected capacity change from 0 to 128 [ 237.884227][T17131] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 237.897332][T17131] ext4 filesystem being mounted at /274/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 237.911930][T17138] netlink: 'syz.7.4211': attribute type 39 has an invalid length. [ 237.943037][T17131] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 237.972874][T17143] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4213'. [ 237.982716][T17140] loop9: detected capacity change from 0 to 512 [ 237.992757][T17140] EXT4-fs (loop9): mounting ext3 file system using the ext4 subsystem [ 238.003711][T17140] EXT4-fs (loop9): invalid journal inode [ 238.009817][T17140] EXT4-fs (loop9): can't get journal size [ 238.016438][T17140] EXT4-fs (loop9): 1 truncate cleaned up [ 238.022492][T17140] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 238.035579][T17140] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 238.074233][T17156] netlink: 24 bytes leftover after parsing attributes in process `syz.7.4219'. [ 238.084928][T17152] SELinux: failed to load policy [ 238.091900][T17152] loop1: detected capacity change from 0 to 128 [ 238.114228][T17158] loop9: detected capacity change from 0 to 512 [ 238.114310][T17152] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 238.136278][T17152] ext4 filesystem being mounted at /293/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 238.138992][T17158] EXT4-fs (loop9): mounting ext3 file system using the ext4 subsystem [ 238.186169][T17158] EXT4-fs (loop9): invalid journal inode [ 238.191663][T17165] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 238.192196][T17158] EXT4-fs (loop9): can't get journal size [ 238.207288][T17158] EXT4-fs (loop9): 1 truncate cleaned up [ 238.229548][T17158] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 238.243518][T17158] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 238.253113][T17168] lo speed is unknown, defaulting to 1000 [ 238.321859][T17172] netlink: 'syz.4.4225': attribute type 39 has an invalid length. [ 238.333182][T17176] loop7: detected capacity change from 0 to 128 [ 238.388815][T17181] netlink: 40 bytes leftover after parsing attributes in process `syz.9.4227'. [ 238.456500][T17187] loop9: detected capacity change from 0 to 512 [ 238.464035][T17187] EXT4-fs (loop9): mounting ext3 file system using the ext4 subsystem [ 238.472093][T17190] loop1: detected capacity change from 0 to 512 [ 238.474511][T17187] EXT4-fs (loop9): invalid journal inode [ 238.484171][T17187] EXT4-fs (loop9): can't get journal size [ 238.506469][T17190] EXT4-fs (loop1): too many log groups per flexible block group [ 238.514345][T17190] EXT4-fs (loop1): failed to initialize mballoc (-12) [ 238.523109][T17187] EXT4-fs (loop9): 1 truncate cleaned up [ 238.524325][T17190] EXT4-fs (loop1): mount failed [ 238.550412][T17196] vhci_hcd: invalid port number 97 [ 238.555728][T17196] vhci_hcd: default hub control req: d364 v6665 i0061 l29804 [ 238.573474][T17198] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 238.590804][T17200] loop0: detected capacity change from 0 to 128 [ 238.603478][T17200] ext4 filesystem being mounted at /10/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 238.666254][T17203] loop0: detected capacity change from 0 to 128 [ 238.676465][T17203] ext4 filesystem being mounted at /11/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 238.725550][T17206] loop9: detected capacity change from 0 to 512 [ 238.743105][T17208] pim6reg1: entered promiscuous mode [ 238.748466][T17208] pim6reg1: entered allmulticast mode [ 238.758698][T17208] loop0: detected capacity change from 0 to 128 [ 238.765264][T17208] vfat: Unknown parameter '/dev/net/tun' [ 238.766566][T17206] ext4 filesystem being mounted at /166/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 238.856353][T17213] netlink: 'syz.7.4239': attribute type 39 has an invalid length. [ 238.879973][T17215] loop7: detected capacity change from 0 to 512 [ 238.905863][T17215] ext4 filesystem being mounted at /276/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 238.935285][T17222] loop0: detected capacity change from 0 to 512 [ 238.947860][T17222] ext4 filesystem being mounted at /14/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 239.009019][T17228] loop7: detected capacity change from 0 to 512 [ 239.016437][T17228] EXT4-fs (loop7): mounting ext3 file system using the ext4 subsystem [ 239.026241][T17228] EXT4-fs (loop7): invalid journal inode [ 239.032205][T17228] EXT4-fs (loop7): can't get journal size [ 239.039530][T17211] lo speed is unknown, defaulting to 1000 [ 239.046000][T17228] EXT4-fs (loop7): 1 truncate cleaned up [ 239.101502][T17236] FAULT_INJECTION: forcing a failure. [ 239.101502][T17236] name failslab, interval 1, probability 0, space 0, times 0 [ 239.114327][T17236] CPU: 0 UID: 0 PID: 17236 Comm: syz.0.4247 Not tainted 6.12.0-rc4-syzkaller-00281-g284a2f899676 #0 [ 239.125218][T17236] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 239.135309][T17236] Call Trace: [ 239.138595][T17236] [ 239.141529][T17236] dump_stack_lvl+0xf2/0x150 [ 239.146192][T17236] dump_stack+0x15/0x20 [ 239.150413][T17236] should_fail_ex+0x223/0x230 [ 239.155163][T17236] ? audit_log_d_path+0x96/0x250 [ 239.160112][T17236] should_failslab+0x8f/0xb0 [ 239.164724][T17236] __kmalloc_cache_noprof+0x4b/0x2a0 [ 239.170052][T17236] audit_log_d_path+0x96/0x250 [ 239.174891][T17236] ? get_file_rcu+0xeb/0x100 [ 239.179518][T17236] ? __rcu_read_unlock+0x4e/0x70 [ 239.184546][T17236] audit_log_d_path_exe+0x42/0x70 [ 239.189581][T17236] audit_log_task+0x155/0x180 [ 239.194353][T17236] audit_seccomp+0x68/0x130 [ 239.198889][T17236] __seccomp_filter+0x6fa/0x1180 [ 239.203903][T17236] ? __fget_files+0x1d4/0x210 [ 239.208599][T17236] ? fdget+0x105/0x110 [ 239.212666][T17236] __secure_computing+0x9f/0x1c0 [ 239.217683][T17236] syscall_trace_enter+0xd1/0x1f0 [ 239.222723][T17236] ? fpregs_assert_state_consistent+0x83/0xa0 [ 239.228888][T17236] do_syscall_64+0xaa/0x1c0 [ 239.233404][T17236] ? clear_bhb_loop+0x55/0xb0 [ 239.238086][T17236] ? clear_bhb_loop+0x55/0xb0 [ 239.242763][T17236] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 239.248751][T17236] RIP: 0033:0x7f7ccbe6d15c [ 239.253180][T17236] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8e 02 00 48 [ 239.272880][T17236] RSP: 002b:00007f7ccaae7030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 239.281300][T17236] RAX: ffffffffffffffda RBX: 00007f7ccc025f80 RCX: 00007f7ccbe6d15c [ 239.289271][T17236] RDX: 000000000000000f RSI: 00007f7ccaae70a0 RDI: 0000000000000006 [ 239.297250][T17236] RBP: 00007f7ccaae7090 R08: 0000000000000000 R09: 0000000000000000 [ 239.305294][T17236] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 239.313272][T17236] R13: 0000000000000000 R14: 00007f7ccc025f80 R15: 00007ffc9ec78048 [ 239.321263][T17236] [ 239.324839][ T29] kauditd_printk_skb: 1574 callbacks suppressed [ 239.324854][ T29] audit: type=1326 audit(1730104861.232:37518): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17235 comm="syz.0.4247" exe="" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7f7ccbe6d15c code=0x7ffc0000 [ 239.354697][ T29] audit: type=1326 audit(1730104861.466:37519): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17229 comm="syz.7.4244" exe="/root/syz-executor" sig=0 arch=c000003e syscall=60 compat=0 ip=0x7fd681b9e719 code=0x7ffc0000 [ 239.386196][ T29] audit: type=1326 audit(1730104861.466:37520): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17235 comm="syz.0.4247" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f7ccbe6d1ff code=0x7ffc0000 [ 239.409714][ T29] audit: type=1326 audit(1730104861.466:37521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17235 comm="syz.0.4247" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f7ccbe6d3aa code=0x7ffc0000 [ 239.433166][ T29] audit: type=1326 audit(1730104861.466:37522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17235 comm="syz.0.4247" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ccbe6e719 code=0x7ffc0000 [ 239.456835][ T29] audit: type=1326 audit(1730104861.466:37523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17235 comm="syz.0.4247" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ccbe6e719 code=0x7ffc0000 [ 239.490537][T17237] netlink: 56 bytes leftover after parsing attributes in process `syz.7.4246'. [ 239.508800][T17242] loop1: detected capacity change from 0 to 128 [ 239.529945][T17244] loop4: detected capacity change from 0 to 512 [ 239.536582][T17242] ext4 filesystem being mounted at /296/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 239.588210][T17244] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 239.597126][ T29] audit: type=1326 audit(1730104861.625:37524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17243 comm="syz.4.4250" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f7cf4e719 code=0x7ffc0000 [ 239.620830][ T29] audit: type=1326 audit(1730104861.625:37525): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17243 comm="syz.4.4250" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f7cf4e719 code=0x7ffc0000 [ 239.644780][ T29] audit: type=1326 audit(1730104861.625:37526): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17243 comm="syz.4.4250" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9f7cf4e719 code=0x7ffc0000 [ 239.668439][ T29] audit: type=1326 audit(1730104861.625:37527): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17243 comm="syz.4.4250" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f7cf4e719 code=0x7ffc0000 [ 239.702063][T17244] EXT4-fs (loop4): invalid journal inode [ 239.710919][T17244] EXT4-fs (loop4): can't get journal size [ 239.766776][T17255] loop0: detected capacity change from 0 to 512 [ 239.774960][T17244] EXT4-fs (loop4): 1 truncate cleaned up [ 239.814094][T17259] loop4: detected capacity change from 0 to 512 [ 239.820877][T17257] loop1: detected capacity change from 0 to 512 [ 239.833613][T17259] EXT4-fs: Ignoring removed oldalloc option [ 239.841693][T17255] ext4 filesystem being mounted at /18/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 239.863634][T17259] EXT4-fs error (device loop4): ext4_xattr_inode_iget:436: comm syz.4.4255: Parent and EA inode have the same ino 15 [ 239.876517][T17259] EXT4-fs error (device loop4): ext4_xattr_inode_iget:436: comm syz.4.4255: Parent and EA inode have the same ino 15 [ 239.890147][T17257] EXT4-fs (loop1): too many log groups per flexible block group [ 239.898051][T17257] EXT4-fs (loop1): failed to initialize mballoc (-12) [ 239.906740][T17259] EXT4-fs (loop4): 1 orphan inode deleted [ 239.914001][T17257] EXT4-fs (loop1): mount failed [ 239.923449][T17260] netlink: 'syz.9.4252': attribute type 10 has an invalid length. [ 239.943373][T17260] team0: Port device netdevsim1 added [ 239.975258][T17268] loop0: detected capacity change from 0 to 512 [ 239.987474][T17268] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 239.997669][T17268] EXT4-fs (loop0): invalid journal inode [ 240.003446][T17268] EXT4-fs (loop0): can't get journal size [ 240.012707][T17268] EXT4-fs (loop0): 1 truncate cleaned up [ 240.019354][T17259] siw: device registration error -23 [ 240.072597][T17282] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4262'. [ 240.091873][T17284] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 240.102443][T17286] loop4: detected capacity change from 0 to 128 [ 240.113397][T17286] ext4 filesystem being mounted at /286/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 240.158439][T17290] loop1: detected capacity change from 0 to 128 [ 240.168029][T17290] ext4 filesystem being mounted at /301/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 240.226408][T17295] loop0: detected capacity change from 0 to 1024 [ 240.233753][T17295] EXT4-fs: Ignoring removed oldalloc option [ 240.240103][T17295] EXT4-fs (loop0): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 240.402667][T17318] tun0: tun_chr_ioctl cmd 1074025675 [ 240.408103][T17318] tun0: persist enabled [ 240.415422][T17318] tun0: tun_chr_ioctl cmd 1074025675 [ 240.420780][T17318] tun0: persist disabled [ 240.481802][T17324] bridge_slave_1: left allmulticast mode [ 240.488075][T17324] bridge_slave_1: left promiscuous mode [ 240.493837][T17324] bridge0: port 2(bridge_slave_1) entered disabled state [ 240.503983][T17324] bridge_slave_0: left allmulticast mode [ 240.509735][T17324] bridge_slave_0: left promiscuous mode [ 240.515428][T17324] bridge0: port 1(bridge_slave_0) entered disabled state [ 240.534144][T17324] bond0: (slave bridge0): Releasing backup interface [ 240.535776][T17326] loop0: detected capacity change from 0 to 512 [ 240.585028][T17326] ext4 filesystem being mounted at /28/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 240.623667][T17332] loop0: detected capacity change from 0 to 512 [ 240.662597][T17332] ext4 filesystem being mounted at /29/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 240.729829][T17338] loop9: detected capacity change from 0 to 1024 [ 240.739259][T17338] EXT4-fs: Ignoring removed oldalloc option [ 240.747401][T17338] EXT4-fs (loop9): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 240.797134][T17345] FAULT_INJECTION: forcing a failure. [ 240.797134][T17345] name failslab, interval 1, probability 0, space 0, times 0 [ 240.809855][T17345] CPU: 1 UID: 0 PID: 17345 Comm: syz.9.4282 Not tainted 6.12.0-rc4-syzkaller-00281-g284a2f899676 #0 [ 240.820664][T17345] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 240.830786][T17345] Call Trace: [ 240.834086][T17345] [ 240.837076][T17345] dump_stack_lvl+0xf2/0x150 [ 240.841717][T17345] dump_stack+0x15/0x20 [ 240.845936][T17345] should_fail_ex+0x223/0x230 [ 240.850635][T17345] ? getname_flags+0x81/0x3b0 [ 240.855337][T17345] should_failslab+0x8f/0xb0 [ 240.859947][T17345] kmem_cache_alloc_noprof+0x4c/0x290 [ 240.865377][T17345] getname_flags+0x81/0x3b0 [ 240.869963][T17345] getname+0x17/0x20 [ 240.873933][T17345] do_sys_openat2+0x67/0x120 [ 240.878569][T17345] __x64_sys_openat+0xf3/0x120 [ 240.883403][T17345] x64_sys_call+0x1025/0x2d60 [ 240.888106][T17345] do_syscall_64+0xc9/0x1c0 [ 240.892623][T17345] ? clear_bhb_loop+0x55/0xb0 [ 240.897321][T17345] ? clear_bhb_loop+0x55/0xb0 [ 240.902028][T17345] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 240.907956][T17345] RIP: 0033:0x7ff64d65e719 [ 240.912399][T17345] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 240.932026][T17345] RSP: 002b:00007ff64c2d7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 240.940457][T17345] RAX: ffffffffffffffda RBX: 00007ff64d815f80 RCX: 00007ff64d65e719 [ 240.948475][T17345] RDX: 0000000000200002 RSI: 0000000000000000 RDI: ffffffffffffff9c [ 240.956458][T17345] RBP: 00007ff64c2d7090 R08: 0000000000000000 R09: 0000000000000000 [ 240.964538][T17345] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 240.972524][T17345] R13: 0000000000000001 R14: 00007ff64d815f80 R15: 00007ffd263cd2a8 [ 240.980578][T17345] [ 241.063776][T17356] loop9: detected capacity change from 0 to 512 [ 241.097793][T17356] ext4 filesystem being mounted at /172/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 241.165131][T17362] loop1: detected capacity change from 0 to 512 [ 241.181118][T17362] ext4 filesystem being mounted at /303/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 241.203469][T17367] loop7: detected capacity change from 0 to 512 [ 241.226594][T17367] EXT4-fs (loop7): too many log groups per flexible block group [ 241.234479][T17367] EXT4-fs (loop7): failed to initialize mballoc (-12) [ 241.237807][T17373] loop1: detected capacity change from 0 to 128 [ 241.242304][T17367] EXT4-fs (loop7): mount failed [ 241.250250][T17373] ext4 filesystem being mounted at /305/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 241.347541][T17384] loop1: detected capacity change from 0 to 1024 [ 241.364527][T17384] EXT4-fs: Ignoring removed oldalloc option [ 241.372045][T17384] EXT4-fs (loop1): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 241.394794][T17387] loop9: detected capacity change from 0 to 512 [ 241.417284][T17387] ext4 filesystem being mounted at /173/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 241.446142][T17379] loop7: detected capacity change from 0 to 512 [ 241.452895][T17379] EXT4-fs: Ignoring removed orlov option [ 241.459119][T17379] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 241.471646][T17379] EXT4-fs (loop7): 1 orphan inode deleted [ 241.477443][T17379] EXT4-fs (loop7): 1 truncate cleaned up [ 241.488422][T17379] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 241.602563][T17408] loop4: detected capacity change from 0 to 512 [ 241.629986][T17408] ext4 filesystem being mounted at /292/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 241.653066][T17415] loop7: detected capacity change from 0 to 128 [ 241.673294][T17415] ext4 filesystem being mounted at /288/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 241.788276][T17426] loop4: detected capacity change from 0 to 1024 [ 241.799402][T17426] EXT4-fs: Ignoring removed oldalloc option [ 241.806638][T17432] netlink: 'syz.7.4308': attribute type 39 has an invalid length. [ 241.806682][T17426] EXT4-fs (loop4): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 241.910632][T17454] __nla_validate_parse: 5 callbacks suppressed [ 241.910649][T17454] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4316'. [ 241.951089][T17456] syz.0.4317[17456] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 241.951153][T17456] syz.0.4317[17456] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 241.954741][T17457] loop4: detected capacity change from 0 to 2048 [ 241.972489][T17456] syz.0.4317[17456] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 242.028845][T17456] serio: Serial port ptm0 [ 242.054918][T17465] netlink: 56 bytes leftover after parsing attributes in process `syz.7.4319'. [ 242.122369][T17473] lo speed is unknown, defaulting to 1000 [ 242.162928][T17479] FAULT_INJECTION: forcing a failure. [ 242.162928][T17479] name failslab, interval 1, probability 0, space 0, times 0 [ 242.175712][T17479] CPU: 0 UID: 0 PID: 17479 Comm: syz.1.4321 Not tainted 6.12.0-rc4-syzkaller-00281-g284a2f899676 #0 [ 242.186542][T17479] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 242.196695][T17479] Call Trace: [ 242.200015][T17479] [ 242.202948][T17479] dump_stack_lvl+0xf2/0x150 [ 242.207568][T17479] dump_stack+0x15/0x20 [ 242.211741][T17479] should_fail_ex+0x223/0x230 [ 242.216468][T17479] ? skb_clone+0x154/0x1f0 [ 242.221034][T17479] should_failslab+0x8f/0xb0 [ 242.225656][T17479] kmem_cache_alloc_noprof+0x4c/0x290 [ 242.231106][T17479] skb_clone+0x154/0x1f0 [ 242.235434][T17479] __netlink_deliver_tap+0x2bd/0x4c0 [ 242.240735][T17479] netlink_unicast+0x64a/0x670 [ 242.245536][T17479] netlink_sendmsg+0x5cc/0x6e0 [ 242.250327][T17479] ? __pfx_netlink_sendmsg+0x10/0x10 [ 242.255617][T17479] __sock_sendmsg+0x140/0x180 [ 242.260311][T17479] ____sys_sendmsg+0x312/0x410 [ 242.265212][T17479] __sys_sendmsg+0x1d9/0x270 [ 242.269847][T17479] __x64_sys_sendmsg+0x46/0x50 [ 242.274626][T17479] x64_sys_call+0x2689/0x2d60 [ 242.279400][T17479] do_syscall_64+0xc9/0x1c0 [ 242.283918][T17479] ? clear_bhb_loop+0x55/0xb0 [ 242.288672][T17479] ? clear_bhb_loop+0x55/0xb0 [ 242.293366][T17479] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 242.299280][T17479] RIP: 0033:0x7ff6a684e719 [ 242.303710][T17479] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 242.323337][T17479] RSP: 002b:00007ff6a54a6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 242.331830][T17479] RAX: ffffffffffffffda RBX: 00007ff6a6a06058 RCX: 00007ff6a684e719 [ 242.339889][T17479] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 0000000000000003 [ 242.347923][T17479] RBP: 00007ff6a54a6090 R08: 0000000000000000 R09: 0000000000000000 [ 242.355902][T17479] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 242.363965][T17479] R13: 0000000000000000 R14: 00007ff6a6a06058 R15: 00007fff3c5c0708 [ 242.373554][T17479] [ 242.393175][T17477] x_tables: eb_tables: snat.0 target: invalid size 16 (kernel) != (user) 0 [ 242.524721][T17498] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4329'. [ 242.663918][T17504] loop0: detected capacity change from 0 to 128 [ 242.699114][T17504] ext4 filesystem being mounted at /41/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 242.732244][T17505] FAULT_INJECTION: forcing a failure. [ 242.732244][T17505] name failslab, interval 1, probability 0, space 0, times 0 [ 242.744964][T17505] CPU: 1 UID: 0 PID: 17505 Comm: syz.1.4332 Not tainted 6.12.0-rc4-syzkaller-00281-g284a2f899676 #0 [ 242.755827][T17505] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 242.765944][T17505] Call Trace: [ 242.769229][T17505] [ 242.772164][T17505] dump_stack_lvl+0xf2/0x150 [ 242.776816][T17505] dump_stack+0x15/0x20 [ 242.781060][T17505] should_fail_ex+0x223/0x230 [ 242.785816][T17505] ? kvasprintf_const+0x5d/0x100 [ 242.790848][T17505] should_failslab+0x8f/0xb0 [ 242.795452][T17505] __kmalloc_node_track_caller_noprof+0xa6/0x380 [ 242.801806][T17505] kvasprintf+0x8c/0x110 [ 242.806174][T17505] ? __traceiter_kfree+0x2b/0x50 [ 242.811138][T17505] ? ida_alloc_range+0x673/0x6f0 [ 242.816119][T17505] kvasprintf_const+0x5d/0x100 [ 242.820928][T17505] kobject_set_name_vargs+0x44/0xe0 [ 242.826144][T17505] dev_set_name+0x84/0xb0 [ 242.830558][T17505] ? nfc_allocate_device+0x110/0x2d0 [ 242.835882][T17505] nfc_allocate_device+0x12e/0x2d0 [ 242.841076][T17505] nci_allocate_device+0x136/0x200 [ 242.846270][T17505] virtual_ncidev_open+0x53/0x140 [ 242.851357][T17505] ? __pfx_virtual_ncidev_open+0x10/0x10 [ 242.857006][T17505] misc_open+0x1d5/0x200 [ 242.861262][T17505] chrdev_open+0x2f9/0x370 [ 242.865696][T17505] ? __pfx_chrdev_open+0x10/0x10 [ 242.870726][T17505] do_dentry_open+0x621/0xa20 [ 242.875437][T17505] vfs_open+0x38/0x1f0 [ 242.879518][T17505] path_openat+0x1ac2/0x1fa0 [ 242.884124][T17505] ? _parse_integer_limit+0x167/0x180 [ 242.889523][T17505] ? kstrtouint_from_user+0xb0/0xe0 [ 242.894799][T17505] do_filp_open+0xf7/0x200 [ 242.899304][T17505] do_sys_openat2+0xab/0x120 [ 242.903971][T17505] __x64_sys_openat+0xf3/0x120 [ 242.908800][T17505] x64_sys_call+0x1025/0x2d60 [ 242.913534][T17505] do_syscall_64+0xc9/0x1c0 [ 242.918110][T17505] ? clear_bhb_loop+0x55/0xb0 [ 242.922798][T17505] ? clear_bhb_loop+0x55/0xb0 [ 242.927531][T17505] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 242.933447][T17505] RIP: 0033:0x7ff6a684e719 [ 242.937874][T17505] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 242.957494][T17505] RSP: 002b:00007ff6a54a6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 242.965973][T17505] RAX: ffffffffffffffda RBX: 00007ff6a6a06058 RCX: 00007ff6a684e719 [ 242.974001][T17505] RDX: 0000000000000002 RSI: 0000000020000200 RDI: ffffffffffffff9c [ 242.982053][T17505] RBP: 00007ff6a54a6090 R08: 0000000000000000 R09: 0000000000000000 [ 242.990099][T17505] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 242.998097][T17505] R13: 0000000000000000 R14: 00007ff6a6a06058 R15: 00007fff3c5c0708 [ 243.006076][T17505] [ 243.119869][T17512] loop9: detected capacity change from 0 to 512 [ 243.141128][T17514] 9pnet_fd: Insufficient options for proto=fd [ 243.154659][T17512] ext4 filesystem being mounted at /175/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 243.204854][T17523] loop7: detected capacity change from 0 to 512 [ 243.222875][T17523] EXT4-fs (loop7): mounting ext3 file system using the ext4 subsystem [ 243.235813][T17523] EXT4-fs (loop7): invalid journal inode [ 243.245611][T17523] EXT4-fs (loop7): can't get journal size [ 243.250919][T17516] loop0: detected capacity change from 0 to 512 [ 243.252317][T17523] EXT4-fs (loop7): 1 truncate cleaned up [ 243.258124][T17516] EXT4-fs: Ignoring removed orlov option [ 243.270877][T17516] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 243.291859][T17516] EXT4-fs (loop0): 1 orphan inode deleted [ 243.294923][T17535] netlink: 40 bytes leftover after parsing attributes in process `syz.7.4342'. [ 243.297679][T17516] EXT4-fs (loop0): 1 truncate cleaned up [ 243.330916][T17516] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 243.408344][T17542] netlink: 56 bytes leftover after parsing attributes in process `syz.4.4345'. [ 243.580463][T17555] loop0: detected capacity change from 0 to 512 [ 243.587327][T17558] syz.1.4351[17558] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 243.587535][T17558] syz.1.4351[17558] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 243.599769][T17558] syz.1.4351[17558] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 243.621423][T17555] EXT4-fs (loop0): too many log groups per flexible block group [ 243.640682][T17555] EXT4-fs (loop0): failed to initialize mballoc (-12) [ 243.649460][T17555] EXT4-fs (loop0): mount failed [ 243.661161][T17558] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 243.831244][T17558] usb usb7: usbfs: interface 0 claimed by hub while 'syz.1.4351' sets config #15 [ 243.913178][T17569] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4354'. [ 243.942689][T17573] netlink: 'syz.0.4356': attribute type 39 has an invalid length. [ 243.955053][T17573] veth1_macvtap: left promiscuous mode [ 243.977175][T17575] loop1: detected capacity change from 0 to 512 [ 243.994573][T17577] loop9: detected capacity change from 0 to 512 [ 244.021228][T17575] EXT4-fs (loop1): too many log groups per flexible block group [ 244.029006][T17575] EXT4-fs (loop1): failed to initialize mballoc (-12) [ 244.036020][T17575] EXT4-fs (loop1): mount failed [ 244.044402][T17577] EXT4-fs (loop9): too many log groups per flexible block group [ 244.045752][T17583] loop0: detected capacity change from 0 to 128 [ 244.052154][T17577] EXT4-fs (loop9): failed to initialize mballoc (-12) [ 244.081610][T17577] EXT4-fs (loop9): mount failed [ 244.085927][T17583] ext4 filesystem being mounted at /49/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 244.147747][T17590] loop0: detected capacity change from 0 to 1024 [ 244.166376][T17590] EXT4-fs: Ignoring removed oldalloc option [ 244.172865][T17590] EXT4-fs (loop0): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 244.283216][T17603] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4366'. [ 244.320139][T17607] loop4: detected capacity change from 0 to 512 [ 244.339878][T17610] loop7: detected capacity change from 0 to 512 [ 244.359987][T17607] ext4 filesystem being mounted at /303/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 244.380527][T17610] ext4 filesystem being mounted at /299/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 244.414984][T17625] loop0: detected capacity change from 0 to 512 [ 244.441583][T17630] loop7: detected capacity change from 0 to 512 [ 244.448595][T17630] EXT4-fs: Ignoring removed oldalloc option [ 244.460408][T17630] EXT4-fs error (device loop7): ext4_xattr_inode_iget:436: comm syz.7.4375: Parent and EA inode have the same ino 15 [ 244.472941][T17625] EXT4-fs (loop0): too many log groups per flexible block group [ 244.476901][T17630] EXT4-fs error (device loop7): ext4_xattr_inode_iget:436: comm syz.7.4375: Parent and EA inode have the same ino 15 [ 244.480605][T17625] EXT4-fs (loop0): failed to initialize mballoc (-12) [ 244.480662][T17625] EXT4-fs (loop0): mount failed [ 244.497793][T17630] EXT4-fs (loop7): 1 orphan inode deleted [ 244.516878][T17630] siw: device registration error -23 [ 244.596655][T17641] netlink: 56 bytes leftover after parsing attributes in process `syz.0.4377'. [ 244.626845][T17643] netlink: 56 bytes leftover after parsing attributes in process `syz.7.4378'. [ 245.128670][T17656] loop9: detected capacity change from 0 to 512 [ 245.161958][T17656] ext4 filesystem being mounted at /181/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 245.233850][ T29] kauditd_printk_skb: 391 callbacks suppressed [ 245.233868][ T29] audit: type=1326 audit(1730104866.966:37919): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17659 comm="syz.9.4384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff64d65e719 code=0x7ffc0000 [ 245.265340][T17661] loop9: detected capacity change from 0 to 512 [ 245.279864][T17663] loop4: detected capacity change from 0 to 512 [ 245.282870][T17661] EXT4-fs (loop9): mounting ext3 file system using the ext4 subsystem [ 245.296016][ T29] audit: type=1326 audit(1730104866.966:37920): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17659 comm="syz.9.4384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff64d65e719 code=0x7ffc0000 [ 245.308259][T17661] EXT4-fs (loop9): invalid journal inode [ 245.319755][ T29] audit: type=1326 audit(1730104866.966:37921): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17659 comm="syz.9.4384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff64d65e719 code=0x7ffc0000 [ 245.341758][T17661] EXT4-fs (loop9): can't get journal size [ 245.348890][ T29] audit: type=1326 audit(1730104866.966:37922): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17659 comm="syz.9.4384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff64d65e719 code=0x7ffc0000 [ 245.378304][ T29] audit: type=1326 audit(1730104866.966:37923): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17659 comm="syz.9.4384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ff64d65e719 code=0x7ffc0000 [ 245.401960][ T29] audit: type=1326 audit(1730104866.966:37924): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17659 comm="syz.9.4384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff64d65e719 code=0x7ffc0000 [ 245.425717][ T29] audit: type=1326 audit(1730104866.966:37925): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17659 comm="syz.9.4384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff64d65e719 code=0x7ffc0000 [ 245.449441][ T29] audit: type=1326 audit(1730104866.966:37926): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17659 comm="syz.9.4384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff64d65e719 code=0x7ffc0000 [ 245.473217][ T29] audit: type=1326 audit(1730104866.966:37927): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17659 comm="syz.9.4384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff64d65e719 code=0x7ffc0000 [ 245.496855][ T29] audit: type=1326 audit(1730104866.966:37928): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17659 comm="syz.9.4384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff64d65e719 code=0x7ffc0000 [ 245.523196][T17663] EXT4-fs (loop4): too many log groups per flexible block group [ 245.531199][T17663] EXT4-fs (loop4): failed to initialize mballoc (-12) [ 245.538682][T17661] EXT4-fs (loop9): 1 truncate cleaned up [ 245.569051][T17668] netlink: 56 bytes leftover after parsing attributes in process `syz.1.4386'. [ 245.584303][T17663] EXT4-fs (loop4): mount failed [ 245.667781][T17680] loop7: detected capacity change from 0 to 128 [ 245.678195][T17680] ext4 filesystem being mounted at /304/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 245.752873][T17684] FAULT_INJECTION: forcing a failure. [ 245.752873][T17684] name failslab, interval 1, probability 0, space 0, times 0 [ 245.765646][T17684] CPU: 1 UID: 0 PID: 17684 Comm: syz.9.4391 Not tainted 6.12.0-rc4-syzkaller-00281-g284a2f899676 #0 [ 245.776429][T17684] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 245.786535][T17684] Call Trace: [ 245.789916][T17684] [ 245.792886][T17684] dump_stack_lvl+0xf2/0x150 [ 245.797518][T17684] dump_stack+0x15/0x20 [ 245.801838][T17684] should_fail_ex+0x223/0x230 [ 245.806570][T17684] ? getname_flags+0x81/0x3b0 [ 245.811333][T17684] should_failslab+0x8f/0xb0 [ 245.816002][T17684] kmem_cache_alloc_noprof+0x4c/0x290 [ 245.821517][T17684] getname_flags+0x81/0x3b0 [ 245.826142][T17684] __x64_sys_rmdir+0x21/0x40 [ 245.830771][T17684] x64_sys_call+0xfb1/0x2d60 [ 245.835395][T17684] do_syscall_64+0xc9/0x1c0 [ 245.839935][T17684] ? clear_bhb_loop+0x55/0xb0 [ 245.844664][T17684] ? clear_bhb_loop+0x55/0xb0 [ 245.849383][T17684] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 245.855356][T17684] RIP: 0033:0x7ff64d65e719 [ 245.859781][T17684] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 245.879541][T17684] RSP: 002b:00007ff64c2d7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000054 [ 245.888045][T17684] RAX: ffffffffffffffda RBX: 00007ff64d815f80 RCX: 00007ff64d65e719 [ 245.896037][T17684] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 245.904032][T17684] RBP: 00007ff64c2d7090 R08: 0000000000000000 R09: 0000000000000000 [ 245.912157][T17684] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 245.920169][T17684] R13: 0000000000000001 R14: 00007ff64d815f80 R15: 00007ffd263cd2a8 [ 245.928167][T17684] [ 246.038770][T17692] loop7: detected capacity change from 0 to 1024 [ 246.047678][T17692] EXT4-fs: Ignoring removed oldalloc option [ 246.054259][T17692] EXT4-fs (loop7): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 246.116718][T17703] loop0: detected capacity change from 0 to 512 [ 246.123374][T17704] loop9: detected capacity change from 0 to 128 [ 246.130117][T17703] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 246.134651][T17704] ext4 filesystem being mounted at /188/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 246.174857][T17703] EXT4-fs (loop0): invalid journal inode [ 246.180700][T17703] EXT4-fs (loop0): can't get journal size [ 246.205262][T17703] EXT4-fs (loop0): 1 truncate cleaned up [ 246.230475][T17711] loop7: detected capacity change from 0 to 512 [ 246.352033][T17711] loop7: detected capacity change from 0 to 8192 [ 246.401625][T17734] loop9: detected capacity change from 0 to 128 [ 246.412162][T17734] ext4 filesystem being mounted at /193/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 246.458518][T17737] loop1: detected capacity change from 0 to 512 [ 246.469426][T17737] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 246.486680][T17741] loop9: detected capacity change from 0 to 128 [ 246.493732][T17737] EXT4-fs (loop1): invalid journal inode [ 246.499625][T17737] EXT4-fs (loop1): can't get journal size [ 246.509213][T17741] ext4 filesystem being mounted at /194/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 246.554891][T17737] EXT4-fs (loop1): 1 truncate cleaned up [ 246.635659][T17754] syz.4.4419[17754] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 246.635771][T17754] syz.4.4419[17754] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 246.661826][T17754] syz.4.4419[17754] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 246.715828][T17770] loop7: detected capacity change from 0 to 128 [ 246.747413][T17770] ext4 filesystem being mounted at /309/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 246.869165][T17783] loop7: detected capacity change from 0 to 512 [ 246.903185][T17783] EXT4-fs (loop7): mounting ext3 file system using the ext4 subsystem [ 246.912327][T17783] EXT4-fs (loop7): invalid journal inode [ 246.919602][T17783] EXT4-fs (loop7): can't get journal size [ 246.928191][T17783] EXT4-fs (loop7): 1 truncate cleaned up [ 246.935192][T17800] loop4: detected capacity change from 0 to 512 [ 246.941828][T17800] EXT4-fs: Ignoring removed oldalloc option [ 246.951212][T17800] EXT4-fs error (device loop4): ext4_xattr_inode_iget:436: comm syz.4.4439: Parent and EA inode have the same ino 15 [ 246.964684][T17800] EXT4-fs error (device loop4): ext4_xattr_inode_iget:436: comm syz.4.4439: Parent and EA inode have the same ino 15 [ 246.980376][T17800] EXT4-fs (loop4): 1 orphan inode deleted [ 247.061756][T17814] loop1: detected capacity change from 0 to 512 [ 247.074850][T17816] netlink: 'syz.7.4446': attribute type 39 has an invalid length. [ 247.093894][T17814] ext4 filesystem being mounted at /341/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 247.167954][T17828] loop7: detected capacity change from 0 to 512 [ 247.175509][T17828] EXT4-fs (loop7): mounting ext3 file system using the ext4 subsystem [ 247.204052][T17828] EXT4-fs (loop7): invalid journal inode [ 247.210934][T17828] EXT4-fs (loop7): can't get journal size [ 247.221631][T17836] syz.1.4453[17836] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 247.222171][T17828] EXT4-fs (loop7): 1 truncate cleaned up [ 247.310838][T17848] __nla_validate_parse: 11 callbacks suppressed [ 247.310859][T17848] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4457'. [ 247.363545][T17852] loop7: detected capacity change from 0 to 512 [ 247.372636][T17853] loop0: detected capacity change from 0 to 128 [ 247.394461][T17853] ext4 filesystem being mounted at /65/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 247.428976][T17852] ext4 filesystem being mounted at /319/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 247.505110][T17863] netlink: 24 bytes leftover after parsing attributes in process `syz.7.4463'. [ 247.630668][T17871] loop0: detected capacity change from 0 to 512 [ 247.670791][T17871] EXT4-fs (loop0): too many log groups per flexible block group [ 247.678511][T17871] EXT4-fs (loop0): failed to initialize mballoc (-12) [ 247.685554][T17871] EXT4-fs (loop0): mount failed [ 247.732592][T17875] loop0: detected capacity change from 0 to 1024 [ 247.739643][T17875] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 247.785017][T17880] lo speed is unknown, defaulting to 1000 [ 247.829621][T17882] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4471'. [ 247.941690][T17893] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4476'. [ 247.991968][T17896] loop9: detected capacity change from 0 to 512 [ 247.999161][T17899] program syz.0.4479 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 248.024816][T17896] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 248.054554][T17896] EXT4-fs (loop9): 1 truncate cleaned up [ 248.221949][T17921] 9pnet_fd: p9_fd_create_tcp (17921): problem connecting socket to 127.0.0.1 [ 248.228429][T17923] netlink: 'syz.9.4489': attribute type 39 has an invalid length. [ 248.239250][T17921] loop7: detected capacity change from 0 to 512 [ 248.246072][T17921] EXT4-fs: Ignoring removed mblk_io_submit option [ 248.254446][T17921] EXT4-fs (loop7): mounting ext3 file system using the ext4 subsystem [ 248.270183][T17921] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a042c118, mo2=0002] [ 248.279225][T17921] System zones: 1-12 [ 248.286487][T17921] EXT4-fs error (device loop7): ext4_xattr_ibody_find:2240: inode #15: comm syz.7.4488: corrupted in-inode xattr: e_value size too large [ 248.303468][T17921] EXT4-fs error (device loop7): ext4_orphan_get:1393: comm syz.7.4488: couldn't read orphan inode 15 (err -117) [ 248.338582][T17931] SELinux: syz.1.4492 (17931) set checkreqprot to 1. This is no longer supported. [ 248.382087][T17936] loop9: detected capacity change from 0 to 512 [ 248.392589][T17936] EXT4-fs (loop9): mounting ext3 file system using the ext4 subsystem [ 248.405805][T17940] loop7: detected capacity change from 0 to 128 [ 248.409692][T17941] loop1: detected capacity change from 0 to 512 [ 248.413484][T17936] EXT4-fs (loop9): invalid journal inode [ 248.424697][T17936] EXT4-fs (loop9): can't get journal size [ 248.436277][T17941] EXT4-fs (loop1): too many log groups per flexible block group [ 248.436722][T17940] ext4 filesystem being mounted at /333/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 248.444011][T17941] EXT4-fs (loop1): failed to initialize mballoc (-12) [ 248.480884][T17936] EXT4-fs (loop9): 1 truncate cleaned up [ 248.482596][T17941] EXT4-fs (loop1): mount failed [ 248.520735][T17949] loop7: detected capacity change from 0 to 1024 [ 248.528070][T17949] EXT4-fs: Ignoring removed oldalloc option [ 248.534754][T17949] EXT4-fs (loop7): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 248.557696][T17953] netlink: 'syz.9.4500': attribute type 39 has an invalid length. [ 248.613335][T17961] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 248.635230][T17962] netlink: 4 bytes leftover after parsing attributes in process `syz.9.4502'. [ 248.676034][T17971] ================================================================== [ 248.684188][T17971] BUG: KCSAN: data-race in mas_walk / mas_wmb_replace [ 248.688300][ T9370] IPVS: starting estimator thread 0... [ 248.690984][T17971] [ 248.690993][T17971] write to 0xffff8881035f4500 of 8 bytes by task 17969 on cpu 1: [ 248.706522][T17971] mas_wmb_replace+0x222/0x14d0 [ 248.711444][T17971] mas_wr_store_entry+0x163c/0x2d00 [ 248.716660][T17971] mas_store_prealloc+0x6bf/0x960 [ 248.721698][T17971] vma_complete+0x3a7/0x760 [ 248.726300][T17971] __split_vma+0x620/0x6a0 [ 248.730755][T17971] vma_modify+0x2cb/0xcd0 [ 248.735094][T17971] vma_modify_flags+0xf2/0x120 [ 248.739868][T17971] mprotect_fixup+0x31a/0x5e0 [ 248.744556][T17971] do_mprotect_pkey+0x655/0x970 [ 248.749478][T17971] __x64_sys_mprotect+0x48/0x60 [ 248.754340][T17971] x64_sys_call+0x26cf/0x2d60 [ 248.759026][T17971] do_syscall_64+0xc9/0x1c0 [ 248.763536][T17971] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 248.769451][T17971] [ 248.771773][T17971] read to 0xffff8881035f4500 of 8 bytes by task 17971 on cpu 0: [ 248.779400][T17971] mas_walk+0x123/0x320 [ 248.783563][T17971] lock_vma_under_rcu+0x95/0x260 [ 248.788512][T17971] exc_page_fault+0x150/0x650 [ 248.791490][T17973] IPVS: using max 2208 ests per chain, 110400 per kthread [ 248.793198][T17971] asm_exc_page_fault+0x26/0x30 [ 248.793257][T17971] [ 248.807559][T17971] value changed: 0xffff8881035dcac1 -> 0xffff8881035f4500 [ 248.814662][T17971] [ 248.816981][T17971] Reported by Kernel Concurrency Sanitizer on: [ 248.823126][T17971] CPU: 0 UID: 0 PID: 17971 Comm: syz.9.4506 Not tainted 6.12.0-rc4-syzkaller-00281-g284a2f899676 #0 [ 248.833896][T17971] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 248.843985][T17971] ==================================================================