last executing test programs: 2m4.863523517s ago: executing program 32 (id=363): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) mount_setattr(r0, &(0x7f0000001d80)='.\x00', 0x0, &(0x7f0000001dc0)={0xb}, 0x20) sendmmsg$inet(r0, &(0x7f0000004840)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000180)="47b7", 0x2}], 0x1000000000000280, 0x0, 0x48}}], 0x1, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$TIOCL_BLANKSCREEN(r1, 0x4b67, &(0x7f0000000180)) syz_pidfd_open(0x0, 0x0) 1m26.211893798s ago: executing program 5 (id=1246): r0 = bpf$TOKEN_CREATE(0x24, &(0x7f00000000c0), 0x8) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='smaps\x00') lseek(r1, 0x2000, 0x0) exit(0x7) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={&(0x7f0000000340)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x2c, 0x2c, 0xa, [@decl_tag={0x2, 0x0, 0x0, 0x11, 0x3, 0x1}, @func_proto={0x0, 0x2, 0x0, 0xd, 0x0, [{0xb, 0x5}, {0x2, 0x1}]}]}, {0x0, [0x5f, 0x5f, 0x5f, 0x61, 0x0, 0x61, 0x0, 0x5f]}}, &(0x7f00000003c0)=""/34, 0x4e, 0x22, 0x0, 0x5, 0x10000, @value=r0}, 0x28) r3 = openat2(0xffffffffffffffff, &(0x7f0000000500)='./file0\x00', &(0x7f0000000540)={0x48242, 0x50, 0x13}, 0x18) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000580)={0x1, 0xffffffffffffffff}, 0x4) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000001c0)=@bpf_tracing={0x1a, 0x3, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1e9c}}, &(0x7f0000000180)='syzkaller\x00', 0x9, 0xbb, &(0x7f0000000280)=""/187, 0x40f00, 0x0, '\x00', 0x0, 0x19, r2, 0x8, &(0x7f0000000440)={0x0, 0x5}, 0x8, 0x10, &(0x7f0000000480)={0x5, 0xf, 0x40, 0x10001}, 0x10, 0x2d391, r3, 0x3, &(0x7f00000005c0)=[r4], &(0x7f0000000600)=[{0x0, 0x3, 0x6, 0xb}, {0x4, 0x5, 0x1}, {0x9, 0x4, 0x3, 0xb}], 0x10, 0x8, @void, @value}, 0x94) r5 = getpid() syz_pidfd_open(r5, 0x0) syz_clone3(&(0x7f00000008c0)={0x15340180, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[r5], 0x1}, 0x58) r6 = syz_open_procfs(r5, &(0x7f0000000080)='numa_maps\x00') pipe(&(0x7f0000000000)) pread64(r6, &(0x7f0000003200)=""/4140, 0x102c, 0x59) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="0b0000000500000008", @ANYRES32, @ANYBLOB="00000000000000000000cc00b063de1c00000000000000", @ANYRES8, @ANYBLOB='\x00'/21, @ANYRES64=0x0], 0x48) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) ioctl$TCSETS(r7, 0x5402, &(0x7f0000000240)={0x1, 0x10, 0x5, 0x100, 0xd, "f4cb8263142b68b545190e3b30a9cb5fff7954"}) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r8 = getpid() sched_setscheduler(r8, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x679fd000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r9, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r10, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r9, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000540000/0x1000)=nil, 0x1000, 0x0) r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={0x0, r11}, 0x18) 1m25.267519208s ago: executing program 5 (id=1265): r0 = socket(0x840000000002, 0x3, 0x40) setsockopt$sock_int(r0, 0x1, 0x5, &(0x7f0000000080)=0x1, 0x4) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @remote}, 0x10) getsockname$packet(r0, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmmsg$inet(r0, &(0x7f0000002880)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r1, @rand_addr=0x64010101, @remote}}}], 0x20}}], 0x1, 0x0) sendmsg$ETHTOOL_MSG_RINGS_SET(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="f400000000fb0800", @ANYRES16=0x0, @ANYBLOB="100000000040fcdbdf2510000000"], 0x14}}, 0x0) 1m25.266680018s ago: executing program 5 (id=1266): symlink(&(0x7f0000001780)='./file0/../file0\x00', &(0x7f00000017c0)='./file0\x00') r0 = syz_io_uring_setup(0x75d5, &(0x7f00000000c0)={0x0, 0x6b00, 0x8000, 0x1, 0x231}, &(0x7f0000000000), &(0x7f0000000240)) syz_io_uring_setup(0x109, &(0x7f0000000400)={0x0, 0x48f2, 0x800, 0x3, 0x2000089, 0x0, r0}, &(0x7f00000003c0), &(0x7f0000000280)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000dd0000000000003b810000850000006d000000a50000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0b00000005000000010001000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000170000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000feffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000100)) r2 = getpid() r3 = syz_pidfd_open(r2, 0x0) setns(r3, 0x24020000) 1m25.248033168s ago: executing program 5 (id=1267): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000010000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001240)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a076d839240d29c034055b67dafe6c8dc3d5d0f65acc0d06d1a1434e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946ef3bb622e03b538dfd8e012e79578e51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cb132b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c690220b87b20581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd713089856f756436303767d2e24f29e5dad9796edb697a8ad004eea0182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780870014f51c3c975d5aec84222fd3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5ff22dc518afc9ffc2cc788bee1b47683db01a2f9398685211dfbbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd36e7487afa447e2edfae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae526aca54183fb01c73f979ca9857399537f5831808b0dc2a2d0e0000000000000578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c96a088a22e8b15c3e233db00002e30d46a9d24d37cef099ece729aa218f9f44a3210223fdae7ed04935c3c90d3add8eebc8619d73415cda2130f5011e4845535a8b90dfae158b94f50adab988dd8e12baf5cc9398fff00404d5d99f82e20ee6a8c88e18c2977aab37d9ac4cfc1c7b400000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe2f3ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749a89f854797f29d0000002d8c38a967c1bbe09315c29877a308bcc87dc3addb08141bdee5d27874b2f663ddeef0005b3d96c7aabf4df517d90bdc01e73835d50200a90800c66ee2b1ad76dff9f9003f07000099d4894ee7f8249dc1e3428d2129369ee1b85af6eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1036a8debd64cbe359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ce2a305c0c7d35cf4b22549a4bd92052188bd1f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f633c1d987591ec3db58a7bb3042ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd905deb28c13c1ed1c0d9cae846bcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4eda0545c00f576b2b5cc7f819abd0f885cc4806f40300966fcf1e54f5a2d38708294cd6f496e5dee734fe7da3770845cf442d488afd80e17000000000000000000000000000000000000000000000000000005205000000dc1c56d19f35d367632952a93466ae595c6a8cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e121d01342703f5bf030e935878a6d169c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b47481edbf1f000000000000004d16d29c28eb5167e9936ed327fb237a56224e49d9ea955a5f0dec1b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf8179ecd9e5a225d67521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979d3db08407081c6281e2d8429a8639034a75f4c7df3ea8fc2018d07af1491ef060cd4403a099f32468f65bd06b4092140faed0c329be610c3082d43e121861b5cc03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea20bdac0000000000000000ca06f256c8028e0f9b65f037b21f3289f86a6826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bb37b61fa0a2d8974e69115d33394e86e4b838297ba20f96936b7e4746e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab9000000000000000000000000b5ace293bec833c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f2500579aca11033bb9cc16bd83a00840e31d828ec78e116ae46c4897e2795b6ff92e9a1e24b0b855c02f2b7add58ffb25f339297729a7a51810134d3dfbf71f6516737be55c06d9cdcfb1e2bb10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce1d9bc7ef3e3f40c14089c82759106f422582b42e3e8484ea5a6ad9aa52106eafe0e0caea1ad4cb23f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af263b3dc1cab794c9ac57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380e2f1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da35c9f1534c8bd48bbd61627a2e0a74b5e6aefb7eee403502734137ff47257f164391c673b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d80dfb8f386bb74b5589829b6b0679b5d6fccbecfae5553d9950d48c774eaa35b24fce69a20d8bc410d9f48bf7eac90529cd6af061c9e53addddc620ce73c5d177e3d097159f2768636fc10276c6a0adc57483b3f7083f66b87ef296ee85e9bb70a3009a5d30f479e293a3302e11350ea857b37e76ca2f50378e4092ce2c574ad278b9b7b717c571afb2077b019fd9d89efd59b41f051ec5a8ff87ecc8df917a1e386d849fcd10e2f9ca52e02339c2f4666b0c545e25f1cd62421c28d25994be0cff7271a0dee38d7ac4ac736b090e1d29f981179186e4000000000000646174b55d251f7f8ca5ccc22a5efb33b237eff5597a3c3a5f3a9bb54abb40e54593e1a7ce4cfa17b3c3fe91c06363496341eae20dcc59b6179b32ddddef5c34000096a54c0c571a91878f61f74912e2299e5501d4d6943bfd74c856511726f0ac8f7d17f1c6b4451c1bcdc6b6e1700e4cd87709d97afc5423c96fa981873d4369b04bbf1fb9f68f17991540868e408201ad1a74179e489aa61f021a437a3fa935588be2068f7ff9b253106326fde795e530b93626cc68e06e602198724249b4445eef08401cd1a3e266db41474e69902e4d8f5da4e94cc36794258fd4032de7ab36bc24c5efd5c8495c1ccd580033c55725f2d60354f8ad5914a0155eaa743350ddb388f486b6de0549ef3b1b3c3b7d4d3a830ff39885776119408029be3788dd8422b1ab7b4c9d5b7d8682fd759c713108e1bdfc64b9121bbf07099def5c0ce3c861ae4b5cad8bba5a0b6059b9ef90c2f96a59320309e25df89484522bb1d6eaa92164f9e4042cb689a45a898354c17b08705205a9189772bcbcb6414e44b33a2470d3bc16f761c33f565b9da5e7991ad8482579cc1b16c1fcec815a5482ae8b1779c5e339971a6ec1217bcfd1ef24284de8a0a9f068f297037d6478c2434a9a18dcc6c7c791e444a79d7ce37f9cf2a434b9048ca6a2fa254aa02cd098026798a6d336348af0fc11fa2809a5ebbe17ca4d6356e4450d043ed20d313cd56a56d2e4cdf26f19af9a41695a58a9b6b45af1ca939b18d7b57791b99cfc6ec2a0848c29fea4eb8b82395a38e8aca5ab4bfc2ad8acf2e51b766f8ecd16194ad41ec097082f7fa32179ef99dafa6c2aa206a25ddc33e6f0a09169eeff428c71f54e1dfcfcd7cfc8f6e169f11c47d504"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) socket$packet(0x11, 0x3, 0x300) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x68, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_config_ext={0x7, 0xfffffffffffffffc}, 0x103200, 0x1, 0x840000, 0xc, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r3 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) bpf$MAP_CREATE(0x1900000000000000, 0x0, 0x50) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f0000000200)={[{@lazytime}, {@noload}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2e}}, {@nombcache}, {@quota}, {@quota}]}, 0x1, 0x443, &(0x7f0000000940)="$eJzs3MtvG0UYAPBv10mgLxJKefQBBMqj4pE0aYEeuIBA4gASEhzKMSRpVeo2qAkSrSoICJUjqsQdcUTiL+BELwg4IXGFAzdUqUK9tHAyWnu3cYztNsbuQv37SevM7I4182V37JmdbAIYWpPZSxKxNSJ+iYjxRnZ9gcnGj6uXz87/efnsfBK12ht/JPVyVy6fnS+KFu/bkmf2pRHpJ0nsblPv8ukzx+eq1cVTeX565cS708unzzx97MTc0cWjiydnDx06eGDmuWdnn+lLnFlcV3Z9sLRn5ytvnX9t/vD5t3/4Oinib4mjTya7HXy0VutzdeXa1pRORkpsCBtSiYjsdI3W+/94VGLt5I3Hyx+X2jhgoGq5DodXa8AtLImyWwCUo/iiz+a/xXbzRh/lu/RCYwKUxX013xpHRiLNy4y2zG/7aTIiDq/+9UW2xWDuQwAArPNtNv55qt34L417msrdka+hTETEnRGxPSLuiogdEXF3RL3svRFx3wbrb10k+ef4J73YU2A3KBv/PZ+vba0f/xWjv5io5Llt9fhHkyPHqov7G8dWs5csP9Oljgsv/fxZp2PN479sy+ovxoJ5Oy6O3Lb+PQtzK3O9xtvq0kcRu0baxZ9cWwlIImJnROzqsY5jT3y1p9Ox68ffRR/WmWpfRjzeOP+r0RJ/Iem+Pjl9e1QX9083XRUtfvzp3Oud6v9X8fdBdv43t73+r8U/kTSv1y5vvI5zv37acU7T6/U/lrxZT4/l+96fW1k5NRMxlrzaaHTz/tm19xb5onwW/7697fv/9lj7TeyOiOwivj8iHoiIB/O2PxQRD0fE3i7xf//iI+/0Hv9gZfEvbOj8ryXGonVP+0Tl+HffrKt0YiPxZ+f/YD21L99T//xLusd1I+3q7WoGAACA/580IrZGkk5dS6fp1FTjb/h3xOa0urS88uSRpfdOLjSeEZiI0bS40zXedD90Jp/WF/nZlvyB/L7x55VN9fzU/FJ1oezgYcht6dD/M79Xym4dMHCe14Lhpf/D8NL/YXjp/zC82vT/TWW0A7j52n3/fxgRFx4roTHATdXS/y37wRAx/4fhpf/D8LqB/v/brfXvqoGIWN4U139IfrCJSpRZu0SPiUj/E82QGFCi7E8mAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA/vg7AAD//9aZ7PU=") getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000dc0)={{{@in=@dev, @in6=@ipv4={""/10, ""/2, @empty}}}, {{@in=@empty}, 0x0, @in=@initdev}}, &(0x7f0000000300)=0xe8) syz_io_uring_setup(0x2ddd, &(0x7f0000000080)={0x0, 0x0, 0x10100}, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="05000000040000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000500)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@access_uid}]}}) timer_create(0x0, 0x0, &(0x7f0000000000)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000500)='hrtimer_start\x00'}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) open(&(0x7f0000000000)='./bus\x00', 0x40, 0x170) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000280), &(0x7f0000000240)='./file0\x00', 0x18000, &(0x7f0000002f40)=ANY=[@ANYRES8=0x0, @ANYRES16, @ANYRES16=0x0, @ANYRESDEC, @ANYRES32, @ANYRES32], 0x1, 0x2ee, &(0x7f00000006c0)="$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") r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r5, 0x0) fdatasync(r5) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) mlock2(&(0x7f0000004000/0x4000)=nil, 0x40ef, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000002c0)='hwmon_attr_show_string\x00', r2}, 0x18) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) 1m25.126934608s ago: executing program 5 (id=1270): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000200), 0x800) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f0000000180)={0x80, 0x8, 0x2, 0x40000000, 0x23, 0x7}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f0000000040)={0x80, 0x8, 0x2, 0xfffffffc}) shmdt(0x0) r1 = socket$netlink(0x10, 0x3, 0xa) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1c, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000005000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000100007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r4}, 0x10) sendmmsg(r1, &(0x7f00000003c0)=[{{&(0x7f00000002c0)=@llc={0x1a, 0x0, 0x0, 0x1, 0x0, 0x7f, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x32}}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000340)="66d1d833e390c215d91bee", 0xb}, {&(0x7f0000000680)="f9a4c00f147f81ebdfa707258eb11e2812eaffd47c8170801e4dba455fb3532edf3c5d061f67c07a196bf4cebc21213de6c4cf0c60a7d0465f1821132a011daee855dc937a72c98c150c33502b24d4df30973a584f0482870d16b6a40d166ddb48742a8cf61d3f10c686f5c80517d1801160c91a541d3ed9b6e762653b0b8f36ae47757163433dd48fda6d683482e45a6e241df73074548bb5c2b12267b07b0f5332c39805ea5bdaf76c64cfc8ca73c4f0491123a6377cf6e28ff628ef2498b6c872637b9ed7916e9dc41aa8f047169f82c08461480aac3272cc8d9024f1d681e57abab89238d4c579b697df506c4ddc22d27fd748575d4a74d8fbc984d5d348cde63e5d71e5fc6769ce90ee957ed9ed17f786a2a66c94276143e463f0b8f4898643c7ab2acac4e2be917aa1f56ba05996111dc8f19431c166f557731bbd264995853062e75d3b7f2c171693fef13c5f71a17bfee0f1abc2235e48be7048b2fd307e31d76860f4730b4569b7f510323c54fb87757020559f03bd3d2da145805b10e671645160431bb8ac9f96f3e58f93b5df6e2b5a8c17c89a72a70c05e4868884bf5f0cc6ba73e6bb7bb3e3bc4f605c473dee1ba94b0b46210a2531a4a5020c1f4859b14eb6786a42b054134653cf6f8561228293cd6b1151ad57f4d46e4b4acb7164912ee1daf84fb25cb3f93a4f5fdc837af5766cc942cde2d4243d14759934cc9f8d9c927b7541908657e0a62fe8eebfb8a72882578487679031b8c036873fab3ae31daa3deaf4f96697dfed5b9118121ce3211674044108b671aa53f69054bf71616c81759402f59030699d8c4d54fc560896caedfe940532046dca7b350331b08f7e62dc8b6a2a83d7708f71c4e72f53ad59d8e012c1c58ac86b493f1179b201a7dc319b6e0bf88cfa4fc283661fe0f3d20c22a6a333d9c0c997119378e99273e89e23182cd4cec2d231d9c3b720bf18af11484181fd7120c1fa2a2ba8d072c9e438e95bd2cc16d22b497625146de963adce8c8f2e51a515901ed58a7db7fbd285c5d0a2faebbe158b77b9c8ba6fe8689505826c90bb00d5c464754aa3929f1c7fdfd147c0af32b29deeb1d965e245ef45c519895d0537b9757b795cf85b513b577ebaf0f549a20f8179cf5fb947c30d83eecaddb0b781898a89b56e400cd3caae1cf5dceebbd8e706ddf82f1862d397bab9c9cbea6cfdbe14053ce65a349359c7ed923257cc24f4c78346b8922d8ad356fc12893ece4f8e74906419f808aedb7d781dbb9ea43c667f330ba3d523967af33b0ef20164636ba7b8750b18eb4f42db2f48a1d2ba4a6cbebbd3710419649154da4ae53c8a1d8c331be4d6f4365196800f06bb4cc6662916d22c677fa457e73a058d885e8f0a447371c9d136fbdf4eb40d12a848dbf13b0975ae693f5d25272c12dc993d6c93cb1b6ffe424c79cef52e507868280b6fe49213c4d191e080bac5caeb1868cbd4645642f1bef8ae3cf73dfb3d83cb0d5a4b00c94ae9e2597ed3cf25e9cb41a2a097e4efc51a2a2aac553b64c8c32c63143582c4d8154bc486c9411be538aad190fc251a539163e40161344c343f0c7af3549fbb3525d419ed3a814a4516b9be5d56ad88bacef73e686df0013afd7e3735e76d61ebf6310a2592fc94ed22fca75aad11d22a9bf89595f8e774b0a2f5f7f493d44544c360144258d8a51d4635d8ec4fda8937097436caf40fb6b7d650660ef5fcc38ca8be2489ffef59ef197d12512f9460113ee131a5fec36ba0fb94571c059336f430f117efb15ad6b4b5dc219bbbd31b082752d2d00dc54f2b096e0b2f65fcf432b5620b927d067692fa66992c30debd3f6da203aa65f3af26bde47f9effadcc68062be211eac5ca8b6cd57123ea69d554c8a0dd2c0399a0c7e4b700b82c0e9db87f891292425abdd1587e2c38d899f70f7ca7ebe006a81262a6e7dd832debd6f3b874a9d447264dd59244443468d018172e81265545b93b3a3a5f5bceded07ce77316bb4beb5bbbdeeab500c0bf7023d02c0205d5d4aef271dcddd48e618b090242fdcc2d4fb2b0409a0ff3b60898112b9ff8f46e0a456ad874135acdb4d32141c936ff0920f12240f5a49ff5838561dc85b16dff07780d148ebdb979d0639f03e66277ac9939d25ea260f7c3c3bd09420d1c4059cae1a378876f278e5977a68c0d40b76324e80f3567948c976381e1cb27ecb4a2138d0d32dfc0ccc242020b25be11faeae46a8037854deec31271779e9f020a30c6f8d872d348c6ad2d5f173f9425c5045816763905504acbd39b0cdf04f95808c192d326f964ed11cbec5ec9a05d27a6a6d1942aca71bc42da6fdd94ec66b0a0124264d1a1a09e8f34321b01fa87fff9246ba3077cdd00f3b3ce9696129dc3108650247e0a4ec935438449381cf189ce17ef942a1cad6dd1b37cde9a6627ff2d619ce6ef4d15024755c4ce3700b9e62eef548b81923370b17a3c8df038079f6cfa212b20be2cda8663e470570d90d6fffc9c6530103517678aa38d3bfc7cf770930dea755399548a970902cda2225e993170feeaae5f5c7769e3aeaf01430bab73dba0e586cea38194260e898a4b75b3926c7d26aff111fb57a3134a06f0b7f9ae4f0b7ccbdc69f3574865a78fb6f1bc8b9cac8e4ff5e3828049683e9166f6d3caa8417fa71080b0c8c8cec241108cd50f3724cd8c92911ef0882bcc6ba4078d9955f7520f4a10bcefa7d7e3c0ce789a66dcced1a613c388f90a86e3a1d7b30393c43387be7d962c015086161f2530056b44217dfc3787a1cf3a93c5e008d18f772a513a12f9319abc8a6f960e0ffc4654af71783491496b186ddcfcb8260e2be82b8fc5e1ee014f81f6240106f3538ac8b50016d5beed9af686b59d5a1265abaeee0d410de5c479f294a6d038c8a94622444e8584464f5d23a935a1c5979068de9c4872fd082c114a8a2478e6004d2b9c961b958a25c32606f502933bf74a7c2c9f810be3696ae25ef6a7faac7d9c503280aeadddc29f2db1618b72c4d00fbb9e2e1533fe76843df927d5757f48ca1bbcdadea91433a8e331a994f5aef6b39f631c6a048e5855d420fbade9dd658eecf71a8d7ca0fe0e222d674576e5cbff3e923f4fa2196dc0f1e711491a0967dc0c1909fd38d809496ac80d308b0f772df1973e6a1ae2ea49528d2e04342208ae78600c551caccf3b0c0a991e5cfdbfb00e89b8801318d2217e9e346fd684b72033968b330ba3e1e1b51e178d369ec903d9daed330b649ef4301e40bfd28ee3e17d9a421929ef7bb677f5d02f0cf838f50be209349b9a878ea422f1e0365babc580bd691edaa56eb9a74dd77a5c80856d484dc8b7dac265ac270b774d102312f7471891d09141fbd0f586ec32a377a3ee305e1df50147324d3737b32e2e952269412b9c19c3935aedee20a8d6d7b98af43ef65cc06477b7b43c0940331e4123a9450be04219f5a054ac773446b4d9955e3d3b0297595909f2656b930fd42dd6888adb3fcd9e98fdf0413a5050db81003ba6b55b88a54859b9113297cf729c9b4d3c29bc0cf6ad730839dbb8fa6fd82a9548ce585e6466bd8b2bb3e27ddf2b765917eb578a2726dc5a1b88241710ae37bbb3f7c913f188390ee206a52dad5bcfcf6e1efb6a3042eb40c46bb2059fda607258a7ec7d2c232116730165673e1cf47e49ba5481682ce4f3a712feee995d69d7adac4c2fffc8a7be3b9e72d88150d30f36fd4dde8d98b0ffa3adc014a72289bda53526d3dd760574c2892cbc6b6b20ea1075aca27a48979070e06c55f4c5258b48de730f16ccc06b37784420bdd707b691d412f24a8a3bddbb320cd36f158ba0d5e58cec25836082b3a31e2ff23276e691beeab0741cf837a3c7f606d3a43c9126b9f073cb151c3bea6810c6d0244b1bf78194049dd9f03cebbbc78d7d68503ab05893c09b4f0347293589a2d8d567168d635cd4fe6274dfb992f85962aa2ab4ec563bfaa495e7ce422cd13f21788a44d4bdf502ebfad2a3d7ef36313d2488c166ad88164d1b8b3ecdf26fe728a888d8d364fc082afb5f2d210c20c165fdcd0308023b689a3a4e6291db81d472517d9c6e39df58d2e1a95ddc522ba8774b53adea233158432c8de01ee36d92a38a040657e84f50c2592d7d6993b938b4a3602ccd19a9473c02d73bb262c1a2b0a08aa648b2fc4eb5858667b90ff3a1a042454f04598cecb4b03763e9337f1cf6810cd2b867b51e2d215356099fd5c1a69620a744afb4ecf7a669306e57f6249bf50e7ebdc3d2b40626020a5b923fe77f5b1889125341f97c548d2d462befe5cea0129646919badb63ba3b0be5d7b3d7c6d34a55290fab62d0854da4a4ca2cd863933b4902c23da92a2852809937cacc021b331fa30459a4a44b4e3d66ebea9cdd872c5ea23ba7ec4c023c51986eddfc0523dd1a72bc3606fe7868be00389ffecdb57e4ef5f8d638e779569eab6f29282aa0c3194384cd0e10cf08b638180d804471ac2cbe68e629b2f6c514bd1e90c6d03fc5cad43667b74e470a07ecefaf755a922aae7219b127420f57e4eb0505aff1a78385295e1fc165d43c1052ce874f173527b4d5238198464afda10a948273f7f3eb208df3b9395339516df355c402dc680301cf1512e348e37da10daadeae9c181565c31d2e881c6923a83a0b2fcbf8711a95e24458c84b832496052ff5efb5a41e87bd27dc03116be5753dd8c6d6ff253c6633c406fd3263ff8a141527571c3cb596d819fefefafdd709119594cd00c3cabb28e34e3733a81a09f9dfc3c121d13231d7ee356cec7084dfaa228c5b42769cb350300c2c3e4c73f1ed95cecaa1790443a2a5a31f97546d896bcf6140a0defe1ee893a38cbb3afc77b99b2bdfd8d08817053fcdb7d276d3a44bbb811b4f5dbd0c1a94c9176d31191ad9f9060f422ac2aad2389364cc3838759cf85c3ab7db7e77232edb4ddc0ba1f1431d560c045203c9e7fab7b451245cdbd7d3cebb14386969a582ffdedc2b0ffaa996d11e48ef34d49c5398e310bcae93cd27d5e8b7467c908587f876d072e4c497742533e04d61603ea10fa3cbb1b1b7de06ef5df082dfa5031f1abe2856cc7f7299f32048f9a9875172838163d56ad4f9765ed6b7f41881c3f35a516f1ba3902d001d8a7e9964ffef388b1370168c7cc8e83cbdd24b35ab4b82c9a927277c7aa75dfa433e8ccbb5b30ba2dca18be118cc0a6e326decb20705e04ecd37f9e4f6b1269b635be3ee9113423857d809685363a4380966f52f3a42bd2c09ca1ec87c0329a7864f2c783fb850abc78fd5ef195369f7d3b4c069b8a3a8618ade22c6d3e4c61086db7af4b20bf02cec0cd4c1da19509d9a7da08ec222ce147abb264919fa78aaaeeaea033da01d4a3e25e632fcea590c2ba0638da6fe5d8adaf2789199a8c2c7d7803adba5eea5595e4b1c9347832eb33c6918023683b04955feb952cc5c507ad751eba36d98bc586de779b4cfc536accf984bfb689c7465dc74d176788fd824faeecd59db9ef28b66ca82b3dd9b5ccc060b993f473447f0c69694bc81acbec7e251e0d2f2d31795db050c9cba437e34f9787ae2ff89c9f8d540a106053de3517a6f13739a10f4ef39cb1ef2f68c55f3ac37269f178461797c0ff2036223276559eaa9270728881a188a4eee729e8f84ea0cebdfc87fb47cda0403d7ccaf2234a94cc9041c6e46c7f8ef4bbc22a34606c155d999ed45af7ce817095c7b754520767b05b793f1f085f6e18eca94c57b93f9fca7e61dd27924a77f3ef10ce5e0585e56730", 0x1000}], 0x2, &(0x7f0000001680)=[{0x1010, 0x101, 0xf, "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"}, {0x38, 0x109, 0x3, "f5b5ce2c93b5f0a1f919cc83516da9c40e317c50c0712f02553d67e60b7601643ed3"}], 0x1048}}], 0x1, 0x20000001) quotactl$Q_QUOTAON(0xffffffff80000202, &(0x7f0000000080)=@filename='./file0\x00', 0x0, &(0x7f0000000200)='./file0\x00') ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r2, &(0x7f0000000240)={@void, @val={0x0, 0x0, 0x11}, @x25={0x2, 0x94, 0xf3, "c1"}}, 0xe) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r7 = socket(0x1d, 0x2, 0x6) accept4$packet(r7, 0x0, 0x0, 0x80000) bind$qrtr(r6, &(0x7f00000000c0)={0x2a, 0xffffffff00000000}, 0xc) r8 = memfd_secret(0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r8, 0x8933, &(0x7f0000000400)) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x40, 0x0, 0x0, 0x100, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1000000, 0x6}, 0x10010, 0xfffffffffffffffe, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 1m24.201457718s ago: executing program 5 (id=1284): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000400)=ANY=[@ANYBLOB="54020000170001000000000000000000200100000000000000000000000000010000000000000000ac141400000000000000000000000000fc020000000000000003000000000000e000000200001000000000000000000000000000000000080a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="1242ffff040000000000000000000037660b6aff000000000000000000000000000000000000000002"], 0x254}}, 0x0) (fail_nth: 1) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000040)={0x0, 0x1, 0xfffffffffffffc01, 0x5}) ioctl$PIO_UNIMAPCLR(0xffffffffffffffff, 0x4b68, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000080)='ext4_fc_replay\x00', 0xffffffffffffffff, 0x0, 0xffffffff}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6c, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, @void, @value}, 0x94) ioctl$TIOCL_BLANKSCREEN(r0, 0x4b67, &(0x7f0000000040)) socket$inet6_mptcp(0xa, 0x1, 0x106) 1m24.166928188s ago: executing program 33 (id=1284): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000400)=ANY=[@ANYBLOB="54020000170001000000000000000000200100000000000000000000000000010000000000000000ac141400000000000000000000000000fc020000000000000003000000000000e000000200001000000000000000000000000000000000080a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="1242ffff040000000000000000000037660b6aff000000000000000000000000000000000000000002"], 0x254}}, 0x0) (fail_nth: 1) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000040)={0x0, 0x1, 0xfffffffffffffc01, 0x5}) ioctl$PIO_UNIMAPCLR(0xffffffffffffffff, 0x4b68, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000080)='ext4_fc_replay\x00', 0xffffffffffffffff, 0x0, 0xffffffff}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6c, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, @void, @value}, 0x94) ioctl$TIOCL_BLANKSCREEN(r0, 0x4b67, &(0x7f0000000040)) socket$inet6_mptcp(0xa, 0x1, 0x106) 53.822498928s ago: executing program 6 (id=1880): bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0xffffffff, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000001040)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kmem_cache_free\x00', r1}, 0x10) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r2, 0xc0189374, &(0x7f0000000240)={{0x1, 0x1, 0x1018, 0xffffffffffffffff, {0x29}}, './file0\x00'}) close(0xffffffffffffffff) 53.784323658s ago: executing program 6 (id=1883): openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3f, 0x1, 0x0, 0x0, 0x0, 0x7, 0x590, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0xa5d4}, 0x4c58, 0x0, 0x0, 0x1, 0x8, 0x2, 0xb, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000003, 0x13, r0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x207, &(0x7f0000000000), 0x1, 0x469, &(0x7f0000000100)="$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") 53.633770808s ago: executing program 6 (id=1888): sendmsg$inet(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x2, 0x4e22, @remote}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000080)='\b\x00', 0x2}, {&(0x7f0000000180)="09524c8d869c", 0x6}], 0x2, &(0x7f0000000200)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x7}}], 0x18}, 0x24008004) 53.580465448s ago: executing program 6 (id=1890): r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3e, 0x1, 0x0, 0x0, 0x0, 0x6, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x2, 0x800000000003}, 0x1320, 0xffffffff, 0x3, 0x5, 0x4, 0x1088f109, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xfffffffffffffffb, 0xffffffffffffffff, 0x8) syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0\x00', &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x2081c80, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000008080)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x160) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002380)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="180000000000120000000000000000"], &(0x7f00000001c0)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2) r3 = syz_io_uring_setup(0x7875, &(0x7f0000000580)={0x0, 0x7b47, 0x10, 0x3, 0xfffffffd, 0x0, r1}, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f00000002c0)=0x9, 0x0, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000280)={'batadv0\x00', 0x0}) bind$packet(r1, &(0x7f0000000300)={0x11, 0x2, r7, 0x1, 0x9, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x14) syz_io_uring_submit(r4, r5, &(0x7f0000000180)=@IORING_OP_STATX={0x15, 0xa, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000700)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x80, 0x6000}) io_uring_enter(r3, 0x1c3a, 0xe176, 0x22, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.empty_time\x00', 0x275a, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x4, 0xc, &(0x7f0000001740)=ANY=[@ANYRESDEC=r2, @ANYRES16=r3, @ANYRESDEC=r5, @ANYRESDEC=r1, @ANYRES32=r0, @ANYRESOCT=r9, @ANYRES8=r1], &(0x7f00000004c0)='GPL\x00', 0x4, 0x1e, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000680)={&(0x7f0000000100)='kmem_cache_free\x00', r10}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000007c0)={{r8}, &(0x7f0000000540), &(0x7f0000000580)}, 0x20) r11 = socket(0x10, 0x3, 0x0) connect$netlink(r11, &(0x7f00000014c0)=@kern={0x10, 0x0, 0x0, 0x4000000}, 0xc) sendmsg$nl_route_sched(r11, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000006040)=@newtaction={0x18, 0x30, 0x829, 0x70bd2a, 0x0, {}, [{0x4}]}, 0x18}}, 0x4000) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x2008002, &(0x7f0000001e80)={[{@inlinecrypt}]}, 0x1, 0x549, &(0x7f0000001800)="$eJzs3c9vI1cdAPDvTH65222zCz1ABewChQWt1t5421XVS8sFhKpKiIoD4rANiTcKseMQO6UJkUj/BpBA4gR/AgckDkg9ceDGEYkDQpQDUoEItEHiYDRjJ+smNmtqx+7Gn480O/Pmzcz3PWdn3vNz4hfA1LoeEQcRMR8Rb0TEYmd/0lnilfaSHffgcH/l6HB/JYlW6/W/J3l+ti+6zsk82blmISK+/pWIbydn4zZ29zaWq9XKdiddata2So3dvVvrteW1ylpls1y+u3T39ot3XiiPrK7Xar9478vrr37j17/65Lu/O/ji97NiXe7kdddjlNpVnzuJk5mNiFfPI9gEzHTW8xMuBx9MGhEfiYjP5Pf/Yszk/zsBgIus1VqM1mJ3GgC46NJ8DCxJixGRpp1OQLE9hvdMXEqr9Ubz5v36zuZqe6zsSsyl99erldtXF/7w3fzguSRLL+V5eX6eLp9K34mIqxHxo4Un8nRxpV5dnUyXBwCm3pPd7X9E/GshTYvFgU7t8akeAPDYKEy6AADA2Gn/AWD6aP8BYPoM0P53Puw/OPeyAADj4f0/AEwf7T8ATB/tPwBMla+99lq2tI4633+9+ubuzkb9zVurlcZGsbazUlypb28V1+r1tfw7e2qPul61Xt9aej523io1K41mqbG7d69W39ls3su/1/teZW4stQIA/per1975fRIRBy89kS/RNZeDthoutnSERwGPl5lhTtZBgMea2b5geg3UhOedhN+ee1mAyej5Zd6Fnpvv95P/I4jfM4IPlRsfH3z83xzPcLEY2Yfp9cHG/18eeTmA8TP+D9Or1UpOz/k/f5IFAFxIQ/wKX+sHo+qEABP1qMm8R/L5PwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFwwlyPiO5GkxXwu8DT7Ny0WI56KiCsxl9xfr1ZuR8TTcS0i5hay9NKkCw0ADCn9a9KZ/+vG4nOXT+fOJ/9eyNcR8b2fvv7jt5abze2lbP8/TvYvHE8fVn543hDzCgIAg/vzIAfl7Xe5s+56I//gcH/leDnHMp7x3pdOJh9dOTrcz5d2zmy0Wq1WRCHvS1z6ZxKznXMKEfFsRMyMIP7B2xHxsV71T/KxkSudmU+740cn9lNjjZ++L36a57XX2cv30RGUBabNO9nz55Ve918a1/N17/u/kD+hhpc//woRx8++o674s51IMz3iZ/f89UFjPP+br57Z2Vps570d8exsr/jJSfykT/znBoz/x0986ocv98lr/SziRvSO3x2r1KxtlRq7e7fWa8trlbXKZrl8d+nu7RfvvFAu5WPUpeOR6rP+9tLNp/uVLav/pT7xCz3rP39y7ucGrP/P//PGtz79MLlwOv4XPtv75/9Mz/htWZv4+QHjL1/6Zd/pu7P4q33q/6if/80B47/7l73VAQ8FAMagsbu3sVytVraH2sjehY7iOmc2siIOdvBxd3G4oH+KfGNEL0ufjawzNsjBc+f1qp77xuxJX3G0V/5mdsUxVycdeS2G2ngwrliTeyYB4/Hwpp90SQAAAAAAAAAAAAAAgH7G8adLk64jAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAF9d/AwAA//8+JMPM") r12 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) fsetxattr$system_posix_acl(r12, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000400)=ANY=[@ANYRESOCT=r11], 0x24, 0x0) setuid(0xee01) utimes(&(0x7f00000000c0)='./file0\x00', 0x0) 53.409556769s ago: executing program 6 (id=1896): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x1, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000400000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000001c0)={0x1, &(0x7f0000000200)=[{0x200000000006, 0x19, 0x3, 0x7ffc0001}]}) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x8000, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0x4, 0x307, &(0x7f00000006c0)="$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") syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "00017f", 0x14, 0x2c, 0x0, @remote, @local, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) socket$inet6(0xa, 0x3, 0x8000000003c) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000280)={{r0}, &(0x7f0000000080), &(0x7f0000000200)='%-010d \x00'}, 0x20) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x6, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18020000fdffffee0000000000000000850000002c00000095"], &(0x7f0000000040)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r4, r5, 0x25, 0x2}, 0x14) syz_emit_ethernet(0x182, &(0x7f00000005c0)={@local, @remote, @val={@void, {0x8100, 0x1, 0x1, 0x3}}, {@ipv6={0x86dd, @tipc_packet={0x4, 0x6, "66d216", 0x148, 0x6, 0xff, @private2, @mcast1, {[@dstopts={0x21, 0x1, '\x00', [@jumbo={0xc2, 0x4, 0x4c6}, @padn, @pad1]}, @srh={0x33, 0x8, 0x4, 0x4, 0x8, 0x20, 0x8001, [@private1, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast2, @loopback]}, @fragment={0x88, 0x0, 0xb, 0x0, 0x0, 0xa, 0x64}, @hopopts={0x2f, 0x7, '\x00', [@generic={0x5, 0x11, "a59312bf7c76eff2c3f74ca5fcb611f1a9"}, @calipso={0x7, 0x8, {0x3, 0x0, 0x76, 0x3}}, @padn={0x1, 0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @hao={0xc9, 0x10, @remote}]}], @name_distributor={{0x98, 0x0, 0x0, 0x0, 0x0, 0xa, 0xb, 0x2, 0x9, 0x0, 0x0, 0xff, 0x1, 0x1, 0x4e20, 0x4e21, 0x1, 0x10}, [{0xa82, 0xfab4, 0x1ff, 0x3, 0x1, 0x34, 0xa, 0x42a1}, {0xfffffffe, 0xa3c, 0x4a, 0xc, 0xc, 0xffe00, 0x4, 0x2}, {0x1, 0xb, 0x5, 0x80000000, 0xa, 0x4, 0x0, 0x8}, {0x3fc, 0x4, 0x400, 0x3, 0xe616, 0x5, 0x8, 0x8000}]}}}}}}, 0x0) 52.990189688s ago: executing program 6 (id=1904): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r0) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000ecffffffffff2000000005002000000000000c001f0070687930"], 0x28}}, 0x0) 52.976197908s ago: executing program 34 (id=1904): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r0) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000ecffffffffff2000000005002000000000000c001f0070687930"], 0x28}}, 0x0) 31.828617659s ago: executing program 3 (id=2308): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000008000000000000001000000940000000fad413ec5000000d500000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) setresgid(0x0, 0x0, 0xee01) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='netlink_extack\x00', r2}, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000009c0)=@newqdisc={0x24, 0x25, 0x4ee4e6a52ff56541, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0x10}, {0x10, 0x10}}}, 0x24}, 0x1, 0x0, 0x0, 0x2004c000}, 0x4) 31.767892759s ago: executing program 3 (id=2309): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r1}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500001000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r2}, 0x10) socket$packet(0x11, 0x3, 0x300) syz_open_dev$evdev(&(0x7f0000000000), 0x3, 0x822b01) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f0, &(0x7f0000000040)={'bridge0\x00', &(0x7f00000001c0)=@ethtool_ringparam={0x4, 0x0, 0x45, 0xfffffffe, 0x8fc3, 0x1, 0x20000, 0x0, 0xf}}) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000003200)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', 0xffffffffffffffff, 0x0, 0x318a054d}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = syz_io_uring_setup(0xd2, &(0x7f0000000480)={0x0, 0x77e5, 0x8, 0x0, 0x34a}, &(0x7f0000000340)=0x0, &(0x7f00000002c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x2c, 0x0, 0x0, 0x4}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd, 0x8, {}, 0x6, 0x4, 0x1}) io_uring_enter(r4, 0x47bc, 0x0, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r3}, 0x18) socket(0x2c, 0x80805, 0x8) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000780)=ANY=[@ANYBLOB="4c000000020601080000000000000000000000400500010006000000050005000200000005000400000000000900020073797a310000000011000300686173683a69702c6d61726b00000000f556e90ec4259c1c4345fbe6f622545bf45c5eb3457d7f0edcd44623f176d724cf8bfb5c33641b5b4d18408a2d63edf085236b6e7a32a8679d86b853c7e04fdc540dd990a9d7d1045f53a64c29ac10f21ba80500000049c16f73471fbf99a997d968152641"], 0x4c}}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="480000000906010200000000000000000200ffff200007800c0001c008000140e000000208000a400000000205000300020000140900020073797a31000000000500010007"], 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080) 31.767486989s ago: executing program 3 (id=2310): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1801000020017e9c0000000000"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x18) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f0000003f80)=ANY=[@ANYRES32=0x0, @ANYRESOCT, @ANYRES64=0x0, @ANYBLOB="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", @ANYBLOB="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", @ANYRES32=0x0], 0x1, 0x2eb, &(0x7f00000004c0)="$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") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) fdatasync(r1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x3) 31.722087649s ago: executing program 3 (id=2313): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000400000005"], 0x48) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000400)={0xffffffffffffffff, 0x20, &(0x7f00000003c0)={&(0x7f0000000380)=""/51, 0x33, 0x0, &(0x7f00000005c0)=""/153, 0x99}}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYRES32=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r1}, &(0x7f0000000800), &(0x7f0000000840)=r3}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='percpu_free_percpu\x00', r4}, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000500)='percpu_free_percpu\x00', r5}, 0x18) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000040)=ANY=[@ANYBLOB="0600000004000000ff0100005c000059cae057310000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000feffffff00"/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1a, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38, @void, @value}, 0x94) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="020000000400000008000000070000000010"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) mount(0x0, &(0x7f0000000100)='.\x00', &(0x7f00000000c0)='hugetlbfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) r7 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r7, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000800)='fib6_table_lookup\x00'}, 0x10) syz_emit_ethernet(0xf2, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd60"], 0x0) r8 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) r10 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r9, @ANYBLOB="00000000000000001c001a800800028004000500080000003e"], 0x44}}, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f00000001c0)={0x0, @multicast2, @loopback}, &(0x7f00000002c0)=0xc) socket$nl_generic(0x10, 0x3, 0x10) r11 = socket(0x40000000015, 0x5, 0x0) connect$inet(r11, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r11, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) setsockopt$sock_int(r7, 0x1, 0x1e, 0x0, 0x0) 31.623876779s ago: executing program 3 (id=2315): r0 = syz_io_uring_setup(0x17af, &(0x7f0000000380)={0x0, 0xa112, 0x13290}, &(0x7f0000000300), &(0x7f00000000c0)) socket$nl_route(0x10, 0x3, 0x0) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x1, 0x4, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$nl_sock_diag(0x10, 0x3, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r2, 0x0, 0x3}, 0x18) (async) mmap$xdp(&(0x7f0000fec000/0x14000)=nil, 0x14000, 0x0, 0x12, 0xffffffffffffffff, 0x0) (async) syz_io_uring_setup(0x10278e, &(0x7f0000000000)={0x0, 0xf832, 0x10}, &(0x7f0000001400), &(0x7f00000012c0)) io_uring_enter(r0, 0x300, 0x3, 0x1, 0x0, 0x0) 31.275252919s ago: executing program 3 (id=2321): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="02000000040000000300000005"], 0x48) iopl(0x3) r1 = add_key$keyring(&(0x7f0000000080), &(0x7f0000000180)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r3}, 0x10) r4 = add_key$keyring(&(0x7f0000000000), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, r1) keyctl$KEYCTL_MOVE(0x1e, r4, 0xfffffffffffffffe, r4, 0x1) ioperm(0x0, 0x40, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000004c0)='mm_page_free\x00', r5}, 0x10) r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r6) rt_sigqueueinfo(r6, 0x31, &(0x7f0000000d40)={0x0, 0xc4, 0xff800002}) ptrace$peeksig(0x4209, r6, &(0x7f00000005c0)={0x0, 0x1, 0x3}, &(0x7f0000000dc0)=[{}, {}, {}]) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) bind$inet(r7, &(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x28012, r7, 0x0) 31.275099819s ago: executing program 35 (id=2321): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="02000000040000000300000005"], 0x48) iopl(0x3) r1 = add_key$keyring(&(0x7f0000000080), &(0x7f0000000180)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r3}, 0x10) r4 = add_key$keyring(&(0x7f0000000000), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, r1) keyctl$KEYCTL_MOVE(0x1e, r4, 0xfffffffffffffffe, r4, 0x1) ioperm(0x0, 0x40, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000004c0)='mm_page_free\x00', r5}, 0x10) r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r6) rt_sigqueueinfo(r6, 0x31, &(0x7f0000000d40)={0x0, 0xc4, 0xff800002}) ptrace$peeksig(0x4209, r6, &(0x7f00000005c0)={0x0, 0x1, 0x3}, &(0x7f0000000dc0)=[{}, {}, {}]) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) bind$inet(r7, &(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x28012, r7, 0x0) 19.889871269s ago: executing program 2 (id=2510): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = io_uring_setup(0x9da, &(0x7f0000000140)={0x0, 0xfffffffe, 0x10000, 0x0, 0x1c3}) r1 = syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000200)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@dioread_lock}, {@nouid32}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4007b1}}, {@data_err_ignore}, {@grpquota}, {@sysvgroups}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x567, &(0x7f0000000b00)="$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") r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000800)=ANY=[@ANYRESOCT=r1], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) r3 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x141042, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r4, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) ioctl$EXT4_IOC_GET_ES_CACHE(r3, 0xc020662a, &(0x7f00000002c0)={0x0, 0x6930, 0x5, 0x1}) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(0xffffffffffffffff, 0x13, &(0x7f0000000300)=[0x2, 0x7fff], 0x2) r5 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) sendto$llc(r5, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, 0x10) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newqdisc={0x88, 0x24, 0x200, 0x0, 0x0, {0x60, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x54, 0x2, [@TCA_HHF_EVICT_TIMEOUT={0x8, 0x6, 0x9}, @TCA_HHF_RESET_TIMEOUT={0x8, 0x4, 0x6}, @TCA_HHF_EVICT_TIMEOUT={0x8, 0x6, 0x10001}, @TCA_HHF_QUANTUM={0x8, 0x2, 0xfffffffd}, @TCA_HHF_EVICT_TIMEOUT={0x8, 0x6, 0x8001}, @TCA_HHF_HH_FLOWS_LIMIT={0x8, 0x3, 0x3}, @TCA_HHF_RESET_TIMEOUT={0x8, 0x4, 0x5}, @TCA_HHF_BACKLOG_LIMIT={0x8, 0x1, 0x799}, @TCA_HHF_RESET_TIMEOUT={0x8, 0x4, 0x101}, @TCA_HHF_HH_FLOWS_LIMIT={0x8, 0x3, 0xd2}]}}, @TCA_RATE={0x6, 0x5, {0x4}}]}, 0x88}}, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000680)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaabb86dd6012000800103afffe8000000000000000000000000000bbff0200000000000000000000000000018600907801000200feffffff00000000f3ede790d1c652c7be1b8039da56d075f7cdf0c7e69391290087fb74582d4c51836b71089473e324a7ac5e1466754ffe25f31ddb62b2d7e68a8f91c2c6a309e38533146a27f28cd1c7330c01d5b5219ba152fa74380554bb235daaef4331342cdce737649df825c52ac0fe7a32e8d73409e478321f3c7a75cdc5a7585b105c1b1e74e90ca95a1a073c09259c1f61d6f7bd5548f2e2cf7d79917b4d18fba15ce96c22b9430596b8b9c02647fc9e35be11effe9ca128ae9fba00172d63f90811d3ae340c2ebf504aa41527aa92c8dbe331145ff28bca"], 0x0) syz_emit_ethernet(0x5e, &(0x7f0000002e40)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa0086dd607428dd00283afffe8000000000000000000000000000bbff0200000000000000000018000000018900907800000000fe8800000000000000000000000000010002122b472e41e24b11f34b608816e5"], 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="300000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000008000400699b000008001b"], 0x30}}, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="64000000040000000000000000000000010000040900020073797a32000000000900020073797a3000000000100003006269746d61703a706f7274000500050002000000050004000000000016000300686173683a6e6574"], 0x64}, 0x1, 0x0, 0x0, 0x24008844}, 0x0) getsockname(r5, 0x0, &(0x7f00000005c0)) r8 = socket$rds(0x15, 0x5, 0x0) bind$rds(r8, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r8, &(0x7f0000000080)={&(0x7f0000000180)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r9 = add_key$keyring(&(0x7f0000000540), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r9, &(0x7f0000000200)='asymmetric\x00', &(0x7f0000000080)=@chain) 18.957205659s ago: executing program 2 (id=2518): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000093850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) unshare(0x28020480) r2 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) sched_setscheduler(0x0, 0x5, &(0x7f0000000480)) ioprio_set$pid(0x2, 0x0, 0x0) r3 = openat(r2, &(0x7f00000002c0)='./file1/file0\x00', 0x0, 0x6c) pwritev2(r3, &(0x7f00000001c0)=[{&(0x7f0000000100)="ff349ed6", 0x4}], 0x1, 0xe7b, 0x0, 0xa) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c00038008000140000000000800024000000000180003801400010076657468305f746f5f687372"], 0xfc}}, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000480), 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="1802000003080000000000000000000085000000870000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000009b00000095"], &(0x7f0000000080)='syzkaller\x00', 0xb, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe, @void, @value}, 0x94) r4 = openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r5}, 0x10) write$selinux_user(r4, &(0x7f0000000080)=ANY=[@ANYBLOB='system_u:object_r:auth_cache_t root'], 0x27) r7 = syz_open_dev$vcsa(&(0x7f0000000280), 0xfffffffffffffffc, 0x8401) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r7, 0x6, 0x23, &(0x7f0000000400)={&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, &(0x7f0000000340)=""/109, 0x6d, 0x1, &(0x7f00000003c0)=""/38, 0x26}, &(0x7f0000000440)=0x40) socketpair$nbd(0x1, 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, 0xffffffffffffffff) ioctl$sock_SIOCBRDELBR(r0, 0x89a1, &(0x7f0000000240)='team_slave_0\x00') r8 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r8}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f0000002480)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r9, 0x0, r10, 0x0, 0x7, 0x9) 17.831652679s ago: executing program 2 (id=2525): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0xb, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000002400007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000e"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) arch_prctl$ARCH_SHSTK_STATUS(0x5005, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2500000000000000007b1a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000004c0)='mm_page_free\x00', r0}, 0x10) syz_open_dev$usbmon(&(0x7f0000000700), 0x7, 0x4000) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000107000000002000000a617514d4ef7e", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0b00000005000000050000000900000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1d, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x71, '\x00', 0x0, @lsm=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='timer_start\x00', r2}, 0x10) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000940)) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r3) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000580)={{{@in=@multicast2, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e22, 0x9, 0x4e21, 0x4a4d, 0x2, 0x0, 0x0, 0x32}, {0x6, 0x9, 0xf, 0x5, 0x7, 0x9f44, 0x8, 0x7f}, {0x0, 0x5, 0xfffffffffffffffd}, 0x7, 0x0, 0x1, 0x0, 0x0, 0x3}, {{@in=@multicast2, 0x4d3}, 0xa, @in=@local, 0x34ff, 0x1, 0x3, 0x3, 0x5a78, 0x800, 0x3}}, 0xe8) sendmsg$inet(0xffffffffffffffff, &(0x7f0000002480)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x41, 0x0, 0x11}, 0x0) r5 = socket$kcm(0x2, 0x5, 0x84) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x56, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x0, 0x2}, {0x10000002, 0x0, 0x0, 0xc}], 0x10, 0x0, @void, @value}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r7) setxattr$security_ima(&(0x7f0000000040)='./cgroup.cpu/cgroup.procs\x00', &(0x7f0000000180), 0x0, 0x0, 0x1) recvmsg$unix(r6, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r5, 0x84, 0x64, &(0x7f0000000000)=r8, 0x10) sendmsg$inet(r5, &(0x7f0000000140)={&(0x7f0000000280)={0x2, 0x10, @local}, 0x10, &(0x7f0000000080)=[{&(0x7f0000001940)='{', 0xffc0}], 0x1}, 0x80d1) socket$kcm(0x2, 0x1, 0x84) sendmsg$inet(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x32}}, 0x10, 0x0}, 0x40040d4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) close(r9) 17.809333039s ago: executing program 2 (id=2526): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) fcntl$dupfd(r0, 0x0, r0) r1 = gettid() rt_sigtimedwait(&(0x7f0000000100)={[0x3ff]}, &(0x7f0000005c80), 0x0, 0x8) tkill(r1, 0x7) r2 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000ff0f000003"], 0x48) syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000000)='./file0\x00', 0x2010092, &(0x7f0000000700)=ANY=[@ANYRES32=0x0], 0xfd, 0x1d3, &(0x7f00000004c0)="$eJzs3cFr01AcB/Bf6lwyT7sJohDw4mmof8FEJogBQelBTwrTyyaCu0Qv65/hH+gfIDv1IpGZdjFZxTraROfnc+kv+ea9vgfpay99eXXz3cH++6O3X65/jixLYrQbuzFNYjtGMTcJAOAymVZVfK1qQ48FAOjHEt//3yIi63lYAMAaPX/x8smDoth7ludZxMmkHJfj+rXOHz0u9u7mP2w3rU7KcnzlLL+Xd387nOZX49osv1+3z9v5Zty5Xeen2cOnRSdPY3+9UwcAAAAAAAAAAAAAAAAAAAAAgMHcinxu4f4+OzvdfGuW10c/7Q/U2b9nI25szA6b7YGq4z4mBQAAAAAAAAAAAAAAAAAAAP+Yo4+fDl4fHr750BRpRLTP/EGRzju+WPMFRbbqDlvFKFbcoeIvKPJ19Zws/sj8qvjtTZtM6pu7HW2eO7O6YlpV1VIXN2tE2veiBAAAAAAAAAAAAAAAAAAA/6nmT7/ns2yIAQEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAAJrn/1+gOI6IJS4+e7OtQacKAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAJfY9AAD//2hyLWw=") mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000040)='proc\x00', 0x0, 0x0) r4 = accept$packet(r2, 0x0, &(0x7f0000000340)) getpeername$packet(r4, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000380)=0xfffffccd) statx(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2000, 0xd5a527333bff4787, &(0x7f0000000180)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r5}, 0x10) socketpair$tipc(0x1e, 0x4, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) sendmsg$tipc(r6, &(0x7f00000008c0)={&(0x7f0000000700)=@name={0x1e, 0x2, 0x0, {{}, 0x3}}, 0x10, 0x0}, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r2, 0x89f6, &(0x7f00000000c0)={'sit0\x00', &(0x7f0000000080)={@local, 0x1, 0x0, 0x20, 0x0, [{}, {@dev}]}}) prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000000280)={0x2000000000000118, &(0x7f0000000400)=[{0x69a, 0x8, 0x5, 0x9}]}) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff02000000000100", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_int(r8, 0x0, 0x33, &(0x7f0000000300)=0x80000005, 0x4) r9 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_int(r9, 0x0, 0x33, &(0x7f0000000300)=0x80000005, 0x4) sendto$inet6(r9, &(0x7f00000002c0)="9e", 0x1a000, 0x0, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r8, 0x1) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x50, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r10}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) 16.807883109s ago: executing program 2 (id=2543): socket$nl_route(0x10, 0x3, 0x0) r0 = gettid() r1 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) writev(r1, &(0x7f0000000040)=[{&(0x7f0000000200)="0c2da2af7a3ea3564ae182887fb1b810008fb576c2793d560a1b808b5b", 0x2}, {&(0x7f0000000000)='0', 0x1}], 0x100000000000000d) unshare(0x22020600) r2 = getpid() r3 = syz_pidfd_open(r2, 0x0) setns(r3, 0x2000000) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000180)='sys_enter\x00', r4}, 0x10) rt_sigqueueinfo(r0, 0x21, &(0x7f00000002c0)={0x8000b, 0x4}) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x2, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r6}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) 16.619929859s ago: executing program 2 (id=2553): r0 = socket(0x840000000002, 0x3, 0x40) r1 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r1, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) listen(r1, 0x0) r2 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r2, &(0x7f0000000080), 0x10) sendmmsg(r2, &(0x7f0000000100)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40480d6) setsockopt$sock_int(r0, 0x1, 0x5, &(0x7f0000000080)=0x1, 0x4) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r3) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNGETVNETLE(r3, 0x4010744d, &(0x7f0000000180)) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @remote}, 0x10) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$inet(r4, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000fc850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r6}, 0x10) close(r5) getsockname$packet(r0, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmmsg$inet(r0, &(0x7f0000002880)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r7, @rand_addr=0x64010101, @remote}}}], 0x20}}], 0x1, 0x0) sendmsg$ETHTOOL_MSG_RINGS_SET(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="f400000000fb0800", @ANYRES16=0x0, @ANYBLOB="100000000040fcdbdf2510000000"], 0x14}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0500000004000000ff0f00000700000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000273a69aa30000000000000007a1c00000000fa00"/35], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x7, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES64=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_io_uring_complete(0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r8}, 0x10) 16.619693319s ago: executing program 36 (id=2553): r0 = socket(0x840000000002, 0x3, 0x40) r1 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r1, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) listen(r1, 0x0) r2 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r2, &(0x7f0000000080), 0x10) sendmmsg(r2, &(0x7f0000000100)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40480d6) setsockopt$sock_int(r0, 0x1, 0x5, &(0x7f0000000080)=0x1, 0x4) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r3) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNGETVNETLE(r3, 0x4010744d, &(0x7f0000000180)) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @remote}, 0x10) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$inet(r4, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000fc850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r6}, 0x10) close(r5) getsockname$packet(r0, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmmsg$inet(r0, &(0x7f0000002880)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r7, @rand_addr=0x64010101, @remote}}}], 0x20}}], 0x1, 0x0) sendmsg$ETHTOOL_MSG_RINGS_SET(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="f400000000fb0800", @ANYRES16=0x0, @ANYBLOB="100000000040fcdbdf2510000000"], 0x14}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0500000004000000ff0f00000700000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000273a69aa30000000000000007a1c00000000fa00"/35], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x7, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES64=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_io_uring_complete(0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r8}, 0x10) 8.779600019s ago: executing program 8 (id=2686): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340), 0xfffffffffffffe19, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x42) bpf$BPF_LINK_CREATE(0xa, &(0x7f0000000040)={r0, 0xffffffffffffffff, 0x10, 0x0, @val=@iter={&(0x7f0000001a40)=@cgroup, 0x10}}, 0x40) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1801000020017e9c0000000000000000850000007b00000095"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f0000003f80)=ANY=[@ANYRES32=0x0, @ANYRESOCT, @ANYRES64=0x0, @ANYBLOB="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", @ANYBLOB="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", @ANYRES32=0x0], 0x1, 0x2eb, &(0x7f00000004c0)="$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") write$binfmt_script(0xffffffffffffffff, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, 0xffffffffffffffff, 0x0) fdatasync(0xffffffffffffffff) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) gettid() quotactl$Q_SYNC(0xffffffff80000100, 0x0, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) 8.638795769s ago: executing program 8 (id=2689): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000040), 0x5, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2d, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000013c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000880), 0xfffffffffffffddd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r2, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) r4 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000000c0)={r3}, 0x4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000840)={r4, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd6e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xffffffffffffff29, 0x0}}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x3, 0x4, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x6}, [@call={0x85, 0x0, 0x0, 0x11}]}, &(0x7f0000000080)='GPL\x00', 0x9, 0x0, 0x0, 0x41000, 0x0, '\x00', r5, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r6 = openat$zero(0xffffffffffffff9c, &(0x7f00000001c0), 0x810002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f00000002c0)=@raw=[@tail_call={{0x18, 0x2, 0x1, 0x0, r6}}], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80a, &(0x7f0000000000)={[{@grpquota}, {@lazytime}, {@data_err_abort}, {@errors_remount}]}, 0x1, 0x79b, &(0x7f0000000a40)="$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") syz_mount_image$msdos(&(0x7f00000003c0), &(0x7f0000000340)='.\x00', 0x126a4b5, &(0x7f0000001280)=ANY=[], 0x6, 0x0, &(0x7f0000000000)) 8.505901339s ago: executing program 8 (id=2691): r0 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000002c0)={'veth1_vlan\x00', &(0x7f0000000000)=@ethtool_cmd={0x2c, 0x6, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140), 0xffffffffffffffff) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000de0000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kmem_cache_free\x00', r3}, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r1) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r5, 0x107, 0x14, &(0x7f00000002c0)=0x1001, 0x4) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getpeername$packet(r6, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000880)=0x14) sendmmsg(r5, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r7}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x36}], 0x1}}], 0x1, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket(0x10, 0x3, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r11) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) r13 = socket(0x2a, 0x2, 0x0) getsockname$packet(r13, &(0x7f0000000540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r14, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000680)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r14, {0xfffa, 0x4}, {}, {0x1c, 0xfff9}}}, 0x24}}, 0x24000000) r15 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r15, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmsg$nl_route(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r12, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001240)=@newqdisc={0x2c, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r12, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000012c0)=@newtfilter={0x2c, 0x28, 0xd27, 0x70bd29, 0x20000, {0x0, 0x0, 0x0, r12, {0xc}}, [@TCA_RATE={0x6, 0x5, {0x9, 0x9}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x84}, 0x8000) sendmsg$BATADV_CMD_GET_DAT_CACHE(r1, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000280)={&(0x7f0000000580)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="000325bd7000060000000d00000005002e000000000008003100010000000500330000000000050035000400000008003c000800000005003300010000000500fd8b5ac5cdd73b0984748f2a0000000000"], 0x4c}, 0x1, 0x0, 0x0, 0x20008091}, 0x4000) sendmsg$TIPC_CMD_RESET_LINK_STATS(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100fdffffff0000000001000000000000000c41000000140014"], 0x30}}, 0x0) 8.40708467s ago: executing program 8 (id=2692): syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc000, &(0x7f00000004c0)={[{@nodioread_nolock}]}, 0x2, 0x246, &(0x7f0000000ac0)="$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") syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={0x0}, 0x18) fsopen(0x0, 0x0) openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000a40)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) write$UHID_CREATE2(r0, &(0x7f00000006c0)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r0, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) write(r1, &(0x7f00000000c0)=' ', 0x1) (fail_nth: 3) 8.338403059s ago: executing program 8 (id=2695): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = io_uring_setup(0x9da, &(0x7f0000000140)={0x0, 0xfffffffe, 0x10000, 0x0, 0x1c3}) r1 = syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000200)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@dioread_lock}, {@nouid32}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4007b1}}, {@data_err_ignore}, {@grpquota}, {@sysvgroups}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x567, &(0x7f0000000b00)="$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") r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000800)=ANY=[@ANYRESOCT=r1], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) r3 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x141042, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r4, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) ioctl$EXT4_IOC_GET_ES_CACHE(r3, 0xc020662a, &(0x7f00000002c0)={0x0, 0x6930, 0x5, 0x1}) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(0xffffffffffffffff, 0x13, &(0x7f0000000300)=[0x2, 0x7fff], 0x2) r5 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) sendto$llc(r5, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, 0x10) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newqdisc={0x88, 0x24, 0x200, 0x0, 0x0, {0x60, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x54, 0x2, [@TCA_HHF_EVICT_TIMEOUT={0x8, 0x6, 0x9}, @TCA_HHF_RESET_TIMEOUT={0x8, 0x4, 0x6}, @TCA_HHF_EVICT_TIMEOUT={0x8, 0x6, 0x10001}, @TCA_HHF_QUANTUM={0x8, 0x2, 0xfffffffd}, @TCA_HHF_EVICT_TIMEOUT={0x8, 0x6, 0x8001}, @TCA_HHF_HH_FLOWS_LIMIT={0x8, 0x3, 0x3}, @TCA_HHF_RESET_TIMEOUT={0x8, 0x4, 0x5}, @TCA_HHF_BACKLOG_LIMIT={0x8, 0x1, 0x799}, @TCA_HHF_RESET_TIMEOUT={0x8, 0x4, 0x101}, @TCA_HHF_HH_FLOWS_LIMIT={0x8, 0x3, 0xd2}]}}, @TCA_RATE={0x6, 0x5, {0x4}}]}, 0x88}}, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], 0x0) syz_emit_ethernet(0x5e, &(0x7f0000002e40)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa0086dd607428dd00283afffe8000000000000000000000000000bbff0200000000000000000018000000018900907800000000fe8800000000000000000000000000010002122b472e41e24b11f34b608816e5"], 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="300000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000008000400699b000008001b"], 0x30}}, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="64000000040000000000000000000000010000040900020073797a32000000000900020073797a3000000000100003006269746d61703a706f7274000500050002000000050004000000000016000300686173683a6e65742c706f72742c77a0b8418a"], 0x64}, 0x1, 0x0, 0x0, 0x24008844}, 0x0) getsockname(r5, 0x0, &(0x7f00000005c0)) r8 = socket$rds(0x15, 0x5, 0x0) bind$rds(r8, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r8, &(0x7f0000000080)={&(0x7f0000000180)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r9 = add_key$keyring(&(0x7f0000000540), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r9, &(0x7f0000000200)='asymmetric\x00', &(0x7f0000000080)=@chain) 7.321328399s ago: executing program 8 (id=2706): r0 = creat(&(0x7f0000000180)='./file0\x00', 0x100) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000002c00)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000000200)=0x2, 0x4) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x7}, 0x4) setsockopt$packet_int(r1, 0x107, 0x16, &(0x7f0000000000)=0x4, 0x4) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vxcan0\x00'}) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000ff01000000000000002000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000400)='afs_make_vl_call\x00', r3}, 0x18) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r5}, 0x10) r6 = socket$kcm(0x29, 0x2, 0x0) sendmmsg$inet(r6, &(0x7f0000000780)=[{{0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f0000000580)="89", 0x1}], 0x1, &(0x7f0000000040)=ANY=[], 0xd0}}, {{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000001c0)="bc", 0x1}], 0x1}}], 0x2, 0x0) close(r6) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r8 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x606100, 0x0) close(r8) socket$netlink(0x10, 0x3, 0x4) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) writev(r7, &(0x7f0000000280)=[{&(0x7f0000000300)="89b1ee2c7cf3d9b4b47381c988a8", 0xe}, {&(0x7f0000000100)="cc0493f87736", 0x6}], 0x2) 7.29172046s ago: executing program 37 (id=2706): r0 = creat(&(0x7f0000000180)='./file0\x00', 0x100) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000002c00)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000000200)=0x2, 0x4) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x7}, 0x4) setsockopt$packet_int(r1, 0x107, 0x16, &(0x7f0000000000)=0x4, 0x4) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vxcan0\x00'}) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000ff01000000000000002000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000400)='afs_make_vl_call\x00', r3}, 0x18) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r5}, 0x10) r6 = socket$kcm(0x29, 0x2, 0x0) sendmmsg$inet(r6, &(0x7f0000000780)=[{{0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f0000000580)="89", 0x1}], 0x1, &(0x7f0000000040)=ANY=[], 0xd0}}, {{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000001c0)="bc", 0x1}], 0x1}}], 0x2, 0x0) close(r6) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r8 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x606100, 0x0) close(r8) socket$netlink(0x10, 0x3, 0x4) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) writev(r7, &(0x7f0000000280)=[{&(0x7f0000000300)="89b1ee2c7cf3d9b4b47381c988a8", 0xe}, {&(0x7f0000000100)="cc0493f87736", 0x6}], 0x2) 3.764289009s ago: executing program 9 (id=2752): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="19000000040000000800000010"], 0x50) r1 = syz_open_procfs(0x0, &(0x7f00000007c0)='net/psched\x00') pread64(r1, &(0x7f000001a240)=""/102400, 0x19000, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES64=r0, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x42, '\x00', 0x0, @fallback, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0xca, 0x7ffc1ffb}]}) nanosleep(&(0x7f0000000340)={0x0, 0x989680}, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x30000c6, &(0x7f0000000080), 0x1, 0x553, &(0x7f0000001080)="$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") bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x441, 0x104) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143041, 0x0) pwritev2(r4, &(0x7f00000001c0)=[{&(0x7f0000000080)}], 0x1, 0xe7b, 0x0, 0x0) fallocate(r3, 0x8, 0x4000, 0x4000) 3.10990558s ago: executing program 4 (id=2764): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d000000850000002300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = socket$kcm(0x29, 0x5, 0x0) r1 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000100)={r1}) socket(0x10, 0x3, 0x0) r2 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r3, 0x5452, &(0x7f00000001c0)=0x3) fcntl$setsig(r3, 0xa, 0x12) poll(0x0, 0x0, 0xffffffffffbffff8) syz_clone(0x8010e000, 0x0, 0x0, 0x0, 0x0, 0x0) dup2(r3, r4) fcntl$setown(r3, 0x8, r2) tkill(r2, 0x13) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r5) ptrace$setregs(0xd, r5, 0x0, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb") ptrace$getregset(0x4204, r5, 0x1, &(0x7f0000000040)={&(0x7f000001aa80)=""/4096, 0x1000}) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000cc0)=@newqdisc={0x2c, 0x24, 0x200, 0x0, 0x0, {0x60, 0x0, 0x0, 0x0, {0x0, 0xd}, {0xffff, 0xffff}, {0x9}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x100}]}, 0x2c}, 0x1, 0x0, 0x0, 0x890}, 0x8841) r7 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_int(r7, 0x6, 0x18, &(0x7f0000000200)=0x3, 0x68) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000280)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1, 0x7}}, './file0\x00'}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 2.832343899s ago: executing program 9 (id=2769): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="19000000040000000800000010"], 0x50) r1 = syz_open_procfs(0x0, &(0x7f00000007c0)='net/psched\x00') pread64(r1, &(0x7f000001a240)=""/102400, 0x19000, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES64=r0, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x42, '\x00', 0x0, @fallback, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0xca, 0x7ffc1ffb}]}) nanosleep(&(0x7f0000000340)={0x0, 0x989680}, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x30000c6, &(0x7f0000000080), 0x1, 0x553, &(0x7f0000001080)="$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") bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0}, 0x18) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x441, 0x104) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143041, 0x0) pwritev2(r4, &(0x7f00000001c0)=[{&(0x7f0000000080)="ff", 0xfdef}], 0x1, 0xe7b, 0x0, 0x0) fallocate(r3, 0x8, 0x4000, 0x4000) 2.18612214s ago: executing program 4 (id=2781): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000007c0)=ANY=[@ANYRES32=r4, @ANYRES32=r3, @ANYBLOB='&'], 0x10) sendmsg$inet(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000bc0)=[{&(0x7f0000000780)='}', 0x1}], 0x1}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r4}, &(0x7f0000000000), &(0x7f00000002c0)=r0}, 0x20) sendmsg$inet(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x22fe0}], 0x1}, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000340)='kfree\x00', r5}, 0x10) recvmsg$unix(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000340)=""/229, 0xec1}], 0x1}, 0x0) 2.143187149s ago: executing program 4 (id=2783): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = io_uring_setup(0x9da, &(0x7f0000000140)={0x0, 0xfffffffe, 0x10000, 0x0, 0x1c3}) r1 = syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000200)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@dioread_lock}, {@nouid32}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4007b1}}, {@data_err_ignore}, {@grpquota}, {@sysvgroups}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x567, &(0x7f0000000b00)="$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") r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000800)=ANY=[@ANYRESOCT=r1], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) r3 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x141042, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r4, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) ioctl$EXT4_IOC_GET_ES_CACHE(r3, 0xc020662a, &(0x7f00000002c0)={0x0, 0x6930, 0x5, 0x1}) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(0xffffffffffffffff, 0x13, &(0x7f0000000300)=[0x2, 0x7fff], 0x2) r5 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) sendto$llc(r5, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, 0x10) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newqdisc={0x88, 0x24, 0x200, 0x0, 0x0, {0x60, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x54, 0x2, [@TCA_HHF_EVICT_TIMEOUT={0x8, 0x6, 0x9}, @TCA_HHF_RESET_TIMEOUT={0x8, 0x4, 0x6}, @TCA_HHF_EVICT_TIMEOUT={0x8, 0x6, 0x10001}, @TCA_HHF_QUANTUM={0x8, 0x2, 0xfffffffd}, @TCA_HHF_EVICT_TIMEOUT={0x8, 0x6, 0x8001}, @TCA_HHF_HH_FLOWS_LIMIT={0x8, 0x3, 0x3}, @TCA_HHF_RESET_TIMEOUT={0x8, 0x4, 0x5}, @TCA_HHF_BACKLOG_LIMIT={0x8, 0x1, 0x799}, @TCA_HHF_RESET_TIMEOUT={0x8, 0x4, 0x101}, @TCA_HHF_HH_FLOWS_LIMIT={0x8, 0x3, 0xd2}]}}, @TCA_RATE={0x6, 0x5, {0x4}}]}, 0x88}}, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000680)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaabb86dd6012000800103afffe8000000000000000000000000000bbff0200000000000000000000000000018600907801000200feffffff00000000f3ede790d1c652c7be1b8039da56d075f7cdf0c7e69391290087fb74582d4c51836b71089473e324a7ac5e1466754ffe25f31ddb62b2d7e68a8f91c2c6a309e38533146a27f28cd1c7330c01d5b5219ba152fa74380554bb235daaef4331342cdce737649df825c52ac0fe7a32e8d73409e478321f3c7a75cdc5a7585b105c1b1e74e90ca95a1a073c09259c1f61d6f7bd5548f2e2cf7d79917b4d18fba15ce96c22b9430596b8b9c02647fc9e35be11effe9ca128ae9fba00172d63f90811d3ae340c2ebf504aa41527aa92c8dbe331145ff28bca"], 0x0) syz_emit_ethernet(0x5e, &(0x7f0000002e40)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa0086dd607428dd00283afffe8000000000000000000000000000bbff0200000000000000000018000000018900907800000000fe8800000000000000000000000000010002122b472e41e24b11f34b608816e5"], 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="300000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000008000400699b000008001b"], 0x30}}, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="64000000040000000000000000000000010000040900020073797a32000000000900020073797a3000000000100003006269746d61703a706f7274000500050002000000050004000000000016000300686173683a6e65742c706f72742c77a0b8418a9f"], 0x64}, 0x1, 0x0, 0x0, 0x24008844}, 0x0) getsockname(r5, 0x0, 0x0) r8 = socket$rds(0x15, 0x5, 0x0) bind$rds(r8, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r8, &(0x7f0000000080)={&(0x7f0000000180)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r9 = add_key$keyring(&(0x7f0000000540), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r9, &(0x7f0000000200)='asymmetric\x00', &(0x7f0000000080)=@chain) 2.09647501s ago: executing program 7 (id=2786): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7fffffff, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000280)='signal_generate\x00', r1, 0x0, 0x8}, 0x18) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) msgctl$IPC_SET(0x0, 0x1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) tgkill(0x0, 0x0, 0x14) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x4, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f00000001c0)=@gcm_256={{0x304}, "6ae04425ace3f60c", "acba84f0a6731f234db1cc7f3f382ad796bd667cb12ea99509873931d2873103", "73af3302", "ec3fff9afd96e6c0"}, 0x38) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) recvmsg$can_j1939(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000380)=@ieee802154={0x24, @long}, 0x80, &(0x7f0000000880)=[{&(0x7f0000000600)=""/244, 0xf4}, {&(0x7f0000000700)=""/102, 0x66}, {&(0x7f0000000780)=""/124, 0x7c}, {&(0x7f0000000800)=""/70, 0x46}, {&(0x7f0000000200)=""/29, 0x1d}, {&(0x7f0000000400)=""/43, 0x2b}, {&(0x7f0000000940)=""/177, 0xb1}, {&(0x7f0000000a00)=""/205, 0xcd}], 0x8, &(0x7f0000000b00)=""/226, 0xe2}, 0x40000061) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r3}, 0x4) ioctl$int_in(r2, 0x5421, &(0x7f0000000140)=0x1) writev(r2, &(0x7f0000000080)=[{&(0x7f00000002c0)="ec", 0xfdef}], 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r4}, 0x10) r5 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r5, &(0x7f0000001a40)=[{&(0x7f0000000000)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000300)="8d", 0x1}], 0x1}], 0x1, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000080)=@assoc_value, &(0x7f0000000040)=0x8) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="21000026edf8fa904204ea300000af07000000080000009083d618c70c", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000020000000000000000000000020000000000000000"], 0x50) 2.0398205s ago: executing program 7 (id=2787): socket$can_j1939(0x1d, 0x2, 0x7) getresuid(&(0x7f0000000000)=0x0, &(0x7f0000000040), &(0x7f00000000c0)) syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x1008a, &(0x7f0000000100)={[{@jqfmt_vfsold}, {@usrjquota, 0x22}, {@data_err_ignore}, {@noload}, {@data_err_ignore}, {@grpjquota, 0x22}, {@errors_continue}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x3}}, {@nobarrier}], [{@fowner_gt={'fowner>', r0}}, {@obj_type={'obj_type', 0x3d, 'usrjquota='}}, {@subj_type={'subj_type', 0x3d, '*-@:]\x00'}}, {@smackfshat={'smackfshat', 0x3d, 'usrjquota='}}]}, 0xfe, 0x44a, &(0x7f0000000900)="$eJzs3MtvG0UYAPBv7SR9k1CeDS0ECiLikTTpgx6QoAgkDiAhwaGIU0jSKtRtUBMkWkUQOIQjqsQdcUTiL+BCuSDghMQV7ggpQrlQOBmtvZu6iZ04iROX+veTNpnxjDXz7e7Y41mvA+hYA+mfJGJ/RPwWEb3V7K0VBqr/bizNjf+zNDeeRLn85l9Jpd7fS3PjedX8eS9UM+XyGu0uvBMxVipNXs7yw7MX3x+euXL12amLY+cnz09eGj19+sTxIz2nRk+2JM4DaV/7P5o+fOjVt6+9Pn722rs/fZP2d39WXhtHqwxU925dT7S6sTY7kCdejEi62tsXmleMiPRwdVfGf28UY89yWW+88mlbOwdsq3K5UN7VuHi+DADccfI3+vTzb77t0NTjtrB4JpbXMW5kW7WkKwpZne7sM9J2GIiIs/P/fplusU3rEAAAta6fiYhn6s3/CnF/Tb27smtDfRFxd0QcjIh7IuLeiLgvolL3gYh4cIPtr7xCsnr+U+7dVGBNSud/z2fXtm6d/+Wzv+grZrkDlfi7k3NTpclj2T4ZjO5daX5kjTa+f/nXzxuV1c7/0i1tP58LZv34s2vFAt3E2OzYVmKutfhJRH9XvfiT5TlvOj8+FBH9m2xj6qmvDzcqWz/+NbRgUl7+KuLJ6vGfjxXx55KG1ydHnjs1enJ4d5Qmjw3nZ8VqP/+y8Eaj9rcUfwssXi/H3rrn/3L8fcnuiJkrVy9UrtfObLyNhd8/a/iZZrPnf0/yViXdkz324djs7OWRiJ7ktdWPj958bp7P66fn/+DR+uP/YNzcEw9FRHoSH4mIhyPikazvj0bEYxFxdI34f3zp8fc2Hv8aq/ItlMY/sd7xj9rjv/FE8cIP3248/lx6/E9UUoPZI828/jXbwa3sOwAAAPi/KFS+A58UhpbThcLQUMS+ytru3qQ0PTP79LnpDy5NVL8r3xfdhXylq7dmPXQkWxvO86Mr8sezdeMvinsq+aHx6dJEu4OHDrevwfhP/VFsd++Abed+Lehcxj90LuMfOpfxD53L+IfOVW/8f9yGfgA7b533/z071Q9g55n/Q+cy/qFzGf/QkRreG1/Y0i3/Em1KfNeztd9qaD4Rhdsk5DsmkY7HOkVdTf+YxSYTu+oWtfuVCQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoDX+CwAA//8ngeSM") r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/asound/seq/clients\x00', 0x0, 0x0) close(r1) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000380)={'wg2\x00', 0x0}) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x5, &(0x7f0000000240)=ANY=[@ANYBLOB="18100000000000000000000000eaff00850000000e000000a5008400dc0f1e31b4e7b2d12d5700002a00000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r2, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, r3}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r4 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r5, 0x5452, &(0x7f00000001c0)=0x3) fcntl$setsig(r5, 0xa, 0x12) poll(&(0x7f0000b2c000)=[{r6}], 0x1, 0xffffffffffbffff8) dup2(r5, r6) fcntl$setown(r5, 0x8, r4) tkill(r4, 0x13) 1.91537029s ago: executing program 9 (id=2789): socket$nl_route(0x10, 0x3, 0x0) r0 = gettid() r1 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) writev(r1, &(0x7f0000000040)=[{&(0x7f0000000200)="0c2da2af7a3ea3564ae182887fb1b810008fb576c2793d560a1b808b5b", 0x2}, {&(0x7f0000000000)='0', 0x1}], 0x100000000000000d) unshare(0x22020600) r2 = getpid() r3 = syz_pidfd_open(r2, 0x0) setns(r3, 0x2000000) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000180)='sys_enter\x00', r4}, 0x10) rt_sigqueueinfo(r0, 0x21, &(0x7f00000002c0)={0x8000b, 0x4}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x2, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r5}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) 1.89205537s ago: executing program 7 (id=2790): uname(&(0x7f0000000680)=""/225) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) socket$netlink(0x10, 0x3, 0xb) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), r3) getsockname$packet(r3, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/19, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=@newqdisc={0x2c, 0x24, 0xf1d, 0x1, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x2}, {0xffff, 0xffff}, {0xc, 0x4}}, [@qdisc_kind_options=@q_mq={0x7}]}, 0x2c}}, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000200)=r1, 0x4) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="b190efc91a8f8456719d60475fd8b9328aa6f0b6970922611ca96ae1357daf9139d625ba9ea62ceea3873aec", 0x2c}, {&(0x7f0000000280)="fcdfe04852c1f5fd702ab38d8547a1fa3b6da8ead64ecf44f4a602f8b3765900e1e082f11022e90dd35badf016b196e44f8b9b2b3f8cee6ddd165801c681f3e46e0894afa1229b7b1d5fce0cdf74e011315c65c42cbbcf458169fe3ce67e936d007e21a0453ca03eb2fc6e781141830aedb8f39b5dc608a32636b3aaa60146c5eecb", 0x82}], 0x2, &(0x7f0000000900)=[{0x90, 0x10a, 0x7ff, "0a292c84627bddaa10d2c2774c8e7ca5969f05e4fc91250841babe45d3bb51398496a4664e4e020471cdc21b421043283b026dbd6efba44359b7fcf86f3e29dfb5c0b8615f657a9b3f13273f2485725c9ff733ea1c3caa63f0ef59ea6b263e1228326cfc87c95d7ca429be496f5a4673fc3ac4e7f6fa643c69ce339cee"}, {0xf0, 0x3a, 0x4, "8749c00955f4529905e019d2c558055fe8230f85963d37fab7310d17be3f76c41be0906614a3f068a94030b146084f727dbacd7b3e47aa0c4a5abbb2e2c3506e568299ddc97b0280142efe1476993a6fe75d515bbbd22a07df61c708f34bfedef053adffcfbbd6390fc466c975bd7ebeb9542c414df099cdb8b111778752233d8387f1a53cd6d4a22a064d3f2e10f416d1e9a517476e49ba9c92618afe819d8d0efa8ae058166f47bcfb77a5984e77a348589eb1151ca44ef61d5a2e0ff1fb21d7daaf81c6ed05dbc1c90248b81d42bfa09b1ae829c6e43db200e81253"}, {0x18, 0x0, 0x8000, "de6a4f"}, {0x48, 0x107, 0x7, "12ffa3cadb5ec35c146a2a841a1c4b067a216911a34577c2e7678ebb518abce4257f4a96d0e2ed55dc5cd0858456e46ff76a855d21"}, {0x68, 0x114, 0x9, "81a28066eb4fed353d1605f4ba41f9c9a7ec2ba30e74d7c0c09909101f256a753dedbc18d46345de2e15e95505d215d20ce76252d72add58d1399e43c4b066a026c4aaf0a655632b5cd51156f3c341d507d54d"}, {0xe0, 0x5697d3b2856daa83, 0xfffffff7, "1a1de705fe90ca7afbfd567680d0258b95dadc4939bd32a6c79fbf508a7d729b22db205cffb097d56ca0f29edafb0344b35ce19219b95fa6ec7ea2402b48b10ffb52fe83e6ebf687ab34fbedd0735e9135b74389d35105cd0ee4433760a4df58a755f3af039a82d09dea696b9069778a5fd8793a3aa63798cdbe0057c3e180128b892f5ad62ac904a5dc3c82a7a1e291ae4156821f41cabaff29ff404cc0de6fc10bad0a92b7ca1d4b7826de7c0a8393e1f6d8c67ddc444de2495272a7e43890a9f014b7e98ebea0df25b4470a591366"}, {0xb8, 0x4, 0x3ff, "74b2ca045867a1cf4a67f55b37aea5d6a916a28d953a6d4d1f6291ff4275e99023c336305d4b1d9dfc34fda44114356c3dd3d12ce15ebfe1bcab00c626f2c57eb0a3387c4257f8142f2165790c93ea5fabf3063d51354c299a432a31e6f910bc26c71ceeeee5cff52889342a24989f4accd6758aa5007e72df1c34dc044eac725231ea85386f169cb0aa7b401b1f158eb2c42f1b8ca603266f5795d4468ac8e0d732"}, {0xf8, 0x10c, 0x8ad, "9cdc1ec18a0c57927f088208531dd82d48e96260947711378ab1e8fd076685b197c292ea274bc9f4f57b90593a07a9f6b47cf7c100839724117ec98cd33663c78d43035be3cf4b3af74e11efea7c330ac5754bd77b545b397495e75eb727da78788338fd3da0e9ba2271cacde1ab25e4e2ecaf0a5cce8f0415394a059f731a36aa2a2dd45655c7c15a8bb94dd20786f264822629d6fef731ccc81efdd8f0044b97b84ee7fc2da9f71fd9da120ccf70be4734bd49f900920a54ffe7ffffcb08c65159785bed080bcdd5f4b954ae2522ee15ca9dfc011f7fdcc8ab9d4fdba3a30dfcfdcfa486a714"}, {0xc8, 0x118, 0x2, "68aec773cee888964029b63cc1c52c090b1fe4825e9afd144cdc1a601eb71dd46c507c53bfc49b1b525a87d562011c64a88e42b93bcc05e78d4b6bcea550ee1c282b09758723422e3021c7f208c6a94e785e78d38c0dc77ee7a8939178139f4a34e5e5ed9210a1bc1790dba9e9a6324a12352a463d5f0943064db27c029f0056f48ebc911f96c180a04d0f1bc3f577568ad1e79b05bea3bcfec709a67f99ce7db484403b6acdcb3c7992492bff702bb8b6a79515"}], 0x5a0}, 0x400c800) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000640)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r5 = syz_open_procfs(0x0, &(0x7f0000000280)='ns\x00') readlinkat(r5, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000002780)=""/4112, 0x1010) 1.89172243s ago: executing program 9 (id=2791): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d000000850000002300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = socket$kcm(0x29, 0x5, 0x0) r1 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000100)={r1}) socket(0x10, 0x3, 0x0) r2 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r3, 0x5452, &(0x7f00000001c0)=0x3) fcntl$setsig(r3, 0xa, 0x12) poll(0x0, 0x0, 0xffffffffffbffff8) syz_clone(0x8010e000, 0x0, 0x0, 0x0, 0x0, 0x0) dup2(r3, r4) fcntl$setown(r3, 0x8, r2) tkill(r2, 0x13) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r5) ptrace$setregs(0xd, r5, 0x0, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb") ptrace$getregset(0x4204, r5, 0x1, &(0x7f0000000040)={&(0x7f000001aa80)=""/4096, 0x1000}) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000cc0)=@newqdisc={0x2c, 0x24, 0x200, 0x0, 0x0, {0x60, 0x0, 0x0, 0x0, {0x0, 0xd}, {0xffff, 0xffff}, {0x9}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x100}]}, 0x2c}, 0x1, 0x0, 0x0, 0x890}, 0x8841) r7 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_int(r7, 0x6, 0x18, &(0x7f0000000200)=0x3, 0x68) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000280)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1, 0x7}}, './file0\x00'}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 1.86464333s ago: executing program 7 (id=2792): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000dd0000000000003b810000850000006d000000a50000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='kfree\x00', r2}, 0x10) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x66, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x8, 0x4}, 0x0, 0x0, 0x8, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f00000bd000), 0x492492492492846, 0x0) connect$unix(r3, &(0x7f00000002c0)=@file={0x0, './file0\x00'}, 0x6e) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000001c0)={0x1, &(0x7f0000000200)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) execve(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) r6 = socket$kcm(0xa, 0x1, 0x106) r7 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r7, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r7, 0x1, 0x8, &(0x7f0000000000), 0x4) r8 = getpid() r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r10, 0x1, 0x0, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r8}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r7, 0x10e, 0x4, &(0x7f0000000180)=0x1800, 0x4) sendmsg$kcm(r6, &(0x7f0000000380)={&(0x7f0000000080)=@l2tp6={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x3}, 0x5}, 0x80, 0x0}, 0x24004059) bpf$PROG_LOAD(0x5, 0x0, 0x0) close(r6) 1.8164832s ago: executing program 4 (id=2793): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000007c0)=ANY=[@ANYRES32=r4, @ANYRES32=r3, @ANYBLOB='&'], 0x10) sendmsg$inet(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000bc0)=[{&(0x7f0000000780)='}', 0x1}], 0x1}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r4}, &(0x7f0000000000), &(0x7f00000002c0)=r0}, 0x20) sendmsg$inet(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x22fe0}], 0x1}, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000340)='kfree\x00', r5}, 0x10) recvmsg$unix(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000340)=""/229, 0xec1}], 0x1}, 0x0) 1.74845192s ago: executing program 4 (id=2794): openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x1, 0x800001, 0x0, 0x0, 0x0) mlock2(&(0x7f0000ff5000/0x9000)=nil, 0x9000, 0x0) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) mlock2(&(0x7f0000ff8000/0x2000)=nil, 0x2000, 0x0) mincore(&(0x7f0000ff5000/0x4000)=nil, 0x4000, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000440)='fd\x00') getdents(r0, &(0x7f0000000000)=""/39, 0x27) getdents(r0, 0xffffffffffffffff, 0x5a) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000680)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[], [], 0x6b}}) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)={0x54, r1, 0x5eae78d9c54e9d3f, 0x0, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_SEC_KEY={0x38, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_BYTES={0x14, 0x4, "403a050c5baee2004ef2b6d713459a7a"}, @NL802154_KEY_ATTR_ID={0x18, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_IMPLICIT={0xc, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}]}]}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5}]}]}, 0x54}}, 0x10) sendmsg$NL802154_CMD_NEW_SEC_KEY(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000240)={&(0x7f0000000480)={0x150, 0x0, 0x200, 0x70bd27, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_SEC_KEY={0x28, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "824086d3e61fd8d698d867e4dffff90301d87c3200928c1c3391a8dc9e492134"}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_SEC_KEY={0x100, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_BYTES={0x14, 0x4, "c4a48aec7e2a0d26878554e36b0dd412"}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x6}, @NL802154_KEY_ATTR_ID={0x2c, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x3}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0xe900}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x1}, @NL802154_KEY_ID_ATTR_MODE={0x8}]}, @NL802154_KEY_ATTR_ID={0xb4, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x40, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x1}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x3}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa2}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0302}}]}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x4}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x24, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0302}}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa2}]}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0xe198}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x5}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x7f}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x5}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}]}]}]}, 0x150}, 0x1, 0x0, 0x0, 0x40004}, 0x20000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, 0x0, 0x0) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) mount$9p_rdma(&(0x7f0000000000), &(0x7f0000000180)='.\x00', &(0x7f0000000200), 0x800, &(0x7f0000000300)=ANY=[@ANYBLOB="7472616e733d72646d612cc792fbaa584a323461d64a706f72743d30322c00bb4fb37263ba48ac028276ec411a8846b389587dcb5a0bfdb07d359d06eb856928d1954d8290f349f265b4eaa6d2214c95880061444f043e2c18fbea8037aff445"]) 1.26935694s ago: executing program 7 (id=2801): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f0000000200)={[{@quota}, {@oldalloc}, {@barrier_val={'barrier', 0x3d, 0x3}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@block_validity}, {@jqfmt_vfsv1}]}, 0x3, 0x434, &(0x7f0000000940)="$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") ioctl$SIOCGETLINKNAME(0xffffffffffffffff, 0x89e0, &(0x7f0000000480)={0x2, 0x3}) creat(&(0x7f0000000340)='./bus\x00', 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f0000000500)='./bus\x00', 0x0, 0x42) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x13, 0x0, "ef359f41a4ae6dddfbd1ce5d29c2ee5e5c9d000ff8ee09e737ff0edf110ff4eb4b78c66ee677df701905b9aafab4ffffffff00", "cba3d625780820d1cbf7db71038259ca171ce1a311ef97e4298d1e14ef01060000e9009600fdff00000000000000000000000000000000000400", "d300e6d6ae9ef30bea2a004000"}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xc4042, 0x1ff) sendfile(r1, r1, 0x0, 0xfffe80) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, @void, @value}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f00000003c0), 0x5, r2}, 0x38) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3, 0x0, 0x2}, 0x18) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r4, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x107842, 0x42) sendfile(r5, r5, 0x0, 0x80000000) openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x143a82, 0x0) 966.8196ms ago: executing program 9 (id=2807): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) bind$netlink(0xffffffffffffffff, &(0x7f0000000a40)={0x10, 0x0, 0x25dfdbfb, 0x2ffffffff}, 0xc) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x40810) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) write$P9_RGETLOCK(r1, &(0x7f0000000040)={0x24, 0x37, 0x1, {0x2, 0xe, 0x8001, 0xffffffffffffffff, 0x6, 'kfree\x00'}}, 0x24) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000080)='kfree\x00', r3}, 0x18) r4 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x8943, &(0x7f0000001980)={'macvtap0\x00', 0x0}) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000001900)={0x2, {0xc, 0xa00, 0x200, 0x80, 0x100}}) 854.1798ms ago: executing program 9 (id=2808): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) pause() 837.38104ms ago: executing program 7 (id=2809): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="19000000040000000800000010"], 0x50) r1 = syz_open_procfs(0x0, &(0x7f00000007c0)='net/psched\x00') pread64(r1, &(0x7f000001a240)=""/102400, 0x19000, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES64=r0, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x42, '\x00', 0x0, @fallback, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0xca, 0x7ffc1ffb}]}) nanosleep(&(0x7f0000000340)={0x0, 0x989680}, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x30000c6, &(0x7f0000000080), 0x1, 0x553, &(0x7f0000001080)="$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") bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x441, 0x104) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143041, 0x0) pwritev2(r4, &(0x7f00000001c0)=[{&(0x7f0000000080)}], 0x1, 0xe7b, 0x0, 0x0) fallocate(r3, 0x8, 0x4000, 0x4000) 792.142739ms ago: executing program 1 (id=2811): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000002c0)='kfree\x00', r1}, 0x10) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000001c0)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in6=@local, @in=@private=0x1, 0xffff}, {@in6=@remote, 0x0, 0x33}, @in6=@empty, {0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, {}, {0x4}, 0x0, 0x0, 0x2, 0x4}, [@algo_auth_trunc={0x4c, 0x14, {{'crct10dif-arm64-ce\x00'}}}]}, 0x13c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) socket$igmp(0x2, 0x3, 0x2) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='net/raw\x00') socket$igmp(0x2, 0x3, 0x2) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) r5 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r5, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_udp_encap(r5, 0x11, 0x64, &(0x7f0000000000)=0x2, 0x4) syz_emit_ethernet(0x86, &(0x7f0000000440)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @broadcast}, {0x0, 0x4e20, 0x64, 0x0, @wg=@response={0x2, 0x4, 0x0, "017cea08e90a62168facaecca577cb43f478fd5e6e5d4fb33ecffe357eac8a8e", "66d379b886319c62896eb4629b6baae1", {"a41819bdef458b3c84740f618752a2e5", "396954ec098e6a74ec194039740c8a59"}}}}}}}, 0x0) pread64(r3, &(0x7f0000000200)=""/224, 0xe0, 0x15f) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r6}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0x1}, 0x8002, 0x0, 0x0, 0x1, 0x100000, 0x1, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffdfff, 0xffffffffffffffff, 0x2) lstat(0x0, 0x0) r7 = io_uring_setup(0x192, &(0x7f0000000300)={0x0, 0x4178, 0x400, 0x8000002, 0x3d7}) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000002305e20000000000030000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r8}, 0x10) r9 = syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581) r10 = fcntl$dupfd(r9, 0x0, r9) ioctl$USBDEVFS_SUBMITURB(r10, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x80, 0x0, 0x0, 0x0, 0x7995}, 0xfff7, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) close_range(r7, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r0}, &(0x7f0000000000), &(0x7f00000005c0)=r6}, 0x20) 764.58847ms ago: executing program 1 (id=2812): bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x40, 0x40, 0x2, [@const={0x0, 0x0, 0x0, 0x9}, @int={0x0, 0x0, 0x0, 0x1, 0x5, 0x8}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x2}}, @restrict={0x0, 0x0, 0x0, 0xb, 0x3}]}}, 0x0, 0x5a, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x3, 0xfc, "0062ba7d820000000001001f820dac4eb71f11"}) r1 = syz_open_pts(r0, 0x0) r2 = dup(r1) fsetxattr$security_selinux(r2, &(0x7f0000000000), &(0x7f0000000040)='system_u:object_r:mouse_device_t:s0\x00', 0x20, 0x0) setsockopt$MRT_FLUSH(r2, 0x0, 0xd4, &(0x7f0000000080)=0xb, 0x4) 693.788459ms ago: executing program 1 (id=2813): syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc000, &(0x7f00000006c0), 0x2, 0x246, &(0x7f0000000ac0)="$eJzs3T9oM2UcB/DvXRJf+75BXnURxD8gIloor5vg8rooFKQUEUGFioiL0gq1xa1xcnHQWaWTSxE3q6N0KS6K4FS1Q10ELQ4WBx0iybVS24ja1Jz0Ph+43l3vee73HLnvkyyXBGisq0muJ2klmU7SSVIcb3B3tVw93F2f2l5I+v0nfiqG7ar9ylG/K0l6SR5KslUWeamdrG4+s/fLzmP3vbnSuff9zaenJnqRh/b3dh8/eG/ujY9mH1z94qsf5opcT/dP13X+ihH/axfJLf9Fsf+Jol33CPgn5l/78OtB7m9Ncs8w/52UqV68t5Zv2OrkgXf/qu/bP355+yTHCpy/fr8zeA/s9YHGKZN0U5QzSartspyZqT7Df9O6XL68tPzq9ItLK4sv1D1TAeelm+w++smlj6+cyP/3rSr/wMU1yP+T8xvfDrYPWnWPBpiIO6rVIP/Tz63dH/mHxpF/aC75h+aSf2gu+Yfmkn9oLvmHC6xztNEbeVj+obnkH5pL/qG5jucfAGiW/qW6n0AG6lL3/AMAAAAAAAAAAAAAAAAAAJy2PrW9cLRMquZn7yT7jyRpj6rfGv4ecXLj8O/ln4tBsz8UVbexPHvXmCcY0wc1P31903f11v/8znrrry0mvdeTXGu3T99/xeH9d3Y3/83xzvNjFviXihP7Dz812fon/bZRb/3ZneTTwfxzbdT8U+a24Xr0/NM9/hXLZ/TKr2OeAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgIn5PQAA//8PK23M") mq_open(0x0, 0x42, 0x0, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000440)={'sit0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x0, 0x7c7, 0x7ff, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x80, 0x4, 0x0, @loopback, @rand_addr=0x64010101}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f3, &(0x7f0000000000)={'syztnl0\x00', &(0x7f0000000040)={'ip_vti0\x00', 0x0, 0x0, 0x700, 0x4000000, 0x5, {{0x5, 0x4, 0x0, 0x16, 0x14, 0xfffd, 0x0, 0x1, 0x4, 0x0, @multicast1, @remote}}}}) shutdown(r0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x1, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="58000000100003040000000000000000000000c8", @ANYRES32=0x0, @ANYBLOB="42420000000000002800128009000100766c616e00000000180002800c0002001f0000001f000000060001000100000008000500", @ANYRES32=r3, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r3], 0x58}, 0x1, 0x0, 0x0, 0x600}, 0x0) 693.226629ms ago: executing program 0 (id=2814): uname(&(0x7f0000000680)=""/225) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) socket$netlink(0x10, 0x3, 0xb) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), r3) getsockname$packet(r3, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/19, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=@newqdisc={0x2c, 0x24, 0xf1d, 0x1, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x2}, {0xffff, 0xffff}, {0xc, 0x4}}, [@qdisc_kind_options=@q_mq={0x7}]}, 0x2c}}, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000200)=r1, 0x4) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="b190efc91a8f8456719d60475fd8b9328aa6f0b6970922611ca96ae1357daf9139d625ba9ea62ceea3873aec", 0x2c}, {&(0x7f0000000280)="fcdfe04852c1f5fd702ab38d8547a1fa3b6da8ead64ecf44f4a602f8b3765900e1e082f11022e90dd35badf016b196e44f8b9b2b3f8cee6ddd165801c681f3e46e0894afa1229b7b1d5fce0cdf74e011315c65c42cbbcf458169fe3ce67e936d007e21a0453ca03eb2fc6e781141830aedb8f39b5dc608a32636b3aaa60146c5eecb", 0x82}], 0x2, &(0x7f0000000900)=[{0x90, 0x10a, 0x7ff, "0a292c84627bddaa10d2c2774c8e7ca5969f05e4fc91250841babe45d3bb51398496a4664e4e020471cdc21b421043283b026dbd6efba44359b7fcf86f3e29dfb5c0b8615f657a9b3f13273f2485725c9ff733ea1c3caa63f0ef59ea6b263e1228326cfc87c95d7ca429be496f5a4673fc3ac4e7f6fa643c69ce339cee"}, {0xf0, 0x3a, 0x4, "8749c00955f4529905e019d2c558055fe8230f85963d37fab7310d17be3f76c41be0906614a3f068a94030b146084f727dbacd7b3e47aa0c4a5abbb2e2c3506e568299ddc97b0280142efe1476993a6fe75d515bbbd22a07df61c708f34bfedef053adffcfbbd6390fc466c975bd7ebeb9542c414df099cdb8b111778752233d8387f1a53cd6d4a22a064d3f2e10f416d1e9a517476e49ba9c92618afe819d8d0efa8ae058166f47bcfb77a5984e77a348589eb1151ca44ef61d5a2e0ff1fb21d7daaf81c6ed05dbc1c90248b81d42bfa09b1ae829c6e43db200e81253"}, {0x18, 0x0, 0x8000, "de6a4f"}, {0x48, 0x107, 0x7, "12ffa3cadb5ec35c146a2a841a1c4b067a216911a34577c2e7678ebb518abce4257f4a96d0e2ed55dc5cd0858456e46ff76a855d21"}, {0x68, 0x114, 0x9, "81a28066eb4fed353d1605f4ba41f9c9a7ec2ba30e74d7c0c09909101f256a753dedbc18d46345de2e15e95505d215d20ce76252d72add58d1399e43c4b066a026c4aaf0a655632b5cd51156f3c341d507d54d"}, {0xe0, 0x5697d3b2856daa83, 0xfffffff7, "1a1de705fe90ca7afbfd567680d0258b95dadc4939bd32a6c79fbf508a7d729b22db205cffb097d56ca0f29edafb0344b35ce19219b95fa6ec7ea2402b48b10ffb52fe83e6ebf687ab34fbedd0735e9135b74389d35105cd0ee4433760a4df58a755f3af039a82d09dea696b9069778a5fd8793a3aa63798cdbe0057c3e180128b892f5ad62ac904a5dc3c82a7a1e291ae4156821f41cabaff29ff404cc0de6fc10bad0a92b7ca1d4b7826de7c0a8393e1f6d8c67ddc444de2495272a7e43890a9f014b7e98ebea0df25b4470a591366"}, {0xb8, 0x4, 0x3ff, "74b2ca045867a1cf4a67f55b37aea5d6a916a28d953a6d4d1f6291ff4275e99023c336305d4b1d9dfc34fda44114356c3dd3d12ce15ebfe1bcab00c626f2c57eb0a3387c4257f8142f2165790c93ea5fabf3063d51354c299a432a31e6f910bc26c71ceeeee5cff52889342a24989f4accd6758aa5007e72df1c34dc044eac725231ea85386f169cb0aa7b401b1f158eb2c42f1b8ca603266f5795d4468ac8e0d732"}, {0xf8, 0x10c, 0x8ad, "9cdc1ec18a0c57927f088208531dd82d48e96260947711378ab1e8fd076685b197c292ea274bc9f4f57b90593a07a9f6b47cf7c100839724117ec98cd33663c78d43035be3cf4b3af74e11efea7c330ac5754bd77b545b397495e75eb727da78788338fd3da0e9ba2271cacde1ab25e4e2ecaf0a5cce8f0415394a059f731a36aa2a2dd45655c7c15a8bb94dd20786f264822629d6fef731ccc81efdd8f0044b97b84ee7fc2da9f71fd9da120ccf70be4734bd49f900920a54ffe7ffffcb08c65159785bed080bcdd5f4b954ae2522ee15ca9dfc011f7fdcc8ab9d4fdba3a30dfcfdcfa486a714"}, {0xc8, 0x118, 0x2, "68aec773cee888964029b63cc1c52c090b1fe4825e9afd144cdc1a601eb71dd46c507c53bfc49b1b525a87d562011c64a88e42b93bcc05e78d4b6bcea550ee1c282b09758723422e3021c7f208c6a94e785e78d38c0dc77ee7a8939178139f4a34e5e5ed9210a1bc1790dba9e9a6324a12352a463d5f0943064db27c029f0056f48ebc911f96c180a04d0f1bc3f577568ad1e79b05bea3bcfec709a67f99ce7db484403b6acdcb3c7992492bff702bb8b6a79515"}], 0x5a0}, 0x400c800) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000640)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r5 = syz_open_procfs(0x0, &(0x7f0000000280)='ns\x00') readlinkat(r5, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000002780)=""/4112, 0x1010) 675.8547ms ago: executing program 0 (id=2815): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0xe, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7fff, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000840)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x5, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r0}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001880), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000018c0)={0x1c, r2, 0xacf5e67dd0b583a1, 0x0, 0x0, {{0x5}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) (fail_nth: 5) 317.62424ms ago: executing program 0 (id=2816): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000040), 0x5, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2d, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f00000002c0)=@raw=[@tail_call], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80a, &(0x7f0000000000)={[{@grpquota}, {@lazytime}, {@data_err_abort}, {@errors_remount}]}, 0x1, 0x79b, &(0x7f0000000a40)="$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") syz_mount_image$msdos(&(0x7f00000003c0), &(0x7f0000000340)='.\x00', 0x126a4b5, &(0x7f0000001280)=ANY=[], 0x6, 0x0, &(0x7f0000000000)) 316.92667ms ago: executing program 1 (id=2817): r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2042, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) io_uring_setup(0x1629, 0x0) geteuid() bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x34) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0x4, &(0x7f0000000040)=@framed={{0x18, 0x8}, [@exit], {0x95, 0x0, 0xff85}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = syz_io_uring_setup(0x3bda, &(0x7f0000000b40)={0x0, 0xcfb6, 0x8, 0x5, 0xfffffff7}, &(0x7f0000000800)=0x0, &(0x7f0000000440)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f00000002c0)=0x9, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000180)=@IORING_OP_STATX={0x15, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x7ff, 0x6000}) io_uring_enter(r2, 0x1c3e, 0x1aa5, 0x0, 0x0, 0x1a) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='afs_cb_break\x00', r5}, 0x18) ioctl$AUTOFS_IOC_FAIL(r0, 0x4c80, 0x7000000) 275.85864ms ago: executing program 0 (id=2818): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) bind$netlink(0xffffffffffffffff, &(0x7f0000000a40)={0x10, 0x0, 0x25dfdbfb, 0x2ffffffff}, 0xc) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x40810) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) write$P9_RGETLOCK(r1, &(0x7f0000000040)={0x24, 0x37, 0x1, {0x2, 0xe, 0x8001, 0xffffffffffffffff, 0x6, 'kfree\x00'}}, 0x24) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000080)='kfree\x00', r3}, 0x18) r4 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x8943, &(0x7f0000001980)={'macvtap0\x00', 0x0}) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000001900)={0x2, {0xc, 0xa00, 0x200, 0x80, 0x100}}) 241.9995ms ago: executing program 1 (id=2819): r0 = socket$kcm(0x10, 0x2, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000001c0)={0x1, 0x0, 0x0}, 0x10) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000100), 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000000c0)={0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000080)=@buf="1d"}, 0x20) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1900000004000000040000000200"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r1, &(0x7f00000001c0), &(0x7f0000000000)=""/6, 0x2}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000000c0)={r1, &(0x7f0000000100), &(0x7f0000000000), 0x2}, 0x20) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008108090f9becdb4cb92e264831371900000069bd6efb2502eaf60d002700020400bf050005001201", 0x2e}], 0x1}, 0x0) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0, r2}, 0x18) r3 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000000), 0x4) socket$netlink(0x10, 0x3, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff51, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000200)={[{@nombcache}]}, 0x2, 0x500, &(0x7f0000000500)="$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") mount(0x0, 0x0, 0x0, 0x20, 0x0) chdir(&(0x7f0000000440)='./file0\x00') statx(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0xf0cb2f4a0c2cfc5c, &(0x7f0000000080)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r5}, 0x10) quotactl$Q_GETNEXTQUOTA(0x0, &(0x7f0000002040)=@filename='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0x0, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2}) r7 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r7, 0x8983, &(0x7f0000000300)={0x0, 'macvlan0\x00', {}, 0xfffe}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, 0x0, 0x4008800) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) 241.44519ms ago: executing program 0 (id=2820): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x1, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000400000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000001c0)={0x1, &(0x7f0000000200)=[{0x200000000006, 0x19, 0x3, 0x7ffc0001}]}) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x8000, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0x4, 0x307, &(0x7f00000006c0)="$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") syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "00017f", 0x14, 0x2c, 0x0, @remote, @local, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) r2 = socket$inet6(0xa, 0x3, 0x8000000003c) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) r4 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x141341) ioctl$USBDEVFS_IOCTL(r4, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r4, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) connect$inet6(r2, &(0x7f0000000140)={0xa, 0xfffd, 0x0, @mcast2, 0x9}, 0x1c) sendmsg(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)=',', 0xff80}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000280)={{r0}, &(0x7f0000000080), &(0x7f0000000200)='%-010d \x00'}, 0x20) process_vm_readv(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x6, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18020000fdffffee0000000000000000850000002c00000095"], &(0x7f0000000040)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r6, r7, 0x25, 0x2}, 0x14) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1ef1ff1a00000000adccedcd52c94f283ff69e7906"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1, @void, @value}, 0x94) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000500)={0xffffffffffffffff, 0x20, &(0x7f00000004c0)={&(0x7f00000002c0)=""/10, 0xa, 0x0, &(0x7f0000000400)}}, 0x10) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x20000110, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x24, '\x00', 0x0, @fallback, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r9, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff9, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r10}, 0x10) ioctl$AUTOFS_IOC_FAIL(r0, 0x9361, 0x0) syz_emit_ethernet(0x182, &(0x7f00000005c0)={@local, @remote, @val={@void, {0x8100, 0x1, 0x1, 0x3}}, {@ipv6={0x86dd, @tipc_packet={0x4, 0x6, "66d216", 0x148, 0x6, 0xff, @private2, @mcast1, {[@dstopts={0x21, 0x1, '\x00', [@jumbo={0xc2, 0x4, 0x4c6}, @padn, @pad1]}, @srh={0x33, 0x8, 0x4, 0x4, 0x8, 0x20, 0x8001, [@private1, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast2, @loopback]}, @fragment={0x88, 0x0, 0xb, 0x0, 0x0, 0xa, 0x64}, @hopopts={0x2f, 0x7, '\x00', [@generic={0x5, 0x11, "a59312bf7c76eff2c3f74ca5fcb611f1a9"}, @calipso={0x7, 0x8, {0x3, 0x0, 0x76, 0x3}}, @padn={0x1, 0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @hao={0xc9, 0x10, @remote}]}], @name_distributor={{0x98, 0x0, 0x0, 0x0, 0x0, 0xa, 0xb, 0x2, 0x9, 0x0, 0x0, 0xff, 0x1, 0x1, 0x4e20, 0x4e21, 0x1, 0x10}, [{0xa82, 0xfab4, 0x1ff, 0x3, 0x1, 0x34, 0xa, 0x42a1}, {0xfffffffe, 0xa3c, 0x4a, 0xc, 0xc, 0xffe00, 0x4, 0x2}, {0x1, 0xb, 0x5, 0x80000000, 0xa, 0x4, 0x0, 0x8}, {0x3fc, 0x4, 0x400, 0x3, 0xe616, 0x5, 0x8, 0x8000}]}}}}}}, 0x0) 174.71422ms ago: executing program 0 (id=2821): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f0000000200)={[{@quota}, {@oldalloc}, {@barrier_val={'barrier', 0x3d, 0x3}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@block_validity}, {@jqfmt_vfsv1}]}, 0x3, 0x434, &(0x7f0000000940)="$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") ioctl$SIOCGETLINKNAME(0xffffffffffffffff, 0x89e0, &(0x7f0000000480)={0x2, 0x3}) creat(&(0x7f0000000340)='./bus\x00', 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f0000000500)='./bus\x00', 0x0, 0x42) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x13, 0x0, "ef359f41a4ae6dddfbd1ce5d29c2ee5e5c9d000ff8ee09e737ff0edf110ff4eb4b78c66ee677df701905b9aafab4ffffffff00", "cba3d625780820d1cbf7db71038259ca171ce1a311ef97e4298d1e14ef01060000e9009600fdff00000000000000000000000000000000000400", "d300e6d6ae9ef30bea2a004000"}) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xc4042, 0x1ff) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, @void, @value}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f00000003c0), 0x5, r1}, 0x38) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2, 0x0, 0x2}, 0x18) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r3, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x107842, 0x42) sendfile(r4, r4, 0x0, 0x80000000) openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x143a82, 0x0) 59.63796ms ago: executing program 4 (id=2822): r0 = socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$usbmon(&(0x7f0000000100), 0x3ff, 0x640082) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000700000095"], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r1}, 0x10) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000200)={{0x1, 0x1, 0x18, r0, {0x1}}, './file0\x00'}) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xf, &(0x7f0000000240)=ANY=[@ANYRES32=0x0, @ANYRES32, @ANYRESHEX=r2], &(0x7f0000001dc0)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000280)='sched_switch\x00', r3}, 0x10) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x11, &(0x7f0000000100)={[{@noblock_validity}, {@data_err_abort}, {@norecovery}, {@min_batch_time={'min_batch_time', 0x3d, 0x71d}}, {@abort}]}, 0x1, 0x610, &(0x7f0000000a40)="$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") open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'ipvlan0\x00', 0x0}) sendmsg$ETHTOOL_MSG_DEBUG_SET(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000fedbdf25080000001800028014000380100001800400030008000100050000000c00018008000100", @ANYRES32=r5], 0x38}, 0x1, 0x0, 0x0, 0x4000814}, 0x0) 0s ago: executing program 1 (id=2823): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f0000000200)={[{@quota}, {@oldalloc}, {@barrier_val={'barrier', 0x3d, 0x3}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@block_validity}, {@jqfmt_vfsv1}]}, 0x3, 0x434, &(0x7f0000000940)="$eJzs289vFFUcAPDvzLZFKNiK+IOCWkVj44+WFlQOXjSaeNDERA94rG0hlYUaWhMhjVZj8GhIvBuPJv4FnvRi1JOJV70bEmJ6AT2tmd2ZdrvdLW3ZdtH9fJKB92be5n2/O/N238zrBtC1hrN/koj9EfF7RAzUqmsbDNf+u7m8OPX38uJUEpXKW38l1XY3lheniqbF6/rzykgakX6WxJEm/c5funxuslyeuZjXxxbOvz82f+nys7PnJ8/OnJ25MHHq1MkT4y88P/FcW/LMYrox9NHc0cOvvXP1janTV9/9+dukyL8hjzYZ3ujgE5VKm7vrrAN15aSng4GwJaWIyE5Xb3X8D0QpVk/eQLz6aUeDA3ZUpVKp9Lc+vFQB/seS6HQEQGcUX/TZ/W+x7dLU445w/aXaDVCW9818qx3piTRv09twf9tOwxFxeumfr7ItduY5BADAGt9n859nms3/0ri/rt3d+drQYETcExEHI+LeiDgUEfdFVNs+EBEPbrH/xkWS9fOf9Nq2EtukbP73Yr62tXb+V8z+YrCU1w5U8+9NzsyWZ47n78lI9O7J6uMb9PHDK7990epY/fwv27L+i7lgHse1nj1rXzM9uTB5OznXu/5JxFBPs/yTlZWAJCIOR8TQNvuYfeqbo62O3Tr/DbRhnanydcSTtfO/FA35F5KN1yfH7oryzPGx4qpY75dfr7zZqv/byr8NsvO/r+n1v5L/YFK/Xju/9T6u/PF5y3ua7V7/fcnb1XJfvu/DyYWFi+MRfcnrtaDr90+svraoF+2z/EeONR//B2P1nTgSEdlF/FBEPBwRj+SxPxoRj0XEsQ3y/+nlx9/bfv47K8t/ekvnf7XQF417mhdK5378bk2ng1vJPzv/J6ulkXzPZj7/NhPX9q5mAAAA+O9JI2J/JOnoSjlNR0drfy9/KPal5bn5hafPzH1wYbr2G4HB6E2LJ10Ddc9Dx/Pb+qI+0VA/kT83/rK0t1ofnZorT3c6eehy/S3Gf+bPUqejA3ac32tB9zL+oXsZ/9C9jH/oXk3G/95OxAHsvmbf/x93IA5g9zWMf8t+0EXc/0P3Mv6hexn/0JXm98atfySvoLCuEOkdEYbCDhU6/ckEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADQHv8GAAD//5LX5s8=") ioctl$SIOCGETLINKNAME(0xffffffffffffffff, 0x89e0, &(0x7f0000000480)={0x2, 0x3}) creat(&(0x7f0000000340)='./bus\x00', 0x0) r0 = open(&(0x7f0000000500)='./bus\x00', 0x0, 0x42) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x13, 0x0, "ef359f41a4ae6dddfbd1ce5d29c2ee5e5c9d000ff8ee09e737ff0edf110ff4eb4b78c66ee677df701905b9aafab4ffffffff00", "cba3d625780820d1cbf7db71038259ca171ce1a311ef97e4298d1e14ef01060000e9009600fdff00000000000000000000000000000000000400", "d300e6d6ae9ef30bea2a004000"}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r1, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) kernel console output (not intermixed with test programs): ttr_ibody_find:2240: inode #15: comm syz.8.2382: corrupted in-inode xattr: e_name out of bounds [ 150.212757][T10187] EXT4-fs (loop8): Remounting filesystem read-only [ 150.232118][T10187] EXT4-fs (loop8): 1 truncate cleaned up [ 150.246386][T10187] SELinux: (dev loop8, type ext4) getxattr errno 5 [ 150.254812][T10191] loop7: detected capacity change from 0 to 128 [ 150.340417][T10191] hub 9-0:1.0: USB hub found [ 150.351554][T10191] hub 9-0:1.0: 8 ports detected [ 150.480635][T10194] loop7: detected capacity change from 0 to 512 [ 150.493972][T10194] EXT4-fs: Ignoring removed oldalloc option [ 150.513268][T10194] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 150.608045][T10194] EXT4-fs (loop7): 1 truncate cleaned up [ 151.260669][ T29] kauditd_printk_skb: 706 callbacks suppressed [ 151.260683][ T29] audit: type=1400 audit(1740840728.471:13913): avc: denied { write } for pid=10198 comm="syz.2.2386" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 151.287211][T10194] loop7: detected capacity change from 512 to 64 [ 151.312335][T10196] syz.7.2384: attempt to access beyond end of device [ 151.312335][T10196] loop7: rw=0, sector=202, nr_sectors = 56 limit=64 [ 151.339728][T10201] loop0: detected capacity change from 0 to 2048 [ 151.360712][T10203] loop8: detected capacity change from 0 to 256 [ 151.375832][ T29] audit: type=1400 audit(1740840728.508:13914): avc: denied { connect } for pid=10198 comm="syz.2.2386" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 151.395747][ T29] audit: type=1400 audit(1740840728.508:13915): avc: denied { name_connect } for pid=10198 comm="syz.2.2386" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 151.416124][ T29] audit: type=1400 audit(1740840728.536:13916): avc: denied { shutdown } for pid=10198 comm="syz.2.2386" lport=41052 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 151.437060][ T29] audit: type=1326 audit(1740840728.536:13917): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10202 comm="syz.8.2387" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f85a884d169 code=0x7ffc0000 [ 151.460810][ T29] audit: type=1326 audit(1740840728.536:13918): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10202 comm="syz.8.2387" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f85a884d169 code=0x7ffc0000 [ 151.484452][ T29] audit: type=1326 audit(1740840728.536:13919): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10202 comm="syz.8.2387" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f85a884d169 code=0x7ffc0000 [ 151.508182][ T29] audit: type=1326 audit(1740840728.536:13920): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10202 comm="syz.8.2387" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f85a884d169 code=0x7ffc0000 [ 151.531928][ T29] audit: type=1326 audit(1740840728.564:13921): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10202 comm="syz.8.2387" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f85a884d169 code=0x7ffc0000 [ 151.555637][ T29] audit: type=1326 audit(1740840728.564:13922): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10202 comm="syz.8.2387" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f85a884d169 code=0x7ffc0000 [ 151.592643][T10203] msdos: Unknown parameter 'd!ã?µ›ˆ' [ 151.610273][ T8800] EXT4-fs warning (device loop7): ext4_evict_inode:276: xattr delete (err -12) [ 151.629419][T10201] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 151.680470][T10212] selinux_netlink_send: 1 callbacks suppressed [ 151.680486][T10212] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10212 comm=syz.0.2390 [ 151.780169][T10215] pim6reg1: entered promiscuous mode [ 151.785539][T10215] pim6reg1: entered allmulticast mode [ 151.853279][T10223] loop0: detected capacity change from 0 to 256 [ 151.929562][T10221] loop2: detected capacity change from 0 to 512 [ 151.938565][T10223] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 151.939094][T10221] EXT4-fs: Ignoring removed orlov option [ 151.947395][T10223] FAT-fs (loop0): Filesystem has been set read-only [ 151.966663][T10223] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 151.975601][T10223] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 151.976395][T10221] EXT4-fs error (device loop2): ext4_ext_check_inode:524: inode #15: comm syz.2.2389: pblk 0 bad header/extent: invalid magic - magic 7973, entries 1402, max 27648(0), depth 25964(25964) [ 151.984394][T10223] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 152.011772][T10223] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 152.017570][T10233] loop8: detected capacity change from 0 to 1024 [ 152.020526][T10223] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 152.035710][T10223] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 152.044504][T10223] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 152.053256][T10223] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 152.062109][T10223] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 152.068231][T10221] EXT4-fs error (device loop2): ext4_orphan_get:1394: comm syz.2.2389: couldn't read orphan inode 15 (err -117) [ 152.086539][T10223] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 152.103321][T10223] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 152.500019][T10259] FAULT_INJECTION: forcing a failure. [ 152.500019][T10259] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 152.513366][T10259] CPU: 0 UID: 0 PID: 10259 Comm: syz.0.2404 Tainted: G W 6.14.0-rc4-syzkaller-00242-g7a5668899f54 #0 [ 152.513418][T10259] Tainted: [W]=WARN [ 152.513426][T10259] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 152.513440][T10259] Call Trace: [ 152.513444][T10259] [ 152.513450][T10259] dump_stack_lvl+0xf2/0x150 [ 152.513529][T10259] dump_stack+0x15/0x1a [ 152.513545][T10259] should_fail_ex+0x24a/0x260 [ 152.513568][T10259] should_fail_alloc_page+0xfd/0x110 [ 152.513592][T10259] alloc_pages_bulk_noprof+0xfd/0x570 [ 152.513616][T10259] copy_splice_read+0xe5/0x5b0 [ 152.513700][T10259] ? __kmalloc_noprof+0x284/0x3f0 [ 152.513715][T10259] ? alloc_pipe_info+0x1cb/0x360 [ 152.513740][T10259] ? __pfx_shmem_file_splice_read+0x10/0x10 [ 152.513802][T10259] splice_direct_to_actor+0x28b/0x670 [ 152.513823][T10259] ? __pfx_direct_splice_actor+0x10/0x10 [ 152.513847][T10259] do_splice_direct+0xd7/0x150 [ 152.513877][T10259] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 152.513951][T10259] do_sendfile+0x398/0x660 [ 152.513969][T10259] __x64_sys_sendfile64+0x110/0x150 [ 152.513997][T10259] x64_sys_call+0xfbd/0x2dc0 [ 152.514017][T10259] do_syscall_64+0xc9/0x1c0 [ 152.514081][T10259] ? clear_bhb_loop+0x55/0xb0 [ 152.514107][T10259] ? clear_bhb_loop+0x55/0xb0 [ 152.514152][T10259] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 152.514201][T10259] RIP: 0033:0x7f84a9e1d169 [ 152.514278][T10259] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 152.514330][T10259] RSP: 002b:00007f84a8487038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 152.514345][T10259] RAX: ffffffffffffffda RBX: 00007f84aa035fa0 RCX: 00007f84a9e1d169 [ 152.514417][T10259] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000005 [ 152.514429][T10259] RBP: 00007f84a8487090 R08: 0000000000000000 R09: 0000000000000000 [ 152.514457][T10259] R10: 00008000fffffffe R11: 0000000000000246 R12: 0000000000000001 [ 152.514471][T10259] R13: 0000000000000000 R14: 00007f84aa035fa0 R15: 00007ffd35899f38 [ 152.514493][T10259] [ 152.822847][T10262] loop0: detected capacity change from 0 to 512 [ 152.830050][T10262] EXT4-fs: Ignoring removed orlov option [ 152.836633][T10262] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 152.846638][T10262] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 152.855261][T10268] loop2: detected capacity change from 0 to 128 [ 152.855308][T10262] EXT4-fs (loop0): orphan cleanup on readonly fs [ 152.855790][T10262] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.2405: bg 0: block 248: padding at end of block bitmap is not set [ 152.886756][T10262] EXT4-fs error (device loop0): ext4_acquire_dquot:6927: comm syz.0.2405: Failed to acquire dquot type 1 [ 152.891522][T10268] ext4 filesystem being mounted at /451/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 152.899585][T10262] EXT4-fs (loop0): 1 truncate cleaned up [ 153.098818][T10286] loop0: detected capacity change from 0 to 128 [ 153.117789][T10286] ext4 filesystem being mounted at /549/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 153.173862][T10293] FAULT_INJECTION: forcing a failure. [ 153.173862][T10293] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 153.187121][T10293] CPU: 1 UID: 0 PID: 10293 Comm: syz.0.2415 Tainted: G W 6.14.0-rc4-syzkaller-00242-g7a5668899f54 #0 [ 153.187158][T10293] Tainted: [W]=WARN [ 153.187165][T10293] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 153.187175][T10293] Call Trace: [ 153.187180][T10293] [ 153.187186][T10293] dump_stack_lvl+0xf2/0x150 [ 153.187210][T10293] dump_stack+0x15/0x1a [ 153.187227][T10293] should_fail_ex+0x24a/0x260 [ 153.187252][T10293] should_fail+0xb/0x10 [ 153.187302][T10293] should_fail_usercopy+0x1a/0x20 [ 153.187339][T10293] _copy_from_user+0x1c/0xa0 [ 153.187432][T10293] copy_msghdr_from_user+0x54/0x2a0 [ 153.187458][T10293] ? __fget_files+0x17c/0x1c0 [ 153.187488][T10293] __sys_sendmsg+0x13e/0x230 [ 153.187526][T10293] __x64_sys_sendmsg+0x46/0x50 [ 153.187546][T10293] x64_sys_call+0x2734/0x2dc0 [ 153.187608][T10293] do_syscall_64+0xc9/0x1c0 [ 153.187633][T10293] ? clear_bhb_loop+0x55/0xb0 [ 153.187655][T10293] ? clear_bhb_loop+0x55/0xb0 [ 153.187676][T10293] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 153.187770][T10293] RIP: 0033:0x7f84a9e1d169 [ 153.187788][T10293] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 153.187809][T10293] RSP: 002b:00007f84a8487038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 153.187830][T10293] RAX: ffffffffffffffda RBX: 00007f84aa035fa0 RCX: 00007f84a9e1d169 [ 153.187843][T10293] RDX: 0000000000000000 RSI: 0000400000000000 RDI: 0000000000000004 [ 153.187853][T10293] RBP: 00007f84a8487090 R08: 0000000000000000 R09: 0000000000000000 [ 153.187890][T10293] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 153.187899][T10293] R13: 0000000000000000 R14: 00007f84aa035fa0 R15: 00007ffd35899f38 [ 153.187916][T10293] [ 153.541342][T10321] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2425'. [ 153.620295][T10323] IPv6: NLM_F_CREATE should be specified when creating new route [ 153.640479][T10323] loop0: detected capacity change from 0 to 512 [ 153.664780][T10323] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.2426: bg 0: block 35: padding at end of block bitmap is not set [ 153.679744][T10323] EXT4-fs (loop0): Remounting filesystem read-only [ 153.686430][T10323] EXT4-fs (loop0): 1 truncate cleaned up [ 153.692599][T10323] SELinux: (dev loop0, type ext4) getxattr errno 5 [ 153.800836][T10335] netlink: 596 bytes leftover after parsing attributes in process `syz.4.2429'. [ 153.833503][T10339] netlink: 96 bytes leftover after parsing attributes in process `syz.0.2433'. [ 153.857482][T10339] loop0: detected capacity change from 0 to 2048 [ 153.903725][T10350] loop8: detected capacity change from 0 to 512 [ 153.911374][T10350] EXT4-fs: Ignoring removed oldalloc option [ 153.917426][T10352] loop0: detected capacity change from 0 to 2048 [ 153.917741][T10350] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 153.947005][T10350] EXT4-fs (loop8): 1 truncate cleaned up [ 153.953485][T10352] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 154.016561][T10350] loop8: detected capacity change from 512 to 64 [ 154.047327][ T9985] EXT4-fs warning (device loop8): ext4_evict_inode:276: xattr delete (err -12) [ 154.075540][T10360] can0: slcan on ttyS3. [ 154.153792][T10375] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2445'. [ 154.325209][T10388] loop0: detected capacity change from 0 to 512 [ 154.332174][T10388] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 154.343665][T10388] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842e12c, mo2=0002] [ 154.358618][T10388] System zones: 1-12 [ 154.362625][T10388] EXT4-fs (loop0): orphan cleanup on readonly fs [ 154.380361][T10388] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.2448: bg 0: block 361: padding at end of block bitmap is not set [ 154.401477][T10388] EXT4-fs (loop0): Remounting filesystem read-only [ 154.408075][T10388] EXT4-fs (loop0): 1 truncate cleaned up [ 154.423061][T10388] SELinux: (dev loop0, type ext4) getxattr errno 5 [ 154.466835][T10392] loop0: detected capacity change from 0 to 128 [ 154.473373][T10392] EXT4-fs: Ignoring removed nobh option [ 154.488770][T10392] ext4 filesystem being mounted at /572/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 154.532791][T10390] loop8: detected capacity change from 0 to 512 [ 154.540057][T10390] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 154.551508][T10390] EXT4-fs (loop8): 1 truncate cleaned up [ 154.584299][T10396] vlan2: entered allmulticast mode [ 154.589551][T10396] bridge_slave_0: entered allmulticast mode [ 154.598433][T10396] bridge_slave_0: left allmulticast mode [ 154.740981][T10400] loop0: detected capacity change from 0 to 4096 [ 154.747754][T10400] EXT4-fs: dax option not supported [ 154.806964][T10403] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2453'. [ 154.815980][T10403] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2453'. [ 154.836819][T10404] loop0: detected capacity change from 0 to 512 [ 154.843483][T10404] EXT4-fs: dax option not supported [ 154.957454][T10216] can0 (unregistered): slcan off ttyS3. [ 154.975646][T10407] rdma_op ffff88810dbae180 conn xmit_rdma 0000000000000000 [ 155.047307][T10410] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 155.086179][T10412] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=256 sclass=netlink_route_socket pid=10412 comm=syz.4.2458 [ 155.102693][T10410] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 155.175217][T10410] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 155.190522][T10412] 9pnet_fd: Insufficient options for proto=fd [ 155.227939][T10410] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 155.243688][T10421] loop0: detected capacity change from 0 to 512 [ 155.251128][T10421] EXT4-fs (loop0): Invalid default hash set in the superblock [ 155.308986][T10410] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 155.342664][T10410] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 155.360904][T10410] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 155.373143][T10410] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 155.403343][T10427] loop8: detected capacity change from 0 to 512 [ 155.411666][T10427] ext3: Unknown parameter 'fowner>00000000000000000000' [ 155.471866][T10431] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2462'. [ 155.480890][T10431] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 155.489645][T10431] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 155.501318][T10435] loop7: detected capacity change from 0 to 512 [ 155.511877][T10435] ext3: Unknown parameter 'fowner>00000000000000000000' [ 155.530928][T10437] loop8: detected capacity change from 0 to 2048 [ 155.547685][T10437] EXT4-fs (loop8): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 155.853597][T10468] loop8: detected capacity change from 0 to 512 [ 155.860452][T10468] EXT4-fs (loop8): mounting ext3 file system using the ext4 subsystem [ 155.869170][T10468] EXT4-fs (loop8): invalid journal inode [ 155.874847][T10468] EXT4-fs (loop8): can't get journal size [ 155.881502][T10468] EXT4-fs (loop8): 1 truncate cleaned up [ 155.948164][T10472] loop8: detected capacity change from 0 to 128 [ 155.965403][T10472] hub 9-0:1.0: USB hub found [ 155.970105][T10472] hub 9-0:1.0: 8 ports detected [ 156.008174][T10474] loop8: detected capacity change from 0 to 512 [ 156.015104][T10474] EXT4-fs (loop8): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 156.036143][T10474] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842e12c, mo2=0002] [ 156.044244][T10474] System zones: 1-12 [ 156.048505][T10474] EXT4-fs (loop8): orphan cleanup on readonly fs [ 156.055418][T10474] EXT4-fs error (device loop8): ext4_validate_block_bitmap:441: comm syz.8.2475: bg 0: block 361: padding at end of block bitmap is not set [ 156.070487][T10474] EXT4-fs (loop8): Remounting filesystem read-only [ 156.077203][T10474] EXT4-fs (loop8): 1 truncate cleaned up [ 156.084240][T10474] SELinux: (dev loop8, type ext4) getxattr errno 5 [ 156.093518][T10474] FAULT_INJECTION: forcing a failure. [ 156.093518][T10474] name failslab, interval 1, probability 0, space 0, times 0 [ 156.106268][T10474] CPU: 0 UID: 0 PID: 10474 Comm: syz.8.2475 Tainted: G W 6.14.0-rc4-syzkaller-00242-g7a5668899f54 #0 [ 156.106299][T10474] Tainted: [W]=WARN [ 156.106306][T10474] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 156.106320][T10474] Call Trace: [ 156.106377][T10474] [ 156.106384][T10474] dump_stack_lvl+0xf2/0x150 [ 156.106409][T10474] dump_stack+0x15/0x1a [ 156.106500][T10474] should_fail_ex+0x24a/0x260 [ 156.106533][T10477] loop0: detected capacity change from 0 to 2048 [ 156.106533][T10474] should_failslab+0x8f/0xb0 [ 156.106575][T10474] kmem_cache_alloc_noprof+0x52/0x320 [ 156.106600][T10474] ? skb_clone+0x154/0x1f0 [ 156.106691][T10474] skb_clone+0x154/0x1f0 [ 156.106720][T10474] __netlink_deliver_tap+0x2bd/0x4f0 [ 156.106831][T10474] netlink_unicast+0x64a/0x670 [ 156.106866][T10474] netlink_sendmsg+0x5cc/0x6e0 [ 156.106909][T10474] ? __pfx_netlink_sendmsg+0x10/0x10 [ 156.106956][T10474] __sock_sendmsg+0x140/0x180 [ 156.106986][T10474] ____sys_sendmsg+0x326/0x4b0 [ 156.107011][T10474] __sys_sendmsg+0x19d/0x230 [ 156.107050][T10474] __x64_sys_sendmsg+0x46/0x50 [ 156.107142][T10474] x64_sys_call+0x2734/0x2dc0 [ 156.107242][T10474] do_syscall_64+0xc9/0x1c0 [ 156.107277][T10474] ? clear_bhb_loop+0x55/0xb0 [ 156.107308][T10474] ? clear_bhb_loop+0x55/0xb0 [ 156.107339][T10474] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 156.107382][T10474] RIP: 0033:0x7f85a884d169 [ 156.107400][T10474] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 156.107470][T10474] RSP: 002b:00007f85a6eb1038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 156.107492][T10474] RAX: ffffffffffffffda RBX: 00007f85a8a65fa0 RCX: 00007f85a884d169 [ 156.107506][T10474] RDX: 0000000000000000 RSI: 0000400000000000 RDI: 0000000000000006 [ 156.107520][T10474] RBP: 00007f85a6eb1090 R08: 0000000000000000 R09: 0000000000000000 [ 156.107541][T10474] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 156.107560][T10474] R13: 0000000000000000 R14: 00007f85a8a65fa0 R15: 00007ffd709e1f28 [ 156.107582][T10474] [ 156.107625][T10474] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2475'. [ 156.329287][T10477] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 156.340280][T10474] netlink: 'syz.8.2475': attribute type 1 has an invalid length. [ 156.348132][T10474] netlink: 'syz.8.2475': attribute type 2 has an invalid length. [ 156.388873][T10487] vhci_hcd: invalid port number 255 [ 156.394346][T10487] vhci_hcd: default hub control req: 0300 v0004 i00ff l0 [ 156.429290][T10493] loop2: detected capacity change from 0 to 128 [ 156.449809][T10495] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=10495 comm=syz.0.2483 [ 156.470475][T10495] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2483'. [ 156.483251][T10493] syz.2.2482: attempt to access beyond end of device [ 156.483251][T10493] loop2: rw=2049, sector=145, nr_sectors = 896 limit=128 [ 156.514975][T10493] syz.2.2482: attempt to access beyond end of device [ 156.514975][T10493] loop2: rw=524288, sector=145, nr_sectors = 896 limit=128 [ 156.529195][T10499] loop8: detected capacity change from 0 to 1024 [ 156.535993][T10499] EXT4-fs: Ignoring removed bh option [ 156.549835][T10501] sctp: [Deprecated]: syz.2.2486 (pid 10501) Use of int in max_burst socket option. [ 156.549835][T10501] Use struct sctp_assoc_value instead [ 156.573041][T10505] FAULT_INJECTION: forcing a failure. [ 156.573041][T10505] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 156.586190][T10505] CPU: 0 UID: 0 PID: 10505 Comm: syz.7.2487 Tainted: G W 6.14.0-rc4-syzkaller-00242-g7a5668899f54 #0 [ 156.586219][T10505] Tainted: [W]=WARN [ 156.586225][T10505] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 156.586266][T10505] Call Trace: [ 156.586273][T10505] [ 156.586281][T10505] dump_stack_lvl+0xf2/0x150 [ 156.586314][T10505] dump_stack+0x15/0x1a [ 156.586339][T10505] should_fail_ex+0x24a/0x260 [ 156.586375][T10505] should_fail+0xb/0x10 [ 156.586442][T10505] should_fail_usercopy+0x1a/0x20 [ 156.586475][T10505] _copy_from_iter+0xd5/0xd00 [ 156.586509][T10505] ? kmalloc_reserve+0x16e/0x190 [ 156.586540][T10505] ? __build_skb_around+0x196/0x1f0 [ 156.586637][T10505] ? __alloc_skb+0x21f/0x310 [ 156.586659][T10505] ? __virt_addr_valid+0x1ed/0x250 [ 156.586688][T10505] ? __check_object_size+0x364/0x520 [ 156.586718][T10505] netlink_sendmsg+0x460/0x6e0 [ 156.586794][T10505] ? __pfx_netlink_sendmsg+0x10/0x10 [ 156.586826][T10505] __sock_sendmsg+0x140/0x180 [ 156.586864][T10505] ____sys_sendmsg+0x326/0x4b0 [ 156.586935][T10505] __sys_sendmsg+0x19d/0x230 [ 156.586974][T10505] __x64_sys_sendmsg+0x46/0x50 [ 156.587003][T10505] x64_sys_call+0x2734/0x2dc0 [ 156.587034][T10505] do_syscall_64+0xc9/0x1c0 [ 156.587088][T10505] ? clear_bhb_loop+0x55/0xb0 [ 156.587214][T10505] ? clear_bhb_loop+0x55/0xb0 [ 156.587247][T10505] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 156.587292][T10505] RIP: 0033:0x7f655bb0d169 [ 156.587306][T10505] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 156.587335][T10505] RSP: 002b:00007f655a171038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 156.587427][T10505] RAX: ffffffffffffffda RBX: 00007f655bd25fa0 RCX: 00007f655bb0d169 [ 156.587511][T10505] RDX: 0000000000000000 RSI: 0000400000000040 RDI: 0000000000000003 [ 156.587546][T10505] RBP: 00007f655a171090 R08: 0000000000000000 R09: 0000000000000000 [ 156.587558][T10505] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 156.587568][T10505] R13: 0000000000000000 R14: 00007f655bd25fa0 R15: 00007ffd416febe8 [ 156.587588][T10505] [ 156.872896][T10499] EXT4-fs error (device loop8): ext4_mb_mark_diskspace_used:4115: comm syz.8.2485: Allocating blocks 497-513 which overlap fs metadata [ 156.886959][ T29] kauditd_printk_skb: 527 callbacks suppressed [ 156.886972][ T29] audit: type=1400 audit(1740840733.718:14448): avc: denied { ioctl } for pid=10498 comm="syz.8.2485" path="/22/file1/file1" dev="loop8" ino=15 ioctlcmd=0x662a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 156.917876][ T29] audit: type=1400 audit(1740840733.728:14449): avc: denied { name_bind } for pid=10522 comm="syz.7.2492" src=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 156.935564][T10499] EXT4-fs (loop8): pa ffff8881006e47e0: logic 256, phys. 385, len 8 [ 156.939355][ T29] audit: type=1400 audit(1740840733.728:14450): avc: denied { name_connect } for pid=10522 comm="syz.7.2492" dest=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 156.947362][T10499] EXT4-fs error (device loop8): ext4_mb_release_inode_pa:5366: group 0, free 0, pa_free 1 [ 156.979999][ T29] audit: type=1400 audit(1740840733.821:14451): avc: denied { write } for pid=10498 comm="syz.8.2485" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 157.003801][T10529] Cannot find set identified by id 0 to match [ 157.015261][T10531] FAULT_INJECTION: forcing a failure. [ 157.015261][T10531] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 157.028413][T10531] CPU: 0 UID: 0 PID: 10531 Comm: syz.2.2495 Tainted: G W 6.14.0-rc4-syzkaller-00242-g7a5668899f54 #0 [ 157.028440][T10531] Tainted: [W]=WARN [ 157.028446][T10531] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 157.028489][T10531] Call Trace: [ 157.028496][T10531] [ 157.028511][T10531] dump_stack_lvl+0xf2/0x150 [ 157.028542][T10531] dump_stack+0x15/0x1a [ 157.028563][T10531] should_fail_ex+0x24a/0x260 [ 157.028593][T10531] should_fail+0xb/0x10 [ 157.028616][T10531] should_fail_usercopy+0x1a/0x20 [ 157.028687][T10531] _copy_from_user+0x1c/0xa0 [ 157.028704][T10531] memdup_user+0x64/0xc0 [ 157.028733][T10531] strndup_user+0x68/0xa0 [ 157.028765][T10531] __se_sys_mount+0x4e/0x2d0 [ 157.028812][T10531] ? fput+0x1c4/0x200 [ 157.028833][T10531] ? ksys_write+0x176/0x1b0 [ 157.028861][T10531] __x64_sys_mount+0x67/0x80 [ 157.028888][T10531] x64_sys_call+0x2c84/0x2dc0 [ 157.028934][T10531] do_syscall_64+0xc9/0x1c0 [ 157.028966][T10531] ? clear_bhb_loop+0x55/0xb0 [ 157.028991][T10531] ? clear_bhb_loop+0x55/0xb0 [ 157.029015][T10531] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 157.029039][T10531] RIP: 0033:0x7f320ef2d169 [ 157.029065][T10531] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 157.029084][T10531] RSP: 002b:00007f320d597038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 157.029102][T10531] RAX: ffffffffffffffda RBX: 00007f320f145fa0 RCX: 00007f320ef2d169 [ 157.029115][T10531] RDX: 0000400000002000 RSI: 0000400000000380 RDI: 0000000000000000 [ 157.029127][T10531] RBP: 00007f320d597090 R08: 00004000000002c0 R09: 0000000000000000 [ 157.029139][T10531] R10: 0000000000000004 R11: 0000000000000246 R12: 0000000000000001 [ 157.029150][T10531] R13: 0000000000000000 R14: 00007f320f145fa0 R15: 00007ffc9cd52558 [ 157.029169][T10531] [ 157.030289][T10529] loop0: detected capacity change from 0 to 512 [ 157.075215][ T29] audit: type=1400 audit(1740840733.905:14452): avc: denied { associate } for pid=10527 comm="syz.7.2494" name="0" dev="devpts" ino=3 scontext=system_u:object_r:mouse_device_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 157.250389][ T29] audit: type=1326 audit(1740840733.999:14453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10537 comm="syz.2.2497" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f320ef2d169 code=0x7ffc0000 [ 157.274078][ T29] audit: type=1326 audit(1740840733.999:14454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10537 comm="syz.2.2497" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f320ef2d169 code=0x7ffc0000 [ 157.276272][T10529] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm +}[@: bg 0: block 248: padding at end of block bitmap is not set [ 157.297819][ T29] audit: type=1326 audit(1740840733.999:14455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10537 comm="syz.2.2497" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f320ef2d169 code=0x7ffc0000 [ 157.313438][T10529] Quota error (device loop0): write_blk: dquota write failed [ 157.335283][ T29] audit: type=1326 audit(1740840733.999:14456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10537 comm="syz.2.2497" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f320ef2d169 code=0x7ffc0000 [ 157.343265][T10529] EXT4-fs error (device loop0): ext4_acquire_dquot:6927: comm +}[@: Failed to acquire dquot type 1 [ 157.380280][T10529] EXT4-fs (loop0): 1 truncate cleaned up [ 157.386962][T10529] ext4 filesystem being mounted at /579/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 157.458986][T10545] syz1: rxe_newlink: already configured on team_slave_0 [ 157.537467][T10560] loop2: detected capacity change from 0 to 128 [ 157.648350][T10567] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2506'. [ 157.656700][T10560] hub 9-0:1.0: USB hub found [ 157.668457][T10560] hub 9-0:1.0: 8 ports detected [ 157.699581][T10576] loop7: detected capacity change from 0 to 2048 [ 157.771564][T10579] loop0: detected capacity change from 0 to 2048 [ 157.778379][T10579] journal_path: Lookup failure for './file2/file0' [ 157.784976][T10579] EXT4-fs: error: could not find journal device path [ 157.862031][T10582] syz_tun: entered promiscuous mode [ 157.883588][T10578] loop2: detected capacity change from 0 to 1024 [ 157.931874][T10578] EXT4-fs: Ignoring removed bh option [ 157.985750][T10585] blktrace: Concurrent blktraces are not allowed on loop17 [ 158.049014][T10578] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4115: comm syz.2.2510: Allocating blocks 497-513 which overlap fs metadata [ 158.149698][T10578] EXT4-fs (loop2): pa ffff8881006e48c0: logic 256, phys. 385, len 8 [ 158.157837][T10578] EXT4-fs error (device loop2): ext4_mb_release_inode_pa:5366: group 0, free 0, pa_free 1 [ 158.293645][T10581] syz_tun: left promiscuous mode [ 158.306770][T10578] tipc: Resetting bearer [ 158.309052][T10593] FAULT_INJECTION: forcing a failure. [ 158.309052][T10593] name failslab, interval 1, probability 0, space 0, times 0 [ 158.324744][T10593] CPU: 1 UID: 0 PID: 10593 Comm: syz.7.2512 Tainted: G W 6.14.0-rc4-syzkaller-00242-g7a5668899f54 #0 [ 158.324795][T10593] Tainted: [W]=WARN [ 158.324802][T10593] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 158.324816][T10593] Call Trace: [ 158.324823][T10593] [ 158.324831][T10593] dump_stack_lvl+0xf2/0x150 [ 158.324878][T10593] dump_stack+0x15/0x1a [ 158.324902][T10593] should_fail_ex+0x24a/0x260 [ 158.324935][T10593] should_failslab+0x8f/0xb0 [ 158.324967][T10593] __kmalloc_node_track_caller_noprof+0xa8/0x410 [ 158.324994][T10593] ? resume_store+0xf1/0x3a0 [ 158.325066][T10593] ? __pfx_resume_store+0x10/0x10 [ 158.325091][T10593] kstrndup+0x77/0x120 [ 158.325131][T10593] resume_store+0xf1/0x3a0 [ 158.325155][T10593] ? _copy_from_iter+0x169/0xd00 [ 158.325188][T10593] ? kstrtouint+0x77/0xc0 [ 158.325213][T10593] ? should_fail_ex+0xd7/0x260 [ 158.325245][T10593] kobj_attr_store+0x47/0x70 [ 158.325294][T10593] ? __pfx_kobj_attr_store+0x10/0x10 [ 158.325328][T10593] sysfs_kf_write+0xae/0xd0 [ 158.325349][T10593] ? __pfx_sysfs_kf_write+0x10/0x10 [ 158.325369][T10593] kernfs_fop_write_iter+0x1c8/0x2c0 [ 158.325498][T10593] vfs_write+0x77b/0x920 [ 158.325522][T10593] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 158.325559][T10593] ksys_write+0xe8/0x1b0 [ 158.325590][T10593] __x64_sys_write+0x42/0x50 [ 158.325616][T10593] x64_sys_call+0x287e/0x2dc0 [ 158.325641][T10593] do_syscall_64+0xc9/0x1c0 [ 158.325677][T10593] ? clear_bhb_loop+0x55/0xb0 [ 158.325753][T10593] ? clear_bhb_loop+0x55/0xb0 [ 158.325778][T10593] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 158.325803][T10593] RIP: 0033:0x7f655bb0d169 [ 158.325818][T10593] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 158.325868][T10593] RSP: 002b:00007f655a171038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 158.325886][T10593] RAX: ffffffffffffffda RBX: 00007f655bd25fa0 RCX: 00007f655bb0d169 [ 158.325899][T10593] RDX: 0000000000000012 RSI: 0000400000000000 RDI: 0000000000000006 [ 158.325911][T10593] RBP: 00007f655a171090 R08: 0000000000000000 R09: 0000000000000000 [ 158.325922][T10593] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 158.325934][T10593] R13: 0000000000000000 R14: 00007f655bd25fa0 R15: 00007ffd416febe8 [ 158.325967][T10593] [ 158.773424][T10610] SELinux: syz.2.2518 (10610) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 159.032999][T10613] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2514'. [ 159.046458][T10613] ipvlan2: entered promiscuous mode [ 159.617160][ T35] hid-generic 0000:0003:0000.0003: unknown main item tag 0x0 [ 159.624705][ T35] hid-generic 0000:0003:0000.0003: unknown main item tag 0x0 [ 159.641051][ T35] hid-generic 0000:0003:0000.0003: hidraw0: HID v0.00 Device [syz1] on syz1 [ 159.880234][T10628] loop2: detected capacity change from 0 to 256 [ 159.969690][T10637] loop0: detected capacity change from 0 to 2048 [ 160.006498][T10637] ext4 filesystem being mounted at /583/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 160.373612][T10649] loop8: detected capacity change from 0 to 2048 [ 160.425626][T10649] EXT4-fs (loop8): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 160.475679][T10656] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=35 sclass=netlink_route_socket pid=10656 comm=syz.7.2533 [ 160.502606][T10658] netlink: 28 bytes leftover after parsing attributes in process `syz.8.2534'. [ 160.616567][T10671] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2541'. [ 160.628775][T10671] loop7: detected capacity change from 0 to 512 [ 160.637577][T10672] geneve0: entered allmulticast mode [ 160.646555][T10671] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a84ec01c, mo2=0002] [ 160.684574][T10671] System zones: 0-2, 18-18, 34-34 [ 160.716878][T10671] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.2541: bg 0: block 248: padding at end of block bitmap is not set [ 160.766047][T10671] EXT4-fs error (device loop7): ext4_acquire_dquot:6927: comm syz.7.2541: Failed to acquire dquot type 1 [ 160.778158][T10671] EXT4-fs (loop7): 1 truncate cleaned up [ 160.784301][T10671] ext4 filesystem being mounted at /82/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 160.846905][ T5619] syz_tun (unregistering): left promiscuous mode [ 160.891015][T10687] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2546'. [ 160.948372][T10695] loop0: detected capacity change from 0 to 2048 [ 160.967347][T10700] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2552'. [ 160.977284][T10700] IPVS: Error joining to the multicast group [ 161.058711][T10708] loop7: detected capacity change from 0 to 128 [ 161.065663][T10712] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(7) [ 161.072187][T10712] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 161.079755][T10712] vhci_hcd vhci_hcd.0: Device attached [ 161.108761][T10708] hub 9-0:1.0: USB hub found [ 161.117985][T10712] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2556'. [ 161.119717][T10708] hub 9-0:1.0: 8 ports detected [ 161.186891][T10729] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2559'. [ 161.216266][T10731] netlink: 'syz.4.2560': attribute type 10 has an invalid length. [ 161.283914][T10709] chnl_net:caif_netlink_parms(): no params data found [ 161.336895][T10709] bridge0: port 1(bridge_slave_0) entered blocking state [ 161.344097][T10709] bridge0: port 1(bridge_slave_0) entered disabled state [ 161.351314][T10709] bridge_slave_0: entered allmulticast mode [ 161.358115][T10709] bridge_slave_0: entered promiscuous mode [ 161.360847][ T24] usb 1-1: new low-speed USB device number 2 using vhci_hcd [ 161.364922][T10709] bridge0: port 2(bridge_slave_1) entered blocking state [ 161.378424][T10709] bridge0: port 2(bridge_slave_1) entered disabled state [ 161.385766][T10709] bridge_slave_1: entered allmulticast mode [ 161.392139][T10709] bridge_slave_1: entered promiscuous mode [ 161.412350][T10709] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 161.422864][T10709] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 161.450607][T10709] team0: Port device team_slave_0 added [ 161.460260][T10709] team0: Port device team_slave_1 added [ 161.466138][ T165] : left allmulticast mode [ 161.470794][ T165] : left promiscuous mode [ 161.475358][ T165] bridge0: port 1() entered disabled state [ 161.497448][ T165] tipc: Disabling bearer [ 161.617581][ T165]  (unregistering): (slave bond_slave_0): Releasing backup interface [ 161.626608][ T165]  (unregistering): (slave bond_slave_1): Releasing backup interface [ 161.639816][ T165]  (unregistering): (slave team0): Releasing backup interface [ 161.647968][T10745] FAULT_INJECTION: forcing a failure. [ 161.647968][T10745] name failslab, interval 1, probability 0, space 0, times 0 [ 161.660727][T10745] CPU: 0 UID: 0 PID: 10745 Comm: syz.8.2563 Tainted: G W 6.14.0-rc4-syzkaller-00242-g7a5668899f54 #0 [ 161.660757][T10745] Tainted: [W]=WARN [ 161.660763][T10745] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 161.660775][T10745] Call Trace: [ 161.660780][T10745] [ 161.660787][T10745] dump_stack_lvl+0xf2/0x150 [ 161.660820][T10745] dump_stack+0x15/0x1a [ 161.660911][T10745] should_fail_ex+0x24a/0x260 [ 161.660940][T10745] ? snd_info_text_entry_open+0x92/0x1e0 [ 161.660968][T10745] should_failslab+0x8f/0xb0 [ 161.661002][T10745] __kmalloc_cache_noprof+0x4e/0x320 [ 161.661081][T10745] snd_info_text_entry_open+0x92/0x1e0 [ 161.661109][T10745] proc_reg_open+0x19d/0x350 [ 161.661140][T10745] ? __pfx_proc_reg_open+0x10/0x10 [ 161.661211][T10745] do_dentry_open+0x621/0xa20 [ 161.661252][T10745] vfs_open+0x38/0x1e0 [ 161.661323][T10745] path_openat+0x1ae0/0x1fc0 [ 161.661425][T10745] ? _parse_integer_limit+0x167/0x180 [ 161.661464][T10745] ? kstrtouint_from_user+0xb0/0xe0 [ 161.661489][T10745] ? __pmu_ctx_sched_in+0xc8/0xf0 [ 161.661518][T10745] do_filp_open+0x107/0x230 [ 161.661596][T10745] do_sys_openat2+0xab/0x120 [ 161.661616][T10745] __x64_sys_openat+0xf3/0x120 [ 161.661653][T10745] x64_sys_call+0x2b30/0x2dc0 [ 161.661823][T10745] do_syscall_64+0xc9/0x1c0 [ 161.661902][T10745] ? clear_bhb_loop+0x55/0xb0 [ 161.661927][T10745] ? clear_bhb_loop+0x55/0xb0 [ 161.661952][T10745] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 161.661982][T10745] RIP: 0033:0x7f85a884d169 [ 161.661999][T10745] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 161.662051][T10745] RSP: 002b:00007f85a6e6f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 161.662068][T10745] RAX: ffffffffffffffda RBX: 00007f85a8a66160 RCX: 00007f85a884d169 [ 161.662078][T10745] RDX: 0000000000000000 RSI: 0000400000000280 RDI: ffffffffffffff9c [ 161.662091][T10745] RBP: 00007f85a6e6f090 R08: 0000000000000000 R09: 0000000000000000 [ 161.662104][T10745] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 161.662117][T10745] R13: 0000000000000000 R14: 00007f85a8a66160 R15: 00007ffd709e1f28 [ 161.662134][T10745] [ 161.663870][ T165]  (unregistering): Released all slaves [ 161.720295][T10713] vhci_hcd: connection reset by peer [ 162.037924][ T3376] vhci_hcd: stop threads [ 162.042207][ T3376] vhci_hcd: release socket [ 162.046694][ T3376] vhci_hcd: disconnect device [ 162.082444][T10754] loop7: detected capacity change from 0 to 2048 [ 162.096489][T10752] loop0: detected capacity change from 0 to 512 [ 162.103025][T10752] EXT4-fs: Ignoring removed orlov option [ 162.109983][ T165] tipc: Left network mode [ 162.110289][T10709] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 162.121456][T10709] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 162.134671][T10752] EXT4-fs error (device loop0): ext4_ext_check_inode:524: inode #15: comm syz.0.2564: pblk 0 bad header/extent: invalid magic - magic 7973, entries 1402, max 27648(0), depth 25964(25964) [ 162.147399][T10709] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 162.165955][T10752] EXT4-fs error (device loop0): ext4_orphan_get:1394: comm syz.0.2564: couldn't read orphan inode 15 (err -117) [ 162.191399][T10709] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 162.198435][T10709] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 162.224480][T10709] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 162.258065][T10754] EXT4-fs (loop7): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 162.292811][ T29] kauditd_printk_skb: 636 callbacks suppressed [ 162.292826][ T29] audit: type=1400 audit(1740840738.788:15090): avc: denied { ioctl } for pid=10758 comm="syz.4.2568" path="socket:[31292]" dev="sockfs" ino=31292 ioctlcmd=0x89f0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 162.348187][ T29] audit: type=1400 audit(1740840738.844:15091): avc: denied { setopt } for pid=10758 comm="syz.4.2568" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 162.367970][ T165] batadv_slave_1: left promiscuous mode [ 162.377846][ T165] hsr_slave_0: left promiscuous mode [ 162.383754][ T165] hsr_slave_1: left promiscuous mode [ 162.409747][ T29] audit: type=1326 audit(1740840738.900:15092): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10758 comm="syz.4.2568" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3e88ed169 code=0x7ffc0000 [ 162.454491][T10761] loop7: detected capacity change from 0 to 256 [ 162.458968][ T29] audit: type=1326 audit(1740840738.900:15093): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10758 comm="syz.4.2568" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3e88ed169 code=0x7ffc0000 [ 162.485262][ T29] audit: type=1326 audit(1740840738.928:15094): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10758 comm="syz.4.2568" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc3e88ed169 code=0x7ffc0000 [ 162.509307][ T29] audit: type=1326 audit(1740840738.928:15095): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10758 comm="syz.4.2568" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3e88ed169 code=0x7ffc0000 [ 162.532983][ T29] audit: type=1326 audit(1740840738.928:15096): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10758 comm="syz.4.2568" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3e88ed169 code=0x7ffc0000 [ 162.556894][ T29] audit: type=1326 audit(1740840738.928:15097): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10758 comm="syz.4.2568" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fc3e88ed169 code=0x7ffc0000 [ 162.580671][ T29] audit: type=1326 audit(1740840738.928:15098): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10758 comm="syz.4.2568" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3e88ed169 code=0x7ffc0000 [ 162.604454][ T29] audit: type=1326 audit(1740840738.928:15099): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10758 comm="syz.4.2568" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3e88ed169 code=0x7ffc0000 [ 162.670897][ T165] team0 (unregistering): Port device team_slave_1 removed [ 162.685871][T10765] loop8: detected capacity change from 0 to 128 [ 162.692464][ T165] team0 (unregistering): Port device team_slave_0 removed [ 162.721354][ T3376] smc: removing ib device syz1 [ 162.747061][T10768] loop8: detected capacity change from 0 to 2048 [ 162.757414][T10709] hsr_slave_0: entered promiscuous mode [ 162.763566][T10709] hsr_slave_1: entered promiscuous mode [ 162.769686][T10709] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 162.778516][T10709] Cannot create hsr debugfs directory [ 162.862577][T10768] loop8: p1 < > p4 [ 162.902068][T10768] loop8: p4 size 8388608 extends beyond EOD, truncated [ 162.956020][T10782] loop7: detected capacity change from 0 to 128 [ 162.977484][T10780] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2575'. [ 162.990935][T10782] ext4 filesystem being mounted at /92/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 163.045624][T10784] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2575'. [ 163.058276][T10709] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 163.067666][T10709] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 163.075644][T10780] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 163.092523][T10709] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 163.102383][T10709] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 163.122923][T10788] loop8: detected capacity change from 0 to 2048 [ 163.139667][ T165] IPVS: stop unused estimator thread 0... [ 163.145916][T10788] EXT4-fs (loop8): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 163.174176][T10789] loop7: detected capacity change from 0 to 1024 [ 163.177629][T10709] 8021q: adding VLAN 0 to HW filter on device bond0 [ 163.195850][T10709] 8021q: adding VLAN 0 to HW filter on device team0 [ 163.213653][T10793] loop8: detected capacity change from 0 to 1764 [ 163.217662][ T8009] bridge0: port 1(bridge_slave_0) entered blocking state [ 163.227135][ T8009] bridge0: port 1(bridge_slave_0) entered forwarding state [ 163.230102][T10789] EXT4-fs mount: 71 callbacks suppressed [ 163.230119][T10789] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 163.268640][ T3402] bridge0: port 2(bridge_slave_1) entered blocking state [ 163.275725][ T3402] bridge0: port 2(bridge_slave_1) entered forwarding state [ 163.283984][T10801] netlink: 'syz.0.2581': attribute type 5 has an invalid length. [ 163.300644][T10803] loop8: detected capacity change from 0 to 512 [ 163.303622][T10709] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 163.307967][T10803] ext3: Unknown parameter 'fowner>00000000000000000000' [ 163.317463][T10709] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 163.359495][T10806] loop0: detected capacity change from 0 to 1024 [ 163.366692][T10806] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 163.376565][T10806] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 163.388711][T10806] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 163.395930][T10709] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 163.408549][T10806] EXT4-fs error (device loop0): ext4_get_journal_inode:5798: inode #5: comm syz.0.2583: unexpected bad inode w/o EXT4_IGET_BAD [ 163.423297][T10806] EXT4-fs (loop0): no journal found [ 163.428720][T10806] EXT4-fs (loop0): can't get journal size [ 163.455052][T10806] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 163.532227][T10824] EXT4-fs error (device loop0): __ext4_remount:6738: comm syz.0.2583: Abort forced by user [ 163.542746][T10824] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 163.572702][T10709] veth0_vlan: entered promiscuous mode [ 163.580629][T10709] veth1_vlan: entered promiscuous mode [ 163.593887][T10822] loop8: detected capacity change from 0 to 512 [ 163.595285][T10709] veth0_macvtap: entered promiscuous mode [ 163.600640][T10822] EXT4-fs: Ignoring removed orlov option [ 163.607579][T10709] veth1_macvtap: entered promiscuous mode [ 163.621877][T10822] EXT4-fs error (device loop8): ext4_ext_check_inode:524: inode #15: comm syz.8.2584: pblk 0 bad header/extent: invalid magic - magic 7973, entries 1402, max 27648(0), depth 25964(25964) [ 163.626664][T10709] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 163.650884][T10709] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 163.660790][T10709] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 163.671598][T10709] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 163.683607][T10822] EXT4-fs error (device loop8): ext4_orphan_get:1394: comm syz.8.2584: couldn't read orphan inode 15 (err -117) [ 163.685043][T10709] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 163.703933][T10822] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 163.719363][T10709] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 163.729874][T10709] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 163.739720][T10709] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 163.750188][T10709] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 163.761712][T10709] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 163.763043][T10830] net_ratelimit: 3 callbacks suppressed [ 163.763110][T10830] sock: sock_set_timeout: `syz.4.2585' (pid 10830) tries to set negative timeout [ 163.773340][T10709] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 163.792579][T10709] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 163.801272][T10709] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 163.810041][T10709] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 163.877170][T10837] loop9: detected capacity change from 0 to 512 [ 163.883718][T10837] EXT4-fs: Ignoring removed oldalloc option [ 163.890498][T10837] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 163.910151][T10840] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2588'. [ 163.920148][T10837] EXT4-fs (loop9): 1 truncate cleaned up [ 163.926903][T10837] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 163.969967][ T8800] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 163.980790][T10837] loop9: detected capacity change from 512 to 64 [ 164.009321][T10837] EXT4-fs error (device loop9): mb_free_blocks:1948: group 0, inode 15: block 101:freeing already freed block (bit 100); block bitmap corrupt. [ 164.024211][T10837] EXT4-fs (loop9): pa ffff8881005d3cb0: logic 0, phys. 65, len 64 [ 164.032187][T10844] loop7: detected capacity change from 0 to 2048 [ 164.038817][T10837] EXT4-fs error (device loop9): ext4_mb_release_inode_pa:5366: group 0, free 64, pa_free 63 [ 164.050902][T10837] syz.9.2587: attempt to access beyond end of device [ 164.050902][T10837] loop9: rw=2049, sector=510, nr_sectors = 2 limit=64 [ 164.052755][T10846] netlink: 'syz.4.2591': attribute type 2 has an invalid length. [ 164.064311][T10837] EXT4-fs warning (device loop9): ext4_end_bio:346: I/O error 10 writing to inode 15 starting block 255) [ 164.064343][T10837] Buffer I/O error on device loop9, logical block 255 [ 164.072161][T10846] netlink: 'syz.4.2591': attribute type 1 has an invalid length. [ 164.098063][T10846] netlink: 152 bytes leftover after parsing attributes in process `syz.4.2591'. [ 164.107389][T10709] EXT4-fs warning (device loop9): ext4_evict_inode:276: xattr delete (err -12) [ 164.118587][T10844] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 164.137597][T10709] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 164.147392][T10844] EXT4-fs (loop7): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 164.169142][ T8800] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 164.223199][T10859] IPv6: Can't replace route, no match found [ 164.275506][ T3303] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 164.384704][T10875] loop0: detected capacity change from 0 to 128 [ 164.391184][T10871] loop7: detected capacity change from 0 to 1024 [ 164.391841][ T9985] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 164.415721][T10875] hub 9-0:1.0: USB hub found [ 164.426191][T10875] hub 9-0:1.0: 8 ports detected [ 164.447749][T10882] loop8: detected capacity change from 0 to 512 [ 164.455386][T10882] EXT4-fs: Ignoring removed oldalloc option [ 164.462374][T10882] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 164.472889][T10871] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 164.486549][T10882] EXT4-fs (loop8): 1 truncate cleaned up [ 164.492605][T10882] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 164.514277][T10884] loop0: detected capacity change from 0 to 512 [ 164.522092][T10884] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a846e01c, mo2=0002] [ 164.531067][T10884] System zones: 1-12 [ 164.535404][T10884] EXT4-fs error (device loop0): dx_probe:823: inode #2: comm syz.0.2604: Directory hole found for htree index block 0 [ 164.549370][T10882] loop8: detected capacity change from 512 to 64 [ 164.556359][T10884] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -117 [ 164.564820][T10884] EXT4-fs error (device loop0): dx_probe:823: inode #2: comm syz.0.2604: Directory hole found for htree index block 0 [ 164.569261][T10882] EXT4-fs error (device loop8): mb_free_blocks:1948: group 0, inode 15: block 101:freeing already freed block (bit 100); block bitmap corrupt. [ 164.577448][T10884] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -117 [ 164.591774][T10882] EXT4-fs (loop8): pa ffff8881006e4850: logic 0, phys. 65, len 64 [ 164.591799][T10882] EXT4-fs error (device loop8): ext4_mb_release_inode_pa:5366: group 0, free 64, pa_free 63 [ 164.600694][T10884] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 164.612356][T10882] syz.8.2602: attempt to access beyond end of device [ 164.612356][T10882] loop8: rw=2049, sector=510, nr_sectors = 2 limit=64 [ 164.644086][T10882] EXT4-fs warning (device loop8): ext4_end_bio:346: I/O error 10 writing to inode 15 starting block 255) [ 164.655398][T10882] Buffer I/O error on device loop8, logical block 255 [ 164.663733][ T3303] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 164.686739][ T9985] EXT4-fs warning (device loop8): ext4_evict_inode:276: xattr delete (err -12) [ 164.687294][T10893] loop9: detected capacity change from 0 to 512 [ 164.702407][T10893] ext3: Unknown parameter 'fowner>00000000000000000000' [ 164.704383][ T9985] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 164.730476][T10899] IPv6: Can't replace route, no match found [ 164.772737][T10906] tipc: Enabling of bearer rejected, failed to enable media [ 164.783751][T10906] netlink: 'syz.8.2612': attribute type 1 has an invalid length. [ 164.814776][T10911] loop8: detected capacity change from 0 to 128 [ 164.829702][T10911] hub 9-0:1.0: USB hub found [ 164.834503][T10911] hub 9-0:1.0: 8 ports detected [ 164.955484][T10912] loop9: detected capacity change from 0 to 512 [ 164.961979][T10912] EXT4-fs: Ignoring removed orlov option [ 164.969325][T10912] EXT4-fs error (device loop9): ext4_ext_check_inode:524: inode #15: comm syz.9.2613: pblk 0 bad header/extent: invalid magic - magic 7973, entries 1402, max 27648(0), depth 25964(25964) [ 164.988284][T10912] EXT4-fs error (device loop9): ext4_orphan_get:1394: comm syz.9.2613: couldn't read orphan inode 15 (err -117) [ 165.001337][ T3766] syz_tun (unregistering): left promiscuous mode [ 165.001645][T10912] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 165.047794][T10925] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 165.056448][T10925] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 165.175369][T10916] chnl_net:caif_netlink_parms(): no params data found [ 165.211618][ T8800] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 165.249064][T10916] bridge0: port 1(bridge_slave_0) entered blocking state [ 165.256439][T10916] bridge0: port 1(bridge_slave_0) entered disabled state [ 165.279807][T10916] bridge_slave_0: entered allmulticast mode [ 165.286429][T10916] bridge_slave_0: entered promiscuous mode [ 165.293617][T10916] bridge0: port 2(bridge_slave_1) entered blocking state [ 165.300817][T10916] bridge0: port 2(bridge_slave_1) entered disabled state [ 165.308348][T10916] bridge_slave_1: entered allmulticast mode [ 165.314821][T10916] bridge_slave_1: entered promiscuous mode [ 165.333499][T10916] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 165.346183][T10916] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 165.382358][T10916] team0: Port device team_slave_0 added [ 165.389234][T10916] team0: Port device team_slave_1 added [ 165.426418][T10916] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 165.433474][T10916] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 165.459466][T10916] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 165.471800][T10916] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 165.478874][T10916] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 165.504878][T10916] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 165.542612][T10916] hsr_slave_0: entered promiscuous mode [ 165.548715][T10916] hsr_slave_1: entered promiscuous mode [ 165.558792][T10916] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 165.567615][T10916] Cannot create hsr debugfs directory [ 165.640832][T10957] loop7: detected capacity change from 0 to 1024 [ 165.653529][T10957] EXT4-fs: Ignoring removed bh option [ 165.662094][T10959] loop8: detected capacity change from 0 to 1024 [ 165.672933][T10959] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 165.687166][T10916] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.730928][T10709] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 165.741359][T10957] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 165.790802][T10916] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.802059][T10957] EXT4-fs error (device loop7): ext4_mb_mark_diskspace_used:4115: comm syz.7.2628: Allocating blocks 497-513 which overlap fs metadata [ 165.821076][T10957] EXT4-fs (loop7): pa ffff8881005d3d20: logic 256, phys. 385, len 8 [ 165.829157][T10957] EXT4-fs error (device loop7): ext4_mb_release_inode_pa:5366: group 0, free 0, pa_free 1 [ 165.883794][T10916] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.896724][T10976] loop9: detected capacity change from 0 to 1024 [ 165.928004][T10976] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 165.942386][T10916] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.004824][ T8800] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 166.034685][T10916] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 166.062397][T10916] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 166.071709][T10916] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 166.082882][T10916] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 166.130919][T10916] 8021q: adding VLAN 0 to HW filter on device bond0 [ 166.149340][T10993] loop7: detected capacity change from 0 to 512 [ 166.157697][T10916] 8021q: adding VLAN 0 to HW filter on device team0 [ 166.169428][ T3402] bridge0: port 1(bridge_slave_0) entered blocking state [ 166.176534][ T3402] bridge0: port 1(bridge_slave_0) entered forwarding state [ 166.187211][T10993] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 166.200048][T10993] ext4 filesystem being mounted at /106/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 166.202801][ T3402] bridge0: port 2(bridge_slave_1) entered blocking state [ 166.217636][ T3402] bridge0: port 2(bridge_slave_1) entered forwarding state [ 166.238545][T10916] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 166.249035][T10916] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 166.267408][T10993] EXT4-fs (loop7): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [ 166.279966][T10993] __nla_validate_parse: 2 callbacks suppressed [ 166.279980][T10993] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2640'. [ 166.330651][T10916] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 166.348696][ T8800] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 166.421662][T11004] loop7: detected capacity change from 0 to 512 [ 166.435948][T11004] EXT4-fs: Ignoring removed bh option [ 166.441705][T11004] EXT4-fs: test_dummy_encryption option not supported [ 166.445846][T10916] veth0_vlan: entered promiscuous mode [ 166.457083][T10916] veth1_vlan: entered promiscuous mode [ 166.478270][T10916] veth0_macvtap: entered promiscuous mode [ 166.486110][T10916] veth1_macvtap: entered promiscuous mode [ 166.499959][T10916] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 166.510511][T10916] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 166.520374][T10916] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 166.530861][T10916] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 166.540696][T10916] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 166.551206][T10916] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 166.562134][T10916] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 166.573484][T10916] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 166.584106][T10916] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 166.594055][T10916] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 166.604552][T10916] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 166.614443][T10916] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 166.624894][T10916] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 166.659522][T11011] netlink: 'syz.7.2642': attribute type 10 has an invalid length. [ 166.668008][T10916] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 166.677093][T10916] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 166.685936][T10916] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 166.694655][T10916] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 166.703416][T10916] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 166.713931][T10709] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 166.732906][ T9985] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 166.738202][T11015] loop9: detected capacity change from 0 to 128 [ 166.752663][T11011] 8021q: adding VLAN 0 to HW filter on device team0 [ 166.759355][ T24] usb 1-1: enqueue for inactive port 0 [ 166.761917][T11011] bond0: (slave team0): Enslaving as an active interface with an up link [ 166.765192][ T24] usb 1-1: enqueue for inactive port 0 [ 166.791132][T11015] hub 9-0:1.0: USB hub found [ 166.801793][T11018] netlink: 'syz.8.2644': attribute type 3 has an invalid length. [ 166.809961][T11018] netlink: 130984 bytes leftover after parsing attributes in process `syz.8.2644'. [ 166.817559][T11015] hub 9-0:1.0: 8 ports detected [ 166.824805][T11018] loop8: detected capacity change from 0 to 512 [ 166.831507][T11018] EXT4-fs: mb_optimize_scan should be set to 0 or 1. [ 166.874918][T11025] 9pnet_virtio: no channels available for device 127.0.0.1 [ 166.884618][T11025] netlink: 'syz.0.2615': attribute type 13 has an invalid length. [ 166.891864][ T24] vhci_hcd: vhci_device speed not set [ 166.920859][T11028] loop7: detected capacity change from 0 to 2048 [ 166.936963][T11025] bridge0: port 2(bridge_slave_1) entered disabled state [ 166.944195][T11025] bridge0: port 1(bridge_slave_0) entered disabled state [ 166.954340][T11028] Alternate GPT is invalid, using primary GPT. [ 166.960569][T11028] loop7: p1 p2 p3 [ 166.991194][T11025] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 167.001437][T11025] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 167.059680][T11025] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.068620][T11025] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.077687][T11025] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.086840][T11025] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.162519][T11048] netlink: 24 bytes leftover after parsing attributes in process `syz.9.2654'. [ 167.213676][T11052] loop0: detected capacity change from 0 to 1024 [ 167.232946][T11054] netlink: 324 bytes leftover after parsing attributes in process `syz.9.2654'. [ 167.261535][T11057] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2658'. [ 167.275731][T11052] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 167.312772][T11057] bridge0: port 3(batadv1) entered blocking state [ 167.319357][T11057] bridge0: port 3(batadv1) entered disabled state [ 167.325980][T11057] batadv1: entered allmulticast mode [ 167.332031][T11057] batadv1: entered promiscuous mode [ 167.338364][T11061] IPv6: Can't replace route, no match found [ 167.376229][T11068] loop8: detected capacity change from 0 to 1024 [ 167.383520][T11068] EXT4-fs (loop8): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 167.393304][T11068] EXT4-fs (loop8): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 167.414856][T11066] loop9: detected capacity change from 0 to 128 [ 167.429231][T11066] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 167.462024][T11070] 8021q: adding VLAN 0 to HW filter on device bond1 [ 167.469136][T11066] ext4 filesystem being mounted at /13/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 167.471802][T11068] EXT4-fs (loop8): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 167.503749][T11074] loop7: detected capacity change from 0 to 1024 [ 167.517991][T11068] EXT4-fs error (device loop8): ext4_get_journal_inode:5798: inode #5: comm syz.8.2661: unexpected bad inode w/o EXT4_IGET_BAD [ 167.522334][T11074] EXT4-fs (loop7): ext4_check_descriptors: Checksum for group 0 failed (51269!=20869) [ 167.537196][T11068] EXT4-fs (loop8): no journal found [ 167.546120][T11068] EXT4-fs (loop8): can't get journal size [ 167.562993][T11068] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 167.569755][T11074] EXT4-fs (loop7): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 167.605732][T11074] EXT4-fs error (device loop7): ext4_get_journal_inode:5798: inode #32: comm syz.7.2662: iget: special inode unallocated [ 167.620087][T11074] EXT4-fs (loop7): no journal found [ 167.625326][T11074] EXT4-fs (loop7): can't get journal size [ 167.632747][ T9985] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 167.633574][T10709] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 167.656415][T11074] EXT4-fs error (device loop7): ext4_protect_reserved_inode:160: inode #32: comm syz.7.2662: iget: special inode unallocated [ 167.672024][T11074] EXT4-fs (loop7): failed to initialize system zone (-117) [ 167.686001][T11074] EXT4-fs (loop7): mount failed [ 167.696945][ T29] kauditd_printk_skb: 854 callbacks suppressed [ 167.696960][ T29] audit: type=1326 audit(1740840743.839:15954): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11080 comm="syz.9.2664" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20c13ad169 code=0x7ffc0000 [ 167.698281][T11081] loop9: detected capacity change from 0 to 128 [ 167.703188][ T29] audit: type=1326 audit(1740840743.839:15955): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11080 comm="syz.9.2664" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20c13ad169 code=0x7ffc0000 [ 167.757388][ T29] audit: type=1326 audit(1740840743.839:15956): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11080 comm="syz.9.2664" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f20c13ad169 code=0x7ffc0000 [ 167.781070][ T29] audit: type=1326 audit(1740840743.839:15957): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11080 comm="syz.9.2664" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f20c13ad1a3 code=0x7ffc0000 [ 167.804711][ T29] audit: type=1326 audit(1740840743.839:15958): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11080 comm="syz.9.2664" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f20c13abc1f code=0x7ffc0000 [ 167.828125][ T29] audit: type=1326 audit(1740840743.839:15959): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11080 comm="syz.9.2664" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f20c13ad1f7 code=0x7ffc0000 [ 167.851638][ T29] audit: type=1326 audit(1740840743.839:15960): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11080 comm="syz.9.2664" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f20c13abad0 code=0x7ffc0000 [ 167.861064][ T8004] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 167.875202][ T29] audit: type=1326 audit(1740840743.839:15961): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11080 comm="syz.9.2664" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f20c13acd6b code=0x7ffc0000 [ 167.904056][ T29] audit: type=1326 audit(1740840743.905:15962): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11080 comm="syz.9.2664" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f20c13abdca code=0x7ffc0000 [ 167.908047][ T8004] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 167.931410][ T29] audit: type=1326 audit(1740840743.905:15963): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11080 comm="syz.9.2664" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f20c13abdca code=0x7ffc0000 [ 167.990128][T11081] hub 9-0:1.0: USB hub found [ 167.995073][T11081] hub 9-0:1.0: 8 ports detected [ 168.028840][T11086] loop8: detected capacity change from 0 to 512 [ 168.056653][T11086] EXT4-fs: Ignoring removed oldalloc option [ 168.067663][T10916] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 168.069956][T11086] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 168.174562][T11086] EXT4-fs (loop8): 1 truncate cleaned up [ 168.195658][T11086] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 168.234482][T11094] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2670'. [ 168.288832][T11086] loop8: detected capacity change from 512 to 64 [ 168.312132][T11086] EXT4-fs error (device loop8): mb_free_blocks:1948: group 0, inode 15: block 101:freeing already freed block (bit 100); block bitmap corrupt. [ 168.326911][T11086] EXT4-fs (loop8): pa ffff8881006e4850: logic 0, phys. 65, len 64 [ 168.334828][T11086] EXT4-fs error (device loop8): ext4_mb_release_inode_pa:5366: group 0, free 64, pa_free 63 [ 168.349495][T11086] syz.8.2667: attempt to access beyond end of device [ 168.349495][T11086] loop8: rw=2049, sector=510, nr_sectors = 2 limit=64 [ 168.362908][T11104] loop0: detected capacity change from 0 to 1024 [ 168.365466][T11104] EXT4-fs: Ignoring removed bh option [ 168.369406][T11086] EXT4-fs warning (device loop8): ext4_end_bio:346: I/O error 10 writing to inode 15 starting block 255) [ 168.386151][T11086] Buffer I/O error on device loop8, logical block 255 [ 168.397489][T11108] IPv6: Can't replace route, no match found [ 168.408856][T11104] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 168.425873][ T9985] EXT4-fs warning (device loop8): ext4_evict_inode:276: xattr delete (err -12) [ 168.451590][T11112] loop9: detected capacity change from 0 to 1024 [ 168.468325][ T9985] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 168.493274][T11112] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 168.508602][T11118] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2677'. [ 168.522960][T11112] EXT4-fs error (device loop9): ext4_mb_mark_diskspace_used:4115: comm syz.9.2678: Allocating blocks 385-513 which overlap fs metadata [ 168.526581][T11104] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4115: comm syz.0.2674: Allocating blocks 497-513 which overlap fs metadata [ 168.545963][T11118] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2677'. [ 168.551742][T11104] EXT4-fs (loop0): pa ffff8881005d3d90: logic 256, phys. 385, len 8 [ 168.567030][T11112] EXT4-fs (loop9): pa ffff8881005d3e00: logic 16, phys. 129, len 24 [ 168.567607][T11104] EXT4-fs error (device loop0): ext4_mb_release_inode_pa:5366: group 0, [ 168.575490][T11112] EXT4-fs error (device loop9): ext4_mb_release_inode_pa:5366: group 0, [ 168.583935][T11104] free 0, pa_free 1 [ 168.596251][T11112] free 0, pa_free 8 [ 168.608427][T11112] EXT4-fs (loop9): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 52 with error 28 [ 168.620856][T11112] EXT4-fs (loop9): This should not happen!! Data will be lost [ 168.620856][T11112] [ 168.630614][T11112] EXT4-fs (loop9): Total free blocks count 0 [ 168.636672][T11112] EXT4-fs (loop9): Free/Dirty block details [ 168.642670][T11112] EXT4-fs (loop9): free_blocks=128 [ 168.647794][T11112] EXT4-fs (loop9): dirty_blocks=0 [ 168.652979][T11112] EXT4-fs (loop9): Block reservation details [ 168.659006][T11112] EXT4-fs (loop9): i_reserved_data_blocks=0 [ 168.667704][T11122] netlink: 40 bytes leftover after parsing attributes in process `syz.9.2678'. [ 168.713493][T11126] loop8: detected capacity change from 0 to 2048 [ 168.740221][T11126] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 168.755134][T11126] EXT4-fs (loop8): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 168.782206][ T9985] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 168.782743][T10916] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 168.823632][T11137] loop0: detected capacity change from 0 to 512 [ 168.830444][T11137] EXT4-fs: Ignoring removed oldalloc option [ 168.835794][T11140] loop8: detected capacity change from 0 to 128 [ 168.838268][T11137] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 168.853755][T11137] EXT4-fs (loop0): 1 truncate cleaned up [ 168.861746][T11137] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 168.929804][T11137] loop0: detected capacity change from 512 to 64 [ 168.937731][T11137] EXT4-fs error (device loop0): mb_free_blocks:1948: group 0, inode 15: block 101:freeing already freed block (bit 100); block bitmap corrupt. [ 168.952413][T11137] EXT4-fs (loop0): pa ffff8881005d3e00: logic 0, phys. 65, len 64 [ 168.960399][T11137] EXT4-fs error (device loop0): ext4_mb_release_inode_pa:5366: group 0, free 64, pa_free 63 [ 168.983162][T10916] EXT4-fs warning (device loop0): ext4_evict_inode:276: xattr delete (err -12) [ 169.013550][T11149] loop8: detected capacity change from 0 to 2048 [ 169.025025][T10916] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 169.036503][T11149] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 169.056473][T11149] EXT4-fs (loop8): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 169.071217][T11147] loop7: detected capacity change from 0 to 128 [ 169.083998][T11154] loop0: detected capacity change from 0 to 512 [ 169.104487][ T9985] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 169.116679][T11154] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 169.134925][T11158] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2691'. [ 169.154050][T11154] ext4 filesystem being mounted at /6/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 169.171304][T11154] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [ 169.189835][T11160] loop8: detected capacity change from 0 to 128 [ 169.203402][T11160] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 169.216387][T11160] ext4 filesystem being mounted at /64/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 169.261939][T10916] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 169.271396][ T9985] EXT4-fs error (device loop8): ext4_readdir:221: inode #11: comm syz-executor: path (unknown): directory fails checksum at offset 1024 [ 169.287229][ T9985] EXT4-fs error (device loop8): ext4_readdir:221: inode #11: comm syz-executor: path (unknown): directory fails checksum at offset 8192 [ 169.308525][ T9985] EXT4-fs error (device loop8): ext4_empty_dir:3124: inode #11: block 1: comm syz-executor: Directory block failed checksum [ 169.328897][T11166] loop0: detected capacity change from 0 to 1024 [ 169.340038][ T9985] EXT4-fs error (device loop8): ext4_readdir:221: inode #11: comm syz-executor: path (unknown): directory fails checksum at offset 1024 [ 169.354710][ T9985] EXT4-fs error (device loop8): ext4_readdir:221: inode #11: comm syz-executor: path (unknown): directory fails checksum at offset 8192 [ 169.371901][T11166] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 169.387057][T11166] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4115: comm syz.0.2694: Allocating blocks 385-513 which overlap fs metadata [ 169.400284][ T9985] EXT4-fs error (device loop8): ext4_empty_dir:3124: inode #11: block 1: comm syz-executor: Directory block failed checksum [ 169.418098][T11166] EXT4-fs (loop0): pa ffff8881005d3e00: logic 16, phys. 129, len 24 [ 169.426310][T11166] EXT4-fs error (device loop0): ext4_mb_release_inode_pa:5366: group 0, free 0, pa_free 8 [ 169.439075][T11166] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 52 with error 28 [ 169.451473][T11166] EXT4-fs (loop0): This should not happen!! Data will be lost [ 169.451473][T11166] [ 169.461252][T11166] EXT4-fs (loop0): Total free blocks count 0 [ 169.467331][T11166] EXT4-fs (loop0): Free/Dirty block details [ 169.473304][T11166] EXT4-fs (loop0): free_blocks=128 [ 169.478479][T11166] EXT4-fs (loop0): dirty_blocks=0 [ 169.483545][T11166] EXT4-fs (loop0): Block reservation details [ 169.489785][T11166] EXT4-fs (loop0): i_reserved_data_blocks=0 [ 169.508878][T11176] loop7: detected capacity change from 0 to 128 [ 169.532658][ T9985] EXT4-fs error (device loop8): ext4_readdir:221: inode #11: comm syz-executor: path (unknown): directory fails checksum at offset 1024 [ 169.599323][T11190] loop9: detected capacity change from 0 to 1024 [ 169.614838][T11190] EXT4-fs (loop9): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 169.615814][ T9985] EXT4-fs error (device loop8): ext4_readdir:221: inode #11: comm syz-executor: path (unknown): directory fails checksum at offset 8192 [ 169.624592][T11190] EXT4-fs (loop9): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 169.670876][T11190] EXT4-fs (loop9): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 169.689300][T11190] EXT4-fs error (device loop9): ext4_get_journal_inode:5798: inode #5: comm syz.9.2701: unexpected bad inode w/o EXT4_IGET_BAD [ 169.689625][ T9985] EXT4-fs error (device loop8): ext4_empty_dir:3124: inode #11: block 1: comm syz-executor: Directory block failed checksum [ 169.715534][T11190] EXT4-fs (loop9): no journal found [ 169.720755][T11190] EXT4-fs (loop9): can't get journal size [ 169.746903][ T9985] EXT4-fs error (device loop8): ext4_readdir:221: inode #11: comm syz-executor: path (unknown): directory fails checksum at offset 1024 [ 169.778861][T11190] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 169.817749][T10709] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 169.836854][T11179] chnl_net:caif_netlink_parms(): no params data found [ 169.876154][T11197] bridge1: entered promiscuous mode [ 169.881410][T11197] bridge1: entered allmulticast mode [ 169.888040][T11197] team0: Port device bridge1 added [ 169.909278][T11197] loop7: detected capacity change from 0 to 2048 [ 169.939646][T11179] bridge0: port 1(bridge_slave_0) entered blocking state [ 169.946795][T11179] bridge0: port 1(bridge_slave_0) entered disabled state [ 169.957027][T11179] bridge_slave_0: entered allmulticast mode [ 169.963551][T11179] bridge_slave_0: entered promiscuous mode [ 169.970922][T11179] bridge0: port 2(bridge_slave_1) entered blocking state [ 169.978085][T11179] bridge0: port 2(bridge_slave_1) entered disabled state [ 169.985648][T11179] bridge_slave_1: entered allmulticast mode [ 169.992224][T11179] bridge_slave_1: entered promiscuous mode [ 169.998025][T10345] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 170.028055][T11179] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 170.038580][T11179] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 170.076113][T11179] team0: Port device team_slave_0 added [ 170.082753][T11179] team0: Port device team_slave_1 added [ 170.104401][T11179] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 170.111510][T11179] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 170.137525][T11179] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 170.148967][T11179] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 170.155981][T11179] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 170.182016][T11179] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 170.227611][T11179] hsr_slave_0: entered promiscuous mode [ 170.233719][T11179] hsr_slave_1: entered promiscuous mode [ 170.239876][T11179] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 170.248600][T11179] Cannot create hsr debugfs directory [ 170.254422][ T3402] bridge_slave_1: left allmulticast mode [ 170.260127][ T3402] bridge_slave_1: left promiscuous mode [ 170.265871][ T3402] bridge0: port 2(bridge_slave_1) entered disabled state [ 170.293510][ T3402] bridge_slave_0: left allmulticast mode [ 170.299243][ T3402] bridge_slave_0: left promiscuous mode [ 170.304907][ T3402] bridge0: port 1(bridge_slave_0) entered disabled state [ 170.408060][ T3402]  (unregistering): (slave bond_slave_0): Releasing backup interface [ 170.417146][ T3402]  (unregistering): (slave bond_slave_1): Releasing backup interface [ 170.425887][ T3402]  (unregistering): Released all slaves [ 170.435722][ T3402] bond0 (unregistering): Released all slaves [ 170.484771][ T3402] IPVS: stopping master sync thread 5519 ... [ 170.645203][ T3402] team0 (unregistering): Port device team_slave_1 removed [ 170.655002][ T3402] team0 (unregistering): Port device team_slave_0 removed [ 170.768153][T11336] loop9: detected capacity change from 0 to 2048 [ 170.777858][T11279] chnl_net:caif_netlink_parms(): no params data found [ 170.787130][T11336] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 170.802544][T11336] EXT4-fs (loop9): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 170.826917][T10709] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 170.842925][T11279] bridge0: port 1(bridge_slave_0) entered blocking state [ 170.843193][T11342] loop0: detected capacity change from 0 to 1024 [ 170.850129][T11279] bridge0: port 1(bridge_slave_0) entered disabled state [ 170.865992][T11279] bridge_slave_0: entered allmulticast mode [ 170.872594][T11279] bridge_slave_0: entered promiscuous mode [ 170.881104][T11342] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 170.892708][T11279] bridge0: port 2(bridge_slave_1) entered blocking state [ 170.900251][T11279] bridge0: port 2(bridge_slave_1) entered disabled state [ 170.907451][T11279] bridge_slave_1: entered allmulticast mode [ 170.915414][T11279] bridge_slave_1: entered promiscuous mode [ 170.941679][T11279] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 170.952413][T11279] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 170.984437][T11352] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 171.009110][T11279] team0: Port device team_slave_0 added [ 171.028777][T11352] loop9: detected capacity change from 0 to 1024 [ 171.032919][T11279] team0: Port device team_slave_1 added [ 171.036023][T11352] EXT4-fs (loop9): ext4_check_descriptors: Checksum for group 0 failed (51269!=20869) [ 171.050560][T11352] EXT4-fs (loop9): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 171.061103][T11352] EXT4-fs error (device loop9): ext4_get_journal_inode:5798: inode #32: comm syz.9.2712: iget: special inode unallocated [ 171.073894][T11352] EXT4-fs (loop9): no journal found [ 171.078961][ T3402] IPVS: stop unused estimator thread 0... [ 171.079120][T11352] EXT4-fs (loop9): can't get journal size [ 171.086004][T11352] EXT4-fs error (device loop9): ext4_protect_reserved_inode:160: inode #32: comm syz.9.2712: iget: special inode unallocated [ 171.104107][T11352] EXT4-fs (loop9): failed to initialize system zone (-117) [ 171.111383][T11352] EXT4-fs (loop9): mount failed [ 171.117240][T11279] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 171.124260][T11279] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 171.150185][T11279] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 171.167686][T11279] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 171.174751][T11279] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 171.200783][T11279] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 171.219092][T11179] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 171.238895][T11179] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 171.247953][T11179] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 171.263117][T11355] IPv6: Can't replace route, no match found [ 171.269106][T11179] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 171.282963][T11357] loop7: detected capacity change from 0 to 1024 [ 171.290446][T11357] EXT4-fs (loop7): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 171.297407][T11359] loop9: detected capacity change from 0 to 512 [ 171.300245][T11357] EXT4-fs (loop7): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 171.307033][T11359] ext3: Unknown parameter 'fowner>00000000000000000000' [ 171.316414][T11357] EXT4-fs (loop7): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 171.338506][T11279] hsr_slave_0: entered promiscuous mode [ 171.339030][T11357] EXT4-fs error (device loop7): ext4_get_journal_inode:5798: inode #5: comm syz.7.2714: unexpected bad inode w/o EXT4_IGET_BAD [ 171.344816][T11279] hsr_slave_1: entered promiscuous mode [ 171.359378][T11357] EXT4-fs (loop7): no journal found [ 171.363556][T11279] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 171.368135][T11357] EXT4-fs (loop7): can't get journal size [ 171.368813][T11357] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 171.375974][T11279] Cannot create hsr debugfs directory [ 171.415166][ T3402] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 171.444311][ T8800] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 171.465707][T11179] 8021q: adding VLAN 0 to HW filter on device bond0 [ 171.483039][ T3402] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 171.511906][T11179] 8021q: adding VLAN 0 to HW filter on device team0 [ 171.531718][ T165] bridge0: port 1(bridge_slave_0) entered blocking state [ 171.538882][ T165] bridge0: port 1(bridge_slave_0) entered forwarding state [ 171.555477][ T3402] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 171.573867][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 171.581051][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 171.599299][T11179] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 171.609816][T11179] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 171.631174][ T3402] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 171.661429][T10916] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 171.707177][ T3402] batadv1: left allmulticast mode [ 171.712488][ T3402] batadv1: left promiscuous mode [ 171.717722][ T3402] bridge0: port 3(batadv1) entered disabled state [ 171.728625][ T3402] bridge_slave_1: left allmulticast mode [ 171.734351][ T3402] bridge_slave_1: left promiscuous mode [ 171.740092][ T3402] bridge0: port 2(bridge_slave_1) entered disabled state [ 171.749839][ T3402] bridge_slave_0: left allmulticast mode [ 171.755621][ T3402] bridge_slave_0: left promiscuous mode [ 171.761332][ T3402] bridge0: port 1(bridge_slave_0) entered disabled state [ 171.786957][T11390] loop0: detected capacity change from 0 to 512 [ 171.793678][T11390] EXT4-fs: Ignoring removed oldalloc option [ 171.802871][T11390] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 171.825543][T11390] EXT4-fs (loop0): 1 truncate cleaned up [ 171.832012][T11390] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 171.859961][T11393] __nla_validate_parse: 6 callbacks suppressed [ 171.859976][T11393] netlink: 56 bytes leftover after parsing attributes in process `syz.9.2723'. [ 171.880683][T11390] loop0: detected capacity change from 512 to 64 [ 171.893475][ T3402] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 171.903893][T11390] EXT4-fs error (device loop0): mb_free_blocks:1948: group 0, inode 15: block 101:freeing already freed block (bit 100); block bitmap corrupt. [ 171.918560][T11390] EXT4-fs (loop0): pa ffff8881005d3ee0: logic 0, phys. 65, len 64 [ 171.926433][T11390] EXT4-fs error (device loop0): ext4_mb_release_inode_pa:5366: group 0, free 64, pa_free 63 [ 171.937414][T11390] syz.0.2725: attempt to access beyond end of device [ 171.937414][T11390] loop0: rw=2049, sector=510, nr_sectors = 2 limit=64 [ 171.950852][T11390] EXT4-fs warning (device loop0): ext4_end_bio:346: I/O error 10 writing to inode 15 starting block 255) [ 171.962125][T11390] Buffer I/O error on device loop0, logical block 255 [ 171.969541][ T3402] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 171.981387][ T3402] bond0 (unregistering): Released all slaves [ 171.988970][T10916] EXT4-fs warning (device loop0): ext4_evict_inode:276: xattr delete (err -12) [ 172.002450][T10916] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 172.006332][T11179] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 172.087485][ T3402] hsr_slave_0: left promiscuous mode [ 172.093371][ T3402] hsr_slave_1: left promiscuous mode [ 172.100042][ T3402] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 172.102557][T11407] loop0: detected capacity change from 0 to 128 [ 172.107476][ T3402] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 172.121696][ T3402] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 172.129209][ T3402] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 172.135381][T11407] hub 9-0:1.0: USB hub found [ 172.141381][T11407] hub 9-0:1.0: 8 ports detected [ 172.146424][ T3402] veth1_macvtap: left promiscuous mode [ 172.153544][ T3402] veth0_macvtap: left promiscuous mode [ 172.159182][ T3402] veth1_vlan: left promiscuous mode [ 172.164472][ T3402] veth0_vlan: left promiscuous mode [ 172.230507][ T3402] team0 (unregistering): Port device team_slave_1 removed [ 172.242353][ T3402] team0 (unregistering): Port device team_slave_0 removed [ 172.263545][T11410] loop9: detected capacity change from 0 to 512 [ 172.270636][T11410] EXT4-fs: Ignoring removed oldalloc option [ 172.278385][T11410] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 172.290185][T11410] EXT4-fs (loop9): 1 truncate cleaned up [ 172.296283][T11410] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 172.350805][T11410] loop9: detected capacity change from 512 to 64 [ 172.354404][T11179] veth0_vlan: entered promiscuous mode [ 172.365128][T11179] veth1_vlan: entered promiscuous mode [ 172.381656][T11179] veth0_macvtap: entered promiscuous mode [ 172.394288][T11179] veth1_macvtap: entered promiscuous mode [ 172.400236][T11420] loop0: detected capacity change from 0 to 1024 [ 172.410349][T11410] EXT4-fs error (device loop9): mb_free_blocks:1948: group 0, inode 15: block 101:freeing already freed block (bit 100); block bitmap corrupt. [ 172.425009][T11410] EXT4-fs (loop9): pa ffff8881006e4850: logic 0, phys. 65, len 64 [ 172.432922][T11410] EXT4-fs error (device loop9): ext4_mb_release_inode_pa:5366: group 0, free 64, pa_free 63 [ 172.444849][T11420] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 172.444967][T11410] syz.9.2730: attempt to access beyond end of device [ 172.444967][T11410] loop9: rw=2049, sector=510, nr_sectors = 2 limit=64 [ 172.459363][T11179] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 172.470269][T11410] EXT4-fs warning (device loop9): ext4_end_bio:346: I/O error 10 writing to inode 15 starting block 255) [ 172.480690][T11179] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 172.480754][T11179] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 172.491958][T11410] Buffer I/O error on device loop9, logical block 255 [ 172.501810][T11179] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 172.531432][T11179] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 172.539769][T11179] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 172.550382][T11179] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 172.560247][T11179] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 172.570685][T11179] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 172.586583][T11179] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 172.603012][T11279] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 172.616019][T11279] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 172.631638][T11279] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 172.639673][T10709] EXT4-fs warning (device loop9): ext4_evict_inode:276: xattr delete (err -12) [ 172.643917][T11179] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 172.657498][T11179] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 172.666322][T11179] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 172.675123][T11179] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 172.685110][T10709] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 172.688290][T11279] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 172.755852][T11279] 8021q: adding VLAN 0 to HW filter on device bond0 [ 172.764980][T11434] loop9: detected capacity change from 0 to 512 [ 172.767411][T11439] loop7: detected capacity change from 0 to 128 [ 172.777199][T11279] 8021q: adding VLAN 0 to HW filter on device team0 [ 172.784626][T11434] EXT4-fs: Ignoring removed oldalloc option [ 172.792531][T11434] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 172.815798][T11279] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 172.826278][T11279] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 172.839635][T11434] EXT4-fs (loop9): 1 truncate cleaned up [ 172.845654][T11434] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 172.849575][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 172.865259][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 172.869031][T11439] hub 9-0:1.0: USB hub found [ 172.875377][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 172.884140][T11439] hub 9-0:1.0: 8 ports detected [ 172.884213][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 172.928992][T11434] loop9: detected capacity change from 512 to 64 [ 172.941800][T11434] EXT4-fs error (device loop9): mb_free_blocks:1948: group 0, inode 15: block 101:freeing already freed block (bit 100); block bitmap corrupt. [ 172.956445][T11434] EXT4-fs (loop9): pa ffff8881005d3ee0: logic 0, phys. 65, len 64 [ 172.957084][T11279] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 172.964290][T11434] EXT4-fs error (device loop9): ext4_mb_release_inode_pa:5366: group 0, free 64, pa_free 63 [ 172.982865][T11434] syz.9.2735: attempt to access beyond end of device [ 172.982865][T11434] loop9: rw=2049, sector=510, nr_sectors = 2 limit=64 [ 172.996248][T11434] EXT4-fs warning (device loop9): ext4_end_bio:346: I/O error 10 writing to inode 15 starting block 255) [ 173.007653][T11434] Buffer I/O error on device loop9, logical block 255 [ 173.031718][T11463] netlink: 56 bytes leftover after parsing attributes in process `syz.4.2739'. [ 173.048019][T11279] veth0_vlan: entered promiscuous mode [ 173.054982][T10709] EXT4-fs warning (device loop9): ext4_evict_inode:276: xattr delete (err -12) [ 173.057671][T11279] veth1_vlan: entered promiscuous mode [ 173.084215][T11279] veth0_macvtap: entered promiscuous mode [ 173.091596][T11279] veth1_macvtap: entered promiscuous mode [ 173.101603][T11279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 173.112180][T11279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 173.122205][T11279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 173.132901][T11279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 173.142775][T11279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 173.153210][T11279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 173.163866][T11279] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 173.174127][T11279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 173.184687][T11279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 173.194519][T11279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 173.205005][T11279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 173.214964][T11279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 173.225437][T11279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 173.243403][T11279] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 173.256076][T11279] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 173.264860][T11279] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 173.273692][T11279] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 173.277371][ T29] kauditd_printk_skb: 573 callbacks suppressed [ 173.277387][ T29] audit: type=1326 audit(1740840749.068:16535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11473 comm="syz.0.2743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b2aa6d169 code=0x7ffc0000 [ 173.282536][T11279] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 173.290759][ T29] audit: type=1326 audit(1740840749.068:16536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11473 comm="syz.0.2743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0b2aa6d169 code=0x7ffc0000 [ 173.345336][ T29] audit: type=1326 audit(1740840749.096:16537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11473 comm="syz.0.2743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b2aa6d169 code=0x7ffc0000 [ 173.369094][ T29] audit: type=1326 audit(1740840749.096:16538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11473 comm="syz.0.2743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b2aa6d169 code=0x7ffc0000 [ 173.392685][ T29] audit: type=1326 audit(1740840749.096:16539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11473 comm="syz.0.2743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0b2aa6d169 code=0x7ffc0000 [ 173.416962][ T29] audit: type=1326 audit(1740840749.190:16540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11473 comm="syz.0.2743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b2aa6d169 code=0x7ffc0000 [ 173.419001][T11477] netlink: 40 bytes leftover after parsing attributes in process `syz.9.2744'. [ 173.440702][ T29] audit: type=1326 audit(1740840749.190:16541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11473 comm="syz.0.2743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b2aa6d169 code=0x7ffc0000 [ 173.447360][ T29] audit: type=1326 audit(1740840749.218:16542): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11473 comm="syz.0.2743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f0b2aa6d169 code=0x7ffc0000 [ 173.498028][ T29] audit: type=1326 audit(1740840749.227:16543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11473 comm="syz.0.2743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b2aa6d169 code=0x7ffc0000 [ 173.521801][ T29] audit: type=1326 audit(1740840749.227:16544): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11473 comm="syz.0.2743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b2aa6d169 code=0x7ffc0000 [ 173.608212][T11487] loop1: detected capacity change from 0 to 1024 [ 173.615217][T11487] EXT4-fs: Ignoring removed bh option [ 173.630073][T11489] loop4: detected capacity change from 0 to 128 [ 173.640083][T11491] loop9: detected capacity change from 0 to 512 [ 173.646879][T11491] EXT4-fs: Ignoring removed oldalloc option [ 173.653273][T11491] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 173.665016][T11494] loop0: detected capacity change from 0 to 128 [ 173.673981][T11491] EXT4-fs (loop9): 1 truncate cleaned up [ 173.693206][T11487] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4115: comm syz.1.2715: Allocating blocks 497-513 which overlap fs metadata [ 173.708018][T11494] hub 9-0:1.0: USB hub found [ 173.709224][T11487] EXT4-fs (loop1): pa ffff8881006e48c0: logic 256, phys. 385, len 8 [ 173.712932][T11494] hub 9-0:1.0: 8 ports detected [ 173.720658][T11487] EXT4-fs error (device loop1): ext4_mb_release_inode_pa:5366: group 0, free 0, pa_free 1 [ 173.813050][T10709] EXT4-fs error (device loop9): mb_free_blocks:1948: group 0, inode 16: block 35:freeing already freed block (bit 34); block bitmap corrupt. [ 173.912994][T11511] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2756'. [ 173.980156][T11516] loop0: detected capacity change from 0 to 512 [ 173.986905][T11516] EXT4-fs: Ignoring removed orlov option [ 174.000547][T11517] netlink: 56 bytes leftover after parsing attributes in process `syz.4.2755'. [ 174.070328][T11516] EXT4-fs error (device loop0): ext4_ext_check_inode:524: inode #15: comm syz.0.2751: pblk 0 bad header/extent: invalid magic - magic 7973, entries 1402, max 27648(0), depth 25964(25964) [ 174.089426][T11516] EXT4-fs error (device loop0): ext4_orphan_get:1394: comm syz.0.2751: couldn't read orphan inode 15 (err -117) [ 174.151497][T11518] loop9: detected capacity change from 0 to 1024 [ 174.353286][T11530] loop1: detected capacity change from 0 to 128 [ 174.377306][T11530] hub 9-0:1.0: USB hub found [ 174.383671][T11530] hub 9-0:1.0: 8 ports detected [ 174.427962][T11532] loop1: detected capacity change from 0 to 512 [ 174.434740][T11532] EXT4-fs: Ignoring removed oldalloc option [ 174.441309][T11532] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 174.485713][T11532] EXT4-fs (loop1): 1 truncate cleaned up [ 174.545076][T11279] EXT4-fs error (device loop1): mb_free_blocks:1948: group 0, inode 16: block 35:freeing already freed block (bit 34); block bitmap corrupt. [ 174.601688][T11544] loop1: detected capacity change from 0 to 1024 [ 174.608669][T11544] EXT4-fs: Ignoring removed bh option [ 174.663115][T11544] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4115: comm syz.1.2766: Allocating blocks 497-513 which overlap fs metadata [ 174.679511][T11544] EXT4-fs (loop1): pa ffff8881006e4930: logic 256, phys. 385, len 8 [ 174.687624][T11544] EXT4-fs error (device loop1): ext4_mb_release_inode_pa:5366: group 0, free 0, pa_free 1 [ 174.723001][T11550] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2767'. [ 174.865897][T11562] loop9: detected capacity change from 0 to 1024 [ 174.878968][T11564] loop0: detected capacity change from 0 to 128 [ 174.911370][T11564] ext4 filesystem being mounted at /26/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 175.012147][T11572] loop0: detected capacity change from 0 to 512 [ 175.020057][T11572] EXT4-fs: Ignoring removed oldalloc option [ 175.030303][T11572] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 175.047538][T11574] loop1: detected capacity change from 0 to 1024 [ 175.054231][T11574] journal_path: Non-blockdev passed as './file1' [ 175.060769][T11574] EXT4-fs: error: could not find journal device path [ 175.071338][T11572] EXT4-fs (loop0): 1 truncate cleaned up [ 175.083865][T11574] loop1: detected capacity change from 0 to 256 [ 175.092036][T11574] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 175.104000][T11574] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2775'. [ 175.125455][T10916] EXT4-fs error (device loop0): mb_free_blocks:1948: group 0, inode 16: block 35:freeing already freed block (bit 34); block bitmap corrupt. [ 175.187837][T11579] loop0: detected capacity change from 0 to 512 [ 175.195781][T11579] EXT4-fs: Ignoring removed oldalloc option [ 175.202012][T11579] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 175.213217][T11579] EXT4-fs (loop0): 1 truncate cleaned up [ 175.253880][T10916] EXT4-fs error (device loop0): mb_free_blocks:1948: group 0, inode 16: block 35:freeing already freed block (bit 34); block bitmap corrupt. [ 175.282347][T11584] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2778'. [ 175.407818][T11587] loop0: detected capacity change from 0 to 1024 [ 175.485659][T11597] loop4: detected capacity change from 0 to 1024 [ 175.485890][T11599] IPv6: Can't replace route, no match found [ 175.492310][T11597] EXT4-fs: Ignoring removed bh option [ 175.535270][T11604] loop1: detected capacity change from 0 to 128 [ 175.544809][T11597] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4115: comm syz.4.2783: Allocating blocks 497-513 which overlap fs metadata [ 175.560003][T11597] EXT4-fs (loop4): pa ffff8881006e4a80: logic 256, phys. 385, len 8 [ 175.568097][T11597] EXT4-fs error (device loop4): ext4_mb_release_inode_pa:5366: group 0, free 0, pa_free 1 [ 175.580945][T11607] loop7: detected capacity change from 0 to 512 [ 175.581073][T11604] ext4 filesystem being mounted at /13/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 175.587700][T11607] ext3: Unknown parameter 'fowner>00000000000000000000' [ 175.677369][T11610] loop1: detected capacity change from 0 to 256 [ 175.723583][T11617] netlink: 40 bytes leftover after parsing attributes in process `syz.7.2790'. [ 175.744599][T11610] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 175.753407][T11610] FAT-fs (loop1): Filesystem has been set read-only [ 175.760282][T11610] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 175.769239][T11610] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 175.778259][T11610] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 175.791904][T11610] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 175.800712][T11610] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 175.809707][T11610] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 175.820261][T11610] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 175.831432][T11610] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 175.840388][T11610] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 175.862930][T11610] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 175.863081][T11620] netdevsim netdevsim7 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.881381][T11610] FAT-fs (loop1): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 175.918396][T11632] IPv6: Can't replace route, no match found [ 175.935620][T11620] netdevsim netdevsim7 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 176.010161][T11620] netdevsim netdevsim7 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 176.063331][T11620] netdevsim netdevsim7 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 176.153665][T11620] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 176.182689][T11620] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 176.200866][T11620] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 176.212050][T11620] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 176.278950][T11645] loop1: detected capacity change from 0 to 128 [ 176.288110][T11645] ext4 filesystem being mounted at /18/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 176.351084][T11649] loop7: detected capacity change from 0 to 512 [ 176.360299][T11652] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2802'. [ 176.369538][T11649] EXT4-fs: Ignoring removed oldalloc option [ 176.386641][T11649] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 176.398828][T11649] EXT4-fs (loop7): 1 truncate cleaned up [ 176.425405][T11655] loop1: detected capacity change from 0 to 2048 [ 176.457463][T11655] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 176.497986][T11662] loop0: detected capacity change from 0 to 512 [ 176.504693][T11662] EXT4-fs: Ignoring removed oldalloc option [ 176.504977][T11649] loop7: detected capacity change from 512 to 64 [ 176.512000][T11662] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 176.528756][T11662] EXT4-fs (loop0): 1 truncate cleaned up [ 176.535385][T11649] EXT4-fs error (device loop7): mb_free_blocks:1948: group 0, inode 15: block 101:freeing already freed block (bit 100); block bitmap corrupt. [ 176.550000][T11649] EXT4-fs (loop7): pa ffff8881006e49a0: logic 0, phys. 65, len 64 [ 176.557870][T11649] EXT4-fs error (device loop7): ext4_mb_release_inode_pa:5366: group 0, free 64, pa_free 63 [ 176.575580][T11649] syz.7.2801: attempt to access beyond end of device [ 176.575580][T11649] loop7: rw=2049, sector=510, nr_sectors = 2 limit=64 [ 176.589112][T11649] EXT4-fs warning (device loop7): ext4_end_bio:346: I/O error 10 writing to inode 15 starting block 255) [ 176.600390][T11649] Buffer I/O error on device loop7, logical block 255 [ 176.616017][T11665] loop1: detected capacity change from 0 to 1024 [ 176.634281][T11662] loop0: detected capacity change from 512 to 64 [ 176.648277][T11662] EXT4-fs error (device loop0): mb_free_blocks:1948: group 0, inode 15: block 101:freeing already freed block (bit 100); block bitmap corrupt. [ 176.663001][T11662] EXT4-fs (loop0): pa ffff8881006e49a0: logic 0, phys. 65, len 64 [ 176.670926][T11662] EXT4-fs error (device loop0): ext4_mb_release_inode_pa:5366: group 0, free 64, pa_free 63 [ 176.683688][T11665] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 176.693492][T11665] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 176.704688][T11666] syz.0.2806: attempt to access beyond end of device [ 176.704688][T11666] loop0: rw=2049, sector=510, nr_sectors = 2 limit=64 [ 176.718094][T11666] EXT4-fs warning (device loop0): ext4_end_bio:346: I/O error 10 writing to inode 15 starting block 255) [ 176.723351][T11665] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 176.729408][T11666] Buffer I/O error on device loop0, logical block 255 [ 176.757396][T11665] EXT4-fs error (device loop1): ext4_get_journal_inode:5798: inode #5: comm syz.1.2805: unexpected bad inode w/o EXT4_IGET_BAD [ 176.772740][T11665] EXT4-fs (loop1): no journal found [ 176.778010][T11665] EXT4-fs (loop1): can't get journal size [ 176.784106][ T8800] EXT4-fs warning (device loop7): ext4_evict_inode:276: xattr delete (err -12) [ 176.795613][T10916] EXT4-fs warning (device loop0): ext4_evict_inode:276: xattr delete (err -12) [ 176.885775][T11682] loop1: detected capacity change from 0 to 128 [ 176.896658][T11680] loop7: detected capacity change from 0 to 1024 [ 176.939799][T11682] ext4 filesystem being mounted at /24/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 176.978076][T11689] FAULT_INJECTION: forcing a failure. [ 176.978076][T11689] name failslab, interval 1, probability 0, space 0, times 0 [ 176.990800][T11689] CPU: 0 UID: 0 PID: 11689 Comm: syz.0.2815 Tainted: G W 6.14.0-rc4-syzkaller-00242-g7a5668899f54 #0 [ 176.990828][T11689] Tainted: [W]=WARN [ 176.990893][T11689] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 176.990908][T11689] Call Trace: [ 176.990915][T11689] [ 176.990923][T11689] dump_stack_lvl+0xf2/0x150 [ 176.990990][T11689] dump_stack+0x15/0x1a [ 176.991015][T11689] should_fail_ex+0x24a/0x260 [ 176.991115][T11689] ? genl_start+0x11e/0x3a0 [ 176.991136][T11689] should_failslab+0x8f/0xb0 [ 176.991174][T11689] __kmalloc_cache_noprof+0x4e/0x320 [ 176.991254][T11689] genl_start+0x11e/0x3a0 [ 176.991279][T11689] __netlink_dump_start+0x32a/0x520 [ 176.991310][T11689] genl_rcv_msg+0x4ea/0x6d0 [ 176.991397][T11689] ? __pfx_nl80211_dump_interface+0x10/0x10 [ 176.991431][T11689] ? __pfx_genl_start+0x10/0x10 [ 176.991456][T11689] ? __pfx_genl_dumpit+0x10/0x10 [ 176.991494][T11689] ? __pfx_genl_done+0x10/0x10 [ 176.991514][T11689] ? avc_has_perm_noaudit+0x1cc/0x210 [ 176.991603][T11689] netlink_rcv_skb+0x12c/0x230 [ 176.991696][T11689] ? __pfx_genl_rcv_msg+0x10/0x10 [ 176.991723][T11689] genl_rcv+0x28/0x40 [ 176.991745][T11689] netlink_unicast+0x599/0x670 [ 176.991884][T11689] netlink_sendmsg+0x5cc/0x6e0 [ 176.991926][T11689] ? __pfx_netlink_sendmsg+0x10/0x10 [ 176.991963][T11689] __sock_sendmsg+0x140/0x180 [ 176.991997][T11689] ____sys_sendmsg+0x326/0x4b0 [ 176.992022][T11689] __sys_sendmsg+0x19d/0x230 [ 176.992067][T11689] __x64_sys_sendmsg+0x46/0x50 [ 176.992095][T11689] x64_sys_call+0x2734/0x2dc0 [ 176.992137][T11689] do_syscall_64+0xc9/0x1c0 [ 176.992264][T11689] ? clear_bhb_loop+0x55/0xb0 [ 176.992293][T11689] ? clear_bhb_loop+0x55/0xb0 [ 176.992336][T11689] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 176.992361][T11689] RIP: 0033:0x7f0b2aa6d169 [ 176.992374][T11689] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 176.992435][T11689] RSP: 002b:00007f0b290d1038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 176.992455][T11689] RAX: ffffffffffffffda RBX: 00007f0b2ac85fa0 RCX: 00007f0b2aa6d169 [ 176.992469][T11689] RDX: 0000000000000000 RSI: 0000400000000340 RDI: 0000000000000005 [ 176.992482][T11689] RBP: 00007f0b290d1090 R08: 0000000000000000 R09: 0000000000000000 [ 176.992564][T11689] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 176.992645][T11689] R13: 0000000000000000 R14: 00007f0b2ac85fa0 R15: 00007ffc74e22a48 [ 176.992662][T11689] [ 177.272364][T11691] loop0: detected capacity change from 0 to 2048 [ 177.308101][T11691] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 177.351481][T11699] netlink: 'syz.1.2819': attribute type 39 has an invalid length. [ 177.376459][T11701] loop0: detected capacity change from 0 to 128 [ 177.391218][T11701] hub 9-0:1.0: USB hub found [ 177.396196][T11701] hub 9-0:1.0: 8 ports detected [ 177.409145][T11702] loop1: detected capacity change from 0 to 512 [ 177.421451][T11702] ext4 filesystem being mounted at /26/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 177.442976][T11706] loop0: detected capacity change from 0 to 512 [ 177.449634][T11706] EXT4-fs: Ignoring removed oldalloc option [ 177.460035][T11706] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 177.482955][T11706] EXT4-fs (loop0): 1 truncate cleaned up [ 177.514338][T11706] loop0: detected capacity change from 512 to 64 [ 177.531647][T11706] EXT4-fs error (device loop0): mb_free_blocks:1948: group 0, inode 15: block 101:freeing already freed block (bit 100); block bitmap corrupt. [ 177.546686][T11706] EXT4-fs (loop0): pa ffff8881006e49a0: logic 0, phys. 65, len 64 [ 177.554532][T11706] EXT4-fs error (device loop0): ext4_mb_release_inode_pa:5366: group 0, free 64, pa_free 63 [ 177.566111][T11706] syz.0.2821: attempt to access beyond end of device [ 177.566111][T11706] loop0: rw=2049, sector=510, nr_sectors = 2 limit=64 [ 177.579535][T11706] EXT4-fs warning (device loop0): ext4_end_bio:346: I/O error 10 writing to inode 15 starting block 255) [ 177.590861][T11706] Buffer I/O error on device loop0, logical block 255 [ 177.609220][T11709] loop4: detected capacity change from 0 to 1024 [ 177.617807][T10916] EXT4-fs warning (device loop0): ext4_evict_inode:276: xattr delete (err -12) [ 177.617910][ T2962] ================================================================== [ 177.634849][ T2962] BUG: KCSAN: data-race in __filemap_add_folio / nr_blockdev_pages [ 177.642758][ T2962] [ 177.645079][ T2962] read-write to 0xffff8881004c3130 of 8 bytes by task 10916 on cpu 1: [ 177.653260][ T2962] __filemap_add_folio+0x430/0x6f0 [ 177.658389][ T2962] filemap_add_folio+0x9c/0x1b0 [ 177.663241][ T2962] __filemap_get_folio+0x32f/0x630 [ 177.668357][ T2962] bdev_getblk+0x173/0x3b0 [ 177.672767][ T2962] __ext4_sb_bread_gfp+0x46/0x180 [ 177.677810][ T2962] ext4_sb_bread+0x5a/0x70 [ 177.682224][ T2962] ext4_xattr_delete_inode+0x1fc/0x790 [ 177.687687][ T2962] ext4_evict_inode+0xa82/0xdd0 [ 177.692541][ T2962] evict+0x2f0/0x570 [ 177.696433][ T2962] iput+0x42a/0x5b0 [ 177.700257][ T2962] do_unlinkat+0x283/0x4d0 [ 177.704669][ T2962] __x64_sys_unlink+0x2e/0x40 [ 177.709344][ T2962] x64_sys_call+0x2329/0x2dc0 [ 177.714016][ T2962] do_syscall_64+0xc9/0x1c0 [ 177.718521][ T2962] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 177.724421][ T2962] [ 177.726737][ T2962] read to 0xffff8881004c3130 of 8 bytes by task 2962 on cpu 0: [ 177.734273][ T2962] nr_blockdev_pages+0x7c/0xd0 [ 177.739045][ T2962] si_meminfo+0x87/0xd0 [ 177.743216][ T2962] update_defense_level+0x49/0x5b0 [ 177.748318][ T2962] defense_work_handler+0x1f/0x80 [ 177.753332][ T2962] process_scheduled_works+0x4db/0xa20 [ 177.758783][ T2962] worker_thread+0x51d/0x6f0 [ 177.763364][ T2962] kthread+0x4ae/0x520 [ 177.767428][ T2962] ret_from_fork+0x4b/0x60 [ 177.771841][ T2962] ret_from_fork_asm+0x1a/0x30 [ 177.776613][ T2962] [ 177.778941][ T2962] value changed: 0x0000000000000005 -> 0x0000000000000006 [ 177.786039][ T2962] [ 177.788362][ T2962] Reported by Kernel Concurrency Sanitizer on: [ 177.794522][ T2962] CPU: 0 UID: 0 PID: 2962 Comm: kworker/0:2 Tainted: G W 6.14.0-rc4-syzkaller-00242-g7a5668899f54 #0 [ 177.806788][ T2962] Tainted: [W]=WARN [ 177.810577][ T2962] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 177.820631][ T2962] Workqueue: events_long defense_work_handler [ 177.826704][ T2962] ================================================================== [ 177.837677][T11711] loop1: detected capacity change from 0 to 512 [ 177.844271][T11711] EXT4-fs: Ignoring removed oldalloc option [ 177.848636][T11709] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 177.860106][T11709] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 177.870003][T11709] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 177.881725][T11709] EXT4-fs error (device loop4): ext4_get_journal_inode:5798: inode #5: comm syz.4.2822: unexpected bad inode w/o EXT4_IGET_BAD [ 177.896981][T11709] EXT4-fs (loop4): no journal found [ 177.898332][T11711] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 177.902370][T11709] EXT4-fs (loop4): can't get journal size [ 177.922381][T11711] EXT4-fs (loop1): 1 truncate cleaned up