last executing test programs: 2m15.447149211s ago: executing program 0 (id=432): io_uring_setup(0x280d, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = syz_io_uring_setup(0x10d2, &(0x7f0000000340)={0x0, 0x7734, 0x40, 0x0, 0xe9}, &(0x7f00000001c0), &(0x7f0000000140)) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0xf4240) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x60, r2, 0x100, 0x70bd26, 0x25dfdbff, {}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_RATE_PARENT_NODE_NAME={0xe}, @DEVLINK_ATTR_RATE_PARENT_NODE_NAME={0xe}, @DEVLINK_ATTR_RATE_TX_MAX={0xc, 0xa7, 0x81}]}, 0x60}, 0x1, 0x0, 0x0, 0x40}, 0x40) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x200000c, 0x50032, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x6000000) 2m14.564670984s ago: executing program 0 (id=444): syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc000, &(0x7f00000006c0), 0x2, 0x246, &(0x7f0000000ac0)="$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") unshare(0x8040480) r0 = openat(0xffffffffffffff9c, 0x0, 0x40000, 0x0) io_setup(0x9c0b, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000c80)='kmem_cache_free\x00'}, 0x10) r1 = syz_clone3(&(0x7f0000001880)={0x100000200, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) tgkill(r1, r1, 0x21) wait4(0x0, 0x0, 0x40000000, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) r3 = socket$inet6(0xa, 0x1, 0x84) open_tree(0xffffffffffffff9c, &(0x7f0000000300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1000) bind$inet6(r3, &(0x7f0000ed3fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendmsg$rds(r0, &(0x7f0000000700)={&(0x7f0000000000)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000f40)=[{&(0x7f0000000400)=""/133, 0x85}, {&(0x7f00000004c0)=""/203, 0xcb}, {&(0x7f00000005c0)=""/225, 0xe1}, {&(0x7f0000001900)=""/4096, 0x1000}, {&(0x7f0000000840)=""/182, 0xb6}, {&(0x7f0000000900)=""/242, 0xf2}, {&(0x7f0000000d40)=""/206, 0xce}, {&(0x7f0000002900)=""/4096, 0x1000}, {&(0x7f0000000a00)=""/184, 0xb8}, {&(0x7f0000000e40)=""/204, 0xcc}], 0xa, &(0x7f0000001000)=[@mask_cswp={0x58, 0x114, 0x9, {{0x2, 0x5}, &(0x7f0000000140)=0xd, &(0x7f0000000240)=0x8, 0x73, 0x0, 0x4000000000000, 0x9, 0x42, 0x5}}], 0x58, 0x4000}, 0x24040080) setsockopt$sock_linger(r3, 0x1, 0xd, &(0x7f0000000040)={0x1, 0xffffffff}, 0x8) sendto$inet6(r3, &(0x7f0000000100)="bc", 0x1, 0x4, &(0x7f00000000c0)={0xa, 0x4e20, 0x8, @dev={0xfe, 0x80, '\x00', 0xf}, 0x1}, 0x1c) sendto$inet6(r2, &(0x7f00000002c0)="9e", 0x1a000, 0x0, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 2m14.229181398s ago: executing program 0 (id=449): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x1e, 0xd, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRESDEC=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r1 = open(&(0x7f0000000100)='./file1\x00', 0x109042, 0x88) fallocate(r1, 0x10, 0x0, 0x7000000) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f00000002c0)={@dev, @initdev, 0x0}, &(0x7f0000000300)=0xc) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x0, 0x4, 0x0, 0x0, 0xffffffff}}}}]}, 0x4c}}, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r9 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$SO_COOKIE(r9, 0x1, 0x39, 0x0, &(0x7f0000000800)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="4800000010000104000000000400000000000000", @ANYRES32=r8, @ANYBLOB="0000000000000000280012800900010076657468"], 0x48}}, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000480)={@rand_addr, @remote, 0x0}, &(0x7f00000004c0)=0xc) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000540)={'erspan0\x00', &(0x7f0000000080)={'syztnl1\x00', 0x0, 0x700, 0x700, 0x7ff, 0x1eea, {{0x6, 0x4, 0x2, 0x3f, 0x18, 0x66, 0x0, 0x8, 0x4, 0x0, @private=0xa010102, @remote, {[@ra={0x94, 0x4, 0x1}]}}}}}) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r1, &(0x7f0000000680)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000640)={&(0x7f0000000580)=ANY=[@ANYRES16=r2, @ANYRES16=r10, @ANYBLOB="10002bbd7000fedbdf2511000000600001801400020073797a6b616c6c65723100000000000008000100", @ANYRES32=r3, @ANYBLOB="08000100", @ANYRES32=r6, @ANYBLOB="0800030000000000140002006272696467655f736c6176655f300000140002006c6f000000000000000000000000000008000300020000002c000180080003000100000008000100", @ANYRES32=r8, @ANYBLOB="080003010000000000000000", @ANYRES32=r10, @ANYBLOB="08000100", @ANYRES32=r11, @ANYBLOB], 0xa0}, 0x1, 0x0, 0x0, 0x40000}, 0x4000810) r12 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="1800000000008000000000000000000018010000200d702500ff00000000bfa100000000000007010000f8ffffffb702000008000030a9a28116d884eab8ef7d7c472f00b7030000000000a3850000007000000095472bdd3ff1bb70e3eb67790bbdb05b92a8bf92440cb644043831f8bcd9b0a5e8e4f8766eac2e8a7c9f1d5cf2325c625528391981493d8ba45e0433fb0000"], &(0x7f0000000200)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x50) r13 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r13, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000000c0)=ANY=[@ANYBLOB="880000000101010100000000000000000a0000000c0019"], 0x88}}, 0x24044004) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r12}, 0x10) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000240)=',-\x10*\x00', 0x0, 0x0) openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) socket$kcm(0x10, 0x2, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$EVIOCGPROP(r1, 0x80404509, &(0x7f00000006c0)=""/81) 2m13.711831126s ago: executing program 0 (id=455): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x70, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xcb3a, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x1f, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x20, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='kmem_cache_free\x00', r0, 0x0, 0x2}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000200)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) socket(0x10, 0x3, 0x4) r1 = epoll_create(0xb) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000580)={0x8, &(0x7f0000000500)=[{0xd, 0x7, 0x1, 0x1}, {0x1000, 0x4, 0x6, 0x2}, {0xce7, 0x7, 0x38}, {0xee, 0x9, 0x8, 0x1}, {0xfffa, 0x3, 0x5, 0x1ba}, {0xe, 0x5, 0xfb, 0x8000}, {0x0, 0xa, 0x5, 0x9}, {0x7, 0x5, 0x3, 0x4}]}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa2000000000000000000b7040000000000008500000f00c300000095000000000000000000000000d3ec02f0d4a1feb7daa99cce8b891fa18f064438367e82baedf2152ab808ba2308000000610e68464b2f4b0fbd08abf666468ae4bd2271c3670c097bdd7a39"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f00000002c0)='io_uring_register\x00', r3}, 0x18) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000dfff75390000000000000000850000007d00000095"], &(0x7f00000003c0)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='io_uring_register\x00', r4}, 0x10) r5 = io_uring_setup(0x728, &(0x7f0000000300)={0x0, 0x57c0, 0x400, 0x1, 0x117}) io_uring_register$IORING_UNREGISTER_PERSONALITY(r5, 0x19, 0x2000000, 0x0) syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000040)='./file0\x00', 0xcc04, &(0x7f0000000880)=ANY=[@ANYBLOB='dots,gid=', @ANYRESHEX=0xee01, @ANYBLOB="2c6e6f646f74732c646f74732c74696d655f6f66667365743d3078303030303030303030303030303264382c646f74732c646f74732c6e6f646f74732c6e6f646f74732c646f74732c646f74732c6e6f646f74732c6e6f646f74732c636865636b3d72656c617865642c666c7573682c64656275672c646f74732c73686f77657865632c6e6f646f74732c6572726f72733d636f6e74696e75652c646f74732c71756965742c003fa5bfd3e968f92d300444698c6f8d94d8b46ce3ce652bc8f6"], 0x1, 0x20a, &(0x7f0000001980)="$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") r6 = syz_open_procfs(0x0, &(0x7f00000042c0)='mounts\x00') pread64(r6, &(0x7f0000002240)=""/237, 0xfecf, 0x4eb) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0) close(r7) r8 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000072"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) close(r8) socket$kcm(0x2, 0x2, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r9}, &(0x7f0000000000), &(0x7f0000000080)=r8}, 0x20) shutdown(r7, 0x0) recvmsg(r7, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f0000002ec0)=[{&(0x7f0000000900)=""/223, 0xdf}], 0x1}, 0x102) syz_clone(0x82000, &(0x7f0000000080)="39c94502d5d102a3dfbd738a1658deaecdf0cbf953dc2a73598e357d20c4602619c687af6e90f0da5bc1750f0b89dc8513e71aa213cf43a539dfea9602340b6ce0c367515c426b84ccf5a3725dab48ccb353ba0a67e22165e3ec67365d12411161f1e028dfcad63ac41b", 0x6a, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000240)="897667c765d7c860106674720b8a3061ee74f015903cdd8d1e207bce654245ca223a343f60111156d32223f551f5de43eceb5cf9478ac07a61a84bc55e1412127774cc498c6c32b9e6943f380b93fde4bef38ddb1585f751dd0303c588fe266175d2a7674527527722d4005074f05167c8836aed211100ac11aea41d700f457cee9bb98c1ab74d245ea5e673d4b9f47bb4c2ce52077e2ed3d23eb7cc07e36bdbccb69cd1952f7b8b2153ae1fa4ba0c711391291bbc51120dbaa7d04b6f81efe0d04e78adc1556a9704d37c4695da6b46") fchown(r1, 0xee00, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000180)='dlm_unlock_end\x00', r4, 0x0, 0x10001}, 0x18) 2m13.396367221s ago: executing program 0 (id=457): r0 = openat$selinux_member(0xffffffffffffff9c, &(0x7f0000000640), 0x2, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100000700002c0000000000000004850000002a00000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x18) r2 = socket$l2tp(0x2, 0x2, 0x73) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000600)={'syztnl1\x00', &(0x7f00000007c0)={'sit0\x00', 0x0, 0x7800, 0x700, 0x7f, 0x636cb26b, {{0xf, 0x4, 0x3, 0x7, 0x3c, 0x65, 0x0, 0x88, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0x3b}, @private=0xa010100, {[@ra={0x94, 0x4}, @generic={0x86, 0x10, "65c74ba4e1fad81120ea78cd4897"}, @timestamp_prespec={0x44, 0xc, 0x95, 0x3, 0x5, [{@loopback}]}, @rr={0x7, 0x7, 0xf8, [@loopback]}, @noop]}}}}}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70200000000f400850000008600000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10) r6 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r6, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2c}}, 0x10) connect$inet(r6, &(0x7f0000000280)={0x2, 0x4, @multicast1}, 0x10) sendmmsg$inet(r6, &(0x7f0000004540)=[{{&(0x7f0000000040)={0x2, 0x4e22, @multicast1}, 0x7e1f, 0x0}, 0xee0000b0}, {{0x0, 0x0, &(0x7f00000012c0)=[{&(0x7f0000001100)="15b26f226e2966667482d50903b0a8d92ccd9e69d5cc4cb3d467a670b237a9225fb56c0f7ea725dee27c4bb43bb50c6748c83b71d59f0537405dfab648c096607340fac939a2efd31cbe2f8ca29c409e87ea0974b7bceff9afef5d07d691575f5115f2f961ad488e3386036913e98181a6034febaab853a3e928b9035b0e3a8e1cb393c70f6d0448970e0af2476f8b923ee09c19deca55d58f70e8eeff55dda6381cb96afe97196c0af0a8fd450a1447a1a521e2c211fb84cbcf4aebd31298972ec6bea1764fbde5500fa30c5f2459cff4d7f123ab94cfd5762d586ec7a28abc2f8c9e608f8f964b96ecb0883d60d444f317834a3d734cb304051a60d1a084a84da8f9a23a1b9d4951c0a81985c63ae193f40e9deb358b2f08553324fd6086be9e70e5061568abefebcda50e70f4dab2e4dc0cf6d85aced044d7005326922886194895267165f7f592036ebe11dcf1cad98f5cda766eaea90fb4cb5e793525126c7594f8599055192d63a81d3cd26aadd50983f1c3f1d4655c1b5f59e80f733e3abc4792b760729fd26298ef15141cf76cc4", 0xc3}, {&(0x7f0000000d80)="7d68e6de85f9b0cbc9d710267f321ec64eab043ecad9af7e01e9463218ec45924a99867163e468d36a682fadd749caa325e685d75559a87139e02fae7271be8f55671cfd32a09896278d1941370174720838039d0989bc3394b8a4c4f4a30f0496be313d6d60fe47966c634a3ee1f659e8ef310647725bda0130d5de5028220a4cf5fc808a75694738ee26cb21302b4bba4265b845a5d5dce706d9820c6936b122f9658446d74a9016b94424971dd443a6907eb5c73b6b200e92b23f2c36a214729b0bc231511e4c", 0xc8}, {&(0x7f0000000380)="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", 0x9fd}], 0x3}}, {{0x0, 0x0, &(0x7f00000017c0)=[{&(0x7f0000001700)="a6", 0x1}], 0x300}}], 0x3, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000001f80), r7) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000002080)={&(0x7f00000003c0)={0x20, r8, 0x1, 0x70bd2d, 0x0, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x20}}, 0x40040) r10 = socket(0x10, 0x803, 0x0) r11 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r13 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed074479000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='sched_switch\x00', r13, 0x0, 0x2000000005}, 0x18) ioctl$sock_SIOCGIFCONF(0xffffffffffffffff, 0x8912, 0x0) r14 = getpid() process_vm_readv(r14, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$nl_route_sched(r10, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, r12, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x5c, 0x2c, 0xd27, 0x70bd26, 0x8000006, {0x0, 0x0, 0x0, r12, {0x4, 0xf}, {}, {0x1, 0xa}}, [@filter_kind_options=@f_basic={{0xa}, {0x2c, 0x2, [@TCA_BASIC_EMATCHES={0x28, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xffff}}, @TCA_EMATCH_TREE_LIST={0x1c, 0x2, 0x0, 0x1, [@TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0x7f, 0x1, 0x8001}, {0x8, 0x6a6, 0xffff, 0x5, 0x2, 0x2}}}]}]}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x24008004}, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000008c0)={'ip6tnl0\x00', &(0x7f0000000840)={'syztnl1\x00', 0x0, 0x4, 0x9, 0x1, 0x8, 0x2, @remote, @dev={0xfe, 0x80, '\x00', 0x3f}, 0x1, 0x8, 0x273, 0x1ff}}) sendmmsg$inet(r2, &(0x7f00000009c0)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000000)="6114853404f43ab7ab5496fdc936f4a5e4c2b4caa809a06be8d9f57bba79a1603a317026159da312559ebe1dd0b0034b4455eb80a8dcd18ba8b17916e5d2b4ba6f4b00e18a03aaf9e1d1a3b090f015ca63c1f1d484a1fb86636e29f4899b1e22cf6751f5d0faa3ad77cff0908ffef3c1e8904f7ffba29310cee4560da607badb30bf9232d238be21983cea5b0c0cc32774dc8fb7c23c53a2000af8855d2c2e43ad49b30e7b699fb118205c921401d075c888c2b27b25823f9fcdbf0b", 0xbc}, {&(0x7f00000000c0)="156640592b3a84584d7b6daf4cebcad4b52db07bcdb4587ec8fb8a3fea81d41fed0b6049b95340611a39fd8f27f911b7f8fecf9c60f93d7a094168c6d4f167f936a6b18c0fbf0f59b803befeab8912e097b8574742c154b20f329f2604c0f6bea9a4ab2ad9955bc52f92ff1c5ef018c6c1cd2004929a117e7c74d53473a2ada187c416ef403493c1d055b6b4f9ed5e6769a032740569e32dd58b139abbc2b0b26e314fdc2ed157e28eb3b9f77b349858df518b758e66fbc82aa6570c1aa06b35b8c7d2cd97", 0xc5}, {&(0x7f00000001c0)}, {&(0x7f0000000380)="673dc81961da27e4a559378a06c692d401c8a3979fc294c1d8f8718f07a23a8d49fd81e84f0f9837aaa94fe2078867fd6c5b88f9560b929f1ea2fc36a6ef7a19864f1ff02514d8a0207716c8388f2982fe2daa23af0620f8a8e2247316e563f5a9cc4b9e356e5154de9842fa5b44393058375fcabae0e616dc4c4f444c4263ef8fba1b4543847955c73058e9c87d33cd5496e8d32ff63cb753a2304943d83bb3c54cedd71684b1aef30357f0a21079792b92357eb9", 0xb5}, {&(0x7f0000000440)="b2b2f656444f518e2ceca0b7bd2a730c235fbaab07e36085749f5ec21bc87d266678f9a49bd829221063f1b6559731e619853771c2ca68a934b2f4d6f99210c2b28b2b090e1ec86474ddcba3b7790eb35376734d9ca90b2fcc4d0f7cd4d02528c62f5de284e797368491b9b861028486955c996d166a116382d2999f0b1e76ea2d7ba3f2907e58588dfc597cba3e9be11e1a4490", 0x94}, {&(0x7f0000000500)="d0272d56d9cc56d36ad3f2afd4ead0cb13dd0a396d4b23e3afb06a1f781616f05b7a07f879e1e2b804635a02e1ab736495c26c3930408268a8c85772d183ec1023fa5e51e15ba9c5d38101b5b03743ebe31a4061bd895da6b78408fbae113e627a9e46200cc421e4fa684643b80bdc0e08a124a4ec77b79de3f4abef716086b818631d539aed64db001ce26f13630aa25f31fdb23f5ad41fc56927ccacb3ce785026d15ab05ff9435cbfafe0fca155c9850725cbba97c7b315544d9caa8682f4fdd8168a6d2b7c8ffdf48709341ef25fc029b9ac", 0xd4}, {&(0x7f00000006c0)="02992d30138ab70ffa31f146426b27935261b466b47bfcc92309dfb66bf17f5daaec7893766c1c36d564732e688e34821069799a2b45eafd2a3c0eef46b7b4f33b79c40a7db59a7ca5cddb80a1d930e0e4bba721fa261a50a33959fcef47887a1a62aeb23c096a1371d1f14b658f3bd221874bc5", 0x74}], 0x7, &(0x7f0000000900)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @remote, @multicast1}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0xe5}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x1}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0xff}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x3}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r12, @rand_addr=0x64010101, @initdev={0xac, 0x1e, 0x1, 0x0}}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r15, @multicast2, @loopback}}}], 0xc0}}], 0x1, 0x0) write$selinux_access(r0, &(0x7f0000000680)=ANY=[@ANYBLOB='systeack_db_t:s0 unconfined 00000000000000001024\x00'/64], 0x40) 2m13.105675425s ago: executing program 0 (id=463): sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000005"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x5b, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) syz_mount_image$iso9660(&(0x7f0000000180), &(0x7f0000000280)='./file0\x00', 0x14806, &(0x7f00000000c0)=ANY=[@ANYRES32=0x0], 0x0, 0x70a, &(0x7f00000232c0)="$eJzs3V+P21gZBvDnJJkkk0JVAapWVbdzOmWlqRhSJ7NNFRUkjHOSMSRxZHtgRkJaFTqDRs0UaItEc9PODX+k5Qtwtzdc8CFW4oKr/RZwBdIKhIR2BUJGPraTTOJkJm3a2aXPb7Qb5/j18etjr896xj4GERERERERERERERERERERERERERERERERERERERERERERERERERERERERERERERERERERERERERERERERERERQVgNw6gItO3uzq6czWq4Tif5ksXU/Ki2FdyMJm7OW+dKuF5AhP+gWMRbUfFbXxmFXA7/tY6r0berKIYfRQwuXL5098u5TLL8nIRfBBat8PHTwYN7/f7+ozPEZrFw9ecJmTMEtVTX9hy7Y7aUtD1H1ms149Z205NNu628Pc9XHWm5KuM7rtywbspKvb4lVXnP2em2GmZbJYV3vl41jJr8TiHa0QDKnrVtt9t2t6VjwtlhzB35/g+iAGV2pDw47O9vjeXzLK2Nw6BKSvKZ8eAwqHra5laNarVSqVYrtdv123cMIzdVYISEMYSpiKUftHSeMvHxusAiyzt5E72kjNX4j/FnAbRRRBc72IVM/bHQgAsHnRnzY0n//84tNXe94/1/0suvjGZfge7/r0Xfrs3q/2fkIiH1AmlzxIzyxX5WdEYSj/EUAzzAPfTRxz4eLaFuCbn20jXkjbgll5LPzJ8WFLqw4cGBjQ5MtPBFyLhEoo4aajDwHrbRhAeJJmy0oeBhDx58qPCIyoeZKpjw4cCFxAYs3IREBXXUsQUJhTL24GAHXbTQgIlPgiA4wKFu9604n+cpW40kqDJjIwrIJcfdPqpztnZW///DZ9HScf9vsP9/U0XHQSH6+GheDNFnQBBf/y9o7dVkQ0RERERERESvgtC/fRf6r/JvAwjQtNvKOBFTOLfsiIiIiIiIiGgZBIICrkJEd+XjbYjp638iIiIiIiIi+nwT+hk7AaCkb+oXo8elzvJLgOxrSJGIiIiIiIiIXpJ+8v9aHgj0Xf5rEAtd/xMRERERERHR58Cvx8bYz2XjMXaD5M/6GQBrfymID/9egLsijnu7XxVHZjjHPIpjpu4A8JtXxMV4oF79kQegv1nqqojXJoF/Jb99CH18kD7W//MgIoRwJxLIZ8crmJGACNdcy8Xf8D6uR4tcj8eZvz/IQM+JRhQuNe22KltO+24Fpnkx46td/+cPD38BuMPtPDjs75d/9JP+fZ3LcVh0fBRW+uxEOpn0xhjl8kSPt6CfuUgb3XgVzWSVv+l2SkKv10i2PwvzKDO+onk7oLYKRFv5S6xH+2w9iGJLg+GI+wJY04M/VMp6l53YendFjLKoTG552o6YseVFncWNKObGxo3oI2mTsJ6MKH4tC1TLk/sgTHQsi+p4Fqe3hfjHRPvPzwKiGLbFVpjFH8OKJtri+x9GC2/1dpPhMc6SxdRRQER0Xg5GvZAexHxqjP2ke0hOamfvd5AD4rPcjN59tJYg7j+S3v3J74Koh8oCufhvE+lrSfoVhGf0DaHryUcDuueupJzRjfKnQRCYF4sYP6P/NwiSDTIW6N2OgyCYPKP/YfQOpDjtqSz+HQTB3YruSX470at+EC7wwcz1eu1qFkUU8OTop/gkmb3/4/2H1epWzXjXMG5XsaL/VyH+yIJ9DxERTTn9HTs6IjMnQryL61Ed1+//7Z1o6kSP96X4lgLtFtDHfWwmrxBYS6+1hAN885/RbQib0VUrsF6KPksDefnS3fCqdhh7KHL6DS+bM6/qdGcZxerbG6rD2OS9Q5NXgKPYrVe8F4iIiF6v9Rn9MHCi/8fJ/r94ov/fxEYUsXEl9bq7NHZL4WZydTy8pB9cOE6NrZye/LeW3BhERERvCOV+LEr+r4Tr2r33KvV6xfS3lXQd67vStRstJe2ur1xr2+y2lOy5ju9YTlv2XBTsVeVJb6fXc1xfNh1X9hzP3tVvfpfxq9891TG7vm15vbYyPSUtp+ubli8btmfJ3s6327a3rVy9sNdTlt20LdO3na70nB3XUmUpPaXGAu2G6vp20w4nu7Ln2h3T3ZPfc9o7HSUbyrNcu+c7UYXJuuxu03E7utoygoVfdEhERPT/6PHTwYN7/f7+o8mJ1fDSPCo5xoyY6Yl8SoUcI4iIiOgzZtRdL7BQ8RUmREREREREREREREREREREREREREREREREU05/pG/BiZW0hwWBYcnPLsYleI7RI4ZT9Qi8bD6fun/SA/u9yOKZYYkAcIalkkciBg8+mhO8OixJmn885niRDHEJeOH2+esXgAu6BFFJbokHwPTzo0s/xtImvnEQteisGD0zdVZhuC9yy//PIZx4+PvpWSJs+SAIgvmLF062Yf7sx3MOwKP8nF2wesrx87rPRET0uv0vAAD//ySOL9Y=") sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x1000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4, 0x0, 0x4000000000}, 0x18) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) 2m13.064267855s ago: executing program 32 (id=463): sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000005"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x5b, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) syz_mount_image$iso9660(&(0x7f0000000180), &(0x7f0000000280)='./file0\x00', 0x14806, &(0x7f00000000c0)=ANY=[@ANYRES32=0x0], 0x0, 0x70a, &(0x7f00000232c0)="$eJzs3V+P21gZBvDnJJkkk0JVAapWVbdzOmWlqRhSJ7NNFRUkjHOSMSRxZHtgRkJaFTqDRs0UaItEc9PODX+k5Qtwtzdc8CFW4oKr/RZwBdIKhIR2BUJGPraTTOJkJm3a2aXPb7Qb5/j18etjr896xj4GERERERERERERERERERERERERERERERERERERERERERERERERERERERERERERERERERERERERERERERERERERQVgNw6gItO3uzq6czWq4Tif5ksXU/Ki2FdyMJm7OW+dKuF5AhP+gWMRbUfFbXxmFXA7/tY6r0berKIYfRQwuXL5098u5TLL8nIRfBBat8PHTwYN7/f7+ozPEZrFw9ecJmTMEtVTX9hy7Y7aUtD1H1ms149Z205NNu628Pc9XHWm5KuM7rtywbspKvb4lVXnP2em2GmZbJYV3vl41jJr8TiHa0QDKnrVtt9t2t6VjwtlhzB35/g+iAGV2pDw47O9vjeXzLK2Nw6BKSvKZ8eAwqHra5laNarVSqVYrtdv123cMIzdVYISEMYSpiKUftHSeMvHxusAiyzt5E72kjNX4j/FnAbRRRBc72IVM/bHQgAsHnRnzY0n//84tNXe94/1/0suvjGZfge7/r0Xfrs3q/2fkIiH1AmlzxIzyxX5WdEYSj/EUAzzAPfTRxz4eLaFuCbn20jXkjbgll5LPzJ8WFLqw4cGBjQ5MtPBFyLhEoo4aajDwHrbRhAeJJmy0oeBhDx58qPCIyoeZKpjw4cCFxAYs3IREBXXUsQUJhTL24GAHXbTQgIlPgiA4wKFu9604n+cpW40kqDJjIwrIJcfdPqpztnZW///DZ9HScf9vsP9/U0XHQSH6+GheDNFnQBBf/y9o7dVkQ0RERERERESvgtC/fRf6r/JvAwjQtNvKOBFTOLfsiIiIiIiIiGgZBIICrkJEd+XjbYjp638iIiIiIiIi+nwT+hk7AaCkb+oXo8elzvJLgOxrSJGIiIiIiIiIXpJ+8v9aHgj0Xf5rEAtd/xMRERERERHR58Cvx8bYz2XjMXaD5M/6GQBrfymID/9egLsijnu7XxVHZjjHPIpjpu4A8JtXxMV4oF79kQegv1nqqojXJoF/Jb99CH18kD7W//MgIoRwJxLIZ8crmJGACNdcy8Xf8D6uR4tcj8eZvz/IQM+JRhQuNe22KltO+24Fpnkx46td/+cPD38BuMPtPDjs75d/9JP+fZ3LcVh0fBRW+uxEOpn0xhjl8kSPt6CfuUgb3XgVzWSVv+l2SkKv10i2PwvzKDO+onk7oLYKRFv5S6xH+2w9iGJLg+GI+wJY04M/VMp6l53YendFjLKoTG552o6YseVFncWNKObGxo3oI2mTsJ6MKH4tC1TLk/sgTHQsi+p4Fqe3hfjHRPvPzwKiGLbFVpjFH8OKJtri+x9GC2/1dpPhMc6SxdRRQER0Xg5GvZAexHxqjP2ke0hOamfvd5AD4rPcjN59tJYg7j+S3v3J74Koh8oCufhvE+lrSfoVhGf0DaHryUcDuueupJzRjfKnQRCYF4sYP6P/NwiSDTIW6N2OgyCYPKP/YfQOpDjtqSz+HQTB3YruSX470at+EC7wwcz1eu1qFkUU8OTop/gkmb3/4/2H1epWzXjXMG5XsaL/VyH+yIJ9DxERTTn9HTs6IjMnQryL61Ed1+//7Z1o6kSP96X4lgLtFtDHfWwmrxBYS6+1hAN885/RbQib0VUrsF6KPksDefnS3fCqdhh7KHL6DS+bM6/qdGcZxerbG6rD2OS9Q5NXgKPYrVe8F4iIiF6v9Rn9MHCi/8fJ/r94ov/fxEYUsXEl9bq7NHZL4WZydTy8pB9cOE6NrZye/LeW3BhERERvCOV+LEr+r4Tr2r33KvV6xfS3lXQd67vStRstJe2ur1xr2+y2lOy5ju9YTlv2XBTsVeVJb6fXc1xfNh1X9hzP3tVvfpfxq9891TG7vm15vbYyPSUtp+ubli8btmfJ3s6327a3rVy9sNdTlt20LdO3na70nB3XUmUpPaXGAu2G6vp20w4nu7Ln2h3T3ZPfc9o7HSUbyrNcu+c7UYXJuuxu03E7utoygoVfdEhERPT/6PHTwYN7/f7+o8mJ1fDSPCo5xoyY6Yl8SoUcI4iIiOgzZtRdL7BQ8RUmREREREREREREREREREREREREREREREREU05/pG/BiZW0hwWBYcnPLsYleI7RI4ZT9Qi8bD6fun/SA/u9yOKZYYkAcIalkkciBg8+mhO8OixJmn885niRDHEJeOH2+esXgAu6BFFJbokHwPTzo0s/xtImvnEQteisGD0zdVZhuC9yy//PIZx4+PvpWSJs+SAIgvmLF062Yf7sx3MOwKP8nF2wesrx87rPRET0uv0vAAD//ySOL9Y=") sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x1000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4, 0x0, 0x4000000000}, 0x18) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) 1m44.857480505s ago: executing program 2 (id=839): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000001240)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc000, &(0x7f00000006c0), 0x2, 0x246, &(0x7f0000000ac0)="$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") unshare(0x8040480) r1 = openat(0xffffffffffffff9c, 0x0, 0x40000, 0x0) io_setup(0x9c0b, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) ioctl$EXT4_IOC_GROUP_EXTEND(r2, 0x40086607, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000c80)='kmem_cache_free\x00', r0}, 0x10) r3 = syz_clone3(&(0x7f0000001880)={0x100000200, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) tgkill(r3, r3, 0x21) wait4(0x0, 0x0, 0x40000000, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r4, 0x0, 0x0) r5 = socket$inet6(0xa, 0x1, 0x84) open_tree(0xffffffffffffff9c, &(0x7f0000000300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1000) bind$inet6(r5, &(0x7f0000ed3fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendmsg$rds(r1, &(0x7f0000000700)={&(0x7f0000000000)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000f40)=[{0x0}, {&(0x7f00000004c0)=""/203, 0xcb}, {&(0x7f00000005c0)=""/225, 0xe1}, {&(0x7f0000001900)=""/4096, 0x1000}, {&(0x7f0000000840)=""/182, 0xb6}, {&(0x7f0000000900)=""/242, 0xf2}, {&(0x7f0000000d40)=""/206, 0xce}, {&(0x7f0000002900)=""/4096, 0x1000}, {&(0x7f0000000a00)=""/184, 0xb8}, {&(0x7f0000000e40)=""/204, 0xcc}], 0xa, &(0x7f0000001000)=[@mask_cswp={0x58, 0x114, 0x9, {{0x2, 0x5}, &(0x7f0000000140)=0xd, &(0x7f0000000240)=0x8, 0x73, 0x0, 0x4000000000000, 0x9, 0x42, 0x5}}], 0x58, 0x4000}, 0x24040080) setsockopt$sock_linger(r5, 0x1, 0xd, &(0x7f0000000040)={0x1, 0xffffffff}, 0x8) sendto$inet6(r5, &(0x7f0000000100)="bc", 0x1, 0x4, &(0x7f00000000c0)={0xa, 0x4e20, 0x8, @dev={0xfe, 0x80, '\x00', 0xf}, 0x1}, 0x1c) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r6) sendmsg$NLBL_CIPSOV4_C_ADD(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x48, r7, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_TAGLST={0x24, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x1}, {0x5}, {0x5, 0x3, 0x80}, {0x5, 0x3, 0x1}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}]}, 0x48}}, 0x0) close(r5) socketpair(0x1a, 0x3, 0x5, &(0x7f0000000180)) sendto$inet6(r4, &(0x7f00000002c0)="9e", 0x1a000, 0x0, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 1m44.453808761s ago: executing program 2 (id=843): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b00000000000000"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1803000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000800b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000600)='./file0\x00', 0xc8d0, &(0x7f0000000140)=ANY=[@ANYRES8=0x0], 0x1, 0x2e3, &(0x7f0000000280)="$eJzs3M9LG2kYwPEnMYkxoslh2WUXFh92L7uXQbP3paEolAYq1pT+gNJRJ23INJFMsKSU2p56Lf0jehCP3oTWf8BLbz310puXQg/1UDol8yNGjdXGH/HH9wPyvvq8T+Z9Z1Sed2Bm4+bLh+WiYxTNukSTKhERkU2RjEQlFAnaqNdPSLtn8u/g5/d/Xr91+2ounx+fUp3ITf+XVdXhkTePngwEw1b7ZT1zd+NT9uP6r+u/b3ybflBytORopVpXU2eqH+rmjG3pXMkpG6qTtmU6lpYqjlXz41U/XrSr8/MNNStzQ6n5muU4alYaWrYaWq9qvdZQ875ZqqhhGDqUEuynsDQ1Zea6TJ494sngmNRqObNPRAZ2RQpLPZkQAADoqaD+b1X70WZJ3039H+tY/y//tVYfvLEyHNT/q4lm/S/SVv/f2/qsbfV/UkSOvf7fXRGdL6774/ih6n+cEc36PxX8/Xqe31ke9TrU/wAAAAAAAAAAAAAAAAAAAAAAnAWbrpt2XTcdtuFXv4gkvSdI/O97PU8cD67/xbb14o7YsIj9YqGwUPDbYMCaiNhiyaik5av3+xBo9hOi3iBtyshbezHIX1wo9HmRXFFKXv6YpCWzM991J67kx8fUtz0/Lqn2/Kyk5ZfO+dmd+fFmm5B//m7LNyQt72alKrbMBU/GhflPx1QvX8vvOP6ANw4AAAAAgPPA0JbW/r2/PW7sjvv7Yz/e2l93vD/g769HO+7vY/JHrFerBgAAAADgYnEaj8umbVu1c9cJV3jQrPC9xnuMiUhkr9ARdMKDn4JTFz/QGYt2NdWRxE9elI6d8LbRXmNksptPdtMihz2Hv716/eXorsX/K8l9VtptJ7HfSuMn9x8IAAAAwEnZKvrDn1zq7YQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALiATuLFcr1eIwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHBafA8AAP//ohEIjg==") r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0xf0) pwritev2(r2, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfb}], 0x1, 0x5412, 0x0, 0x0) 1m44.106240126s ago: executing program 2 (id=848): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) ioctl$FICLONE(r1, 0x40049409, r2) 1m43.8310031s ago: executing program 2 (id=852): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000001240)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc000, &(0x7f00000006c0), 0x2, 0x246, &(0x7f0000000ac0)="$eJzs3T9oM2UcB/DvXRJf+75BXnURxD8gIloor5vg8rooFKQUEUGFioiL0gq1xa1xcnHQWaWTSxE3q6N0KS6K4FS1Q10ELQ4WBx0iybVS24ja1Jz0Ph+43l3vee73HLnvkyyXBGisq0muJ2klmU7SSVIcb3B3tVw93F2f2l5I+v0nfiqG7ar9ylG/K0l6SR5KslUWeamdrG4+s/fLzmP3vbnSuff9zaenJnqRh/b3dh8/eG/ujY9mH1z94qsf5opcT/dP13X+ihH/axfJLf9Fsf+Jol33CPgn5l/78OtB7m9Ncs8w/52UqV68t5Zv2OrkgXf/qu/bP355+yTHCpy/fr8zeA/s9YHGKZN0U5QzSartspyZqT7Df9O6XL68tPzq9ItLK4sv1D1TAeelm+w++smlj6+cyP/3rSr/wMU1yP+T8xvfDrYPWnWPBpiIO6rVIP/Tz63dH/mHxpF/aC75h+aSf2gu+Yfmkn9oLvmHC6xztNEbeVj+obnkH5pL/qG5jucfAGiW/qW6n0AG6lL3/AMAAAAAAAAAAAAAAAAAAJy2PrW9cLRMquZn7yT7jyRpj6rfGv4ecXLj8O/ln4tBsz8UVbexPHvXmCcY0wc1P31903f11v/8znrrry0mvdeTXGu3T99/xeH9d3Y3/83xzvNjFviXihP7Dz812fon/bZRb/3ZneTTwfxzbdT8U+a24Xr0/NM9/hXLZ/TKr2OeAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgIn5PQAA//8PK23M") unshare(0x8040480) r1 = openat(0xffffffffffffff9c, 0x0, 0x40000, 0x0) io_setup(0x9c0b, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) ioctl$EXT4_IOC_GROUP_EXTEND(r2, 0x40086607, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000c80)='kmem_cache_free\x00', r0}, 0x10) r3 = syz_clone3(&(0x7f0000001880)={0x100000200, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) tgkill(r3, r3, 0x21) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r4, 0x0, 0x0) r5 = socket$inet6(0xa, 0x1, 0x84) open_tree(0xffffffffffffff9c, &(0x7f0000000300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1000) bind$inet6(r5, &(0x7f0000ed3fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendmsg$rds(r1, &(0x7f0000000700)={&(0x7f0000000000)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000f40)=[{&(0x7f0000000400)=""/133, 0x85}, {&(0x7f00000004c0)=""/203, 0xcb}, {&(0x7f00000005c0)=""/225, 0xe1}, {&(0x7f0000001900)=""/4096, 0x1000}, {&(0x7f0000000840)=""/182, 0xb6}, {&(0x7f0000000900)=""/242, 0xf2}, {&(0x7f0000000d40)=""/206, 0xce}, {&(0x7f0000002900)=""/4096, 0x1000}, {&(0x7f0000000a00)=""/184, 0xb8}, {0x0}], 0xa, &(0x7f0000001000)=[@mask_cswp={0x58, 0x114, 0x9, {{0x2, 0x5}, &(0x7f0000000140)=0xd, &(0x7f0000000240)=0x8, 0x73, 0x0, 0x4000000000000, 0x9, 0x42, 0x5}}], 0x58, 0x4000}, 0x24040080) setsockopt$sock_linger(r5, 0x1, 0xd, &(0x7f0000000040)={0x1, 0xffffffff}, 0x8) sendto$inet6(r5, &(0x7f0000000100)="bc", 0x1, 0x4, &(0x7f00000000c0)={0xa, 0x4e20, 0x8, @dev={0xfe, 0x80, '\x00', 0xf}, 0x1}, 0x1c) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r6) sendmsg$NLBL_CIPSOV4_C_ADD(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x48, r7, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_TAGLST={0x24, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x1}, {0x5}, {0x5, 0x3, 0x80}, {0x5, 0x3, 0x1}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}]}, 0x48}}, 0x0) close(r5) socketpair(0x1a, 0x3, 0x5, &(0x7f0000000180)) sendto$inet6(r4, &(0x7f00000002c0)="9e", 0x1a000, 0x0, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 1m43.504229225s ago: executing program 2 (id=856): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, 0x0, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000600)='./file0\x00', 0xc8d0, &(0x7f0000000140)=ANY=[@ANYRES8=0x0], 0x1, 0x2e3, &(0x7f0000000280)="$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") creat(&(0x7f0000000000)='./bus\x00', 0x0) 1m42.43487513s ago: executing program 2 (id=868): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, 0x0, 0x0, 0xfffeffd2, 0x0, 0x0, 0x41000, 0x2c, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffa, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000180)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x4f, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r0}, &(0x7f0000000380), &(0x7f00000003c0)=r1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000640)={&(0x7f0000000340)='fsi_master_break\x00', r2}, 0x18) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="200000003e000701fcfffffffedbdf25017c00000c0003"], 0x20}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00'}, 0x10) set_mempolicy(0x4005, &(0x7f0000000080)=0x7e, 0x9) 1m42.342455892s ago: executing program 33 (id=868): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, 0x0, 0x0, 0xfffeffd2, 0x0, 0x0, 0x41000, 0x2c, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffa, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000180)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x4f, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r0}, &(0x7f0000000380), &(0x7f00000003c0)=r1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000640)={&(0x7f0000000340)='fsi_master_break\x00', r2}, 0x18) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="200000003e000701fcfffffffedbdf25017c00000c0003"], 0x20}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00'}, 0x10) set_mempolicy(0x4005, &(0x7f0000000080)=0x7e, 0x9) 1m25.99325975s ago: executing program 1 (id=1106): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x5b, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$iso9660(&(0x7f0000000180), &(0x7f0000000280)='./file0\x00', 0x14806, &(0x7f00000000c0)=ANY=[@ANYRES32=0x0], 0x0, 0x70a, &(0x7f00000232c0)="$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") bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000001c0)='mm_page_free\x00', 0xffffffffffffffff, 0x0, 0x6}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4, 0x0, 0x4000000000}, 0x18) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x1010e, &(0x7f0000000540)={[{@errors_remount}, {@lazytime}, {@oldalloc}, {@block_validity}, {@block_validity}, {@auto_da_alloc}]}, 0x1, 0x478, &(0x7f0000001080)="$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") mount(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f00000000c0)='tracefs\x00', 0x0, 0x0) 1m25.072120743s ago: executing program 1 (id=1113): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000001240)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc000, &(0x7f00000006c0), 0x2, 0x246, &(0x7f0000000ac0)="$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") unshare(0x8040480) r1 = openat(0xffffffffffffff9c, 0x0, 0x40000, 0x0) io_setup(0x9c0b, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) ioctl$EXT4_IOC_GROUP_EXTEND(r2, 0x40086607, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000c80)='kmem_cache_free\x00', r0}, 0x10) r3 = syz_clone3(&(0x7f0000001880)={0x100000200, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) tgkill(r3, r3, 0x21) wait4(0x0, 0x0, 0x40000000, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r4, 0x0, 0x0) r5 = socket$inet6(0xa, 0x1, 0x84) open_tree(0xffffffffffffff9c, &(0x7f0000000300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1000) bind$inet6(r5, &(0x7f0000ed3fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendmsg$rds(r1, &(0x7f0000000700)={&(0x7f0000000000)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000f40)=[{&(0x7f0000000400)=""/133, 0x85}, {&(0x7f00000004c0)=""/203, 0xcb}, {&(0x7f00000005c0)=""/225, 0xe1}, {&(0x7f0000001900)=""/4096, 0x1000}, {&(0x7f0000000840)=""/182, 0xb6}, {&(0x7f0000000900)=""/242, 0xf2}, {&(0x7f0000000d40)=""/206, 0xce}, {&(0x7f0000002900)=""/4096, 0x1000}, {&(0x7f0000000a00)=""/184, 0xb8}, {&(0x7f0000000e40)=""/204, 0xcc}], 0xa, &(0x7f0000001000)=[@mask_cswp={0x58, 0x114, 0x9, {{0x2, 0x5}, &(0x7f0000000140)=0xd, &(0x7f0000000240)=0x8, 0x73, 0x0, 0x4000000000000, 0x9, 0x42, 0x5}}], 0x58, 0x4000}, 0x24040080) setsockopt$sock_linger(r5, 0x1, 0xd, 0x0, 0x0) sendto$inet6(r5, &(0x7f0000000100)="bc", 0x1, 0x4, &(0x7f00000000c0)={0xa, 0x4e20, 0x8, @dev={0xfe, 0x80, '\x00', 0xf}, 0x1}, 0x1c) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r6) sendmsg$NLBL_CIPSOV4_C_ADD(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x48, r7, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_TAGLST={0x24, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x1}, {0x5}, {0x5, 0x3, 0x80}, {0x5, 0x3, 0x1}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}]}, 0x48}}, 0x0) close(r5) socketpair(0x1a, 0x3, 0x5, &(0x7f0000000180)) sendto$inet6(r4, &(0x7f00000002c0)="9e", 0x1a000, 0x0, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 1m24.612883169s ago: executing program 1 (id=1118): madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) pipe2$watch_queue(&(0x7f0000000680), 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0xfffffffffffffff9}, 0x18) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) munlock(&(0x7f0000bdc000/0x3000)=nil, 0x3000) creat(&(0x7f00000000c0)='./file0\x00', 0xd4) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000700000000000000000000850000002300000095"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f00000007c0)={0x300, 0x0, &(0x7f0000000780)={&(0x7f0000000b00)=ANY=[@ANYBLOB="020a06000300000028bd7008fcd1df25010018"], 0x18}}, 0x40) 1m24.466743992s ago: executing program 1 (id=1124): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000001240)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc000, &(0x7f00000006c0), 0x2, 0x246, &(0x7f0000000ac0)="$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") unshare(0x8040480) r1 = openat(0xffffffffffffff9c, 0x0, 0x40000, 0x0) io_setup(0x9c0b, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) ioctl$EXT4_IOC_GROUP_EXTEND(r2, 0x40086607, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000c80)='kmem_cache_free\x00', r0}, 0x10) r3 = syz_clone3(&(0x7f0000001880)={0x100000200, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) tgkill(r3, r3, 0x21) wait4(0x0, 0x0, 0x40000000, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r4 = socket$inet6(0xa, 0x1, 0x84) open_tree(0xffffffffffffff9c, &(0x7f0000000300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1000) bind$inet6(r4, &(0x7f0000ed3fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendmsg$rds(r1, &(0x7f0000000700)={&(0x7f0000000000)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000f40)=[{&(0x7f0000000400)=""/133, 0x85}, {&(0x7f00000004c0)=""/203, 0xcb}, {&(0x7f00000005c0)=""/225, 0xe1}, {&(0x7f0000001900)=""/4096, 0x1000}, {&(0x7f0000000840)=""/182, 0xb6}, {&(0x7f0000000900)=""/242, 0xf2}, {&(0x7f0000000d40)=""/206, 0xce}, {&(0x7f0000002900)=""/4096, 0x1000}, {&(0x7f0000000a00)=""/184, 0xb8}, {0x0}], 0xa, &(0x7f0000001000)=[@mask_cswp={0x58, 0x114, 0x9, {{0x2, 0x5}, &(0x7f0000000140)=0xd, &(0x7f0000000240)=0x8, 0x73, 0x0, 0x4000000000000, 0x9, 0x42, 0x5}}], 0x58, 0x4000}, 0x24040080) setsockopt$sock_linger(r4, 0x1, 0xd, &(0x7f0000000040)={0x1, 0xffffffff}, 0x8) sendto$inet6(r4, &(0x7f0000000100)="bc", 0x1, 0x4, &(0x7f00000000c0)={0xa, 0x4e20, 0x8, @dev={0xfe, 0x80, '\x00', 0xf}, 0x1}, 0x1c) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x48, 0x0, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_TAGLST={0x24, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x1}, {0x5}, {0x5, 0x3, 0x80}, {0x5, 0x3, 0x1}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}]}, 0x48}}, 0x0) close(r4) socketpair(0x1a, 0x3, 0x5, &(0x7f0000000180)) sendto$inet6(0xffffffffffffffff, &(0x7f00000002c0)="9e", 0x1a000, 0x0, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 1m23.813835701s ago: executing program 1 (id=1127): socket(0x40000000015, 0x5, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000580)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000001db685000000230000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb70200000a000000b703000000000000850000007500000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='percpu_free_percpu\x00', r0}, 0x10) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000b00)=ANY=[@ANYBLOB="0600000004000000be7000005c0000", @ANYRES32, @ANYBLOB="0000009c2c"], 0x48) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) 1m22.607410389s ago: executing program 1 (id=1145): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000001240)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc000, &(0x7f00000006c0), 0x2, 0x246, &(0x7f0000000ac0)="$eJzs3T9oM2UcB/DvXRJf+75BXnURxD8gIloor5vg8rooFKQUEUGFioiL0gq1xa1xcnHQWaWTSxE3q6N0KS6K4FS1Q10ELQ4WBx0iybVS24ja1Jz0Ph+43l3vee73HLnvkyyXBGisq0muJ2klmU7SSVIcb3B3tVw93F2f2l5I+v0nfiqG7ar9ylG/K0l6SR5KslUWeamdrG4+s/fLzmP3vbnSuff9zaenJnqRh/b3dh8/eG/ujY9mH1z94qsf5opcT/dP13X+ihH/axfJLf9Fsf+Jol33CPgn5l/78OtB7m9Ncs8w/52UqV68t5Zv2OrkgXf/qu/bP355+yTHCpy/fr8zeA/s9YHGKZN0U5QzSartspyZqT7Df9O6XL68tPzq9ItLK4sv1D1TAeelm+w++smlj6+cyP/3rSr/wMU1yP+T8xvfDrYPWnWPBpiIO6rVIP/Tz63dH/mHxpF/aC75h+aSf2gu+Yfmkn9oLvmHC6xztNEbeVj+obnkH5pL/qG5jucfAGiW/qW6n0AG6lL3/AMAAAAAAAAAAAAAAAAAAJy2PrW9cLRMquZn7yT7jyRpj6rfGv4ecXLj8O/ln4tBsz8UVbexPHvXmCcY0wc1P31903f11v/8znrrry0mvdeTXGu3T99/xeH9d3Y3/83xzvNjFviXihP7Dz812fon/bZRb/3ZneTTwfxzbdT8U+a24Xr0/NM9/hXLZ/TKr2OeAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgIn5PQAA//8PK23M") unshare(0x8040480) r1 = openat(0xffffffffffffff9c, 0x0, 0x40000, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) ioctl$EXT4_IOC_GROUP_EXTEND(r2, 0x40086607, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000c80)='kmem_cache_free\x00', r0}, 0x10) r3 = syz_clone3(&(0x7f0000001880)={0x100000200, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) tgkill(r3, r3, 0x21) wait4(0x0, 0x0, 0x40000000, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r4, 0x0, 0x0) r5 = socket$inet6(0xa, 0x1, 0x84) open_tree(0xffffffffffffff9c, &(0x7f0000000300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1000) bind$inet6(r5, &(0x7f0000ed3fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendmsg$rds(r1, &(0x7f0000000700)={&(0x7f0000000000)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000f40)=[{&(0x7f0000000400)=""/133, 0x85}, {&(0x7f00000004c0)=""/203, 0xcb}, {&(0x7f00000005c0)=""/225, 0xe1}, {&(0x7f0000001900)=""/4096, 0x1000}, {&(0x7f0000000840)=""/182, 0xb6}, {&(0x7f0000000900)=""/242, 0xf2}, {&(0x7f0000000d40)=""/206, 0xce}, {&(0x7f0000002900)=""/4096, 0x1000}, {&(0x7f0000000a00)=""/184, 0xb8}, {0x0}], 0xa, &(0x7f0000001000)=[@mask_cswp={0x58, 0x114, 0x9, {{0x2, 0x5}, &(0x7f0000000140)=0xd, &(0x7f0000000240)=0x8, 0x73, 0x0, 0x4000000000000, 0x9, 0x42, 0x5}}], 0x58, 0x4000}, 0x24040080) setsockopt$sock_linger(r5, 0x1, 0xd, &(0x7f0000000040)={0x1, 0xffffffff}, 0x8) sendto$inet6(r5, &(0x7f0000000100)="bc", 0x1, 0x4, &(0x7f00000000c0)={0xa, 0x4e20, 0x8, @dev={0xfe, 0x80, '\x00', 0xf}, 0x1}, 0x1c) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r6) sendmsg$NLBL_CIPSOV4_C_ADD(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x48, r7, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_TAGLST={0x24, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x1}, {0x5}, {0x5, 0x3, 0x80}, {0x5, 0x3, 0x1}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}]}, 0x48}}, 0x0) close(r5) socketpair(0x1a, 0x3, 0x5, &(0x7f0000000180)) sendto$inet6(r4, &(0x7f00000002c0)="9e", 0x1a000, 0x0, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 1m22.55551793s ago: executing program 34 (id=1145): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000001240)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc000, &(0x7f00000006c0), 0x2, 0x246, &(0x7f0000000ac0)="$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") unshare(0x8040480) r1 = openat(0xffffffffffffff9c, 0x0, 0x40000, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) ioctl$EXT4_IOC_GROUP_EXTEND(r2, 0x40086607, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000c80)='kmem_cache_free\x00', r0}, 0x10) r3 = syz_clone3(&(0x7f0000001880)={0x100000200, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) tgkill(r3, r3, 0x21) wait4(0x0, 0x0, 0x40000000, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r4, 0x0, 0x0) r5 = socket$inet6(0xa, 0x1, 0x84) open_tree(0xffffffffffffff9c, &(0x7f0000000300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1000) bind$inet6(r5, &(0x7f0000ed3fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendmsg$rds(r1, &(0x7f0000000700)={&(0x7f0000000000)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000f40)=[{&(0x7f0000000400)=""/133, 0x85}, {&(0x7f00000004c0)=""/203, 0xcb}, {&(0x7f00000005c0)=""/225, 0xe1}, {&(0x7f0000001900)=""/4096, 0x1000}, {&(0x7f0000000840)=""/182, 0xb6}, {&(0x7f0000000900)=""/242, 0xf2}, {&(0x7f0000000d40)=""/206, 0xce}, {&(0x7f0000002900)=""/4096, 0x1000}, {&(0x7f0000000a00)=""/184, 0xb8}, {0x0}], 0xa, &(0x7f0000001000)=[@mask_cswp={0x58, 0x114, 0x9, {{0x2, 0x5}, &(0x7f0000000140)=0xd, &(0x7f0000000240)=0x8, 0x73, 0x0, 0x4000000000000, 0x9, 0x42, 0x5}}], 0x58, 0x4000}, 0x24040080) setsockopt$sock_linger(r5, 0x1, 0xd, &(0x7f0000000040)={0x1, 0xffffffff}, 0x8) sendto$inet6(r5, &(0x7f0000000100)="bc", 0x1, 0x4, &(0x7f00000000c0)={0xa, 0x4e20, 0x8, @dev={0xfe, 0x80, '\x00', 0xf}, 0x1}, 0x1c) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r6) sendmsg$NLBL_CIPSOV4_C_ADD(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x48, r7, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_TAGLST={0x24, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x1}, {0x5}, {0x5, 0x3, 0x80}, {0x5, 0x3, 0x1}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}]}, 0x48}}, 0x0) close(r5) socketpair(0x1a, 0x3, 0x5, &(0x7f0000000180)) sendto$inet6(r4, &(0x7f00000002c0)="9e", 0x1a000, 0x0, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 51.061869097s ago: executing program 6 (id=1572): gettid() bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x3, 0x4, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x200}, [@call={0x85, 0x0, 0x0, 0x1d}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000100)='sched_switch\x00', 0xffffffffffffffff, 0x0, 0x2}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x8000f28, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r1, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008800000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x11, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x1000002, 0x4012831, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000a44000/0x4000)=nil, 0x4000, 0x0, 0xbc32038f2d035af6, 0xffffffffffffffff, 0x2882c000) syz_open_procfs(0x0, &(0x7f0000000580)='smaps_rollup\x00') madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x14) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x34, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000e40)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r4}, 0x10) r5 = socket$rds(0x15, 0x5, 0x0) bind$rds(r5, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) 50.609398714s ago: executing program 6 (id=1583): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffff"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000380), 0x1, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='kfree\x00', r1, 0x0, 0x2}, 0x18) syz_mount_image$ext4(&(0x7f0000001a00)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x410, &(0x7f0000001980)={[{@noload}, {@resuid={'resuid', 0x3d, 0xee01}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2e}}, {@lazytime}, {@quota}, {@errors_remount}]}, 0x3, 0x443, &(0x7f0000000940)="$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") 50.473267416s ago: executing program 6 (id=1585): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000001240)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc000, &(0x7f00000006c0), 0x2, 0x246, &(0x7f0000000ac0)="$eJzs3T9oM2UcB/DvXRJf+75BXnURxD8gIloor5vg8rooFKQUEUGFioiL0gq1xa1xcnHQWaWTSxE3q6N0KS6K4FS1Q10ELQ4WBx0iybVS24ja1Jz0Ph+43l3vee73HLnvkyyXBGisq0muJ2klmU7SSVIcb3B3tVw93F2f2l5I+v0nfiqG7ar9ylG/K0l6SR5KslUWeamdrG4+s/fLzmP3vbnSuff9zaenJnqRh/b3dh8/eG/ujY9mH1z94qsf5opcT/dP13X+ihH/axfJLf9Fsf+Jol33CPgn5l/78OtB7m9Ncs8w/52UqV68t5Zv2OrkgXf/qu/bP355+yTHCpy/fr8zeA/s9YHGKZN0U5QzSartspyZqT7Df9O6XL68tPzq9ItLK4sv1D1TAeelm+w++smlj6+cyP/3rSr/wMU1yP+T8xvfDrYPWnWPBpiIO6rVIP/Tz63dH/mHxpF/aC75h+aSf2gu+Yfmkn9oLvmHC6xztNEbeVj+obnkH5pL/qG5jucfAGiW/qW6n0AG6lL3/AMAAAAAAAAAAAAAAAAAAJy2PrW9cLRMquZn7yT7jyRpj6rfGv4ecXLj8O/ln4tBsz8UVbexPHvXmCcY0wc1P31903f11v/8znrrry0mvdeTXGu3T99/xeH9d3Y3/83xzvNjFviXihP7Dz812fon/bZRb/3ZneTTwfxzbdT8U+a24Xr0/NM9/hXLZ/TKr2OeAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgIn5PQAA//8PK23M") unshare(0x8040480) r1 = openat(0xffffffffffffff9c, 0x0, 0x40000, 0x0) io_setup(0x9c0b, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) ioctl$EXT4_IOC_GROUP_EXTEND(r2, 0x40086607, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000c80)='kmem_cache_free\x00', r0}, 0x10) r3 = syz_clone3(&(0x7f0000001880)={0x100000200, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) tgkill(r3, r3, 0x21) wait4(0x0, 0x0, 0x40000000, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r4, 0x0, 0x0) r5 = socket$inet6(0xa, 0x1, 0x84) open_tree(0xffffffffffffff9c, &(0x7f0000000300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1000) bind$inet6(r5, &(0x7f0000ed3fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendmsg$rds(r1, &(0x7f0000000700)={&(0x7f0000000000)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000f40)=[{&(0x7f0000000400)=""/133, 0x85}, {&(0x7f00000004c0)=""/203, 0xcb}, {&(0x7f00000005c0)=""/225, 0xe1}, {&(0x7f0000001900)=""/4096, 0x1000}, {&(0x7f0000000840)=""/182, 0xb6}, {&(0x7f0000000900)=""/242, 0xf2}, {&(0x7f0000000d40)=""/206, 0xce}, {&(0x7f0000002900)=""/4096, 0x1000}, {&(0x7f0000000a00)=""/184, 0xb8}, {0x0}], 0xa, &(0x7f0000001000)=[@mask_cswp={0x58, 0x114, 0x9, {{0x2, 0x5}, &(0x7f0000000140)=0xd, &(0x7f0000000240)=0x8, 0x73, 0x0, 0x4000000000000, 0x9, 0x42, 0x5}}], 0x58, 0x4000}, 0x24040080) setsockopt$sock_linger(r5, 0x1, 0xd, &(0x7f0000000040)={0x1, 0xffffffff}, 0x8) sendto$inet6(r5, &(0x7f0000000100)="bc", 0x1, 0x4, &(0x7f00000000c0)={0xa, 0x4e20, 0x8, @dev={0xfe, 0x80, '\x00', 0xf}, 0x1}, 0x1c) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r6) sendmsg$NLBL_CIPSOV4_C_ADD(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x48, r7, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_TAGLST={0x24, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x1}, {0x5}, {0x5, 0x3, 0x80}, {0x5, 0x3, 0x1}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}]}, 0x48}}, 0x0) close(r5) socketpair(0x1a, 0x3, 0x5, &(0x7f0000000180)) sendto$inet6(r4, &(0x7f00000002c0)="9e", 0x1a000, 0x0, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 50.21185442s ago: executing program 6 (id=1586): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000001240)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc000, &(0x7f00000006c0), 0x2, 0x246, &(0x7f0000000ac0)="$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") unshare(0x8040480) r1 = openat(0xffffffffffffff9c, 0x0, 0x40000, 0x0) io_setup(0x9c0b, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) ioctl$EXT4_IOC_GROUP_EXTEND(r2, 0x40086607, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000c80)='kmem_cache_free\x00', r0}, 0x10) r3 = syz_clone3(&(0x7f0000001880)={0x100000200, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) tgkill(r3, r3, 0x21) wait4(0x0, 0x0, 0x40000000, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r4, 0x0, 0x0) r5 = socket$inet6(0xa, 0x1, 0x84) open_tree(0xffffffffffffff9c, &(0x7f0000000300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1000) bind$inet6(r5, &(0x7f0000ed3fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendmsg$rds(r1, &(0x7f0000000700)={&(0x7f0000000000)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000f40)=[{&(0x7f0000000400)=""/133, 0x85}, {&(0x7f00000004c0)=""/203, 0xcb}, {&(0x7f00000005c0)=""/225, 0xe1}, {&(0x7f0000001900)=""/4096, 0x1000}, {&(0x7f0000000840)=""/182, 0xb6}, {&(0x7f0000000900)=""/242, 0xf2}, {&(0x7f0000000d40)=""/206, 0xce}, {&(0x7f0000002900)=""/4096, 0x1000}, {&(0x7f0000000a00)=""/184, 0xb8}, {0x0}], 0xa, &(0x7f0000001000)=[@mask_cswp={0x58, 0x114, 0x9, {{0x2, 0x5}, &(0x7f0000000140)=0xd, &(0x7f0000000240)=0x8, 0x73, 0x0, 0x4000000000000, 0x9, 0x42, 0x5}}], 0x58, 0x4000}, 0x24040080) setsockopt$sock_linger(r5, 0x1, 0xd, &(0x7f0000000040)={0x1, 0xffffffff}, 0x8) sendto$inet6(r5, &(0x7f0000000100)="bc", 0x1, 0x4, &(0x7f00000000c0)={0xa, 0x4e20, 0x8, @dev={0xfe, 0x80, '\x00', 0xf}, 0x1}, 0x1c) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r6) sendmsg$NLBL_CIPSOV4_C_ADD(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x48, r7, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_TAGLST={0x24, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x1}, {0x5}, {0x5, 0x3, 0x80}, {0x5, 0x3, 0x1}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}]}, 0x48}}, 0x0) close(r5) socketpair(0x1a, 0x3, 0x5, &(0x7f0000000180)) sendto$inet6(r4, &(0x7f00000002c0)="9e", 0x1a000, 0x0, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 49.4727319s ago: executing program 6 (id=1595): bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='kfree\x00', r0, 0x0, 0x2}, 0x18) syz_mount_image$ext4(&(0x7f0000001a00)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x410, &(0x7f0000001980)={[{@noload}, {@resuid={'resuid', 0x3d, 0xee01}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2e}}, {@lazytime}, {@quota}, {@errors_remount}]}, 0x3, 0x443, &(0x7f0000000940)="$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") 48.168431709s ago: executing program 6 (id=1609): pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x8000) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r0, 0x0, 0x7}, 0x18) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="4000000010001fff000000000000000000060000", @ANYRES32=0x0, @ANYBLOB="81ffffff00000000180012800e0001007769726567756172640000000400028008000a00", @ANYBLOB="49bd"], 0x40}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x8b7c, 0x800, 0x200007, 0x22}, &(0x7f0000000940)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000440)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0xa, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r2, 0x47f9, 0x6d7, 0x45, 0x0, 0x0) 48.167986849s ago: executing program 35 (id=1609): pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x8000) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r0, 0x0, 0x7}, 0x18) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="4000000010001fff000000000000000000060000", @ANYRES32=0x0, @ANYBLOB="81ffffff00000000180012800e0001007769726567756172640000000400028008000a00", @ANYBLOB="49bd"], 0x40}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x8b7c, 0x800, 0x200007, 0x22}, &(0x7f0000000940)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000440)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0xa, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r2, 0x47f9, 0x6d7, 0x45, 0x0, 0x0) 4.383281265s ago: executing program 7 (id=2203): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000dd0000000000003b810000850000006d000000a500000050000000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000340)='kfree\x00', r0, 0x0, 0x3e}, 0x18) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x2000000, 0x14, 0x0, &(0x7f0000000080)="f6f4e9a10000502468da5eb1c6b2feff8833c000", 0x0, 0x86, 0x0, 0x31, 0x0, &(0x7f00000001c0)="daf9e846ab156efc71b59652333536dbfd26a6d0546366e36eb77dd0aaa2dbe567d168904cf0d5bce1771889c98ffc0abf", 0x0}, 0x50) 4.288291576s ago: executing program 7 (id=2205): prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') prctl$PR_SET_NAME(0xf, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000000)='sys_enter\x00', 0xffffffffffffffff, 0x0, 0x91}, 0x18) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0xb) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x46, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='sched_switch\x00'}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x2000000}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r4}, 0x10) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="140100002800010004000040fcdbdf2503"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x4000000) 3.388809259s ago: executing program 7 (id=2217): r0 = memfd_create(&(0x7f0000000bc0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85Q\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~Mx\x02\x00(v\xe6`\x026\xfcgC\xb5\xf0\x13.zb\xc5bj+@\x00\x00\x00\x00\x00\x00\x00.\xd4`=z\xd1n\x8d\x8f\xa5hS\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{\'\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x80\x1ch\x89\xe7\xdd]q,\xec\xc4\xa5\x93\xe5,\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+}5dy\xb1\xef\xf1m\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc00xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x5b, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) syz_mount_image$iso9660(&(0x7f0000000180), &(0x7f0000000280)='./file0\x00', 0x14806, &(0x7f00000000c0)=ANY=[@ANYRES32=0x0], 0x0, 0x70a, &(0x7f00000232c0)="$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") bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000001c0)='mm_page_free\x00', 0xffffffffffffffff, 0x0, 0x6}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3, 0x0, 0x4000000000}, 0x18) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x1010e, &(0x7f0000000540)={[{@errors_remount}, {@lazytime}, {@oldalloc}, {@block_validity}, {@block_validity}, {@auto_da_alloc}]}, 0x1, 0x478, &(0x7f0000001080)="$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") mount(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f00000000c0)='tracefs\x00', 0x0, 0x0) 1.590770356s ago: executing program 7 (id=2245): r0 = syz_clone(0x25000000, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) rseq(&(0x7f0000000300), 0x20, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r2 = syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x11, &(0x7f0000000100)={[{@noblock_validity}, {@stripe={'stripe', 0x3d, 0x2}}, {@norecovery}, {@min_batch_time={'min_batch_time', 0x3d, 0x71d}}, {@abort}]}, 0x1, 0x610, &(0x7f0000000a40)="$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") mlockall(0x2) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3000003, 0x200000006c832, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) r3 = syz_pidfd_open(r0, 0x0) r4 = socket(0xa, 0x3, 0x3a) setsockopt$PNPIPE_HANDLE(r4, 0x113, 0x3, &(0x7f0000000000)=0x4b9, 0x4) setns(r3, 0x24020000) syz_mount_image$ext4(&(0x7f00000000c0)='ext3\x00', &(0x7f0000000040)='./file0\x00', 0x2008885, &(0x7f0000000440)={[], [{@obj_type={'obj_type', 0x3d, 'min_batch_time'}}, {@dont_hash}, {@fsname={'fsname', 0x3d, '#:^\''}}, {@smackfsdef={'smackfsdef', 0x3d, 'ext4\x00'}}]}, 0x1, 0x652, &(0x7f0000002440)="$eJzs3c9rVNsdAPDvnUwmv9omSmlrFzVQikJrYqIWKYXquiL2x67dpCaKNRoxKW1EMILdFLrrQuiqi9o/o4Jb/4EuCqWrxwN5vOfi+ZDnPO7N3Ml1Mj/ya2bi5POBMeecm3vPuep3zr1nzpkbwJE1HREzEXEiIu4lEZOFbeXsz1L2S+nvvf704fX0lUS1+qtPknj4KNkoHiup/Zyo7fzl5GbR8aHt9a6uP7i9sLy8dL+Wn127c292df3BmVt3Fm4u3Vy6O//j+YsXzl+4OHe24zmMtdl2rJC+8uT3f5z8y9Xf/PPvb5O5f/33ahKX0rPLpOfVuO9Ix5rbm47pqG56UyxP/14v7vPYh8Xnk/n/ky1JYwGHWhoDwxHx7ZiMocK/5mT8+Rd9bRjQVdUk8j4KOHKSPcX/6ME3BOix/Dogv7dvdh/cRJM7euBD8+ry5oDUZuwPR0Qe/+VszC9iNBsbGH+dvDfOk0RE55G5ztI6Xr64+iR9RYtxOKA7Nh7no9yN/X+SxeZUjGa58del9+K/VHil5b/cTaWVreR0wybxD72z8TgivlPr/yuxm/gvRyH+f7fH+sU/AAAAAAAAHJznlyPiR83m/5Xq838qTeb/TETEpQOov/Pnf6V8iV5yANUBBa8uR/y06fzfPOxiaqiW+3o2H2A4uXFreelsRHwjIk7H8Eian2s4bqmQPvPX409b1V+c/5e+0vpfvihOLy59XG5YiLu4sLbg3QD279XjiO9m839P1kren/+T9v9JQ/+fvx/c22Edx3/w7FoxX61WH+Xp5vG/ORcY6K7qPyJONe3/tzrYpP33c8xm1wOz+VXBdt97W1ho1ED8Q/+k/f946/ivh239+3pWd3f8SkScWy+3Cv8dxH/z6/9K8uuhKCwl+NPC2tr9uYhKcmV7+fzu2gyDKo+HPF7S+D/9/fbjf/Xr/0IcjkXERtMaKttKvvVu4v+t2qP/h/5J43+x/fX/VFLr/yPr/+sXAjtOzD+b+nd2pCbfC3dtR/3/+axPP10rycb/gJrStpKdBmhfmgsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAH7hSRHwtktJMPV0qzcxETETEN2O8tLyyuvbDGyt/uLuYbsue/1/Kn/Q7uZlP8uf/TxXy8w35cxFxLCL+NjSW5Weurywv9vvkAQAAAAAAAAAAAAAAAAAA4JCYyNb8V0ca1/+nPhrqd+uArivXfnaI99FetAXorfKe96yOHGhDgJ7be/wDH7qdx/9wV9sB9F7r+H/ztprJ80lS3PpZl9sFdJ/rfzi6CvFf2cVuPh6EAdCk/5/uRzuAXms7pve0nvLpPwwk9/8AAAAAADBQjp18/p8kIjZ+Mpa9ojAHyGR/GGylfjcA6BtzeOHoKq/0uwVAv3S+x/95T9oB9M/Wuv4vqs22b87+H2u7JwAAAAAAAAAAAADQXadOWP8PR9X29f/PCmlz+2GQtVn/3yz4fV0ADJDWj/7Q98Ogc48PdOrtWz/9z3UCAAAAAAAAAAAAAPTM6IPbC8vLS/dX1/eZiIj/VZOI/R6nReK3DSUnI+JnXaqrq4mNhUPRjANNvOvOkYcj4nCc4K4ToxGxj93zr+Do41n0+X0JAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACo+yoAAP//urkn6A==") gettid() r5 = signalfd4(r2, &(0x7f0000000240)={[0x8]}, 0x8, 0x800) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3f, 0x3, 0x0, 0x0, 0x0, 0xb, 0xe1dc8, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000280), 0x9}, 0x4c58, 0x0, 0x80, 0x1, 0x0, 0x2, 0x4, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, r5, 0x0) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040), 0x106}}, 0x20) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000040), 0x81}, 0x38) socket(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', 0xffffffffffffffff, 0x0, 0x6}, 0x18) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b00)=ANY=[@ANYBLOB="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"], 0x548}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) move_mount(0xffffffffffffffff, 0x0, 0xffffffffffffff9c, 0x0, 0x20) 1.527502847s ago: executing program 5 (id=2247): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000900)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000060000000000000018110000746d66315aac5a573d0d8e", @ANYRES32, @ANYRES64], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="050000000610000008000000ae00000000000000", @ANYRES32=0x1, @ANYBLOB="ff27070200"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000417559768c802c09b10d3d1e6f67c633bce269016d081ae58ad386af1d7da6a5f5aa998f1cd4433deef5a5aa05ad5b3f692beb7487e353cedbd1933b117fe1b649bfec15d96256e6057f3bb6f6e0eb49598b9e28ec59c1ea6a124777e95ad7b7801b28ff22834d3131f407bd6314bd08205cf555dc042c6fdc2a94867415caba7959480547d4152384d8e84f1b50b6721456bd2c6505521d"], 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0d00000002000000040000000640000005000000", @ANYRES32=r3, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\b'], 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0x3, &(0x7f0000000400)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x8, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f00000001c0)='kfree\x00', r4, 0x0, 0x4}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000d00)=ANY=[@ANYBLOB="180800000000000000000000000000008510000006", @ANYRES32, @ANYBLOB="00000000000000006600020000000000180000000000000000000000000000009500040000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095", @ANYRESHEX=r1], &(0x7f00000003c0)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r6, 0x0, &(0x7f00000000c0)=0x0) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000800000034596deff2"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r10 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), r8) ioctl$sock_SIOCGIFINDEX_802154(r8, 0x8933, &(0x7f0000000300)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_SET_MAX_CSMA_BACKOFFS(r8, &(0x7f0000000540)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000480)={&(0x7f00000005c0)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="000428bd7000fcdbdf25110000000800790300", @ANYRES32=r11, @ANYBLOB="05001200000000000c00060003000000000000000c000600030000000300000005001200060000000500120009000000"], 0x4c}, 0x1, 0x0, 0x0, 0x2000}, 0x800) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kmem_cache_free\x00', r9}, 0x10) r12 = syz_genetlink_get_family_id$nfc(&(0x7f0000000200), r8) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYRES16=r9], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @lirc_mode2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0x5c, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007010000b8ffffffb702000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, @void, @value}, 0x94) r13 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000200)='fdb_delete\x00', r13}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r14, 0x8924, &(0x7f0000000000)={'bridge_slave_0\x00', @random="010000201000"}) sendmsg$NFC_CMD_DEV_UP(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r12, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r7}]}, 0x1c}}, 0x0) write$nci(r6, &(0x7f0000000340)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00'], 0x7) sendmsg$NFT_BATCH(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000010006000000000000000500000a14000000020a01"], 0x3c}, 0x1, 0x0, 0x0, 0x4048000}, 0x880) 1.396691939s ago: executing program 5 (id=2248): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000001240)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc000, &(0x7f00000006c0), 0x2, 0x246, &(0x7f0000000ac0)="$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") unshare(0x8040480) r1 = openat(0xffffffffffffff9c, 0x0, 0x40000, 0x0) io_setup(0x9c0b, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) ioctl$EXT4_IOC_GROUP_EXTEND(r2, 0x40086607, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000c80)='kmem_cache_free\x00', r0}, 0x10) r3 = syz_clone3(&(0x7f0000001880)={0x100000200, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) tgkill(r3, r3, 0x21) wait4(0x0, 0x0, 0x40000000, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r4, 0x0, 0x0) r5 = socket$inet6(0xa, 0x1, 0x84) open_tree(0xffffffffffffff9c, &(0x7f0000000300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1000) bind$inet6(r5, &(0x7f0000ed3fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendmsg$rds(r1, &(0x7f0000000700)={&(0x7f0000000000)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000f40)=[{&(0x7f0000000400)=""/133, 0x85}, {&(0x7f00000004c0)=""/203, 0xcb}, {&(0x7f00000005c0)=""/225, 0xe1}, {&(0x7f0000001900)=""/4096, 0x1000}, {&(0x7f0000000840)=""/182, 0xb6}, {&(0x7f0000000900)=""/242, 0xf2}, {&(0x7f0000000d40)=""/206, 0xce}, {&(0x7f0000002900)=""/4096, 0x1000}, {0x0}, {0x0}], 0xa, &(0x7f0000001000)=[@mask_cswp={0x58, 0x114, 0x9, {{0x2, 0x5}, &(0x7f0000000140)=0xd, &(0x7f0000000240)=0x8, 0x73, 0x0, 0x4000000000000, 0x9, 0x42, 0x5}}], 0x58, 0x4000}, 0x24040080) setsockopt$sock_linger(r5, 0x1, 0xd, &(0x7f0000000040)={0x1, 0xffffffff}, 0x8) sendto$inet6(r5, &(0x7f0000000100)="bc", 0x1, 0x4, &(0x7f00000000c0)={0xa, 0x4e20, 0x8, @dev={0xfe, 0x80, '\x00', 0xf}, 0x1}, 0x1c) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r6) sendmsg$NLBL_CIPSOV4_C_ADD(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x48, r7, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_TAGLST={0x24, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x1}, {0x5}, {0x5, 0x3, 0x80}, {0x5, 0x3, 0x1}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}]}, 0x48}}, 0x0) close(r5) socketpair(0x1a, 0x3, 0x5, &(0x7f0000000180)) sendto$inet6(r4, &(0x7f00000002c0)="9e", 0x1a000, 0x0, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 1.226997982s ago: executing program 3 (id=2254): setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000080)='cdg\x00', 0x4) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x3, 0x0, @loopback}, 0x1c) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000e40)=[{{0x0, 0x0, &(0x7f0000002c40)=[{&(0x7f00000002c0)=';', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000380)="12", 0x1}], 0x1}}], 0x2, 0x10) shutdown(0xffffffffffffffff, 0x2) 1.186445362s ago: executing program 3 (id=2256): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x109000, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r1 = syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800304, &(0x7f0000000100)={[{@stripe={'stripe', 0x3d, 0x1}}, {@block_validity}]}, 0xff, 0x4a1, &(0x7f0000000400)="$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") prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x1, 0x0, 0x7ffc1ffb}]}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r2, 0xffffffffffffffff}, &(0x7f0000000800), &(0x7f0000000840)}, 0x20) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, r1, &(0x7f0000000ac0)={0xffffffffffffffff, r3, 0x1}) 955.444035ms ago: executing program 8 (id=2262): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r1}, 0x10) sync_file_range(0xffffffffffffffff, 0x6, 0x10000000000000, 0x2) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x1000000, &(0x7f0000000140), 0x1, 0x509, &(0x7f00000008c0)="$eJzs3c9vm2cdAPCv39aO22ZLN3YABFvZBgVVdRJ3i6YdYJwQQpMQOyLRhcSNothxFDtjCT1kZ65ITOIER/4Azj3BmQuCG5dxQOJHBFqQOBi9r19nbmo3VpPYUfz5SG/f53mft/4+j1M/j/1t6yeAqXUrIvYjohQR70fEXH69kB/xTvdI7/v04OHK4cHDlUJ0Ou/9s5C1p9ei7/ekbuSPWY6IH3wn4seFJ+O2dvc2luv12nZen283tuZbu3t31xvLa7W12ma1urS4tPDWvTerZzbWVxqlvPTlT/6w/42fpt2aza/0j+MsdYdePIqTuhoR3zuPYBNwJR9PadId4ZkkEfFiRLyavf7n4kr20wQALrNOZy46c/11AOCyS7IcWCGp5LmA2UiSSqWbw3sprif1Zqt950FzZ3O1myu7GcXkwXq9tpDnCm9GsZDWF7PyZ/Xqsfq9iHghIn4+cy2rV1aa9dVJvvEBgCl249j6/5+Z7voPAFxy5Ul3AAAYO+s/AEwf6z8ATB/rPwBMn+76f23S3QAAxsjnfwCYPtZ/AJgq33/33fToHObff736we7ORvODu6u11kalsbNSWWlub1XWms217Dt7Gic9Xr3Z3Fp8I3Y+vPnNrVZ7vrW7d7/R3Nls38++1/t+rZjdtT+GkQEAw7zwyqM/F9IV+e1r2RF9ezkUJ9oz4Lwl6S+//9GkuwFMwJVJdwCYGLt9wfQ6xWd86QG4JAZs0dsn6WUKHtfpdDrn1yXgnN3+gvw/TKu+Vd2/AoYpI/8P00v+H6ZXp1MYdc//GPVGAOBik+MHhvz9/4v5+TfliEezg+74+Bw7BQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABdcb//fSr4X+GwkSaUS8VxE3Ixi4cF6vbYQEc9HxJ9mijNpfXHCfQYATiv5WyHf/+v23OuPb/H18o2jYikifvLL937x4XK7vf3HiFLhXzO96+2P8+vV8fceADhZb53Ozn0f5D89eLjSO8bZn79/OyLK3fiHB6U4PIp/Na5m53IUI+L6vwt5vavQl7s4jf2PIuLzg8ZfiNksB1LOasfjp7GfG2v85LH4SdbWPafPxefOoC8wbR6l8887g15/SdzKzoNf/+Vshjq9fP5LH2rlMJsDP4vfm/+uDJn/bo0a443ffbdbuvZk20cRX7wa0Yt92Df/9OIXhsR/fcT4f/nSy68Oa+v8KuJ2DI7fH2u+3diab+3u3V1vLK/V1mqb1erS4tLCW/ferM5nOer54avBP96+8/ywtnT814fEL58w/q+OOP5f/+/9H37lKfG//tqg+Em89JT46Zr4tRHjL1//bXlYWxp/dcj4T/r53xkx/id/3Vsd8VYAYAxau3sby/V6bVtB4QIUSvmfyyH3PKXpGQrpm9iz6/y3xvVElWJw089e6z53x5o6nWeKNWzGOIusG3ARHL3oI+K/k+4MAAAAAAAAAAAAAAAw0Dj+x9KkxwgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMDl9f8AAAD//y7gywE=") r2 = open(&(0x7f0000000000)='./file1\x00', 0x109042, 0x0) r3 = open(&(0x7f00000001c0)='./bus\x00', 0x14b0fc, 0x20) r4 = add_key(&(0x7f0000000100)='syzkaller\x00', &(0x7f0000000200)={'syz', 0x1}, &(0x7f0000000240)="1e292493422f138aa4daf40f1116f08c67", 0x11, 0xfffffffffffffffe) request_key(&(0x7f0000000040)='.request_key_auth\x00', &(0x7f0000000080)={'syz', 0x0}, &(0x7f00000000c0)='ext4\x00', r4) fallocate(r3, 0x0, 0x0, 0x1001f0) copy_file_range(r3, 0x0, r3, &(0x7f0000000840)=0xc615, 0x1000, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r5, 0x0, &(0x7f0000001700)=""/53}, 0x20) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000070000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x2c, r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r7}, 0x10) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'ipvlan0\x00', 0x0}) sendmsg$ETHTOOL_MSG_DEBUG_SET(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010000000000fedbdf250800000018000280140003801000018004000300080001000f0000000c00018008000100", @ANYRES32=r10], 0x38}, 0x1, 0x0, 0x0, 0x4000814}, 0x0) fallocate(0xffffffffffffffff, 0x8, 0x0, 0x4000) ioctl$EXT4_IOC_GET_ES_CACHE(r2, 0xc020662a, &(0x7f00000006c0)={0x80000001, 0x4, 0x6, 0x1}) 922.002136ms ago: executing program 3 (id=2263): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000004700)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000040)=ANY=[@ANYBLOB="9c000000", @ANYBLOB="050427bd7000fcdbdf250100000008000100", @ANYRES32=r2, @ANYBLOB="8000028040000100240001006d6f646500000000000000000000000000000000000000000000000000000000050003000500000010000400"], 0x9c}, 0x1, 0x0, 0x0, 0x4000401}, 0x44084) 912.495406ms ago: executing program 8 (id=2264): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa2000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000003280)=ANY=[@ANYBLOB="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"], 0xb98}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) r5 = getpid() getresgid(&(0x7f0000000840), &(0x7f0000000880)=0x0, &(0x7f00000008c0)) r7 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000900), 0x0, 0x0) sendmsg$unix(r3, &(0x7f0000000940)={&(0x7f0000000180)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f0000000740)=[{&(0x7f0000000280)="98813c86d87413ed6b12d58b6598b790cdb23a79b547db1b30ee28c493f1debb202e98f9c8dc71870795e5478b334a10d788ae8b7f2f18a9deb3f2f32d60bd45d287c76057ec3379b8d7856b", 0x4c}, {&(0x7f0000000200)="089413c0f7a1464755b2f431a62a0c862ca5fc19f153bafc7c0a994b05958e60ed113f3c72effbe34dd96e2dae8a2f9f6c9c38823c9983", 0x37}, {&(0x7f00000006c0)="1f069033a364091903a3f7bf63a52de8b0a6639ffa4511cb278f867d845552cefb02935c3bd2165905d9532f656db332d9b9ee529b6a9582f817486f89512b893986003d7b86", 0x46}], 0x3, &(0x7f0000000b00)=[@rights={{0x24, 0x1, 0x1, [r0, r0, r0, r4, r2]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, r0, r2, r0, r2]}}, @cred={{0x1c, 0x1, 0x2, {r5}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xffffffffffffffff, r6}}}, @rights={{0x1c, 0x1, 0x1, [r0, r1, r7]}}], 0xb0, 0x20008010}, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r8}, 0x10) 859.562527ms ago: executing program 3 (id=2265): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="380100000201010400000000000000000200000a04001980340019800800010042030000080002006008000008"], 0x138}, 0x1, 0x0, 0x0, 0xc9ca58593cbf0410}, 0x40000) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000740)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x40, 0x40, 0xfffffffffffffd68, [@struct={0x4, 0x1, 0x0, 0x4, 0x0, 0x1, [{0xa, 0x3}]}, @int={0x0, 0x0, 0x0, 0x1, 0x5, 0x20}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x2}}]}, {0x0, [0x61, 0x0, 0x2e, 0x2e, 0x61, 0x61, 0x2e, 0x61, 0x0, 0x5f]}}, 0x0, 0x64, 0x0, 0x0, 0x8, 0x0, @void, @value}, 0x28) perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0x3f, 0x1, 0x0, 0x0, 0x0, 0x7, 0x44696, 0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0xa5d4}, 0x4c58, 0x5, 0x1, 0x1, 0x8, 0x20002, 0xb, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$SOCK_DIAG_BY_FAMILY(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0xffffffffffffff74) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x2000038, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f0000000280)='./file0/file0\x00', 0x0, 0x1adc51, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x12f451, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b0000000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400000, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x20, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x62, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='rxrpc_call_reset\x00', r2, 0x0, 0x400000}, 0x18) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000780)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0, 0x40000000, 0x4, 0x0, 0x0, @void, @value, @void, @value}, 0x50) mount$bind(&(0x7f00000000c0)='.\x00', &(0x7f0000000080)='./file0/file0/file0\x00', 0x0, 0x80700a, 0x0) 841.693307ms ago: executing program 8 (id=2266): setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000080)='cdg\x00', 0x4) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x3, 0x0, @loopback}, 0x1c) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000e40)=[{{0x0, 0x0, &(0x7f0000002c40)=[{&(0x7f00000002c0)=';', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000380)="12", 0x1}], 0x1}}], 0x2, 0x10) shutdown(0xffffffffffffffff, 0x2) 836.444137ms ago: executing program 4 (id=2267): r0 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, &(0x7f00000000c0)="ff", 0x1, 0xffffffffffffffff) keyctl$KEYCTL_MOVE(0x1e, r0, 0xffffffffffffffff, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r1 = socket(0x10, 0x3, 0x0) io_uring_register$IORING_REGISTER_PBUF_RING(0xffffffffffffffff, 0x16, &(0x7f0000000340)={&(0x7f0000002000)={[{&(0x7f0000000480)="64972622081ed82dcd2d1c9d36eba532978dfa9d08a9f9a07a917872bb55ea8eb865f965237ac1d4b5053f09032e4c78319afaa874d33ab46888cd73767e7ea4c4f6c77c480361e9a2e0795a6b617e4685e074d19570e467c516ca7a8b45be07a68e95690337436bb80810cd35d447d8503d568bfafa084e2f01b50d819d0c18c855f774f6c261cd3f58329fe40c5d6766cbbcf486f61818f4297f20b4889cd75be6dd3336b76b37bf644e8ce5ff966e35300014fbe466dd448868d9cc5df031bf73a2f61239bda271b576b1", 0xcc}, {&(0x7f0000000240)="75c33b52067be88841d5d051c96bbf327a5b0afce9536007814ba4de83755779bd", 0x21, 0x1}, {&(0x7f0000000740)="329fe7629cb15d4e1aca8ba51bc2599b0af7f61834399df6a73e0a16392b94be10af6eeadbfc97286078c5e9e1ff2a31cd8758dd0e360e166d4d90faf93f50735c05087d5ab8befa6dcb571a7dc3fbb5ce5992ad58fd0b6c41c853bc482aaa8b9aad2df303b5b03601e07794dc861b9ab6ad661dd331d5fb7eb9ddde869dcd6a57f92c365cbe6ab1ceb2c4f3b2d0e894ef122ffec96a60e6a31157a0052f82cd0dcb85e89716f2fde37328adc237beca849687dbfc41db969e612cf2a6cd2ab85b513d73f38b7cdf0fa52a89405b33d552b49e2c780250841b40", 0xda}, {&(0x7f0000000840)="9148e0df94bb63026795253fc0e04f13423136ec5149a99a14727b55640e7d6624da35b63df65d9fe1e7e86a3bbcffcd3ed20fecb62c9c443474bff1d78c8dca8e71405fce1e85ce7037fadfd9ac9294378941f105ed63208e87a047b17f7d0627d967b94c43f4e1f5b841039a3896368e52a704e258544a237f15e91dbeec32bf7b861aa8a22c6e8554d624489444a6ce6d952d23f157cb054d", 0x9a, 0x3}, {&(0x7f0000000900)="71defead065610219775df2b34e09fe58cdd274d3068b8a89864dcf27418a1a9e3ba5205909d25e6a453627eb0ecaeaee06c8829322f5351cd28cdbcdaf3930451a9cc73a80542e424b6b255598ba3f4408a61acb142529652a7cc15156c6bd035f069289e39be27606198d863b2857260ff4844ffd9c37c0373f697ba4a029685783748400849a37b6a5ff3e34468639e8f09544ed0a05b8b614ef5bd70b088869d40abe55ecd579ed77484ae4051ac936649060d0f46074ba9446cc50e92933edb594e6aa1da2c7fcb26d7f7c42e5502ab6e4ed8a8b8701c", 0xd9}]}, 0x5, 0x3}, 0x1) sendto$inet6(r1, &(0x7f0000000080)="7800000018002507b9409b14ffff00000204be04020b06050e020909430009003f00064c0a0006000d0085a168d0bf46d32345653600648d0a000500eb16000049935ade4a460c89b6ec0cff3959547f509058ba86c902000000004a32000400160004000a0000000000e000e218d1ddf66ed538f2523250", 0x78, 0x0, 0x0, 0x0) linkat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x1400) keyctl$restrict_keyring(0x1d, 0x0, 0x0, 0x0) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, &(0x7f0000000040)='asymmetric\x00', &(0x7f0000000000)=@chain) r2 = add_key$keyring(&(0x7f0000000000), &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) r3 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r3) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r5, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r4, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) r6 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="d8000000140081044e81f782db44b9040a11080211000000040000a118000200e000000000000e1208000f0100810401a80016ea1f000940032e5f54c92011148ed08734843cb12b00000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c0100000000000000cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) add_key(&(0x7f0000000140)='ceph\x00', &(0x7f0000000180), &(0x7f0000000600)="f6d6cfd355540d06beb0ef82a4b55d5812f0ff17853808475c97983808b146c2b79b", 0x22, r2) keyctl$restrict_keyring(0x1d, r2, &(0x7f0000000580)='pkcs7_test\x00', &(0x7f00000005c0)='hugetlb.2MB.rsvd.max_usage_in_bytes\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x18, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x141a82, 0x0) openat$cgroup_int(r7, &(0x7f0000000080)='hugetlb.2MB.rsvd.max_usage_in_bytes\x00', 0x2, 0x0) r8 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ptype\x00') preadv(r8, &(0x7f0000000100)=[{&(0x7f0000000140)=""/197, 0xc5}], 0x1, 0x1036, 0x1) r9 = fsopen(&(0x7f0000000000)='9p\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r9, 0x1, &(0x7f0000000040)='source', &(0x7f0000001bc0)='//\xf2/\x06\b/\xdf/o\xdc\xea\x95\x9a\x82\x10\x97W\x8f7\x98\x9b\\/\\\xf9\rmD\x94)U\xdb\x15X.I\n}\xf3\x9d\xe4_\x05\x9cqf4I^#b?9\xde\xafu\'\x83L\xe0\x97\xe1n_\xa4%\xb1\x97\x93\xafv\xce/\\\xb4L\xf2_\xa7\xfb\xf4\x84\x1fA\xeas^\xef\xa2\x85\xa3!\xfb\x93\xd7R\xab2\x1eW\xe9h\x9b\xf7ul\xf9D\xd4\x82X5\x13\xaa\x87\xf9\xba\xa9m\x14\x14R_\x9a\\>4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6\xc5n\xeb\xab\xf70\x99\xef\x8b4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6h\xd1\x1d\xac\xaa\xfb\xc7Y\xcd\xc5n\xeb\xab\xf70\x99\xef\x8b0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=@newtfilter={0x24, 0x11, 0x1, 0x691522eb, 0x0, {0x0, 0x0, 0x74, r5, {0x10, 0x4}, {}, {0x5}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff) 755.221898ms ago: executing program 3 (id=2269): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000001240)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc000, &(0x7f00000006c0), 0x2, 0x246, &(0x7f0000000ac0)="$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") unshare(0x8040480) r1 = openat(0xffffffffffffff9c, 0x0, 0x40000, 0x0) io_setup(0x9c0b, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) ioctl$EXT4_IOC_GROUP_EXTEND(r2, 0x40086607, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000c80)='kmem_cache_free\x00', r0}, 0x10) r3 = syz_clone3(&(0x7f0000001880)={0x100000200, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) tgkill(r3, r3, 0x21) wait4(0x0, 0x0, 0x40000000, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r4, 0x0, 0x0) r5 = socket$inet6(0xa, 0x1, 0x84) open_tree(0xffffffffffffff9c, &(0x7f0000000300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1000) bind$inet6(r5, &(0x7f0000ed3fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendmsg$rds(r1, 0x0, 0x24040080) setsockopt$sock_linger(r5, 0x1, 0xd, &(0x7f0000000040)={0x1, 0xffffffff}, 0x8) sendto$inet6(r5, &(0x7f0000000100)="bc", 0x1, 0x4, &(0x7f00000000c0)={0xa, 0x4e20, 0x8, @dev={0xfe, 0x80, '\x00', 0xf}, 0x1}, 0x1c) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x48, 0x0, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_TAGLST={0x24, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x1}, {0x5}, {0x5, 0x3, 0x80}, {0x5, 0x3, 0x1}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}]}, 0x48}}, 0x0) close(r5) socketpair(0x1a, 0x3, 0x5, &(0x7f0000000180)) sendto$inet6(r4, &(0x7f00000002c0)="9e", 0x1a000, 0x0, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 724.301699ms ago: executing program 4 (id=2270): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000380), 0x1, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='kfree\x00', r1, 0x0, 0x2}, 0x18) add_key(&(0x7f0000000440)='asymmetric\x00', 0x0, &(0x7f0000000280)='0', 0x1, 0x0) syz_mount_image$ext4(&(0x7f0000001a00)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x410, &(0x7f0000001980)={[{@noload}, {@resuid={'resuid', 0x3d, 0xee01}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2e}}, {@lazytime}, {@quota}, {@errors_remount}]}, 0x3, 0x443, &(0x7f0000000940)="$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") 707.115009ms ago: executing program 8 (id=2271): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r0, 0x0, 0x0) r1 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'ipvlan0\x00', 0x0}) r3 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_INITMSG(r3, 0x84, 0x2, &(0x7f0000000040)={0x400, 0x3, 0xfffd}, 0x8) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f0000000200)={0x0, 0x2}, 0x8) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a999850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r4}, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000005c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r5 = socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[], 0x50) r6 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000480)='kfree\x00', r6}, 0x10) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="010000000b000000050010000200000000000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00', @ANYRES32=r7, @ANYRES32, @ANYBLOB="000000000200"/28], 0x48) r8 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r8, 0x29, 0x40, &(0x7f0000000600)=@security={'security\x00', 0x44, 0x4, 0x3c0, 0xffffffff, 0x0, 0x0, 0x0, 0xffffffff, 0xffffffff, 0x2f0, 0x2f0, 0x2f0, 0xffffffff, 0x6, 0x0, {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @remote}, @empty, [], [], 'nr0\x00', 'nr0\x00'}, 0x203, 0xe0, 0x108, 0x8502, {0x700}, [@common=@unspec=@quota={{0x38}, {0x2000000}}]}, @common=@unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x0, 0x3}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00', 0x4}}}, {{@ipv6={@local, @mcast1, [], [], 'ip6erspan0\x00', 'veth1_macvtap\x00'}, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@ah={{0x30}}]}, @common=@unspec=@CLASSIFY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x420) r9 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000004000000020000000000000f0400000000005f"], 0x0, 0x28, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="020000000400e8ff030000000100000080000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r9, @ANYBLOB="010000000100"/28], 0x50) r10 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b0001006d616373656300000400038008000500", @ANYRES32=r2], 0x3c}, 0x1, 0x0, 0x0, 0x240480d4}, 0x0) 612.83442ms ago: executing program 4 (id=2272): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000001240)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc000, &(0x7f00000006c0), 0x2, 0x246, &(0x7f0000000ac0)="$eJzs3T9oM2UcB/DvXRJf+75BXnURxD8gIloor5vg8rooFKQUEUGFioiL0gq1xa1xcnHQWaWTSxE3q6N0KS6K4FS1Q10ELQ4WBx0iybVS24ja1Jz0Ph+43l3vee73HLnvkyyXBGisq0muJ2klmU7SSVIcb3B3tVw93F2f2l5I+v0nfiqG7ar9ylG/K0l6SR5KslUWeamdrG4+s/fLzmP3vbnSuff9zaenJnqRh/b3dh8/eG/ujY9mH1z94qsf5opcT/dP13X+ihH/axfJLf9Fsf+Jol33CPgn5l/78OtB7m9Ncs8w/52UqV68t5Zv2OrkgXf/qu/bP355+yTHCpy/fr8zeA/s9YHGKZN0U5QzSartspyZqT7Df9O6XL68tPzq9ItLK4sv1D1TAeelm+w++smlj6+cyP/3rSr/wMU1yP+T8xvfDrYPWnWPBpiIO6rVIP/Tz63dH/mHxpF/aC75h+aSf2gu+Yfmkn9oLvmHC6xztNEbeVj+obnkH5pL/qG5jucfAGiW/qW6n0AG6lL3/AMAAAAAAAAAAAAAAAAAAJy2PrW9cLRMquZn7yT7jyRpj6rfGv4ecXLj8O/ln4tBsz8UVbexPHvXmCcY0wc1P31903f11v/8znrrry0mvdeTXGu3T99/xeH9d3Y3/83xzvNjFviXihP7Dz812fon/bZRb/3ZneTTwfxzbdT8U+a24Xr0/NM9/hXLZ/TKr2OeAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgIn5PQAA//8PK23M") unshare(0x8040480) r1 = openat(0xffffffffffffff9c, 0x0, 0x40000, 0x0) io_setup(0x9c0b, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) ioctl$EXT4_IOC_GROUP_EXTEND(r2, 0x40086607, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000c80)='kmem_cache_free\x00', r0}, 0x10) r3 = syz_clone3(&(0x7f0000001880)={0x100000200, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) tgkill(r3, r3, 0x21) wait4(0x0, 0x0, 0x40000000, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r4, 0x0, 0x0) r5 = socket$inet6(0xa, 0x1, 0x84) open_tree(0xffffffffffffff9c, &(0x7f0000000300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1000) bind$inet6(r5, &(0x7f0000ed3fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendmsg$rds(r1, &(0x7f0000000700)={&(0x7f0000000000)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000f40)=[{&(0x7f0000000400)=""/133, 0x85}, {&(0x7f00000004c0)=""/203, 0xcb}, {&(0x7f00000005c0)=""/225, 0xe1}, {&(0x7f0000001900)=""/4096, 0x1000}, {&(0x7f0000000840)=""/182, 0xb6}, {&(0x7f0000000900)=""/242, 0xf2}, {&(0x7f0000000d40)=""/206, 0xce}, {&(0x7f0000002900)=""/4096, 0x1000}, {0x0}], 0x9, &(0x7f0000001000)=[@mask_cswp={0x58, 0x114, 0x9, {{0x2, 0x5}, &(0x7f0000000140)=0xd, &(0x7f0000000240)=0x8, 0x73, 0x0, 0x4000000000000, 0x9, 0x42, 0x5}}], 0x58, 0x4000}, 0x24040080) setsockopt$sock_linger(r5, 0x1, 0xd, &(0x7f0000000040)={0x1, 0xffffffff}, 0x8) sendto$inet6(r5, &(0x7f0000000100)="bc", 0x1, 0x4, &(0x7f00000000c0)={0xa, 0x4e20, 0x8, @dev={0xfe, 0x80, '\x00', 0xf}, 0x1}, 0x1c) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r6) sendmsg$NLBL_CIPSOV4_C_ADD(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x48, r7, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_TAGLST={0x24, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x1}, {0x5}, {0x5, 0x3, 0x80}, {0x5, 0x3, 0x1}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}]}, 0x48}}, 0x0) close(r5) socketpair(0x1a, 0x3, 0x5, &(0x7f0000000180)) sendto$inet6(r4, &(0x7f00000002c0)="9e", 0x1a000, 0x0, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 591.809601ms ago: executing program 8 (id=2273): r0 = memfd_create(&(0x7f0000000bc0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85Q\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~Mx\x02\x00(v\xe6`\x026\xfcgC\xb5\xf0\x13.zb\xc5bj+@\x00\x00\x00\x00\x00\x00\x00.\xd4`=z\xd1n\x8d\x8f\xa5hS\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{\'\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x80\x1ch\x89\xe7\xdd]q,\xec\xc4\xa5\x93\xe5,\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+}5dy\xb1\xef\xf1m\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc00xffffffffffffffff}, &(0x7f0000000800), &(0x7f0000000840)=r2}, 0x20) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, r1, &(0x7f0000000ac0)={0xffffffffffffffff, r3, 0x1}) 492.488982ms ago: executing program 3 (id=2275): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000004700)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000040)=ANY=[@ANYBLOB="9c000000", @ANYBLOB="050427bd7000fcdbdf250100000008000100", @ANYRES32=r2, @ANYBLOB="8000028040000100240001006d6f646500000000000000000000000000000000000000000000000000000000050003000500000010000400"], 0x9c}, 0x1, 0x0, 0x0, 0x4000401}, 0x44084) 491.982802ms ago: executing program 36 (id=2275): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000004700)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000040)=ANY=[@ANYBLOB="9c000000", @ANYBLOB="050427bd7000fcdbdf250100000008000100", @ANYRES32=r2, @ANYBLOB="8000028040000100240001006d6f646500000000000000000000000000000000000000000000000000000000050003000500000010000400"], 0x9c}, 0x1, 0x0, 0x0, 0x4000401}, 0x44084) 365.909094ms ago: executing program 4 (id=2277): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa2000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000003280)=ANY=[@ANYBLOB="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"], 0xb98}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) r5 = getpid() getresgid(&(0x7f0000000840), &(0x7f0000000880)=0x0, &(0x7f00000008c0)) r7 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000900), 0x0, 0x0) sendmsg$unix(r3, &(0x7f0000000940)={&(0x7f0000000180)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f0000000740)=[{&(0x7f0000000280)="98813c86d87413ed6b12d58b6598b790cdb23a79b547db1b30ee28c493f1debb202e98f9c8dc71870795e5478b334a10d788ae8b7f2f18a9deb3f2f32d60bd45d287c76057ec3379b8d7856b", 0x4c}, {&(0x7f0000000200)="089413c0f7a1464755b2f431a62a0c862ca5fc19f153bafc7c0a994b05958e60ed113f3c72effbe34dd96e2dae8a2f9f6c9c38823c9983", 0x37}, {&(0x7f00000006c0)="1f069033a364091903a3f7bf63a52de8b0a6639ffa4511cb278f867d845552cefb02935c3bd2165905d9532f656db332d9b9ee529b6a9582f817486f89512b893986003d7b86", 0x46}], 0x3, &(0x7f0000000b00)=[@rights={{0x24, 0x1, 0x1, [r0, r0, r0, r4, r2]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, r0, r2, r0, r2]}}, @cred={{0x1c, 0x1, 0x2, {r5}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xffffffffffffffff, r6}}}, @rights={{0x1c, 0x1, 0x1, [r0, r1, r7]}}], 0xb0, 0x20008010}, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r8}, 0x10) 332.328075ms ago: executing program 5 (id=2278): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x3, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000e40)=[{{0x0, 0x0, &(0x7f0000002c40)=[{&(0x7f00000002c0)=';', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000380)="12", 0x1}], 0x1}}], 0x2, 0x10) shutdown(r0, 0x2) 310.123605ms ago: executing program 4 (id=2279): r0 = syz_clone(0x81008000, 0x0, 0x0, 0x0, 0x0, 0x0) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r1, &(0x7f0000000c40)={0x2000000b}) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x80) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) ioctl$BTRFS_IOC_BALANCE_CTL(r1, 0x40049421, 0x2) r4 = openat$cgroup_procs(r3, &(0x7f00000003c0)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f00000005c0)=r0, 0x12) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB], 0x5c}}, 0x0) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r6, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000500)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000140)='kmem_cache_free\x00', r7, 0x0, 0x5}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) rseq(&(0x7f00000004c0), 0xffffffffffffffaa, 0x0, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x50, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x28, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_IP_TO={0x18, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x10040047}, 0x240008c4) 196.187727ms ago: executing program 4 (id=2280): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="000000000000f2b9785f00000196002ea398e5008600ffff000000000000000058181cd1d76f12967cc55728a86a22f1ce49e060b53e7688"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={0x0, r1, 0x0, 0xfffffffffffffffd}, 0x18) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x1) r3 = creat(&(0x7f00000000c0)='./file0\x00', 0x1f4) r4 = dup2(r3, r3) ioctl$BLKTRACESETUP(r4, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x200000a, 0x1, 0x8}) ioctl$BLKTRACESETUP(r4, 0x1276, 0x0) r5 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000100)={0x80000000, 0x0, 0xfffffffc}, 0x10) write(r5, &(0x7f0000000000)="240000001a005f0214f9f407000904001f000000fe0000000000000008000f00fd000000", 0x24) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, 0x0, &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) bind$packet(r7, &(0x7f00000002c0)={0x11, 0xf5, 0x0, 0x1, 0x1, 0x6, @multicast}, 0x14) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r8 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r6, &(0x7f0000000600)=ANY=[@ANYBLOB="1c0000f5"], 0xfdef) fcntl$dupfd(r2, 0x406, 0xffffffffffffffff) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f00000003c0)='kmem_cache_free\x00', r9}, 0x10) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r10, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) ioctl$SNAPSHOT_SET_SWAP_AREA(r4, 0x400c330d, &(0x7f00000001c0)={0x3, 0x5}) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfff}, [@printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x83000000}, {0x85, 0x0, 0x0, 0x71}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r11}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) inotify_init1(0x0) 160.584757ms ago: executing program 5 (id=2281): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$NFT_BATCH(r1, 0x0, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) writev(0xffffffffffffffff, &(0x7f00000002c0)=[{0x0, 0xea}, {&(0x7f0000000640)='$', 0x1}], 0x2) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r0}, &(0x7f0000000800), &(0x7f0000000840)=r2}, 0x20) cachestat(0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080), 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000006c0)='fdinfo/3\x00') r3 = bpf$MAP_CREATE(0x0, &(0x7f0000003200)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) socket(0x2, 0x80805, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=@newtfilter={0x24, 0x11, 0x1, 0x691522eb, 0x0, {0x0, 0x0, 0x74, r5, {0x10, 0x4}, {}, {0x5}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff) 48.744699ms ago: executing program 5 (id=2282): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x109000, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r1 = syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800304, &(0x7f0000000100)={[{@stripe={'stripe', 0x3d, 0x1}}, {@block_validity}]}, 0xff, 0x4a1, &(0x7f0000000400)="$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") prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x1, 0x0, 0x7ffc1ffb}]}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, r1, &(0x7f0000000ac0)={0xffffffffffffffff, 0xffffffffffffffff, 0x1}) 0s ago: executing program 7 (id=2283): bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, 0x0, &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[], 0x48) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000004400)='./file0\x00', 0x0, &(0x7f0000000080)={[{@usrquota}, {@noblock_validity}, {@bh}, {@dioread_lock}, {@debug}, {@inlinecrypt}]}, 0x8, 0x5fc, &(0x7f0000000c00)="$eJzs3c9rHGUfAPDvzCZ5kzavaUXEFsWAhxakaVKLVS+29WAPBQv2IOKhoUlq6PYHTQq2FkzBg4KCiFeRXvwHvEvv3kRQb56FKlJRUOnK7M62m2Q3XdPsTpr5fGCzz/PM7D7PdydP5pmZPDsBlNZ49iON2BVx51QSMdaybDQaC8fz9W7/du109kiiVnv91ySSvKy5fpI/b88zwxHx7dGIRyur6124cvXsdLXW8F7E/sVzF/cvXLm6b/7c9JnZM7Pnpw68cPDQ5ItTB6c2JM7t+fOx4689+fH7bz8/9111XxKH4+TguzOxIo6NMh7jcScPsbV8ICIOZYk2n8vDZguEUGqV/PdxMCIej7Go1HMNYzH/UaGNA3qqVomoASWV6P9QUs1xQPPYvrvj4JM9HpX0z60jjQOg1fEPNM6NxHD92Gjb7aTlyKhxbmPHBtSf1fHPtd2fZ49Ydh7iz7tbZ2AD6ulk6XpEPNEu/qTeth31SLP402XtSCJiMiKG8va98gBtSFrSvTgPs5b1xp9GxOH8OSs/us76x1fk+x0/AOV080i+I1/Kcvf2f9nYozn+iTbjn9E2+671KHr/13n819zfD9fPkacrxmHZmOVE+7ccXFnw04fHPu1Uf+v4L3tk9TfHgv1w63rE7hXxf5AFm49/sviTNts/W+XU4e7qePX7X451WlZ0/LUbEXvaHv/cG5VmqTWuT+6fm6/OTjZ+tq3j62/e+rJT/UXHn23/bR3ib9n+6crXZZ/JxS7r+OrEjXOdlo3eN/7056Gkcbw5lJe8M724eGkqYig5nq/SUn5g7bY012m+Rxb/3mfa9/9lv//Xl7/PSPNPZhcuvnH2dqdl69n+LReT79S6bEMnWfwz99/+q/p/VvZJl3X88eblpzotWyv+kQcJDAAAAAAAAEoorV+DTdKJu+k0nZhozJd9LLal1QsLi8/OXbh8fiZib/3/IQfT5pXusUY+yfJT+f/DNvMHVuSfi4idEfFZZaSenzh9oTpTdPAAAAAAAAAAAAAAAAAAAACwSWzP5/8371P9e6Ux/x8oiV7eYA7Y3PR/KK96/191iyegDOz/obz0fygv/R/KS/+H8tL/obz0fygv/R/KS/8HAAAAgC1p59M3f0wiYumlkfojM5QvMyMItrbBohsAFKZSdAOAwty99G+wD6XT1fj/r/zLAXvfHKAASbvC+uCgtnbnv9n2lQAAAAAAAAAAAABAD+zZ1Xn+v7nBsLWZ9gfl9QDz/311ADzkfPU/lJdjfOB+s/iHOy0w/x8AAAAAAAAAAAAA+ma0/kjSiXwu8Gik6cRExP8jYkcMJnPz1dnJiHgkIn6oDP4vy08V3WgAAAAAAAAAAAAAAAAAAADYYhauXD07Xa3OXmpN/L2qZGsnmndB7UNdL8d/fFUk/f9YRiKi8I3Ss8RAS0kSsZRt+U3RsEsLsTmaUU8U/IcJAAAAAAAAAAAAAAAAAABKqGXucXu7v+hziwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACg/+7d/793iaJjBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeTv8GAAD//7V5QCw=") syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x48a, &(0x7f0000000000)={[{@jqfmt_vfsold}, {@usrjquota, 0x22}, {@errors_continue}, {@noload}, {@data_err_ignore}, {@usrjquota, 0x22}, {@errors_continue}, {@errors_remount}, {@noblock_validity}]}, 0x1, 0x44e, &(0x7f0000000900)="$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") mount(0x0, &(0x7f0000000240)='.\x00', 0x0, 0x2200020, &(0x7f0000000000)) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, 0x0, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={0x0, r0}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffb}]}) signalfd4(0xffffffffffffffff, &(0x7f0000000500), 0x8, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x5, 0x0, &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) inotify_init() creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={0xffffffffffffffff, 0x0, 0x0}, 0x20) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ZERO(r1, 0x0, 0x48f, &(0x7f00000001c0)={0x6, @multicast1, 0x4e23, 0x1, 'nq\x00', 0x3, 0x5, 0x7f}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3e, 0x1, 0x0, 0x0, 0x0, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x1320, 0xffffffff, 0x3, 0x5, 0x0, 0x1, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000100)='./file0\x00', 0x1000000, &(0x7f0000000000)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c004845160000000000"], 0x1, 0x2bb, &(0x7f0000000440)="$eJzs3UFrE1sYxvGnTW+TprTJhcuFe0E96EY3oY0fQIO0IAaU2hR1IUztREPGpMyESkRsNuLWD+Gq6M6doC7ddCNu3LsrguCmC3HETNImbVrTNklj+/9BmTd5z8OcttPyptDJ2o1n9/NZL5G1ShqMGA1KFa1L8V9VzUDtOFith9WoonOj3z6duH7z1pVUOj01Y8x0avZ80hgzfurNg0cvTr8rjc69Gn8d1mr89trX5OfVf1f/W/sxey/nmZxnCsWSscx8sViy5h3bLOS8fMKYa45tebbJFTzbbepnneLiYtlYhYWx6KJre56xCmWTt8umVDQlt2ysu1auYBKJhBmL6ngbamNNZmVmxkrt2PZDHd0Rum6k1ZOum6q0bmZWerAnAADQZ3af/4NZf+f5Pz0XHNua/18+l9qb/6VOzv8DPf2C9rlK06PfzP84Elw3ZUVrP7/NmP8BAAAAAAAAAAAAAAAAAAAAAPgTrPt+zPf9WP1Y/whLikiqPz7sfaI79vn9v3BI20WHNfzjXkRyni5lljLBMeinssrJka0JxfS9ej3UBPX05fTUhKmK662zXMsvL2VCCtfzdfFW+ZN/TwZ505z/S9HG8ycV0z+tz59smR/W2TMN+YRi+nBHRTlaqF7Xm/nHk8Zcuprekh+prgMAAAAA4ChImA3bXr9X+9UFEW3vB/k9/H1gy+vrIf3fzi0qAQAAAADAgXnlh3nLcWx3H0VY0gHieyj8ga6fonNFSH2xjS3FRUl9sI1eFRFJwTNmP/EvG/G2Un4ba4YkHfTzivTw0jrs30wAAAAAOm1z6N9D6OOTLu4IAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIDjp937gdXXb2vVG7vEG04X0vuNtwcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAjp2fAQAA//91iCZA") open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x4) socket$nl_xfrm(0x10, 0x3, 0x6) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) gettid() socket(0x40000000015, 0x5, 0x0) timer_create(0x0, 0x0, &(0x7f0000000300)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) kernel console output (not intermixed with test programs): 00000000000. [ 167.397438][ T9815] loop7: detected capacity change from 0 to 164 [ 167.416757][ T9815] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 167.432870][ T9814] loop3: detected capacity change from 0 to 512 [ 167.458733][ T9814] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 167.470275][ T9814] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 167.487762][ T9814] EXT4-fs (loop3): Remounting filesystem read-only [ 167.494447][ T9814] EXT4-fs (loop3): 1 truncate cleaned up [ 167.501013][ T9814] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 167.526754][ T3325] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 167.709567][ T9822] loop3: detected capacity change from 0 to 128 [ 167.726177][ T9822] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 167.739197][ T9822] ext4 filesystem being mounted at /360/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 167.806809][ T3325] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 167.916169][ T9833] loop3: detected capacity change from 0 to 512 [ 167.923174][ T9833] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 167.945256][ T9835] FAULT_INJECTION: forcing a failure. [ 167.945256][ T9835] name failslab, interval 1, probability 0, space 0, times 0 [ 167.948284][ T9833] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 167.958004][ T9835] CPU: 1 UID: 0 PID: 9835 Comm: syz.5.1742 Not tainted 6.15.0-syzkaller-08486-gf66bc387efbe #0 PREEMPT(voluntary) [ 167.958122][ T9835] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 167.958167][ T9835] Call Trace: [ 167.958174][ T9835] [ 167.958184][ T9835] __dump_stack+0x1d/0x30 [ 167.958212][ T9835] dump_stack_lvl+0xe8/0x140 [ 167.958236][ T9835] dump_stack+0x15/0x1b [ 167.958258][ T9835] should_fail_ex+0x265/0x280 [ 167.958300][ T9835] should_failslab+0x8c/0xb0 [ 167.958354][ T9835] __kmalloc_noprof+0xa5/0x3e0 [ 167.958387][ T9835] ? alloc_pipe_info+0x1c9/0x350 [ 167.958414][ T9835] alloc_pipe_info+0x1c9/0x350 [ 167.958439][ T9835] splice_direct_to_actor+0x592/0x680 [ 167.958553][ T9835] ? kstrtouint_from_user+0x9f/0xf0 [ 167.958592][ T9835] ? __pfx_direct_splice_actor+0x10/0x10 [ 167.958685][ T9835] ? __rcu_read_unlock+0x4f/0x70 [ 167.958714][ T9835] ? get_pid_task+0x96/0xd0 [ 167.958789][ T9835] ? avc_policy_seqno+0x15/0x30 [ 167.958857][ T9835] ? selinux_file_permission+0x1e4/0x320 [ 167.958889][ T9835] do_splice_direct+0xda/0x150 [ 167.958935][ T9835] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 167.959046][ T9835] do_sendfile+0x380/0x650 [ 167.959081][ T9835] __x64_sys_sendfile64+0x105/0x150 [ 167.959123][ T9835] x64_sys_call+0xb39/0x2fb0 [ 167.959150][ T9835] do_syscall_64+0xd2/0x200 [ 167.959238][ T9835] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 167.959272][ T9835] ? clear_bhb_loop+0x40/0x90 [ 167.959299][ T9835] ? clear_bhb_loop+0x40/0x90 [ 167.959328][ T9835] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 167.959433][ T9835] RIP: 0033:0x7f41a8d2e969 [ 167.959512][ T9835] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 167.959538][ T9835] RSP: 002b:00007f41a7397038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 167.959562][ T9835] RAX: ffffffffffffffda RBX: 00007f41a8f55fa0 RCX: 00007f41a8d2e969 [ 167.959579][ T9835] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000004 [ 167.959594][ T9835] RBP: 00007f41a7397090 R08: 0000000000000000 R09: 0000000000000000 [ 167.959611][ T9835] R10: 000000007fffeffe R11: 0000000000000246 R12: 0000000000000001 [ 167.959627][ T9835] R13: 0000000000000000 R14: 00007f41a8f55fa0 R15: 00007ffef8fc4338 [ 167.959674][ T9835] [ 168.015564][ T9840] loop4: detected capacity change from 0 to 128 [ 168.043136][ T9833] EXT4-fs (loop3): Remounting filesystem read-only [ 168.231170][ T9846] loop8: detected capacity change from 0 to 128 [ 168.264713][ T9833] EXT4-fs (loop3): 1 truncate cleaned up [ 168.268093][ T9840] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 168.271023][ T9833] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 168.305754][ T9840] ext4 filesystem being mounted at /391/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 168.343765][ T9847] loop5: detected capacity change from 0 to 512 [ 168.351827][ T9846] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 168.382567][ T3325] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 168.422308][ T3315] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 168.425405][ T9846] ext4 filesystem being mounted at /12/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 168.465351][ T9847] EXT4-fs (loop5): orphan cleanup on readonly fs [ 168.478505][ T9847] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.1745: bg 0: block 248: padding at end of block bitmap is not set [ 168.493473][ T9847] EXT4-fs error (device loop5): ext4_acquire_dquot:6933: comm syz.5.1745: Failed to acquire dquot type 1 [ 168.499980][ T9859] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 168.513898][ T9859] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 168.526334][ T9860] loop3: detected capacity change from 0 to 128 [ 168.536152][ T9860] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 168.559689][ T9847] EXT4-fs (loop5): 1 truncate cleaned up [ 168.570066][ T9860] ext4 filesystem being mounted at /364/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 168.583559][ T9847] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 168.633663][ T9847] EXT4-fs (loop5): warning: mounting fs with errors, running e2fsck is recommended [ 168.653467][ T9297] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 168.654446][ T9867] tipc: Started in network mode [ 168.667665][ T9867] tipc: Node identity 5e3b06081fa7, cluster identity 4711 [ 168.675134][ T9867] tipc: Enabled bearer , priority 0 [ 168.676929][ T9847] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 168.706963][ T9866] tipc: Disabling bearer [ 168.717953][ T9871] PM: Enabling pm_trace changes system date and time during resume. [ 168.717953][ T9871] PM: Correct system time has to be restored manually after resume. [ 168.735052][ T3325] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 168.764535][ T9874] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1755'. [ 168.775417][ T9874] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1755'. [ 168.785728][ T9874] siw: device registration error -23 [ 168.807648][ T4993] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 168.876937][ T9882] loop3: detected capacity change from 0 to 512 [ 168.885458][ T9882] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 168.911223][ T9882] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 168.936528][ T9882] EXT4-fs (loop3): Remounting filesystem read-only [ 168.943212][ T9882] EXT4-fs (loop3): 1 truncate cleaned up [ 168.964499][ T9882] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 168.996356][ T9890] loop7: detected capacity change from 0 to 512 [ 169.012678][ T9890] EXT4-fs (loop7): 1 orphan inode deleted [ 169.025045][ T12] EXT4-fs error (device loop7): ext4_release_dquot:6969: comm kworker/u8:0: Failed to release dquot type 1 [ 169.057242][ T9890] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 169.079934][ T9890] ext4 filesystem being mounted at /104/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 169.085812][ T9896] loop4: detected capacity change from 0 to 128 [ 169.105017][ T9890] netlink: 140 bytes leftover after parsing attributes in process `syz.7.1759'. [ 169.106867][ T9896] ext4 filesystem being mounted at /393/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 169.169493][ T9899] loop5: detected capacity change from 0 to 128 [ 169.184231][ T9901] loop3: detected capacity change from 0 to 128 [ 169.201538][ T9899] ext4 filesystem being mounted at /243/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 169.276154][ T9901] ext4 filesystem being mounted at /368/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 169.399790][ T9908] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1766'. [ 169.626429][ T9918] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1768'. [ 169.660733][ T9918] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1768'. [ 169.680943][ T9918] siw: device registration error -23 [ 169.786730][ T9924] netlink: 256 bytes leftover after parsing attributes in process `syz.4.1767'. [ 170.098022][ T9933] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 170.120821][ T9929] loop8: detected capacity change from 0 to 512 [ 170.159278][ T9933] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 170.169988][ T9929] ext4 filesystem being mounted at /16/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 170.299647][ T9929] ip6erspan0: entered promiscuous mode [ 170.367290][ T9929] EXT4-fs error (device loop8): ext4_acquire_dquot:6933: comm +}[@: Failed to acquire dquot type 1 [ 170.444097][ T9947] loop8: detected capacity change from 0 to 128 [ 170.460921][ T9947] ext4 filesystem being mounted at /17/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 170.614190][ T9955] siw: device registration error -23 [ 170.642934][ T9957] loop4: detected capacity change from 0 to 128 [ 170.679185][ T9957] ext4 filesystem being mounted at /399/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 170.755785][ T9963] loop3: detected capacity change from 0 to 1024 [ 170.764260][ T9963] EXT4-fs: quotafile must be on filesystem root [ 171.089763][ T9986] loop3: detected capacity change from 0 to 128 [ 171.114876][ T9986] ext4 filesystem being mounted at /375/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 171.175075][ T9993] siw: device registration error -23 [ 171.390775][T10006] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 171.400381][T10006] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 171.675841][ T29] kauditd_printk_skb: 268 callbacks suppressed [ 171.675860][ T29] audit: type=1326 audit(1748603060.014:5406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10022 comm="syz.3.1797" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f52f874e969 code=0x7ffc0000 [ 171.712183][T10023] loop3: detected capacity change from 0 to 1024 [ 171.720442][ T29] audit: type=1326 audit(1748603060.014:5407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10022 comm="syz.3.1797" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f52f874e969 code=0x7ffc0000 [ 171.743938][T10023] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 171.743967][T10023] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 171.753739][ T29] audit: type=1326 audit(1748603060.014:5408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10022 comm="syz.3.1797" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f52f874e969 code=0x7ffc0000 [ 171.786957][ T29] audit: type=1326 audit(1748603060.014:5409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10022 comm="syz.3.1797" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f52f874e9a3 code=0x7ffc0000 [ 171.810849][ T29] audit: type=1326 audit(1748603060.014:5410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10022 comm="syz.3.1797" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f52f874d41f code=0x7ffc0000 [ 171.834423][ T29] audit: type=1326 audit(1748603060.014:5411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10022 comm="syz.3.1797" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f52f874e9f7 code=0x7ffc0000 [ 171.858164][ T29] audit: type=1326 audit(1748603060.014:5412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10022 comm="syz.3.1797" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f52f874d2d0 code=0x7ffc0000 [ 171.881841][ T29] audit: type=1400 audit(1748603060.044:5414): avc: denied { write } for pid=10019 comm="syz.7.1802" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 171.901353][ T29] audit: type=1400 audit(1748603060.044:5415): avc: denied { name_bind } for pid=10019 comm="syz.7.1802" src=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 171.923077][ T29] audit: type=1326 audit(1748603060.014:5413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10022 comm="syz.3.1797" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f52f874e56b code=0x7ffc0000 [ 171.933773][T10023] EXT4-fs (loop3): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 171.957821][T10023] EXT4-fs error (device loop3): ext4_get_journal_inode:5796: inode #5: comm syz.3.1797: unexpected bad inode w/o EXT4_IGET_BAD [ 171.962505][T10028] loop8: detected capacity change from 0 to 512 [ 171.974203][T10023] EXT4-fs (loop3): no journal found [ 171.982709][T10023] EXT4-fs (loop3): can't get journal size [ 172.001371][T10028] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 172.015605][T10031] loop5: detected capacity change from 0 to 512 [ 172.021962][T10028] EXT4-fs error (device loop8): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 172.037751][T10031] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 172.048951][T10028] EXT4-fs (loop8): Remounting filesystem read-only [ 172.049739][T10031] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 172.067143][T10028] EXT4-fs (loop8): 1 truncate cleaned up [ 172.076823][T10031] EXT4-fs (loop5): Remounting filesystem read-only [ 172.083667][T10031] EXT4-fs (loop5): 1 truncate cleaned up [ 172.147365][T10036] loop8: detected capacity change from 0 to 128 [ 172.160168][T10036] ext4 filesystem being mounted at /25/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 172.261654][T10043] loop8: detected capacity change from 0 to 128 [ 172.270711][T10043] ext4 filesystem being mounted at /26/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 172.361521][T10047] FAULT_INJECTION: forcing a failure. [ 172.361521][T10047] name failslab, interval 1, probability 0, space 0, times 0 [ 172.374256][T10047] CPU: 0 UID: 0 PID: 10047 Comm: syz.4.1810 Not tainted 6.15.0-syzkaller-08486-gf66bc387efbe #0 PREEMPT(voluntary) [ 172.374329][T10047] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 172.374345][T10047] Call Trace: [ 172.374353][T10047] [ 172.374363][T10047] __dump_stack+0x1d/0x30 [ 172.374389][T10047] dump_stack_lvl+0xe8/0x140 [ 172.374413][T10047] dump_stack+0x15/0x1b [ 172.374471][T10047] should_fail_ex+0x265/0x280 [ 172.374576][T10047] should_failslab+0x8c/0xb0 [ 172.374598][T10047] kmem_cache_alloc_node_noprof+0x57/0x320 [ 172.374627][T10047] ? __alloc_skb+0x101/0x320 [ 172.374654][T10047] __alloc_skb+0x101/0x320 [ 172.374771][T10047] netlink_alloc_large_skb+0xba/0xf0 [ 172.374797][T10047] netlink_sendmsg+0x3cf/0x6b0 [ 172.374826][T10047] ? __pfx_netlink_sendmsg+0x10/0x10 [ 172.374872][T10047] __sock_sendmsg+0x142/0x180 [ 172.374896][T10047] ____sys_sendmsg+0x31e/0x4e0 [ 172.374935][T10047] ___sys_sendmsg+0x17b/0x1d0 [ 172.374985][T10047] __x64_sys_sendmsg+0xd4/0x160 [ 172.375084][T10047] x64_sys_call+0x2999/0x2fb0 [ 172.375111][T10047] do_syscall_64+0xd2/0x200 [ 172.375142][T10047] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 172.375215][T10047] ? clear_bhb_loop+0x40/0x90 [ 172.375242][T10047] ? clear_bhb_loop+0x40/0x90 [ 172.375270][T10047] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 172.375297][T10047] RIP: 0033:0x7fe7fb1fe969 [ 172.375357][T10047] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 172.375374][T10047] RSP: 002b:00007fe7f9867038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 172.375392][T10047] RAX: ffffffffffffffda RBX: 00007fe7fb425fa0 RCX: 00007fe7fb1fe969 [ 172.375404][T10047] RDX: 0000000000000040 RSI: 00002000000000c0 RDI: 0000000000000003 [ 172.375418][T10047] RBP: 00007fe7f9867090 R08: 0000000000000000 R09: 0000000000000000 [ 172.375432][T10047] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 172.375519][T10047] R13: 0000000000000000 R14: 00007fe7fb425fa0 R15: 00007fff69cd2948 [ 172.375607][T10047] [ 172.647151][T10053] loop4: detected capacity change from 0 to 128 [ 172.665796][T10053] ext4 filesystem being mounted at /405/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 172.779483][T10059] __nla_validate_parse: 7 callbacks suppressed [ 172.779580][T10059] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1814'. [ 172.806240][T10059] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1814'. [ 172.825608][T10059] siw: device registration error -23 [ 172.876328][T10061] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 172.888994][T10061] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 172.980200][T10067] loop8: detected capacity change from 0 to 512 [ 173.005205][T10067] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 173.016638][T10067] EXT4-fs error (device loop8): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 173.031760][T10067] EXT4-fs (loop8): Remounting filesystem read-only [ 173.040829][T10067] EXT4-fs (loop8): 1 truncate cleaned up [ 173.076529][T10070] loop5: detected capacity change from 0 to 1024 [ 173.100611][T10070] EXT4-fs: quotafile must be on filesystem root [ 173.124988][T10074] netlink: 256 bytes leftover after parsing attributes in process `syz.7.1813'. [ 173.390570][T10079] bridge_slave_0: left allmulticast mode [ 173.396388][T10079] bridge_slave_0: left promiscuous mode [ 173.402076][T10079] bridge0: port 1(bridge_slave_0) entered disabled state [ 173.480068][T10079] bridge_slave_1: left allmulticast mode [ 173.485907][T10079] bridge_slave_1: left promiscuous mode [ 173.491713][T10079] bridge0: port 2(bridge_slave_1) entered disabled state [ 173.552430][T10087] loop4: detected capacity change from 0 to 512 [ 173.559408][T10079] bond0: (slave bond_slave_0): Releasing backup interface [ 173.559980][T10087] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 173.588778][T10087] EXT4-fs (loop4): 1 truncate cleaned up [ 173.595530][T10079] bond0: (slave bond_slave_1): Releasing backup interface [ 173.608342][T10079] team0: Port device team_slave_0 removed [ 173.626002][T10079] team0: Port device team_slave_1 removed [ 173.632985][T10087] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1821'. [ 173.643216][T10079] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 173.650791][T10079] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 173.650743][T10090] loop3: detected capacity change from 0 to 512 [ 173.667300][T10079] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 173.674876][T10079] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 173.693748][T10090] ext4 filesystem being mounted at /377/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 173.739513][T10090] ip6erspan0: entered promiscuous mode [ 173.762997][T10097] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.1823: Failed to acquire dquot type 1 [ 173.776275][T10096] loop7: detected capacity change from 0 to 512 [ 173.785907][T10096] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 173.812820][T10096] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 173.827614][T10096] EXT4-fs (loop7): Remounting filesystem read-only [ 173.834263][T10096] EXT4-fs (loop7): 1 truncate cleaned up [ 173.883022][T10104] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1826'. [ 173.940996][T10104] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1826'. [ 173.979542][T10117] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 174.027199][T10117] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 174.042164][T10121] loop3: detected capacity change from 0 to 128 [ 174.046704][T10120] PM: Enabling pm_trace changes system date and time during resume. [ 174.046704][T10120] PM: Correct system time has to be restored manually after resume. [ 174.087341][T10122] netlink: 256 bytes leftover after parsing attributes in process `syz.7.1827'. [ 174.153069][T10137] loop8: detected capacity change from 0 to 512 [ 174.176923][T10137] ext4 filesystem being mounted at /34/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 174.192786][T10137] ip6erspan0: entered promiscuous mode [ 174.238707][T10137] EXT4-fs error (device loop8): ext4_acquire_dquot:6933: comm +}[@: Failed to acquire dquot type 1 [ 174.276019][T10143] loop8: detected capacity change from 0 to 128 [ 174.328807][T10147] netlink: 128 bytes leftover after parsing attributes in process `syz.8.1841'. [ 174.338061][T10149] loop3: detected capacity change from 0 to 128 [ 174.348415][T10149] ext4 filesystem being mounted at /384/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 174.468289][T10158] loop3: detected capacity change from 0 to 512 [ 174.477050][T10158] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 174.488105][T10158] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 174.503086][T10158] EXT4-fs (loop3): Remounting filesystem read-only [ 174.510116][T10158] EXT4-fs (loop3): 1 truncate cleaned up [ 174.609119][T10163] loop4: detected capacity change from 0 to 128 [ 174.610409][T10164] loop3: detected capacity change from 0 to 1024 [ 174.632913][T10164] EXT4-fs: quotafile must be on filesystem root [ 174.814402][T10177] loop7: detected capacity change from 0 to 128 [ 174.827280][T10177] ext4 filesystem being mounted at /116/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 174.943175][T10186] netlink: 256 bytes leftover after parsing attributes in process `syz.4.1848'. [ 175.002315][T10193] netlink: 128 bytes leftover after parsing attributes in process `syz.7.1854'. [ 175.045978][T10189] loop3: detected capacity change from 0 to 8192 [ 175.122780][T10203] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 175.161271][T10203] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 175.217213][T10210] loop7: detected capacity change from 0 to 128 [ 175.238101][T10210] ext4 filesystem being mounted at /119/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 175.303795][T10214] siw: device registration error -23 [ 175.610166][T10239] loop8: detected capacity change from 0 to 512 [ 175.648870][T10239] ext4 filesystem being mounted at /42/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 175.692324][T10247] PM: Enabling pm_trace changes system date and time during resume. [ 175.692324][T10247] PM: Correct system time has to be restored manually after resume. [ 175.707942][T10239] ip6erspan0: entered promiscuous mode [ 175.759559][T10251] EXT4-fs error (device loop8): ext4_acquire_dquot:6933: comm syz.8.1865: Failed to acquire dquot type 1 [ 175.782902][T10253] loop5: detected capacity change from 0 to 512 [ 175.803289][T10253] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 175.832137][T10253] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 175.871430][T10253] EXT4-fs (loop5): Remounting filesystem read-only [ 175.889471][T10261] loop8: detected capacity change from 0 to 512 [ 175.891745][T10253] EXT4-fs (loop5): 1 truncate cleaned up [ 175.922054][T10261] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 175.940003][T10261] EXT4-fs error (device loop8): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 175.966315][T10261] EXT4-fs (loop8): Remounting filesystem read-only [ 175.973056][T10261] EXT4-fs (loop8): 1 truncate cleaned up [ 176.008158][T10267] loop5: detected capacity change from 0 to 1024 [ 176.043061][T10267] ext4: Unknown parameter 'noacl' [ 176.253573][T10278] team0: Mode changed to "loadbalance" [ 176.325064][T10298] loop7: detected capacity change from 0 to 128 [ 176.337103][T10298] ext4 filesystem being mounted at /122/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 176.526819][T10289] xt_TPROXY: Can be used only with -p tcp or -p udp [ 176.541638][T10317] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 176.559959][T10320] loop3: detected capacity change from 0 to 128 [ 176.569725][T10317] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 176.585051][T10320] ext4 filesystem being mounted at /390/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 176.706353][T10336] loop4: detected capacity change from 0 to 512 [ 176.728447][T10336] ext4 filesystem being mounted at /416/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 176.752970][ T29] kauditd_printk_skb: 261 callbacks suppressed [ 176.752988][ T29] audit: type=1400 audit(1748603065.084:5671): avc: denied { lock } for pid=10332 comm="syz.4.1880" path="/416/bus/file1" dev="loop4" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 176.785244][ T29] audit: type=1400 audit(1748603065.124:5672): avc: denied { ioctl } for pid=10332 comm="syz.4.1880" path="/416/bus/file1" dev="loop4" ino=15 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 176.841079][T10345] siw: device registration error -23 [ 176.907476][ T29] audit: type=1400 audit(1748603065.234:5673): avc: denied { map } for pid=10332 comm="syz.4.1880" path="/416/bus/file1" dev="loop4" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 176.952096][T10357] loop3: detected capacity change from 0 to 512 [ 176.983570][T10357] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 177.014246][ T29] audit: type=1326 audit(1748603065.344:5674): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10363 comm="syz.8.1885" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c7d97e969 code=0x7ffc0000 [ 177.037878][ T29] audit: type=1326 audit(1748603065.344:5675): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10363 comm="syz.8.1885" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c7d97e969 code=0x7ffc0000 [ 177.066302][ T29] audit: type=1326 audit(1748603065.404:5676): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10363 comm="syz.8.1885" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4c7d97e969 code=0x7ffc0000 [ 177.072430][T10366] loop5: detected capacity change from 0 to 128 [ 177.089843][ T29] audit: type=1326 audit(1748603065.404:5677): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10363 comm="syz.8.1885" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c7d97e969 code=0x7ffc0000 [ 177.089877][ T29] audit: type=1326 audit(1748603065.404:5678): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10363 comm="syz.8.1885" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c7d97e969 code=0x7ffc0000 [ 177.143118][ T29] audit: type=1326 audit(1748603065.404:5679): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10363 comm="syz.8.1885" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4c7d97e969 code=0x7ffc0000 [ 177.166800][ T29] audit: type=1326 audit(1748603065.404:5680): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10363 comm="syz.8.1885" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c7d97e969 code=0x7ffc0000 [ 177.196633][T10357] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 177.222481][T10366] ext4 filesystem being mounted at /263/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 177.226040][T10357] EXT4-fs (loop3): Remounting filesystem read-only [ 177.263237][T10357] EXT4-fs (loop3): 1 truncate cleaned up [ 177.286938][T10379] PM: Enabling pm_trace changes system date and time during resume. [ 177.286938][T10379] PM: Correct system time has to be restored manually after resume. [ 177.461912][T10397] loop7: detected capacity change from 0 to 1024 [ 177.579982][T10411] loop7: detected capacity change from 0 to 512 [ 177.591004][T10400] hub 8-0:1.0: USB hub found [ 177.595809][T10400] hub 8-0:1.0: 8 ports detected [ 177.607062][T10411] ext4 filesystem being mounted at /127/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 177.632376][T10411] ip6erspan0: entered promiscuous mode [ 177.639402][T10418] loop4: detected capacity change from 0 to 128 [ 177.698235][T10411] EXT4-fs error (device loop7): ext4_acquire_dquot:6933: comm +}[@: Failed to acquire dquot type 1 [ 177.943926][T10427] lo speed is unknown, defaulting to 1000 [ 178.332746][T10439] __nla_validate_parse: 13 callbacks suppressed [ 178.332761][T10439] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1897'. [ 178.370330][T10439] syzkaller1: entered promiscuous mode [ 178.373866][T10443] loop3: detected capacity change from 0 to 512 [ 178.375899][T10439] syzkaller1: entered allmulticast mode [ 178.399841][T10443] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 178.411987][T10443] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 178.426759][T10443] EXT4-fs (loop3): Remounting filesystem read-only [ 178.433512][T10443] EXT4-fs (loop3): 1 truncate cleaned up [ 178.464718][T10433] FAULT_INJECTION: forcing a failure. [ 178.464718][T10433] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 178.477894][T10433] CPU: 1 UID: 0 PID: 10433 Comm: syz.8.1899 Not tainted 6.15.0-syzkaller-08486-gf66bc387efbe #0 PREEMPT(voluntary) [ 178.477928][T10433] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 178.478017][T10433] Call Trace: [ 178.478023][T10433] [ 178.478030][T10433] __dump_stack+0x1d/0x30 [ 178.478052][T10433] dump_stack_lvl+0xe8/0x140 [ 178.478075][T10433] dump_stack+0x15/0x1b [ 178.478094][T10433] should_fail_ex+0x265/0x280 [ 178.478131][T10433] should_fail+0xb/0x20 [ 178.478202][T10433] should_fail_usercopy+0x1a/0x20 [ 178.478225][T10433] _copy_from_user+0x1c/0xb0 [ 178.478252][T10433] __sys_bind+0x106/0x2a0 [ 178.478286][T10433] __x64_sys_bind+0x3f/0x50 [ 178.478318][T10433] x64_sys_call+0x2086/0x2fb0 [ 178.478345][T10433] do_syscall_64+0xd2/0x200 [ 178.478378][T10433] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 178.478474][T10433] ? clear_bhb_loop+0x40/0x90 [ 178.478501][T10433] ? clear_bhb_loop+0x40/0x90 [ 178.478528][T10433] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 178.478628][T10433] RIP: 0033:0x7f4c7d97e969 [ 178.478647][T10433] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 178.478669][T10433] RSP: 002b:00007f4c7bfe7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 178.478691][T10433] RAX: ffffffffffffffda RBX: 00007f4c7dba5fa0 RCX: 00007f4c7d97e969 [ 178.478706][T10433] RDX: 0000000000000014 RSI: 0000200000000100 RDI: 0000000000000006 [ 178.478752][T10433] RBP: 00007f4c7bfe7090 R08: 0000000000000000 R09: 0000000000000000 [ 178.478767][T10433] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 178.478781][T10433] R13: 0000000000000000 R14: 00007f4c7dba5fa0 R15: 00007ffe118cf0d8 [ 178.478805][T10433] [ 178.710727][T10447] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1902'. [ 178.749805][T10453] loop5: detected capacity change from 0 to 512 [ 178.768381][T10455] loop4: detected capacity change from 0 to 128 [ 178.803392][T10453] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 178.899257][T10455] ext4 filesystem being mounted at /420/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 178.937226][T10453] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 178.953582][T10466] netlink: 256 bytes leftover after parsing attributes in process `syz.3.1907'. [ 178.958057][T10453] EXT4-fs (loop5): Remounting filesystem read-only [ 178.976155][T10453] EXT4-fs (loop5): 1 truncate cleaned up [ 179.001972][T10469] PM: Enabling pm_trace changes system date and time during resume. [ 179.001972][T10469] PM: Correct system time has to be restored manually after resume. [ 179.066661][T10476] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 179.077462][T10476] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 179.091064][T10476] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 179.101113][T10476] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 179.199649][T10481] loop7: detected capacity change from 0 to 164 [ 179.207065][T10481] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 179.263648][T10483] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1914'. [ 179.272736][T10483] team0: Unable to change to the same mode the team is in [ 179.642510][T10485] loop5: detected capacity change from 0 to 128 [ 179.719056][T10489] loop5: detected capacity change from 0 to 8192 [ 179.799486][T10494] loop8: detected capacity change from 0 to 512 [ 179.806957][T10494] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 179.819399][T10494] EXT4-fs error (device loop8): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 179.842215][T10494] EXT4-fs (loop8): Remounting filesystem read-only [ 179.849074][T10494] EXT4-fs (loop8): 1 truncate cleaned up [ 179.852335][T10498] loop3: detected capacity change from 0 to 512 [ 179.876615][T10498] ext4 filesystem being mounted at /402/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 179.899435][T10498] ip6erspan0: entered promiscuous mode [ 179.949011][T10507] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.1920: Failed to acquire dquot type 1 [ 179.984327][T10504] loop8: detected capacity change from 0 to 1024 [ 180.020259][T10504] EXT4-fs (loop8): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 180.030150][T10504] EXT4-fs (loop8): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 180.040046][T10504] EXT4-fs (loop8): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 180.045219][T10511] loop4: detected capacity change from 0 to 512 [ 180.078098][T10511] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 180.088647][T10504] EXT4-fs error (device loop8): ext4_get_journal_inode:5796: inode #5: comm syz.8.1922: unexpected bad inode w/o EXT4_IGET_BAD [ 180.108819][T10511] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 180.125135][T10504] EXT4-fs (loop8): no journal found [ 180.130542][T10504] EXT4-fs (loop8): can't get journal size [ 180.140224][T10518] loop7: detected capacity change from 0 to 512 [ 180.154793][T10511] EXT4-fs (loop4): Remounting filesystem read-only [ 180.161399][T10511] EXT4-fs (loop4): 1 truncate cleaned up [ 180.183009][T10518] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 180.191319][T10520] loop5: detected capacity change from 0 to 1024 [ 180.199327][T10523] loop3: detected capacity change from 0 to 128 [ 180.205116][T10520] EXT4-fs: Ignoring removed bh option [ 180.211891][T10520] EXT4-fs: inline encryption not supported [ 180.249071][T10520] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 180.275674][T10518] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 180.294562][T10527] FAULT_INJECTION: forcing a failure. [ 180.294562][T10527] name failslab, interval 1, probability 0, space 0, times 0 [ 180.307255][T10527] CPU: 0 UID: 0 PID: 10527 Comm: syz.4.1929 Not tainted 6.15.0-syzkaller-08486-gf66bc387efbe #0 PREEMPT(voluntary) [ 180.307281][T10527] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 180.307296][T10527] Call Trace: [ 180.307333][T10527] [ 180.307342][T10527] __dump_stack+0x1d/0x30 [ 180.307365][T10527] dump_stack_lvl+0xe8/0x140 [ 180.307382][T10527] dump_stack+0x15/0x1b [ 180.307398][T10527] should_fail_ex+0x265/0x280 [ 180.307436][T10527] should_failslab+0x8c/0xb0 [ 180.307490][T10527] kmem_cache_alloc_noprof+0x50/0x310 [ 180.307523][T10527] ? audit_log_start+0x365/0x6c0 [ 180.307631][T10527] audit_log_start+0x365/0x6c0 [ 180.307673][T10527] audit_seccomp+0x48/0x100 [ 180.307701][T10527] ? __seccomp_filter+0x68c/0x10d0 [ 180.307727][T10527] __seccomp_filter+0x69d/0x10d0 [ 180.307808][T10527] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 180.307869][T10527] ? vfs_write+0x75e/0x8e0 [ 180.307916][T10527] __secure_computing+0x82/0x150 [ 180.307944][T10527] syscall_trace_enter+0xcf/0x1e0 [ 180.307974][T10527] do_syscall_64+0xac/0x200 [ 180.308007][T10527] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 180.308101][T10527] ? clear_bhb_loop+0x40/0x90 [ 180.308127][T10527] ? clear_bhb_loop+0x40/0x90 [ 180.308154][T10527] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 180.308257][T10527] RIP: 0033:0x7fe7fb1fe969 [ 180.308303][T10527] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 180.308327][T10527] RSP: 002b:00007fe7f9867038 EFLAGS: 00000246 ORIG_RAX: 0000000000000125 [ 180.308350][T10527] RAX: ffffffffffffffda RBX: 00007fe7fb425fa0 RCX: 00007fe7fb1fe969 [ 180.308365][T10527] RDX: 0000000000000000 RSI: 0000000000084880 RDI: 0000000000000000 [ 180.308380][T10527] RBP: 00007fe7f9867090 R08: 0000000000000000 R09: 0000000000000000 [ 180.308395][T10527] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 180.308419][T10527] R13: 0000000000000000 R14: 00007fe7fb425fa0 R15: 00007fff69cd2948 [ 180.308436][T10527] [ 180.309032][T10518] EXT4-fs (loop7): Remounting filesystem read-only [ 180.445271][T10520] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c842e018, mo2=0000] [ 180.462931][T10523] ext4 filesystem being mounted at /405/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 180.490747][T10520] EXT4-fs error (device loop5): ext4_orphan_get:1419: comm syz.5.1927: bad orphan inode 11 [ 180.496843][T10518] EXT4-fs (loop7): 1 truncate cleaned up [ 180.524948][T10520] ext4_test_bit(bit=10, block=4) = 1 [ 180.580827][T10520] is_bad_inode(inode)=0 [ 180.585039][T10520] NEXT_ORPHAN(inode)=3254779904 [ 180.589910][T10520] max_ino=32 [ 180.593201][T10520] i_nlink=0 [ 180.615425][T10530] PM: Enabling pm_trace changes system date and time during resume. [ 180.615425][T10530] PM: Correct system time has to be restored manually after resume. [ 180.650285][T10520] EXT4-fs error (device loop5): ext4_map_blocks:780: inode #3: block 2: comm syz.5.1927: lblock 2 mapped to illegal pblock 2 (length 1) [ 180.664600][T10520] EXT4-fs error (device loop5): ext4_map_blocks:780: inode #3: block 48: comm syz.5.1927: lblock 0 mapped to illegal pblock 48 (length 1) [ 180.700282][T10520] EXT4-fs error (device loop5): ext4_acquire_dquot:6933: comm syz.5.1927: Failed to acquire dquot type 0 [ 180.712132][T10520] EXT4-fs error (device loop5) in ext4_reserve_inode_write:6255: Corrupt filesystem [ 180.736620][T10520] EXT4-fs error (device loop5): ext4_evict_inode:254: inode #11: comm syz.5.1927: mark_inode_dirty error [ 180.755312][T10520] EXT4-fs warning (device loop5): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 180.776327][T10520] FAULT_INJECTION: forcing a failure. [ 180.776327][T10520] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 180.789517][T10520] CPU: 0 UID: 0 PID: 10520 Comm: syz.5.1927 Not tainted 6.15.0-syzkaller-08486-gf66bc387efbe #0 PREEMPT(voluntary) [ 180.789547][T10520] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 180.789574][T10520] Call Trace: [ 180.789582][T10520] [ 180.789592][T10520] __dump_stack+0x1d/0x30 [ 180.789616][T10520] dump_stack_lvl+0xe8/0x140 [ 180.789635][T10520] dump_stack+0x15/0x1b [ 180.789685][T10520] should_fail_ex+0x265/0x280 [ 180.789726][T10520] should_fail+0xb/0x20 [ 180.789784][T10520] should_fail_usercopy+0x1a/0x20 [ 180.789802][T10520] _copy_from_user+0x1c/0xb0 [ 180.789869][T10520] do_vfs_ioctl+0x18c/0x11d0 [ 180.789910][T10520] ? selinux_file_ioctl+0x2e3/0x370 [ 180.789939][T10520] ? __fget_files+0x184/0x1c0 [ 180.789967][T10520] __se_sys_ioctl+0x82/0x140 [ 180.789999][T10520] __x64_sys_ioctl+0x43/0x50 [ 180.790026][T10520] x64_sys_call+0x19a8/0x2fb0 [ 180.790053][T10520] do_syscall_64+0xd2/0x200 [ 180.790143][T10520] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 180.790176][T10520] ? clear_bhb_loop+0x40/0x90 [ 180.790202][T10520] ? clear_bhb_loop+0x40/0x90 [ 180.790230][T10520] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 180.790321][T10520] RIP: 0033:0x7f41a8d2e969 [ 180.790340][T10520] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 180.790362][T10520] RSP: 002b:00007f41a7397038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 180.790434][T10520] RAX: ffffffffffffffda RBX: 00007f41a8f55fa0 RCX: 00007f41a8d2e969 [ 180.790449][T10520] RDX: 0000200000000780 RSI: 000000004020940d RDI: 0000000000000003 [ 180.790465][T10520] RBP: 00007f41a7397090 R08: 0000000000000000 R09: 0000000000000000 [ 180.790479][T10520] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 180.790494][T10520] R13: 0000000000000000 R14: 00007f41a8f55fa0 R15: 00007ffef8fc4338 [ 180.790517][T10520] [ 181.006211][ T4993] EXT4-fs error (device loop5): __ext4_get_inode_loc:4792: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 181.019314][ T4993] EXT4-fs error (device loop5) in ext4_reserve_inode_write:6255: Corrupt filesystem [ 181.029628][ T4993] EXT4-fs error (device loop5): ext4_quota_off:7217: inode #3: comm syz-executor: mark_inode_dirty error [ 181.096221][T10537] loop7: detected capacity change from 0 to 164 [ 181.134695][T10537] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 181.512026][T10544] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1935'. [ 181.522847][T10544] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1935'. [ 181.575791][T10546] siw: device registration error -23 [ 181.632136][T10549] loop7: detected capacity change from 0 to 1024 [ 181.649999][T10550] netlink: 60 bytes leftover after parsing attributes in process `syz.5.1934'. [ 181.660283][T10550] team0: Unable to change to the same mode the team is in [ 181.675320][T10549] EXT4-fs: Ignoring removed bh option [ 181.930162][ T29] kauditd_printk_skb: 212 callbacks suppressed [ 181.930181][ T29] audit: type=1400 audit(1748603070.254:5885): avc: denied { name_bind } for pid=10548 comm="syz.7.1936" src=3618 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 182.073883][ T29] audit: type=1326 audit(1748603070.404:5886): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10564 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faec85fe969 code=0x7ffc0000 [ 182.075636][T10567] loop4: detected capacity change from 0 to 128 [ 182.097040][ T29] audit: type=1326 audit(1748603070.404:5887): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10564 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faec85fe969 code=0x7ffc0000 [ 182.113156][T10567] ext4 filesystem being mounted at /430/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 182.158769][ T29] audit: type=1326 audit(1748603070.444:5888): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10502 comm="syz.8.1922" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f4c7d97d2d0 code=0x7ffc0000 [ 182.182530][ T29] audit: type=1326 audit(1748603070.444:5889): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10502 comm="syz.8.1922" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f4c7d97d5ca code=0x7ffc0000 [ 182.205971][ T29] audit: type=1326 audit(1748603070.444:5890): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10502 comm="syz.8.1922" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c7d97e969 code=0x7ffc0000 [ 182.229480][ T29] audit: type=1326 audit(1748603070.444:5891): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10502 comm="syz.8.1922" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c7d97e969 code=0x7ffc0000 [ 182.253093][ T29] audit: type=1326 audit(1748603070.464:5892): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10564 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7faec85fe969 code=0x7ffc0000 [ 182.276039][ T29] audit: type=1326 audit(1748603070.464:5893): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10564 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faec85fe969 code=0x7ffc0000 [ 182.299096][ T29] audit: type=1326 audit(1748603070.464:5894): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10564 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faec85fe969 code=0x7ffc0000 [ 182.322769][T10565] loop7: detected capacity change from 0 to 512 [ 182.433130][T10565] ext4 filesystem being mounted at /137/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 182.540807][T10565] ip6erspan0: entered promiscuous mode [ 182.567591][T10583] EXT4-fs error (device loop7): ext4_acquire_dquot:6933: comm syz.7.1942: Failed to acquire dquot type 1 [ 182.592590][T10587] loop8: detected capacity change from 0 to 1024 [ 182.600820][T10587] EXT4-fs: quotafile must be on filesystem root [ 182.619291][T10589] loop5: detected capacity change from 0 to 512 [ 182.631314][T10589] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 182.695551][T10590] loop4: detected capacity change from 0 to 164 [ 182.743231][T10590] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 182.856455][T10589] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 182.873768][T10589] EXT4-fs (loop5): Remounting filesystem read-only [ 182.880562][T10589] EXT4-fs (loop5): 1 truncate cleaned up [ 182.960837][T10600] FAULT_INJECTION: forcing a failure. [ 182.960837][T10600] name failslab, interval 1, probability 0, space 0, times 0 [ 182.973701][T10600] CPU: 0 UID: 0 PID: 10600 Comm: syz.8.1954 Not tainted 6.15.0-syzkaller-08486-gf66bc387efbe #0 PREEMPT(voluntary) [ 182.973728][T10600] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 182.973740][T10600] Call Trace: [ 182.973747][T10600] [ 182.973755][T10600] __dump_stack+0x1d/0x30 [ 182.973782][T10600] dump_stack_lvl+0xe8/0x140 [ 182.973805][T10600] dump_stack+0x15/0x1b [ 182.973824][T10600] should_fail_ex+0x265/0x280 [ 182.973893][T10600] ? llc_sap_open+0x99/0x230 [ 182.973944][T10600] should_failslab+0x8c/0xb0 [ 182.973968][T10600] __kmalloc_cache_noprof+0x4c/0x320 [ 182.973996][T10600] llc_sap_open+0x99/0x230 [ 182.974032][T10600] llc_ui_autobind+0x17a/0x380 [ 182.974119][T10600] llc_ui_connect+0x103/0x6c0 [ 182.974221][T10600] ? selinux_socket_connect+0x57/0x70 [ 182.974252][T10600] ? __pfx_llc_ui_connect+0x10/0x10 [ 182.974400][T10600] __sys_connect+0x1f2/0x2b0 [ 182.974427][T10600] __x64_sys_connect+0x3f/0x50 [ 182.974456][T10600] x64_sys_call+0x1daa/0x2fb0 [ 182.974553][T10600] do_syscall_64+0xd2/0x200 [ 182.974588][T10600] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 182.974617][T10600] ? clear_bhb_loop+0x40/0x90 [ 182.974637][T10600] ? clear_bhb_loop+0x40/0x90 [ 182.974661][T10600] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 182.974684][T10600] RIP: 0033:0x7f4c7d97e969 [ 182.974703][T10600] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 182.974760][T10600] RSP: 002b:00007f4c7bfe7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 182.974781][T10600] RAX: ffffffffffffffda RBX: 00007f4c7dba5fa0 RCX: 00007f4c7d97e969 [ 182.974793][T10600] RDX: 0000000000000010 RSI: 0000200000000340 RDI: 0000000000000004 [ 182.974808][T10600] RBP: 00007f4c7bfe7090 R08: 0000000000000000 R09: 0000000000000000 [ 182.974824][T10600] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 182.974839][T10600] R13: 0000000000000000 R14: 00007f4c7dba5fa0 R15: 00007ffe118cf0d8 [ 182.974889][T10600] [ 183.236667][T10605] loop7: detected capacity change from 0 to 128 [ 183.308152][T10609] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 183.316893][T10609] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 183.400405][T10612] loop3: detected capacity change from 0 to 164 [ 183.440920][T10605] ext4 filesystem being mounted at /139/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 183.475403][T10612] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 183.652521][T10611] loop8: detected capacity change from 0 to 8192 [ 183.855297][T10616] loop4: detected capacity change from 0 to 1024 [ 183.915338][T10621] loop3: detected capacity change from 0 to 512 [ 183.921763][T10616] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 183.931615][T10616] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 183.948882][T10616] EXT4-fs (loop4): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 183.961305][T10616] EXT4-fs error (device loop4): ext4_get_journal_inode:5796: inode #5: comm syz.4.1959: unexpected bad inode w/o EXT4_IGET_BAD [ 183.966048][T10623] loop7: detected capacity change from 0 to 128 [ 183.992556][T10616] EXT4-fs (loop4): no journal found [ 183.997891][T10616] EXT4-fs (loop4): can't get journal size [ 184.011425][T10621] ext4 filesystem being mounted at /410/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 184.017329][T10623] ext4 filesystem being mounted at /140/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 184.027183][T10621] ip6erspan0: entered promiscuous mode [ 184.076429][T10629] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.1961: Failed to acquire dquot type 1 [ 184.158302][T10630] loop5: detected capacity change from 0 to 512 [ 184.185225][T10630] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 184.212853][T10630] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 184.242739][T10630] EXT4-fs (loop5): Remounting filesystem read-only [ 184.265521][T10630] EXT4-fs (loop5): 1 truncate cleaned up [ 184.344105][T10638] loop7: detected capacity change from 0 to 128 [ 184.391611][T10638] ext4 filesystem being mounted at /141/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 184.640835][T10651] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1969'. [ 184.771699][T10656] loop8: detected capacity change from 0 to 512 [ 184.795115][T10656] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 184.814300][T10656] EXT4-fs error (device loop8): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 184.831209][T10656] EXT4-fs (loop8): Remounting filesystem read-only [ 184.838913][T10656] EXT4-fs (loop8): 1 truncate cleaned up [ 184.891572][T10659] loop8: detected capacity change from 0 to 512 [ 184.904547][T10659] EXT4-fs error (device loop8): ext4_ext_check_inode:523: inode #15: comm syz.8.1971: pblk 0 bad header/extent: invalid magic - magic 7973, entries 1402, max 27648(0), depth 25964(25964) [ 184.928308][T10659] EXT4-fs error (device loop8): ext4_orphan_get:1398: comm syz.8.1971: couldn't read orphan inode 15 (err -117) [ 185.041592][T10662] loop4: detected capacity change from 0 to 512 [ 185.050782][T10662] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 185.062313][T10662] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 185.079977][T10662] EXT4-fs (loop4): Remounting filesystem read-only [ 185.086893][T10662] EXT4-fs (loop4): 1 truncate cleaned up [ 185.099153][T10665] loop8: detected capacity change from 0 to 128 [ 185.129690][T10667] loop4: detected capacity change from 0 to 128 [ 185.142482][T10669] loop3: detected capacity change from 0 to 512 [ 185.155925][T10667] ext4 filesystem being mounted at /436/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 185.204147][T10669] ext4 filesystem being mounted at /413/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 185.253829][T10677] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=10677 comm=syz.8.1976 [ 185.255412][T10669] ip6erspan0: entered promiscuous mode [ 185.266551][T10677] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=10677 comm=syz.8.1976 [ 185.304104][T10678] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.1974: Failed to acquire dquot type 1 [ 185.419430][T10689] loop8: detected capacity change from 0 to 512 [ 185.431138][T10689] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 185.487764][T10689] EXT4-fs error (device loop8): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 185.508742][T10694] loop5: detected capacity change from 0 to 512 [ 185.528774][T10696] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.535859][T10689] EXT4-fs (loop8): Remounting filesystem read-only [ 185.547609][T10692] netlink: 256 bytes leftover after parsing attributes in process `syz.7.1981'. [ 185.557822][T10689] EXT4-fs (loop8): 1 truncate cleaned up [ 185.567621][T10702] loop3: detected capacity change from 0 to 128 [ 185.574669][T10694] ext4 filesystem being mounted at /279/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 185.593931][T10702] ext4 filesystem being mounted at /415/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 185.661697][T10696] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.690827][T10708] loop8: detected capacity change from 0 to 128 [ 185.708078][T10696] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.757586][T10708] ext4 filesystem being mounted at /67/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 185.793351][T10715] FAULT_INJECTION: forcing a failure. [ 185.793351][T10715] name failslab, interval 1, probability 0, space 0, times 0 [ 185.806150][T10715] CPU: 0 UID: 0 PID: 10715 Comm: syz.3.1990 Not tainted 6.15.0-syzkaller-08486-gf66bc387efbe #0 PREEMPT(voluntary) [ 185.806181][T10715] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 185.806195][T10715] Call Trace: [ 185.806222][T10715] [ 185.806231][T10715] __dump_stack+0x1d/0x30 [ 185.806252][T10715] dump_stack_lvl+0xe8/0x140 [ 185.806270][T10715] dump_stack+0x15/0x1b [ 185.806286][T10715] should_fail_ex+0x265/0x280 [ 185.806323][T10715] ? resv_map_alloc+0x32/0x190 [ 185.806355][T10715] should_failslab+0x8c/0xb0 [ 185.806414][T10715] __kmalloc_cache_noprof+0x4c/0x320 [ 185.806447][T10715] ? vfs_write+0x75e/0x8e0 [ 185.806549][T10715] resv_map_alloc+0x32/0x190 [ 185.806578][T10715] hugetlbfs_get_inode+0x67/0x370 [ 185.806613][T10715] hugetlb_file_setup+0x192/0x3d0 [ 185.806684][T10715] ksys_mmap_pgoff+0x157/0x310 [ 185.806731][T10715] x64_sys_call+0x1602/0x2fb0 [ 185.806754][T10715] do_syscall_64+0xd2/0x200 [ 185.806856][T10715] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 185.806883][T10715] ? clear_bhb_loop+0x40/0x90 [ 185.806909][T10715] ? clear_bhb_loop+0x40/0x90 [ 185.806957][T10715] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 185.806982][T10715] RIP: 0033:0x7f52f874e969 [ 185.806999][T10715] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 185.807089][T10715] RSP: 002b:00007f52f6db7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 185.807111][T10715] RAX: ffffffffffffffda RBX: 00007f52f8975fa0 RCX: 00007f52f874e969 [ 185.807123][T10715] RDX: 0000000000000002 RSI: 0000000000ff5000 RDI: 0000200000000000 [ 185.807184][T10715] RBP: 00007f52f6db7090 R08: ffffffffffffffff R09: 0000000006000000 [ 185.807198][T10715] R10: 000000000004c831 R11: 0000000000000246 R12: 0000000000000001 [ 185.807213][T10715] R13: 0000000000000000 R14: 00007f52f8975fa0 R15: 00007ffed2e61d38 [ 185.807232][T10715] [ 185.810101][T10696] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.918968][T10718] loop3: detected capacity change from 0 to 512 [ 185.973082][T10709] EXT4-fs error (device loop5): ext4_do_update_inode:5568: inode #19: comm syz.5.1985: corrupted inode contents [ 186.003186][T10718] ext4 filesystem being mounted at /418/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 186.004419][T10709] EXT4-fs error (device loop5): ext4_dirty_inode:6459: inode #19: comm syz.5.1985: mark_inode_dirty error [ 186.059348][T10709] EXT4-fs error (device loop5): ext4_do_update_inode:5568: inode #19: comm syz.5.1985: corrupted inode contents [ 186.081042][T10709] EXT4-fs error (device loop5): ext4_xattr_delete_inode:2991: inode #19: comm syz.5.1985: mark_inode_dirty error [ 186.083642][T10696] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.095971][T10709] EXT4-fs error (device loop5): ext4_xattr_delete_inode:2994: inode #19: comm syz.5.1985: mark inode dirty (error -117) [ 186.106599][T10696] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.131733][T10709] EXT4-fs warning (device loop5): ext4_evict_inode:274: xattr delete (err -117) [ 186.141113][T10696] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.157030][T10724] loop3: detected capacity change from 0 to 512 [ 186.161055][T10696] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.180768][T10724] ext4 filesystem being mounted at /419/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 186.272814][T10724] ip6erspan0: entered promiscuous mode [ 186.278189][T10731] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.1993: Failed to acquire dquot type 1 [ 186.315137][T10737] loop7: detected capacity change from 0 to 512 [ 186.345316][T10737] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 186.367410][T10739] loop5: detected capacity change from 0 to 128 [ 186.378215][T10737] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 186.411997][T10737] EXT4-fs (loop7): Remounting filesystem read-only [ 186.418796][T10737] EXT4-fs (loop7): 1 truncate cleaned up [ 186.499771][T10750] loop7: detected capacity change from 0 to 128 [ 186.520870][T10750] ext4 filesystem being mounted at /147/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 186.692097][T10760] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2000'. [ 186.701321][T10760] team0: Unable to change to the same mode the team is in [ 186.864386][T10771] loop8: detected capacity change from 0 to 164 [ 186.872722][T10771] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 186.904628][T10770] netlink: 256 bytes leftover after parsing attributes in process `syz.7.2009'. [ 187.011653][T10775] loop4: detected capacity change from 0 to 128 [ 187.357202][ T29] kauditd_printk_skb: 450 callbacks suppressed [ 187.357221][ T29] audit: type=1326 audit(1748603075.694:6337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10784 comm="syz.4.2016" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7fb1fe969 code=0x7ffc0000 [ 187.387227][ T29] audit: type=1326 audit(1748603075.694:6338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10784 comm="syz.4.2016" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7fb1fe969 code=0x7ffc0000 [ 187.441697][ T29] audit: type=1326 audit(1748603075.694:6339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10784 comm="syz.4.2016" exe="/root/syz-executor" sig=0 arch=c000003e syscall=163 compat=0 ip=0x7fe7fb1fe969 code=0x7ffc0000 [ 187.465334][ T29] audit: type=1326 audit(1748603075.694:6340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10784 comm="syz.4.2016" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7fb1fe969 code=0x7ffc0000 [ 187.488890][ T29] audit: type=1326 audit(1748603075.754:6341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10788 comm="syz.4.2018" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7fb1fe969 code=0x7ffc0000 [ 187.512479][ T29] audit: type=1326 audit(1748603075.754:6342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10788 comm="syz.4.2018" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fe7fb1fe969 code=0x7ffc0000 [ 187.536131][ T29] audit: type=1326 audit(1748603075.754:6343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10788 comm="syz.4.2018" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7fb1fe969 code=0x7ffc0000 [ 187.559856][ T29] audit: type=1326 audit(1748603075.754:6344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10788 comm="syz.4.2018" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7fb1fe969 code=0x7ffc0000 [ 187.583482][ T29] audit: type=1326 audit(1748603075.754:6345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10788 comm="syz.4.2018" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fe7fb1fe969 code=0x7ffc0000 [ 187.607092][ T29] audit: type=1326 audit(1748603075.754:6346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10788 comm="syz.4.2018" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7fb1fe969 code=0x7ffc0000 [ 187.736842][T10798] netlink: 'syz.7.2021': attribute type 1 has an invalid length. [ 187.744718][T10798] netlink: 64 bytes leftover after parsing attributes in process `syz.7.2021'. [ 187.779421][T10802] loop7: detected capacity change from 0 to 128 [ 187.790384][T10804] loop8: detected capacity change from 0 to 512 [ 187.796489][T10802] ext4 filesystem being mounted at /150/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 187.817577][T10804] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 187.844496][T10804] EXT4-fs error (device loop8): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 187.866601][T10804] EXT4-fs (loop8): Remounting filesystem read-only [ 187.873409][T10804] EXT4-fs (loop8): 1 truncate cleaned up [ 187.982005][T10811] loop8: detected capacity change from 0 to 128 [ 188.100850][T10819] loop8: detected capacity change from 0 to 512 [ 188.110632][T10819] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 188.131574][T10819] EXT4-fs error (device loop8): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 188.146478][T10819] EXT4-fs (loop8): Remounting filesystem read-only [ 188.153216][T10819] EXT4-fs (loop8): 1 truncate cleaned up [ 188.209099][T10822] loop8: detected capacity change from 0 to 512 [ 188.217651][T10822] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 188.248117][T10822] EXT4-fs error (device loop8): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 188.264549][T10822] EXT4-fs (loop8): Remounting filesystem read-only [ 188.271555][T10822] EXT4-fs (loop8): 1 truncate cleaned up [ 188.346296][T10825] loop3: detected capacity change from 0 to 8192 [ 188.376541][T10827] loop8: detected capacity change from 0 to 128 [ 188.409148][T10827] ext4 filesystem being mounted at /82/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 188.771744][T10842] loop5: detected capacity change from 0 to 512 [ 188.802623][T10842] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 188.830695][T10842] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 188.860969][T10842] EXT4-fs (loop5): Remounting filesystem read-only [ 188.892161][T10847] loop7: detected capacity change from 0 to 512 [ 188.895004][T10842] EXT4-fs (loop5): 1 truncate cleaned up [ 188.932739][T10847] ext4 filesystem being mounted at /154/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 188.993395][T10855] loop5: detected capacity change from 0 to 512 [ 189.005693][T10855] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 189.039445][T10856] EXT4-fs error (device loop7): ext4_acquire_dquot:6933: comm syz.7.2041: Failed to acquire dquot type 1 [ 189.069493][T10855] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 189.090686][T10847] ip6erspan0: entered promiscuous mode [ 189.102302][T10855] EXT4-fs (loop5): Remounting filesystem read-only [ 189.109293][T10855] EXT4-fs (loop5): 1 truncate cleaned up [ 189.127189][T10860] PM: Enabling pm_trace changes system date and time during resume. [ 189.127189][T10860] PM: Correct system time has to be restored manually after resume. [ 189.214170][T10862] loop5: detected capacity change from 0 to 1024 [ 189.296749][T10866] loop8: detected capacity change from 0 to 512 [ 189.333061][T10866] ext4 filesystem being mounted at /83/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 189.362453][T10866] FAULT_INJECTION: forcing a failure. [ 189.362453][T10866] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 189.375736][T10866] CPU: 1 UID: 0 PID: 10866 Comm: syz.8.2047 Not tainted 6.15.0-syzkaller-08486-gf66bc387efbe #0 PREEMPT(voluntary) [ 189.375769][T10866] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 189.375857][T10866] Call Trace: [ 189.375864][T10866] [ 189.375872][T10866] __dump_stack+0x1d/0x30 [ 189.375896][T10866] dump_stack_lvl+0xe8/0x140 [ 189.375919][T10866] dump_stack+0x15/0x1b [ 189.375939][T10866] should_fail_ex+0x265/0x280 [ 189.376049][T10866] should_fail+0xb/0x20 [ 189.376153][T10866] should_fail_usercopy+0x1a/0x20 [ 189.376170][T10866] strncpy_from_user+0x25/0x230 [ 189.376221][T10866] ? kmem_cache_alloc_noprof+0x186/0x310 [ 189.376340][T10866] ? getname_flags+0x80/0x3b0 [ 189.376363][T10866] getname_flags+0xae/0x3b0 [ 189.376386][T10866] do_sys_openat2+0x60/0x110 [ 189.376414][T10866] __x64_sys_open+0xe6/0x110 [ 189.376495][T10866] x64_sys_call+0x14d4/0x2fb0 [ 189.376515][T10866] do_syscall_64+0xd2/0x200 [ 189.376541][T10866] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 189.376681][T10866] ? clear_bhb_loop+0x40/0x90 [ 189.376707][T10866] ? clear_bhb_loop+0x40/0x90 [ 189.376756][T10866] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 189.376781][T10866] RIP: 0033:0x7f4c7d97e969 [ 189.376799][T10866] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 189.376820][T10866] RSP: 002b:00007f4c7bfe7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 189.376842][T10866] RAX: ffffffffffffffda RBX: 00007f4c7dba5fa0 RCX: 00007f4c7d97e969 [ 189.376854][T10866] RDX: 0000000000000020 RSI: 000000000014927e RDI: 00002000000001c0 [ 189.376867][T10866] RBP: 00007f4c7bfe7090 R08: 0000000000000000 R09: 0000000000000000 [ 189.376937][T10866] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 189.376949][T10866] R13: 0000000000000000 R14: 00007f4c7dba5fa0 R15: 00007ffe118cf0d8 [ 189.376971][T10866] [ 189.600463][T10877] loop4: detected capacity change from 0 to 128 [ 189.613059][T10877] ext4 filesystem being mounted at /447/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 189.706897][T10882] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2050'. [ 189.806010][T10882] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2050'. [ 189.830848][T10882] siw: device registration error -23 [ 189.931904][T10891] loop4: detected capacity change from 0 to 164 [ 189.989005][T10893] loop8: detected capacity change from 0 to 512 [ 190.017419][T10891] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 190.139067][T10893] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 190.218571][T10893] EXT4-fs error (device loop8): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 190.280699][T10893] EXT4-fs (loop8): Remounting filesystem read-only [ 190.288692][T10893] EXT4-fs (loop8): 1 truncate cleaned up [ 190.317875][T10899] loop3: detected capacity change from 0 to 512 [ 190.325004][T10899] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 190.346874][T10899] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 190.366578][T10899] EXT4-fs (loop3): Remounting filesystem read-only [ 190.373341][T10899] EXT4-fs (loop3): 1 truncate cleaned up [ 190.622143][T10912] loop8: detected capacity change from 0 to 164 [ 190.640662][T10912] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 190.784418][T10915] loop4: detected capacity change from 0 to 128 [ 190.887945][T10917] loop5: detected capacity change from 0 to 128 [ 190.946210][T10915] EXT4-fs mount: 156 callbacks suppressed [ 190.946232][T10915] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 190.999181][T10915] ext4 filesystem being mounted at /449/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 191.006021][T10917] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 191.046841][T10917] ext4 filesystem being mounted at /296/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 191.081800][T10923] loop7: detected capacity change from 0 to 512 [ 191.093231][T10923] /dev/loop7: Can't open blockdev [ 191.148040][ T3315] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 191.184996][T10928] loop3: detected capacity change from 0 to 1024 [ 191.197948][T10928] EXT4-fs: quotafile must be on filesystem root [ 191.246367][T10930] loop4: detected capacity change from 0 to 1024 [ 191.265675][T10930] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 191.275574][T10930] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 191.315672][T10930] EXT4-fs (loop4): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 191.317045][T10937] loop3: detected capacity change from 0 to 512 [ 191.327046][T10930] EXT4-fs error (device loop4): ext4_get_journal_inode:5796: inode #5: comm syz.4.2066: unexpected bad inode w/o EXT4_IGET_BAD [ 191.359551][T10937] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 191.373945][T10930] EXT4-fs (loop4): no journal found [ 191.379228][T10930] EXT4-fs (loop4): can't get journal size [ 191.403032][T10930] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 191.435001][T10937] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 191.523957][T10937] EXT4-fs (loop3): Remounting filesystem read-only [ 191.539449][T10937] EXT4-fs (loop3): 1 truncate cleaned up [ 191.552055][T10937] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 191.630067][T10947] loop8: detected capacity change from 0 to 164 [ 191.695307][T10947] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 191.768612][ T3325] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 191.841071][ T4993] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 192.031696][T10952] loop5: detected capacity change from 0 to 128 [ 192.086531][T10954] loop3: detected capacity change from 0 to 164 [ 192.162356][T10964] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 192.165267][T10965] loop7: detected capacity change from 0 to 512 [ 192.171246][T10964] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 192.202106][T10965] EXT4-fs error (device loop7): ext4_ext_check_inode:523: inode #15: comm syz.7.2078: pblk 0 bad header/extent: invalid magic - magic 7973, entries 1402, max 27648(0), depth 25964(25964) [ 192.221764][T10965] EXT4-fs error (device loop7): ext4_orphan_get:1398: comm syz.7.2078: couldn't read orphan inode 15 (err -117) [ 192.234545][T10965] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 192.260702][T10970] loop5: detected capacity change from 0 to 512 [ 192.306836][T10970] EXT4-fs error (device loop5): ext4_ext_check_inode:523: inode #15: comm syz.5.2081: pblk 0 bad header/extent: invalid magic - magic 7973, entries 1402, max 27648(0), depth 25964(25964) [ 192.363281][T10973] loop8: detected capacity change from 0 to 512 [ 192.369769][ T29] kauditd_printk_skb: 155 callbacks suppressed [ 192.369784][ T29] audit: type=1326 audit(1748603080.694:6500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10972 comm="syz.8.2082" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f4c7d97e9f7 code=0x7ffc0000 [ 192.399571][ T29] audit: type=1326 audit(1748603080.694:6501): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10972 comm="syz.8.2082" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f4c7d97d2d0 code=0x7ffc0000 [ 192.424309][ T29] audit: type=1326 audit(1748603080.694:6502): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10972 comm="syz.8.2082" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f4c7d97e56b code=0x7ffc0000 [ 192.464725][T10970] EXT4-fs error (device loop5): ext4_orphan_get:1398: comm syz.5.2081: couldn't read orphan inode 15 (err -117) [ 192.484434][ T7559] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 192.496895][T10970] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 192.504918][T10973] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 192.562965][T10977] loop7: detected capacity change from 0 to 512 [ 192.573596][ T29] audit: type=1326 audit(1748603080.784:6503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10972 comm="syz.8.2082" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f4c7d97d5ca code=0x7ffc0000 [ 192.580372][T10973] ext4 filesystem being mounted at /90/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 192.597010][ T29] audit: type=1326 audit(1748603080.794:6504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10972 comm="syz.8.2082" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f4c7d97d5ca code=0x7ffc0000 [ 192.597039][ T29] audit: type=1326 audit(1748603080.794:6505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10972 comm="syz.8.2082" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f4c7d97d1d7 code=0x7ffc0000 [ 192.597071][ T29] audit: type=1326 audit(1748603080.794:6506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10972 comm="syz.8.2082" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f4c7d98010a code=0x7ffc0000 [ 192.677576][ T29] audit: type=1326 audit(1748603080.854:6507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10969 comm="syz.5.2081" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41a8d2e969 code=0x7ffc0000 [ 192.701262][ T29] audit: type=1326 audit(1748603080.854:6508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10969 comm="syz.5.2081" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41a8d2e969 code=0x7ffc0000 [ 192.724925][ T29] audit: type=1326 audit(1748603080.854:6509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10969 comm="syz.5.2081" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f41a8d2e969 code=0x7ffc0000 [ 192.743140][T10977] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 192.763190][T10977] ext4 filesystem being mounted at /165/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 192.807490][ T9297] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 192.819357][T10977] ip6erspan0: entered promiscuous mode [ 192.827636][ T4993] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 192.870721][T10984] EXT4-fs error (device loop7): ext4_acquire_dquot:6933: comm syz.7.2083: Failed to acquire dquot type 1 [ 192.950730][ T7559] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 192.965754][T10994] loop3: detected capacity change from 0 to 512 [ 193.016965][T10994] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 193.032943][T10994] ext4 filesystem being mounted at /437/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 193.048656][T10994] ip6erspan0: entered promiscuous mode [ 193.106277][T11002] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.2090: Failed to acquire dquot type 1 [ 193.244443][ T3325] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 193.362183][T11009] netlink: 256 bytes leftover after parsing attributes in process `syz.7.2092'. [ 193.564916][T11015] loop3: detected capacity change from 0 to 512 [ 193.596785][T11015] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 193.634916][T11015] ext4 filesystem being mounted at /439/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 193.679472][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 193.703370][ T3325] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 193.740035][T11021] loop4: detected capacity change from 0 to 512 [ 193.760677][T11021] EXT4-fs error (device loop4): ext4_ext_check_inode:523: inode #15: comm syz.4.2096: pblk 0 bad header/extent: invalid magic - magic 7973, entries 1402, max 27648(0), depth 25964(25964) [ 193.796577][T11021] EXT4-fs error (device loop4): ext4_orphan_get:1398: comm syz.4.2096: couldn't read orphan inode 15 (err -117) [ 193.830688][T11021] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 193.884580][T11026] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2098'. [ 194.018999][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 194.104184][T11038] loop3: detected capacity change from 0 to 128 [ 194.131771][T11040] loop7: detected capacity change from 0 to 1024 [ 194.140463][T11040] EXT4-fs (loop7): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 194.150320][T11040] EXT4-fs (loop7): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 194.164271][T11040] EXT4-fs (loop7): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 194.177470][T11040] EXT4-fs error (device loop7): ext4_get_journal_inode:5796: inode #5: comm syz.7.2104: unexpected bad inode w/o EXT4_IGET_BAD [ 194.191879][T11040] EXT4-fs (loop7): no journal found [ 194.197143][T11040] EXT4-fs (loop7): can't get journal size [ 194.204266][T11040] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 194.500967][T11049] loop5: detected capacity change from 0 to 8192 [ 194.588710][T11054] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2108'. [ 194.646201][T11060] loop3: detected capacity change from 0 to 128 [ 194.668395][T11060] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 194.708259][T11060] ext4 filesystem being mounted at /448/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 194.802921][ T3325] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 194.858099][T11065] loop3: detected capacity change from 0 to 128 [ 194.997849][T11071] loop4: detected capacity change from 0 to 512 [ 195.008629][T11071] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 195.038548][T11072] loop3: detected capacity change from 0 to 512 [ 195.090499][T11073] loop8: detected capacity change from 0 to 164 [ 195.212185][T11073] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 195.253435][T11071] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 195.294941][T11072] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 195.388034][T11071] EXT4-fs (loop4): Remounting filesystem read-only [ 195.503302][T11072] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c842e12c, mo2=0002] [ 195.533638][T11071] EXT4-fs (loop4): 1 truncate cleaned up [ 195.539675][T11072] EXT4-fs (loop3): orphan cleanup on readonly fs [ 195.547178][T11071] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 195.559977][T11072] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.2112: bg 0: block 361: padding at end of block bitmap is not set [ 195.574990][T11072] EXT4-fs (loop3): Remounting filesystem read-only [ 195.582863][T11072] EXT4-fs (loop3): 1 truncate cleaned up [ 195.595322][T11072] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 195.636043][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 195.648595][T11072] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 195.661740][T11081] netlink: 256 bytes leftover after parsing attributes in process `syz.5.2115'. [ 195.859167][T11089] netlink: 136 bytes leftover after parsing attributes in process `syz.3.2118'. [ 195.938156][T11094] loop3: detected capacity change from 0 to 512 [ 195.969739][T11094] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 196.001838][T11094] ext4 filesystem being mounted at /452/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 196.035354][ T7559] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 196.045252][T11094] ip6erspan0: entered promiscuous mode [ 196.075915][T11098] loop7: detected capacity change from 0 to 1024 [ 196.083447][T11099] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.2120: Failed to acquire dquot type 1 [ 196.097332][T11098] EXT4-fs: quotafile must be on filesystem root [ 196.150347][T11101] loop7: detected capacity change from 0 to 512 [ 196.166574][ T3325] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 196.196655][T11101] EXT4-fs error (device loop7): ext4_ext_check_inode:523: inode #15: comm syz.7.2122: pblk 0 bad header/extent: invalid magic - magic 7973, entries 1402, max 27648(0), depth 25964(25964) [ 196.233244][T11101] EXT4-fs error (device loop7): ext4_orphan_get:1398: comm syz.7.2122: couldn't read orphan inode 15 (err -117) [ 196.257516][T11101] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 196.356387][ T7559] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 196.525677][T11112] loop3: detected capacity change from 0 to 128 [ 196.542289][T11112] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 196.556806][T11112] ext4 filesystem being mounted at /455/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 196.591253][T11111] netlink: 256 bytes leftover after parsing attributes in process `syz.7.2125'. [ 196.653427][ T3325] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 196.721084][T11130] loop4: detected capacity change from 0 to 1024 [ 196.747291][T11130] EXT4-fs: quotafile must be on filesystem root [ 196.901794][T11137] lo speed is unknown, defaulting to 1000 [ 196.962651][T11138] loop3: detected capacity change from 0 to 164 [ 196.970606][T11138] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 197.141879][T11140] netlink: 136 bytes leftover after parsing attributes in process `syz.8.2136'. [ 197.385532][T11137] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2135'. [ 197.456779][ T29] kauditd_printk_skb: 512 callbacks suppressed [ 197.456805][ T29] audit: type=1326 audit(1748603085.774:7016): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11134 comm="syz.4.2135" exe="/root/syz-executor" sig=0 arch=c000003e syscall=219 compat=0 ip=0x7fe7fb1fe969 code=0x7ffc0000 [ 197.500156][T11154] netlink: 'syz.5.2142': attribute type 14 has an invalid length. [ 197.508098][T11152] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2141'. [ 197.518818][T11152] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2141'. [ 197.532882][T11152] siw: device registration error -23 [ 197.597931][T11159] netlink: 256 bytes leftover after parsing attributes in process `syz.8.2137'. [ 197.668447][ T29] audit: type=1326 audit(1748603086.004:7017): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11163 comm="syz.3.2146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f52f874e969 code=0x7ffc0000 [ 197.692033][ T29] audit: type=1326 audit(1748603086.004:7018): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11163 comm="syz.3.2146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f52f874e969 code=0x7ffc0000 [ 197.715626][ T29] audit: type=1326 audit(1748603086.004:7019): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11163 comm="syz.3.2146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f52f874e969 code=0x7ffc0000 [ 197.739500][ T29] audit: type=1326 audit(1748603086.004:7020): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11163 comm="syz.3.2146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f52f874e969 code=0x7ffc0000 [ 197.763565][ T29] audit: type=1326 audit(1748603086.004:7021): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11163 comm="syz.3.2146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f52f874e969 code=0x7ffc0000 [ 197.799395][ T29] audit: type=1326 audit(1748603086.004:7022): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11163 comm="syz.3.2146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f52f874e969 code=0x7ffc0000 [ 197.823038][ T29] audit: type=1326 audit(1748603086.004:7023): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11163 comm="syz.3.2146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f52f874e969 code=0x7ffc0000 [ 197.846581][ T29] audit: type=1326 audit(1748603086.004:7024): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11163 comm="syz.3.2146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f52f874e969 code=0x7ffc0000 [ 197.870150][ T29] audit: type=1326 audit(1748603086.004:7025): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11163 comm="syz.3.2146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f52f874e969 code=0x7ffc0000 [ 197.916641][T11169] loop4: detected capacity change from 0 to 128 [ 197.995404][T11169] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 198.105609][T11169] ext4 filesystem being mounted at /459/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 198.196594][T11176] netlink: 256 bytes leftover after parsing attributes in process `syz.3.2149'. [ 198.231978][ T3315] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 198.400408][T11187] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2154'. [ 198.411249][T11187] siw: device registration error -23 [ 198.531221][T11202] loop8: detected capacity change from 0 to 512 [ 198.540240][T11202] EXT4-fs error (device loop8): ext4_ext_check_inode:523: inode #15: comm syz.8.2161: pblk 0 bad header/extent: invalid magic - magic 7973, entries 1402, max 27648(0), depth 25964(25964) [ 198.559338][T11202] EXT4-fs error (device loop8): ext4_orphan_get:1398: comm syz.8.2161: couldn't read orphan inode 15 (err -117) [ 198.571954][T11202] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 198.596973][T11206] loop5: detected capacity change from 0 to 512 [ 198.608983][T11206] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 198.621694][T11206] ext4 filesystem being mounted at /314/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 198.636763][T11206] ip6erspan0: entered promiscuous mode [ 198.654392][ T9297] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 198.678557][T11206] EXT4-fs error (device loop5): ext4_acquire_dquot:6933: comm +}[@: Failed to acquire dquot type 1 [ 198.720163][ T4993] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 198.812185][T11217] loop7: detected capacity change from 0 to 512 [ 198.836535][T11221] netlink: 'syz.5.2165': attribute type 14 has an invalid length. [ 198.897363][T11217] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 198.911255][T11228] loop5: detected capacity change from 0 to 1024 [ 198.919299][T11217] ext4 filesystem being mounted at /181/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 198.943390][T11228] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 198.953374][T11228] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 198.955784][T11217] ip6erspan0: entered promiscuous mode [ 198.974853][T11228] EXT4-fs (loop5): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 198.986462][T11228] EXT4-fs error (device loop5): ext4_get_journal_inode:5796: inode #5: comm syz.5.2171: unexpected bad inode w/o EXT4_IGET_BAD [ 199.000518][T11228] EXT4-fs (loop5): no journal found [ 199.002644][T11234] EXT4-fs error (device loop7): ext4_acquire_dquot:6933: comm syz.7.2167: Failed to acquire dquot type 1 [ 199.005771][T11228] EXT4-fs (loop5): can't get journal size [ 199.040826][T11228] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 199.210915][ T4993] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 199.212689][ T7559] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 199.278231][T11242] loop7: detected capacity change from 0 to 512 [ 199.293373][T11246] loop4: detected capacity change from 0 to 512 [ 199.304358][T11242] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 199.304512][T11242] ext4 filesystem being mounted at /182/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 199.328283][T11246] EXT4-fs (loop4): orphan cleanup on readonly fs [ 199.354846][T11246] EXT4-fs error (device loop4): ext4_orphan_get:1419: comm syz.4.2175: bad orphan inode 13 [ 199.362721][ T7559] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 199.363387][T11246] ext4_test_bit(bit=12, block=18) = 1 [ 199.363407][T11246] is_bad_inode(inode)=0 [ 199.363416][T11246] NEXT_ORPHAN(inode)=2130706432 [ 199.363452][T11246] max_ino=32 [ 199.363459][T11246] i_nlink=1 [ 199.370452][T11246] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 199.464596][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 199.725706][T11270] loop4: detected capacity change from 0 to 512 [ 199.727733][T11270] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 199.748300][T11270] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 199.750689][T11270] EXT4-fs (loop4): Remounting filesystem read-only [ 199.750770][T11270] EXT4-fs (loop4): 1 truncate cleaned up [ 199.751151][T11270] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 199.780445][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 199.786181][T11273] loop5: detected capacity change from 0 to 1024 [ 199.788111][T11273] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 199.788142][T11273] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 199.788291][T11273] EXT4-fs (loop5): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 199.789451][T11273] EXT4-fs error (device loop5): ext4_get_journal_inode:5796: inode #5: comm syz.5.2184: unexpected bad inode w/o EXT4_IGET_BAD [ 199.789732][T11273] EXT4-fs (loop5): no journal found [ 199.789743][T11273] EXT4-fs (loop5): can't get journal size [ 199.791029][T11273] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 199.829366][T11277] loop4: detected capacity change from 0 to 512 [ 199.839014][T11277] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 199.840641][T11277] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 199.840821][T11277] EXT4-fs (loop4): Remounting filesystem read-only [ 199.840867][T11277] EXT4-fs (loop4): 1 truncate cleaned up [ 199.841284][T11277] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 199.858088][ T4993] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 199.878791][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 199.922563][T11280] loop8: detected capacity change from 0 to 512 [ 199.998501][T11284] FAULT_INJECTION: forcing a failure. [ 199.998501][T11284] name failslab, interval 1, probability 0, space 0, times 0 [ 200.017438][T11280] EXT4-fs error (device loop8): ext4_ext_check_inode:523: inode #15: comm syz.8.2188: pblk 0 bad header/extent: invalid magic - magic 7973, entries 1402, max 27648(0), depth 25964(25964) [ 200.019352][T11284] CPU: 0 UID: 0 PID: 11284 Comm: syz.5.2189 Not tainted 6.15.0-syzkaller-08486-gf66bc387efbe #0 PREEMPT(voluntary) [ 200.019405][T11284] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 200.019423][T11284] Call Trace: [ 200.019509][T11284] [ 200.019520][T11284] __dump_stack+0x1d/0x30 [ 200.019547][T11284] dump_stack_lvl+0xe8/0x140 [ 200.019572][T11284] dump_stack+0x15/0x1b [ 200.019650][T11284] should_fail_ex+0x265/0x280 [ 200.019701][T11284] should_failslab+0x8c/0xb0 [ 200.019730][T11284] kmem_cache_alloc_lru_noprof+0x55/0x310 [ 200.019765][T11284] ? __d_alloc+0x3d/0x350 [ 200.019798][T11284] __d_alloc+0x3d/0x350 [ 200.019854][T11284] d_alloc_pseudo+0x1e/0x80 [ 200.019886][T11284] alloc_file_pseudo+0x71/0x160 [ 200.019924][T11284] anon_inode_getfile+0xa0/0x120 [ 200.019956][T11284] bpf_link_prime+0xfc/0x1d0 [ 200.020016][T11284] bpf_xdp_link_attach+0x204/0x5c0 [ 200.020060][T11284] link_create+0x4f2/0x6c0 [ 200.020088][T11284] __sys_bpf+0x4c7/0x790 [ 200.020184][T11284] __x64_sys_bpf+0x41/0x50 [ 200.020250][T11284] x64_sys_call+0x2478/0x2fb0 [ 200.020278][T11284] do_syscall_64+0xd2/0x200 [ 200.020312][T11284] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 200.020375][T11284] ? clear_bhb_loop+0x40/0x90 [ 200.020445][T11284] ? clear_bhb_loop+0x40/0x90 [ 200.020583][T11284] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 200.020611][T11284] RIP: 0033:0x7f41a8d2e969 [ 200.020632][T11284] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 200.020655][T11284] RSP: 002b:00007f41a7397038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 200.020732][T11284] RAX: ffffffffffffffda RBX: 00007f41a8f55fa0 RCX: 00007f41a8d2e969 [ 200.020748][T11284] RDX: 0000000000000040 RSI: 0000200000000240 RDI: 000000000000001c [ 200.020765][T11284] RBP: 00007f41a7397090 R08: 0000000000000000 R09: 0000000000000000 [ 200.020782][T11284] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 200.020864][T11284] R13: 0000000000000000 R14: 00007f41a8f55fa0 R15: 00007ffef8fc4338 [ 200.020889][T11284] [ 200.095959][T11287] loop4: detected capacity change from 0 to 128 [ 200.108787][T11280] EXT4-fs error (device loop8): ext4_orphan_get:1398: comm syz.8.2188: couldn't read orphan inode 15 (err -117) [ 200.242094][T11287] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 200.265686][T11280] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 200.274237][T11287] ext4 filesystem being mounted at /466/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 200.365707][ T9297] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 200.476379][ T3315] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 200.496327][T11302] bond1: entered promiscuous mode [ 200.501476][T11302] bond1: entered allmulticast mode [ 200.507260][T11302] 8021q: adding VLAN 0 to HW filter on device bond1 [ 200.516444][T11303] loop3: detected capacity change from 0 to 512 [ 200.524017][T11302] bond1 (unregistering): Released all slaves [ 200.540250][T11306] loop5: detected capacity change from 0 to 512 [ 200.548680][T11303] EXT4-fs error (device loop3): ext4_ext_check_inode:523: inode #15: comm syz.3.2193: pblk 0 bad header/extent: invalid magic - magic 7973, entries 1402, max 27648(0), depth 25964(25964) [ 200.567656][T11310] loop8: detected capacity change from 0 to 512 [ 200.577811][T11309] loop4: detected capacity change from 0 to 512 [ 200.582650][T11303] EXT4-fs error (device loop3): ext4_orphan_get:1398: comm syz.3.2193: couldn't read orphan inode 15 (err -117) [ 200.596603][T11309] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 200.616125][T11309] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 200.631625][T11303] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 200.642924][T11310] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 200.660278][T11310] ext4 filesystem being mounted at /111/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 200.672431][T11306] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 200.675742][T11309] EXT4-fs (loop4): Remounting filesystem read-only [ 200.691598][T11306] ext4 filesystem being mounted at /327/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 200.692428][T11309] EXT4-fs (loop4): 1 truncate cleaned up [ 200.710491][T11310] ip6erspan0: entered promiscuous mode [ 200.715302][T11309] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 200.731961][T11319] EXT4-fs error (device loop8): ext4_acquire_dquot:6933: comm syz.8.2198: Failed to acquire dquot type 1 [ 200.830114][T11326] loop4: detected capacity change from 0 to 128 [ 200.851781][T11326] FAULT_INJECTION: forcing a failure. [ 200.851781][T11326] name failslab, interval 1, probability 0, space 0, times 0 [ 200.864518][T11326] CPU: 0 UID: 0 PID: 11326 Comm: syz.4.2202 Not tainted 6.15.0-syzkaller-08486-gf66bc387efbe #0 PREEMPT(voluntary) [ 200.864549][T11326] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 200.864562][T11326] Call Trace: [ 200.864570][T11326] [ 200.864578][T11326] __dump_stack+0x1d/0x30 [ 200.864601][T11326] dump_stack_lvl+0xe8/0x140 [ 200.864621][T11326] dump_stack+0x15/0x1b [ 200.864665][T11326] should_fail_ex+0x265/0x280 [ 200.864698][T11326] should_failslab+0x8c/0xb0 [ 200.864722][T11326] kmem_cache_alloc_noprof+0x50/0x310 [ 200.864823][T11326] ? getname_flags+0x80/0x3b0 [ 200.864854][T11326] getname_flags+0x80/0x3b0 [ 200.864883][T11326] user_path_at+0x28/0x130 [ 200.864937][T11326] __se_sys_mount+0x25b/0x2e0 [ 200.864968][T11326] ? fput+0x8f/0xc0 [ 200.865001][T11326] __x64_sys_mount+0x67/0x80 [ 200.865024][T11326] x64_sys_call+0xd36/0x2fb0 [ 200.865050][T11326] do_syscall_64+0xd2/0x200 [ 200.865084][T11326] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 200.865111][T11326] ? clear_bhb_loop+0x40/0x90 [ 200.865138][T11326] ? clear_bhb_loop+0x40/0x90 [ 200.865215][T11326] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 200.865240][T11326] RIP: 0033:0x7fe7fb1fe969 [ 200.865290][T11326] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 200.865313][T11326] RSP: 002b:00007fe7f9867038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 200.865335][T11326] RAX: ffffffffffffffda RBX: 00007fe7fb425fa0 RCX: 00007fe7fb1fe969 [ 200.865351][T11326] RDX: 0000200000000280 RSI: 0000200000000300 RDI: 0000000000000000 [ 200.865365][T11326] RBP: 00007fe7f9867090 R08: 0000200000000340 R09: 0000000000000000 [ 200.865376][T11326] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 200.865389][T11326] R13: 0000000000000000 R14: 00007fe7fb425fa0 R15: 00007fff69cd2948 [ 200.865407][T11326] [ 201.069976][T11329] lo speed is unknown, defaulting to 1000 [ 201.207161][T11337] __nla_validate_parse: 8 callbacks suppressed [ 201.207231][T11337] netlink: 256 bytes leftover after parsing attributes in process `syz.7.2205'. [ 201.207937][T11344] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2208'. [ 201.262721][T11348] netlink: 128 bytes leftover after parsing attributes in process `syz.4.2206'. [ 201.335454][T11354] loop4: detected capacity change from 0 to 512 [ 201.350900][T11357] netlink: 236 bytes leftover after parsing attributes in process `syz.8.2212'. [ 201.376689][T11354] ext4 filesystem being mounted at /470/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 201.411466][T11354] ip6erspan0: entered promiscuous mode [ 201.441623][T11362] loop5: detected capacity change from 0 to 164 [ 201.449790][T11362] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 201.476046][T11363] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.2211: Failed to acquire dquot type 1 [ 201.851470][T11374] loop3: detected capacity change from 0 to 512 [ 201.886817][T11374] EXT4-fs error (device loop3): ext4_ext_check_inode:523: inode #15: comm syz.3.2218: pblk 0 bad header/extent: invalid magic - magic 7973, entries 1402, max 27648(0), depth 25964(25964) [ 201.911010][T11374] EXT4-fs error (device loop3): ext4_orphan_get:1398: comm syz.3.2218: couldn't read orphan inode 15 (err -117) [ 201.957843][T11385] netlink: 128 bytes leftover after parsing attributes in process `syz.3.2221'. [ 202.007829][T11389] loop3: detected capacity change from 0 to 512 [ 202.033369][T11389] EXT4-fs (loop3): orphan cleanup on readonly fs [ 202.040364][T11389] EXT4-fs error (device loop3): ext4_orphan_get:1419: comm syz.3.2223: bad orphan inode 13 [ 202.050964][T11389] ext4_test_bit(bit=12, block=18) = 1 [ 202.056397][T11389] is_bad_inode(inode)=0 [ 202.060572][T11389] NEXT_ORPHAN(inode)=2130706432 [ 202.065534][T11389] max_ino=32 [ 202.068879][T11389] i_nlink=1 [ 202.070472][T11390] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2215'. [ 202.081432][T11390] team0: Unable to change to the same mode the team is in [ 202.170537][T11395] loop5: detected capacity change from 0 to 512 [ 202.185430][T11397] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2226'. [ 202.195950][T11395] ext4 filesystem being mounted at /332/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 202.218977][T11395] ip6erspan0: entered promiscuous mode [ 202.267869][T11408] EXT4-fs error (device loop5): ext4_acquire_dquot:6933: comm syz.5.2225: Failed to acquire dquot type 1 [ 202.335987][T11412] loop5: detected capacity change from 0 to 512 [ 202.348149][T11412] EXT4-fs error (device loop5): ext4_ext_check_inode:523: inode #15: comm syz.5.2231: pblk 0 bad header/extent: invalid magic - magic 7973, entries 1402, max 27648(0), depth 25964(25964) [ 202.367100][T11412] EXT4-fs error (device loop5): ext4_orphan_get:1398: comm syz.5.2231: couldn't read orphan inode 15 (err -117) [ 202.439277][T11415] loop5: detected capacity change from 0 to 512 [ 202.446693][T11415] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 202.458297][T11415] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 202.472943][T11415] EXT4-fs (loop5): Remounting filesystem read-only [ 202.480272][T11415] EXT4-fs (loop5): 1 truncate cleaned up [ 202.771889][T11428] loop5: detected capacity change from 0 to 128 [ 202.823753][T11428] ext4 filesystem being mounted at /337/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 202.860389][T11432] loop7: detected capacity change from 0 to 164 [ 202.876683][T11432] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 203.073669][T11437] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2238'. [ 203.247023][ T29] kauditd_printk_skb: 594 callbacks suppressed [ 203.247038][ T29] audit: type=1326 audit(1748603091.584:7610): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11446 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f52f874e969 code=0x7ffc0000 [ 203.280895][T11447] loop3: detected capacity change from 0 to 512 [ 203.292127][ T29] audit: type=1326 audit(1748603091.584:7611): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11445 comm="syz.8.2242" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c7d97e969 code=0x7ffc0000 [ 203.315880][ T29] audit: type=1326 audit(1748603091.584:7612): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11445 comm="syz.8.2242" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4c7d97e969 code=0x7ffc0000 [ 203.339452][ T29] audit: type=1326 audit(1748603091.584:7613): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11445 comm="syz.8.2242" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c7d97e969 code=0x7ffc0000 [ 203.363094][ T29] audit: type=1326 audit(1748603091.584:7614): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11445 comm="syz.8.2242" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4c7d97e969 code=0x7ffc0000 [ 203.386620][ T29] audit: type=1326 audit(1748603091.584:7615): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11445 comm="syz.8.2242" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c7d97e969 code=0x7ffc0000 [ 203.410225][ T29] audit: type=1326 audit(1748603091.584:7616): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11445 comm="syz.8.2242" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c7d97e969 code=0x7ffc0000 [ 203.433779][ T29] audit: type=1326 audit(1748603091.614:7617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11446 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7f52f874e969 code=0x7ffc0000 [ 203.456860][ T29] audit: type=1326 audit(1748603091.614:7618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11446 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f52f874e969 code=0x7ffc0000 [ 203.479972][ T29] audit: type=1326 audit(1748603091.614:7619): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11446 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f52f874e969 code=0x7ffc0000 [ 203.570678][T11458] loop7: detected capacity change from 0 to 1024 [ 203.585411][T11447] ext4 filesystem being mounted at /474/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 203.597673][T11458] EXT4-fs (loop7): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 203.607487][T11458] EXT4-fs (loop7): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 203.622269][T11447] ip6erspan0: entered promiscuous mode [ 203.628664][T11458] EXT4-fs (loop7): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 203.644807][T11462] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2246'. [ 203.654568][T11458] EXT4-fs error (device loop7): ext4_get_journal_inode:5796: inode #5: comm syz.7.2245: unexpected bad inode w/o EXT4_IGET_BAD [ 203.654927][T11462] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2246'. [ 203.677298][T11458] EXT4-fs (loop7): no journal found [ 203.682616][T11458] EXT4-fs (loop7): can't get journal size [ 203.690056][T11447] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm +}[@: Failed to acquire dquot type 1 [ 203.745466][T11471] loop5: detected capacity change from 0 to 128 [ 203.749095][T11462] siw: device registration error -23 [ 203.807919][T11471] ext4 filesystem being mounted at /339/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 204.021904][T11493] loop3: detected capacity change from 0 to 512 [ 204.042413][T11493] EXT4-fs error (device loop3): ext4_ext_check_inode:523: inode #15: comm syz.3.2256: pblk 0 bad header/extent: invalid magic - magic 7973, entries 1402, max 27648(0), depth 25964(25964) [ 204.073092][T11493] EXT4-fs error (device loop3): ext4_orphan_get:1398: comm syz.3.2256: couldn't read orphan inode 15 (err -117) [ 204.132973][T11505] loop4: detected capacity change from 0 to 512 [ 204.188498][T11505] ext4 filesystem being mounted at /476/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 204.227933][T11505] ip6erspan0: entered promiscuous mode [ 204.288541][T11516] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.2260: Failed to acquire dquot type 1 [ 204.372424][T11523] netlink: 'syz.4.2267': attribute type 4 has an invalid length. [ 204.391169][T11523] bio_check_eod: 12 callbacks suppressed [ 204.391187][T11523] syz.4.2267: attempt to access beyond end of device [ 204.391187][T11523] md33: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 204.480083][T11529] loop4: detected capacity change from 0 to 512 [ 204.496870][T11529] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 204.511557][T11529] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 204.526550][T11529] EXT4-fs (loop4): Remounting filesystem read-only [ 204.533228][T11529] EXT4-fs (loop4): 1 truncate cleaned up [ 204.594179][T11534] loop4: detected capacity change from 0 to 128 [ 204.624006][T11538] loop5: detected capacity change from 0 to 512 [ 204.639851][ T12] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 204.662575][T11538] EXT4-fs error (device loop5): ext4_ext_check_inode:523: inode #15: comm syz.5.2274: pblk 0 bad header/extent: invalid magic - magic 7973, entries 1402, max 27648(0), depth 25964(25964) [ 204.681262][T11534] ext4 filesystem being mounted at /479/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 204.726561][T11538] EXT4-fs error (device loop5): ext4_orphan_get:1398: comm syz.5.2274: couldn't read orphan inode 15 (err -117) [ 204.805595][ T12] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 204.889547][ T12] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 204.958012][ T12] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.188755][T11574] loop7: detected capacity change from 0 to 1024 [ 205.196245][T11574] EXT4-fs: Ignoring removed bh option [ 205.201723][T11574] EXT4-fs: inline encryption not supported [ 205.201740][T11575] loop5: detected capacity change from 0 to 512 [ 205.201887][T11574] ================================================================== [ 205.201932][T11574] BUG: KCSAN: data-race in data_push_tail / vsnprintf [ 205.201995][T11574] [ 205.202005][T11574] write to 0xffffffff88e48208 of 4 bytes by task 11575 on cpu 0: [ 205.202028][T11574] vsnprintf+0x2ce/0x890 [ 205.202076][T11574] vscnprintf+0x41/0x90 [ 205.202098][T11574] printk_sprint+0x30/0x2d0 [ 205.202118][T11574] vprintk_store+0x599/0x860 [ 205.202136][T11574] vprintk_emit+0x178/0x650 [ 205.202154][T11574] vprintk_default+0x26/0x30 [ 205.202174][T11574] vprintk+0x1d/0x30 [ 205.202206][T11574] _printk+0x79/0xa0 [ 205.202242][T11574] set_capacity_and_notify+0x14c/0x1f0 [ 205.202284][T11574] loop_set_size+0x2e/0x70 [ 205.202309][T11574] loop_configure+0x8d3/0xa50 [ 205.202332][T11574] lo_ioctl+0x559/0x15d0 [ 205.202354][T11574] blkdev_ioctl+0x352/0x440 [ 205.202389][T11574] __se_sys_ioctl+0xcb/0x140 [ 205.202420][T11574] __x64_sys_ioctl+0x43/0x50 [ 205.202455][T11574] x64_sys_call+0x19a8/0x2fb0 [ 205.202479][T11574] do_syscall_64+0xd2/0x200 [ 205.202512][T11574] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 205.202541][T11574] [ 205.202551][T11574] read to 0xffffffff88e48208 of 8 bytes by task 11574 on cpu 1: [ 205.202570][T11574] data_push_tail+0xfd/0x420 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 205.202601][T11574] data_alloc+0xbf/0x2b0 [ 205.202629][T11574] prb_reserve+0x808/0xaf0 [ 205.202661][T11574] vprintk_store+0x56d/0x860 [ 205.202677][T11574] vprintk_emit+0x178/0x650 [ 205.202706][T11574] vprintk_default+0x26/0x30 [ 205.202726][T11574] vprintk+0x1d/0x30 [ 205.202752][T11574] _printk+0x79/0xa0 [ 205.202780][T11574] __ext4_msg+0x135/0x1a0 [ 205.202801][T11574] ext4_parse_param+0x252/0xf10 [ 205.202824][T11574] vfs_parse_fs_param+0x142/0x2a0 [ 205.202865][T11574] vfs_parse_monolithic_sep+0x18a/0x200 [ 205.202898][T11574] generic_parse_monolithic+0x24/0x30 [ 205.202930][T11574] parse_monolithic_mount_data+0x43/0x60 [ 205.202968][T11574] do_new_mount+0x1da/0x680 [ 205.203008][T11574] path_mount+0x4a4/0xb20 [ 205.203048][T11574] __se_sys_mount+0x28f/0x2e0 [ 205.203072][T11574] __x64_sys_mount+0x67/0x80 [ 205.203095][T11574] x64_sys_call+0xd36/0x2fb0 [ 205.203122][T11574] do_syscall_64+0xd2/0x200 [ 205.203153][T11574] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 205.203179][T11574] [ 205.203186][T11574] value changed: 0x00000000fffff212 -> 0x0a3231323135206f [ 205.203202][T11574] [ 205.203209][T11574] Reported by Kernel Concurrency Sanitizer on: [ 205.203224][T11574] CPU: 1 UID: 0 PID: 11574 Comm: syz.7.2283 Not tainted 6.15.0-syzkaller-08486-gf66bc387efbe #0 PREEMPT(voluntary) [ 205.203257][T11574] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 205.203271][T11574] ================================================================== [ 205.328586][T11575] EXT4-fs error (device loop5): ext4_ext_check_inode:523: inode #15: comm syz.5.2282: pblk 0 bad header/extent: invalid magic - magic 7973, entries 1402, max 27648(0), depth 25964(25964) [ 205.450479][T11574] EXT4-fs (loop7): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 205.451490][T11575] EXT4-fs error (device loop5): ext4_orphan_get:1398: comm syz.5.2282: couldn't read orphan inode 15 (err -117) [ 205.463974][T11574] workqueue: Failed to create a rescuer kthread for wq "ext4-rsv-conversion": -EINTR [ 205.522107][T11574] EXT4-fs: failed to create workqueue [ 205.537130][T11574] EXT4-fs (loop7): mount failed [ 205.543724][ T12] bond0 (unregistering): Released all slaves [ 205.557961][T11543] lo speed is unknown, defaulting to 1000 [ 205.598826][ T12] tipc: Left network mode [ 205.642818][ T12] hsr_slave_0: left promiscuous mode [ 205.652666][ T12] hsr_slave_1: left promiscuous mode [ 205.661986][ T12] veth1_macvtap: left promiscuous mode [ 205.671678][ T12] veth0_macvtap: left promiscuous mode [ 205.677270][ T12] veth1_vlan: left promiscuous mode [ 205.682601][ T12] veth0_vlan: left promiscuous mode [ 206.098799][ T12] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.136783][ T12] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.176359][ T12] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.226630][ T12] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.303467][ T12] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.350130][ T12] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.387504][ T12] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.448490][ T12] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.526624][ T12] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.557931][ T12] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.607999][ T12] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.647817][ T12] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.706529][ T12] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.757536][ T12] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.797536][ T12] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.847983][ T12] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 207.046976][ T12] bond0 (unregistering): Released all slaves [ 207.126923][ T12] bond0 (unregistering): Released all slaves [ 207.197372][ T12] bond0 (unregistering): Released all slaves [ 207.257468][ T12] bond0 (unregistering): Released all slaves [ 207.319072][ T12] tipc: Left network mode [ 207.323989][ T12] tipc: Left network mode [ 207.328746][ T12] tipc: Left network mode [ 207.419519][ T12] hsr_slave_0: left promiscuous mode [ 207.426589][ T12] hsr_slave_1: left promiscuous mode [ 207.434087][ T12] hsr_slave_0: left promiscuous mode [ 207.439830][ T12] hsr_slave_1: left promiscuous mode [ 207.447937][ T12] hsr_slave_0: left promiscuous mode [ 207.453528][ T12] hsr_slave_1: left promiscuous mode [ 207.460793][ T12] hsr_slave_0: left promiscuous mode [ 207.466443][ T12] hsr_slave_1: left promiscuous mode [ 207.481872][ T12] veth1_macvtap: left promiscuous mode [ 207.487464][ T12] veth0_macvtap: left promiscuous mode [ 207.493084][ T12] veth1_vlan: left promiscuous mode [ 207.498497][ T12] veth0_vlan: left promiscuous mode [ 207.504276][ T12] veth1_macvtap: left allmulticast mode [ 207.510149][ T12] veth1_macvtap: left promiscuous mode [ 207.515915][ T12] veth0_macvtap: left promiscuous mode [ 207.521450][ T12] veth1_vlan: left promiscuous mode [ 207.526736][ T12] veth0_vlan: left promiscuous mode [ 207.532475][ T12] veth1_macvtap: left promiscuous mode [ 207.538148][ T12] veth0_macvtap: left promiscuous mode [ 207.543634][ T12] veth1_vlan: left promiscuous mode [ 207.548954][ T12] veth0_vlan: left promiscuous mode [ 207.554630][ T12] veth1_macvtap: left promiscuous mode [ 207.560249][ T12] veth0_macvtap: left promiscuous mode [ 207.565793][ T12] veth1_vlan: left promiscuous mode [ 207.571111][ T12] veth0_vlan: left promiscuous mode [ 207.765294][ T60] smc: removing ib device syz! [ 207.894634][ T23] lo speed is unknown, defaulting to 1000 [ 207.900492][ T23] infiniband syz0: ib_query_port failed (-19)