last executing test programs: 10m26.475360554s ago: executing program 4 (id=627): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) pipe(&(0x7f0000000680)) perf_event_open(&(0x7f0000000000)={0x3, 0x80, 0x3d, 0x1, 0x0, 0x0, 0x0, 0x5, 0xc2208, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, @perf_bp={0x0, 0x2}, 0x10c18a, 0x2, 0x8000, 0x5, 0x3, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x24000095}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000500)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd25, 0x8000, {0x0, 0x0, 0x0, r3, {0xc, 0xffe0}, {}, {0xfff3, 0x5}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x800) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), 0xffffffffffffffff) recvmmsg(0xffffffffffffffff, &(0x7f0000001640)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)=""/250, 0xfa}], 0x1}}], 0x1, 0x34000, 0x0) sendmsg$ETHTOOL_MSG_TSINFO_GET(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB="18000000", @ANYRES16=r4, @ANYBLOB="a787000000ff000000000b00000404000180", @ANYRES16], 0x18}}, 0x0) syz_open_dev$loop(&(0x7f0000000440), 0x81, 0x2a82) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000ff000000850000000e000000c500000001f0ffff95"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r5}, 0x10) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r6, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) sendto$inet6(r6, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0xffffffff, @loopback}, 0x1c) 10m26.383366864s ago: executing program 4 (id=633): perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x68, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x800000, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x200, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) r3 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000), 0x80402, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x800700, &(0x7f0000000880)={[{@jqfmt_vfsv0}, {@journal_dev={'journal_dev', 0x3d, 0x2}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@minixdf}, {@resgid}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@usrjquota}, {@block_validity}]}, 0x2, 0x44c, &(0x7f00000023c0)="$eJzs289vFFUcAPDvzLZFfkir4g8QtUqMjT9aWlA5eNFo4gGjiR7wWLeFEBZqaE2EEKnG4MXEkOjZeDTxL/DmxagnE696NyREuYCeamZ2BnaX3UJhu1vZzyeZ9r19b/e9t2/ezJt5swEMrPHsTxKxLSJ+j4jRerQ5w3j935VLZ6r/XDpTTWJl5e2/kjzf5UtnqmXW8n1bi8hEGpF+mhSFNFs8dfrYbK02f7KITy0df39q8dTp544enz0yf2T+xMyBA/v3Tb/4wszzXWln1q7Luz5a2L3z9XfPv1E9dP69n7/L6rutSG9sR7eMZw3/eyXXmvZktwvrs7sbwslQHyvCmlQiIuuu4Xz8j0YlrnXeaLz2SV8rB6yr7Ny0qXPy8gpwB0ui3zUA+qM80WfXv+XWo6nHhnDx5foFUNbuK8VWTxmKtMgz3HJ9203jEXFo+d+vsy3W6T4EAECjz6tfHYxn283/0nigId/2Yg1lLCI2R8S9EXFfROyIiPsj8rwPRsRDayy/dWno+vlPeuGWGnaTsvnfS8XaVvP870o5Qx6r5N9GfQ44FsPJ4aO1+b3FdzIRw5uy+PQqZfzw6m9fdEprnP9lW1Z+OResSy8Mtdygm5tdms0npV1w8eOIXUPt2p9cXQlIImJnROxa20dvLwNHn/52d6dMN27/KrqwzrTyTcRT9f5fjpb2l5LV1yen7ora/N6pcq+43i+/nnurU/m31f4uyPp/S/P+35plLGlcr11cexnn/vis4zXNre7/I8k7eb+MFK99OLu0dHI6YiQ5mMebXp+59t4yXubP2j+xp93+n+bHuCj6/+GIyHbiRyLi0Yh4rKj74xHxRETsWaX9P73SOW0j9P9c2+Pf1f2/pf/XHqgc+/H7TuXfXP/vz0MTxSv58e8GbraCt/PdAQAAwP9Fmj8Dn6STV8NpOjlZf4Z/R2xJawuLS88cXvjgxFz9WfmxGE7LO12jDfdDp5Pl4hPr8ZniXnGZvi8i7omILyub8/hkdaE21+e2w6Db2mH8Z/6s9Lt2wLprt442M9KHigA91zr+0+bo2Td7WRmgp/xeGwbXDcZ/2qt6AL3n/A+Dq934P9sStxYAdybnfxhcxj8MLuMfBpfxDwPpdn7XLzDIgUg3RDUE1inQ7yMTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAd/wXAAD//6889rQ=") futex(0x0, 0x5, 0x2, 0x0, 0x0, 0x3000000) openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x61) open_tree(0xffffffffffffff9c, 0x0, 0x89901) inotify_add_watch(0xffffffffffffffff, &(0x7f00000002c0)='./file0\x00', 0x500083c) write$cgroup_int(r3, 0x0, 0x2) r4 = socket(0x1, 0x803, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1500000010"], 0x50) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x44, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x88a8ffad}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x44}}, 0x8000) 10m25.951189468s ago: executing program 4 (id=640): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r1}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000021c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x3, 0x3, 0x3}, 0x10) sendmsg$tipc(r0, &(0x7f00000000c0)={&(0x7f0000000000)=@name={0x1e, 0x2, 0x2, {{0x1, 0x3}, 0x4}}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000140)="ccf2", 0x2}], 0x1, 0x0, 0x0, 0x80}, 0x20000080) 10m25.925209528s ago: executing program 4 (id=641): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$netlink(0x10, 0x3, 0x14) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r2}, 0x10) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, 0x0, 0x0) 10m25.793170709s ago: executing program 4 (id=644): r0 = socket$inet6(0xa, 0x6, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@mcast1, 0x800, 0x0, 0x103, 0x1}, 0x20) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f00000000c0)) r2 = socket$kcm(0x29, 0x5, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000380)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(0xffffffffffffffff, 0x2def, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_SYNC_CANCEL(0xffffffffffffffff, 0x18, &(0x7f0000000240)={0x3, r2, 0x2, {0xfffffffffffffffe, 0x2}, 0x79}, 0x1) pwritev(r1, &(0x7f0000000180)=[{&(0x7f0000000340)="80fd4717a707", 0x6}], 0x1, 0x807, 0x0) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0x1, 0x4) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x27, &(0x7f0000000000)={@multicast2, @local}, 0xc) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2e, &(0x7f0000000140)={0x24, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @local}}}, 0x108) getsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x29, 0x0, &(0x7f0000695ffc)) bpf$PROG_LOAD(0x5, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, 0x0) syz_clone3(&(0x7f0000000580)={0x80, &(0x7f0000000280), &(0x7f00000002c0), &(0x7f0000000300), {0x2}, 0x0, 0x0, 0x0, &(0x7f0000000540)=[0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff], 0x9}, 0x58) 10m25.742635989s ago: executing program 4 (id=647): syz_mount_image$iso9660(&(0x7f00000009c0), &(0x7f0000000a00)='./file0\x00', 0x0, &(0x7f0000000140)={[], [{@subj_role={'subj_role', 0x3d, ':(\x88'}}, {@context={'context', 0x3d, 'root'}}, {@flag='rw'}, {@smackfshat={'smackfshat', 0x3d, 'iso9660\x00'}}, {@euid_lt}, {@fsname={'fsname', 0x3d, 'func'}}, {@dont_appraise}, {@rootcontext={'rootcontext', 0x3d, 'system_u'}}]}, 0x0, 0x9b4, &(0x7f0000000a80)="$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") creat(&(0x7f0000000100)='./file0\x00', 0x158) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) r2 = dup(r1) write$P9_RLERRORu(r2, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) 10m10.646538652s ago: executing program 32 (id=647): syz_mount_image$iso9660(&(0x7f00000009c0), &(0x7f0000000a00)='./file0\x00', 0x0, &(0x7f0000000140)={[], [{@subj_role={'subj_role', 0x3d, ':(\x88'}}, {@context={'context', 0x3d, 'root'}}, {@flag='rw'}, {@smackfshat={'smackfshat', 0x3d, 'iso9660\x00'}}, {@euid_lt}, {@fsname={'fsname', 0x3d, 'func'}}, {@dont_appraise}, {@rootcontext={'rootcontext', 0x3d, 'system_u'}}]}, 0x0, 0x9b4, &(0x7f0000000a80)="$eJzs3c9vHHfZAPBnJrazcfq+r9umaRrlfbNN30IagrtrtwlWesC11+4Wx1t57aoRh8qNnWDViau4AjWnHvgHgAPiyAGUEwWhSly5AQcOCKl/QXsEc0FCQhTN7PhH0iTr1F7b2J+P1e549pmZ7ziWn3lmZ+YJAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACCSkdFKpZrERH1y5q3yg42MTjUuP+T91fU9m+RrfbbtdiOS7L8oleJEa9aJx5K1d/87+/+ZONZa27EoZa+luH30eN+lJ7vS1eUfMqAdsfzB7XdnFxfnb+32QHbJeG2y3mzULw+P18r1ZqM8dOFC5cXXxprlsfpErXmlOV27XB6Zqg1PN6bKZ0deKFeHhgbLtf4rjZnJ8dHhidrqzItfH6hULpRf73+jNjzVbEy++Hp/c+S1+sREfXI8j8nezmIuZr+I36pPl6drw5fL5WsLi/OD7QaZBVU3EzTQLmigMjBQrQ4MVC+8PPTyxUql6wszKveIL0Ts/i8tu6sjf8fhy0iL/B8TUY/JmIm3onzfr5EYjaloxOUHvF9Yzf/Pv1h76HY35v9TrVmn+tbz/xOR5//jrbUdf1D+f8BYdu5rOT6I2/FuzMZiLMZ83Nr1Ee3s13jUYjLq0YxG1ONyDOdzysWccgzFhbgQlXg7XouxaEY5xqIeE1GLZlyJZkxHLf+NGompqMVwTEcjpqIcZ2MkXohyVGMohmIwylGL/rgSjZiJyRiP0RjO13ItFvKf++BDxrgWVN1M0MBDguR/tq5Tf8rhkX2+mv8BgIPj1dqw/A8AB8xkc6oyIP8DwIEyrf4HAAAAAAAAAAAAAAAAAAAAAAAAAACA7ZZEGkcj4pfjK8nGzpSlvOH/AxfrSfIl00havXyjdGHw4shYdWy0UqlUqhe/Mbwjo1/zeDSa08PlkaUb792aX16enyvP3Fy4ujQ3v+k1bHX5R/RK32eHjx7vuzSUfXPu+vzNheWlhRuz1zu2QQDYoCvS+CwiTn+0kjxb5PI4NzM6Vp54s1y/eW1pQ2y62iZgi7myzbFFp/Xs6NbkdgD2oO5I47mI+M5PV5IzWY4vjgHSr+WNAXd7eA+Un3dIIk6HHAsAj6on0mhExNzjv0iy44BDsQ/q+1J2TJDvxMzoWL4jiwuzN9+P/BzGoVZU370LrZ772OPHEn0R38zG2qNnIwBf3uFI41cRceN/SvH/+ecBAMB+V4o0Wtf9rSTP7/ZgAAAAAAAAAAAAAAAAAAAAAAAAAAAAYJ9IIo3HIuLTQytJZcP8Lfb/H3l1R0a/Rv9/AHgEXZHG34v+/1X9/7ef3A7AHtQdaQwW/f8H9P8HgAOhJ9J4u+j/P6j//94/ltD/H4BtcDjS+G3R//8l/f8B4EAoRRqt6/5Wkpd3ezAAAAAAAAAAAAAAAAAAAAAAAAAAAACwTxyJND6NiMG/fTfvK7OxL/3GDjOPtWk3k73dX0xvpidfd9FrME2yr23cIQCgrVKk8Uo+tZIM7/ZgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgD0tjTT+GBHJJytJJBHxYUQ5Wq+V3R4cANAZSRqfRsT//nkly/7xSt9nh48e77s0FBGH4lB+SJBsjG80p4fLI0s33rs1v7w8P1eeublwdWlufrObK42MTjUud2JHNqWnw+Pv2fIIS9kx2Qbn8gHPjI7lg15cmL35fjY7TQ5teVMAHFylSOOf+dRKkuz2YACAHdGdpPFfEfHOP+6s1Z1drZq/q/VdJf288LNj67VpqThYWD1mWD1v8ORDpu97fHHu+vzNheWlhRuz19sV4aViuypfANiaJEnjdxEx/s6JPK8m0fvFc9BF3F8j4uIPykVc9GZxqye8D+fJvXRtYXG+/+rS4lwW/8OI+P3PTxXxaU8WXxxURPd6fCWL/SgiPvl4NTby2MNFbGk9tprFXoyI2V/fHVsqYo+sxw5ksWciYvFHd8ceKWJ712MHO/tTBoC9Jav/vxcRPz5/Zy03P6z+X63hp4vXTtf/3RsWKhXb7d6unQeAAyqrkf9Q1P/dber/P0XER/86VcS1aune4v2jG+r5nd8LAOBRZPX/G1k+/8mdtXP5Rf1flNnr9f/3+9Zr+LnitdP1/+F76v9su09v184DwAGV5f9XI2Lgyp21z9s3k/9X6/5O5//SPfk/2+6J7dp5ADigsvz/7YhovnFn7Rq6zeT/s88Vyxffdyr/H7kn/2fbfWbb9h4ADqYs/2f19JtH7qxdF7+X8n+v/A8A2y7L/1+NiI9/c2ftnP5m8v/J4u6ATp//P3pP/s+2+3/btvcAcDAlcSxpZebueCqfGqtP1FzCDwAAAPtJ3t/n2Orp/uSpSNT/AAAAsN8kcbz4/L83nm5NXYuFWIx57f8BAABgv8g//z/eaucXkTwdifofAAAA9psz+f3/+T0A+eN/S3E7f1xPV5qfG0iS9hHJ+TjRijhRdAWaKyJa5xeS3rH6RK1/pDFxqRpfyZ8ykN9pcN+1dee3H5yLZ1pRzxTPJOq9e42lLKraf6ka5+JkK/Jk64mEz529T+TApiMHs0gA2O/OtMnHm8n/5+J0K+J066mAXSfvk1krMisA7BVn8uv/82sAHpj/20QkL7Wp/59Yu6SgP67GUizGXJzP7zbIrzi471p7N1yGcL7N2YD12Gqcb1Plr8cOPELs4I7/uwBAJ51pk4c3k//Pt6n/e11SCAB7yvIHt9+dXVycv9XBid3eRwDgbrI0AAAAAAAAAAAAAADsfTtx/58JEyb+0yZ2+y8T0GlppPGXiEg+WUnKSUR8GFGO1qun9QDA/vTvAAAA//8PhxFw") creat(&(0x7f0000000100)='./file0\x00', 0x158) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) r2 = dup(r1) write$P9_RLERRORu(r2, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) 3m4.422173695s ago: executing program 3 (id=9531): bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000740)={0x2c, r2, 0x1, 0x1000000, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x18, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'syz_tun\x00'}}, @TIPC_NLA_BEARER_PROP={0x4}]}]}, 0x2c}}, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3f, 0x1, 0x0, 0x0, 0x0, 0x20000000003c, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, @perf_config_ext={0x3, 0x1}, 0x19082, 0x7ffd, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000bc0)={'pim6reg\x00', 0x5}) ioctl$TUNSETFILTEREBPF(r4, 0x800454e1, &(0x7f0000000040)) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r3}, 0x0, &(0x7f0000000040)}, 0x20) r5 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) syz_usb_disconnect(r5) syz_usb_connect(0x4, 0x24, &(0x7f0000000100)=ANY=[], 0x0) ioctl$EVIOCRMFF(r5, 0x40085507, 0x0) syz_open_dev$sg(0x0, 0x0, 0x8002) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000040)="2e00000011008188040f80ec59acbc0413a1f8480b0000", 0x17}, {&(0x7f00000000c0)="bc588bb49cff7d081d465efc09c57bbfb7b83fa636", 0x15}], 0x2}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'geneve0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x1f, &(0x7f00000000c0)={&(0x7f0000000400)=@newlink={0x34, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x600}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x4}}}]}, 0x34}, 0x1, 0x2}, 0x0) r8 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000280)=0xffffffffffffffff, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1c, 0xc, &(0x7f00000002c0)=ANY=[], 0x0, 0x9, 0x0, 0x0, 0x41100, 0x0, '\x00', r7, @fallback=0x28, r8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sendmsg$nl_route_sched(r0, &(0x7f0000000500)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000780)=@newqdisc={0x26c, 0x24, 0x0, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x0, r7, {0xfff3, 0x3}, {0x4, 0x3}, {0xc, 0xe}}, [@TCA_STAB={0x174, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x6, 0xdb, 0x2, 0x137c, 0x1, 0x5, 0x8, 0x6}}, {0x10, 0x2, [0x1d, 0x8, 0x4, 0x6, 0x26ae, 0x6]}}, {{0x1c, 0x1, {0x1, 0x0, 0xff, 0x0, 0x2, 0x8d, 0x8, 0x4}}, {0xc, 0x2, [0x1c00, 0x8001, 0xfffd, 0x7ff]}}, {{0x1c, 0x1, {0x9, 0x6, 0xd7, 0x8, 0x2, 0x4, 0x2, 0x6}}, {0x10, 0x2, [0x4d8, 0x3, 0x101, 0x42, 0x0, 0x5]}}, {{0x1c, 0x1, {0x8, 0x38, 0x0, 0xc, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x2, [0x74e9, 0x1]}}, {{0x1c, 0x1, {0xfa, 0x40, 0x81, 0x7, 0x1, 0xffffcf34, 0x7, 0x1}}, {0x6, 0x2, [0x8]}}, {{0x1c, 0x1, {0xa, 0x7, 0x2, 0x10, 0x1, 0x80, 0x1, 0x1}}, {0x6, 0x2, [0x0]}}, {{0x1c, 0x1, {0x3, 0x3, 0x9, 0xfffffffd, 0x0, 0x6, 0xfff, 0x9}}, {0x16, 0x2, [0x5fb, 0x9, 0x7ff, 0x9, 0x8001, 0x3ec, 0x3, 0x9, 0x1]}}, {{0x1c, 0x1, {0x81, 0x3, 0xffff, 0x3, 0x0, 0xab85, 0x3, 0x1}}, {0x6, 0x2, [0x5]}}, {{0x1c, 0x1, {0x1, 0x7, 0x1000, 0x8, 0x2, 0x80000001, 0x2, 0x6}}, {0x10, 0x2, [0x3, 0x9, 0x3, 0x1000, 0x7ff, 0x2]}}]}, @qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x6, 0xf, 0x9, 0x9, 0x6}, 0xfffffff7, 0x0, 0x1, 0x4, 0x3, 0x13, 0x19, 0x1b, 0x0, 0x1, {0x9, 0xfd9c, 0x914, 0x1, 0xdf, 0xfffff801}}}}, @qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_INITIAL_QUANTUM={0x8, 0x4, 0xf}]}}, @TCA_STAB={0x2c, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x4, 0x6, 0x2, 0x10001, 0x2, 0x5, 0x9, 0x3}}, {0xa, 0x2, [0x1, 0x2, 0x6]}}]}, @qdisc_kind_options=@q_codel={{0xa}, {0x34, 0x2, [@TCA_CODEL_INTERVAL={0x8, 0x3, 0x3ff}, @TCA_CODEL_ECN={0x8}, @TCA_CODEL_INTERVAL={0x8, 0x3, 0xde}, @TCA_CODEL_ECN={0x8}, @TCA_CODEL_ECN={0x8}, @TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x4}]}}]}, 0x26c}, 0x1, 0x0, 0x0, 0xc040}, 0x4000) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='hrtimer_init\x00', r9}, 0x10) clock_nanosleep(0x9, 0x0, &(0x7f0000000080)={0x0, 0x3938700}, 0x0) 3m3.496590983s ago: executing program 3 (id=9546): syz_clone(0x40800000, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket(0x10, 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000300)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000340)=@gcm_128={{0x303}, "0400", "0d00e8ffff1a8600", "fdfff7ff", "8657e22727751fe4"}, 0x28) write$binfmt_script(r1, &(0x7f0000000780)={'#! ', './file0'}, 0xb) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000280)={&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0}, &(0x7f0000000240)=0x40) close_range(r0, r1, 0x0) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r0, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x3c, r2, 0x200, 0x70bd2d, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x4000010) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000800007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @void, @value}, 0x90) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001a80)=ANY=[@ANYBLOB="0e00000004000000080000000b"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a999850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000400)='kfree\x00', r4}, 0x10) syz_emit_ethernet(0x72, &(0x7f0000000600)={@broadcast, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00 \x00', 0x3c, 0x3a, 0xff, @ipv4={'\x00', '\xff\xff', @private=0xa010100}, @local, {[], @time_exceed={0x3, 0x0, 0x0, 0xb2, '\x00', {0xe, 0x6, "cb8a57", 0x4, 0x21, 0x1, @empty, @rand_addr=' \x01\x00', [], "93b966d623503423f1840134"}}}}}}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010200000000000000020000000900010073797a300000000040000000030a01010000000000000000020000000900010073797a30000000000900030073797a32000000001400048008000140000000000800024000000b002c000000030a03000000000000000000020000000900010073797a30000000000900030073797a32"], 0xb4}}, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x8, 0x3, 0x3b0, 0x0, 0x43, 0xa0, 0x1d0, 0x98, 0x318, 0x178, 0x178, 0x318, 0x178, 0x49, 0x0, {[{{@ip={@loopback, @local, 0x0, 0x0, 'veth0_to_bond\x00', 'ip6erspan0\x00'}, 0x12a, 0x1b0, 0x1d0, 0x0, {0x0, 0x7a010000}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x8, 0x0, 'syz0\x00'}}, @common=@unspec=@helper={{0x48}, {0x0, 'ftp-20000\x00'}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0xe8, 0x148, 0x0, {}, [@common=@unspec=@connbytes={{0x38}, {[{0xb}]}}, @common=@set={{0x40}, {{0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x300]}}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@multicast1}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x410) 3m3.273285625s ago: executing program 3 (id=9549): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="01000000010000000800000008"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020641c00000000002008007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000580)={r2}, 0xc) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYRES32=0x0], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x60, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000340)='kfree\x00', r3}, 0x10) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000010000000000000000030000850000007b00000095"], &(0x7f0000000600)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r5}, 0x10) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000004c0)={{0x14, 0x10, 0x4}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x7, 0x0, 0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x25}]}, @NFT_MSG_NEWSETELEM={0x80, 0xc, 0xa, 0x301, 0x0, 0x0, {0x7, 0x0, 0x8}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x54, 0x3, 0x0, 0x1, [{0x50, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPRESSIONS={0x44, 0xb, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x3}, @NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x10}]}}}, {0x14, 0x1, 0x0, 0x1, @counter={{0xc}, @val={0x4}}}]}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x104}}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000480)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000400), 0x0}, 0x20) modify_ldt$read(0x0, 0x0, 0x0) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff0180040008003950"], 0x15) r7 = dup(r6) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYRES32=r2], 0x50) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x7, &(0x7f0000000440)=ANY=[@ANYRES32=r8, @ANYRES32=r9], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={0x0, r10}, 0x18) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r11, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c00038008000140000000000800024000000000180003801400010076657468305f746f5f6873720000000058000000160a0101000b000000000000010000000900020073797a32000000000900010073797a30000000002c000380180003801400010076657468305f746f5f687372000000000800024000"], 0xf8}, 0x1, 0x0, 0x0, 0xc000}, 0x40) r12 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(r12, 0x8910, &(0x7f0000000000)={'ip6gretap0\x00', @ifru_mtu=0x6}) ioctl$sock_netdev_private(r12, 0x8914, &(0x7f0000000000)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 3m2.487265871s ago: executing program 3 (id=9557): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'wlan1\x00', 0x0}) r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x2000) ioctl$SNDRV_TIMER_IOCTL_SELECT(r5, 0x40345410, &(0x7f0000000540)={{0x1, 0x2}}) close(r5) sendmsg$NL80211_CMD_SET_CHANNEL(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)={0x1c, r3, 0x100, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8, 0x3, r4}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x48081}, 0x0) gettid() syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000100), 0x2, 0x500, &(0x7f0000000500)="$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") r6 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) syz_clone(0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x2000, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(r6, 0x2401, 0x0) pwritev2(0xffffffffffffffff, 0x0, 0x0, 0x7800, 0x0, 0x3) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r7}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r8}, 0x10) unshare(0x20000400) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 3m2.104930165s ago: executing program 3 (id=9566): r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x220001, 0x120) socket$xdp(0x2c, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000140)={'syztnl2\x00', &(0x7f00000000c0)={'syztnl0\x00', 0x0, 0x2f, 0x9, 0x4, 0x7, 0x22, @local, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x1, 0x8, 0x2, 0x7f}}) sendmsg$nl_route_sched(r1, &(0x7f0000000900)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000008c0)={&(0x7f0000000180)=@newchain={0x730, 0x64, 0x20, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0xd, 0x6}, {0xc}, {0x1, 0x4}}, [@TCA_RATE={0x6, 0x5, {0x9, 0x32}}, @TCA_CHAIN={0x8, 0xb, 0x3}, @filter_kind_options=@f_bpf={{0x8}, {0x6f4, 0x2, [@TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_CLASSID={0x8, 0x3, {0x2, 0xffff}}, @TCA_BPF_ACT={0x684, 0x1, [@m_gact={0x1ec, 0xa, 0x0, 0x0, {{0x9}, {0xd0, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0xc, 0x3, {0x2, 0x174e, 0x20000000}}, @TCA_GACT_PARMS={0x18, 0x2, {0xa, 0x80000001, 0x3, 0xffffdfc7, 0x668}}, @TCA_GACT_PARMS={0x18, 0x2, {0x6, 0x3, 0x3, 0xa00, 0x6ed0}}, @TCA_GACT_PARMS={0x18, 0x2, {0xd, 0x1, 0x3, 0x6, 0x2}}, @TCA_GACT_PARMS={0x18, 0x2, {0x81, 0x3, 0x20000000, 0x7, 0x2d44}}, @TCA_GACT_PROB={0xc, 0x3, {0x1, 0x1bc4}}, @TCA_GACT_PROB={0xc, 0x3, {0x0, 0x14b8, 0x4}}, @TCA_GACT_PARMS={0x18, 0x2, {0x9, 0x5, 0x2, 0x6, 0x126}}, @TCA_GACT_PARMS={0x18, 0x2, {0xf, 0x3, 0x0, 0x6, 0x9}}, @TCA_GACT_PARMS={0x18, 0x2, {0xbcdb, 0x200, 0x20000000, 0x3, 0x5}}]}, {0xf1, 0x6, "f82700e6538680bf7c98c86ff5acfec985f834c28f3290d5d1aa76ce42d3417ac4039768b09a767266b616ebf855383fea01c4e1ce88c23e042a666bb3ff7862a3c9cda8d05d85269e899870b8292cff24f17d746dd6c11efe4f5cba5842f489e6d181bf6f7c41fb4bb55f38f9fb8d2f5462f03e39e2f724a5385fd4eeef2eec5a9f80334bfa86df9203814b6a42f01063da5a396e8b0624cdbac9eb87b3e898b48f859677f0f9a4944013f0ee65ae959631e882b657c0301ecf8cef349d40f91ce80ce2b99bd23915f64dd2a2b4320ad5681de5ee09167a5f5e674a8f00a004b1c3ff0934f1f35b0afc2103e5"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_tunnel_key={0xf8, 0x1, 0x0, 0x0, {{0xf}, {0x20, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x4e23}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @private0={0xfc, 0x0, '\x00', 0x1}}]}, {0xac, 0x6, "7174ec3a38055757bcf9485d6a2c16450f67b93acfd2e4b6b196718c01ad8fc02f529800a97ad49eb648c9ffa9b8d7e84123d46f2408ed0472a80690ce217f55674c4eb4249584484be8dfc7dd365c84f366e31a54aa07db5a59856e9c00aa66e02041c4c3935b652472d44d05fde8eba3189d1aca018fa9bbb6d7f147505f6cc0c0421aa2b9f71e4d3b14b151ed2471558c82be10136ef218e3b5a322cbc5f8e970fb6b6b823d83"}, {0xc}, {0xc, 0x8, {0x4, 0x1}}}}, @m_skbmod={0x110, 0x9, 0x0, 0x0, {{0xb}, {0x48, 0x2, 0x0, 0x1, [@TCA_SKBMOD_DMAC={0xa, 0x3, @local}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x3}, @TCA_SKBMOD_DMAC={0xa, 0x3, @local}, @TCA_SKBMOD_SMAC={0xa, 0x4, @multicast}, @TCA_SKBMOD_DMAC={0xa, 0x3, @remote}, @TCA_SKBMOD_SMAC={0xa, 0x4, @local}]}, {0x9f, 0x6, "54ac5e953a12f9e1515061e36ed254f0a3e18a8943c4ad504099db9a47d6da1ed9fdc7e0467acfe56124ef0e8db94ffbf0fb4a60426aa703055450eb0ab8de427894848685928d7d1fd4b7e260c313f015be67675e33d67ea75a205999657f60c7a3b7430646aa409da6a2b867bfdb19cb0d3d6a010cf06d58bc501362511395b95c5bd3c507fd25ff6675761f38254c290a0e49f43d1420b2634b"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x2}}}}, @m_nat={0x180, 0xa, 0x0, 0x0, {{0x8}, {0xa4, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x800, 0x8, 0x10000000, 0x49, 0x10}, @dev={0xac, 0x14, 0x14, 0x3c}, @dev={0xac, 0x14, 0x14, 0x44}, 0xff000000}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x7, 0xad, 0x20000000, 0x3, 0xea7c}, @local, @private=0xa010102, 0xffffffff, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x2, 0x0, 0x5, 0x6, 0xfffffffa}, @private=0xa010101, @broadcast, 0xff000000, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x7fff, 0x8, 0x8, 0x4, 0x8}, @multicast2, @multicast1, 0x0, 0x1}}]}, {0xb7, 0x6, "938b719bdf5c4ef125ffc3cb0165c9fb5c413b5a0c2b70be17231cf246cd3ed808b45f3b7b7c5d4cf98dab3698d9e9bfd8f63679570db851ba28b46b33fdbe518a8417a8e0d4106ff4516e5c2eb46ea872aaf2150d15f4858c25fc7190a2d086982b896056e3bdbf3ac712bab407fa0ee2e6096ef1e3372b1add0a32bb472114350aa68674e1f02430457bc648eb4770d2dee3f0df7255f1b82fc31d25e8ba106a2284799595702b5187d6237123f02719bb0b"}, {0xc}, {0xc, 0x8, {0x2, 0x1}}}}, @m_ctinfo={0x10c, 0x4, 0x0, 0x0, {{0xb}, {0xc, 0x2, 0x0, 0x1, [@TCA_CTINFO_ZONE={0x6, 0x4, 0x576}]}, {0xd6, 0x6, "837499675cfd44d038bc0208fd4da4a949d8023d902570cd5ae3249aca495b24e4f29d12711affb4c9bfaaad8c19f1d4c29ca57c884eb9514afb4afa2bfd549253914d1d14b576b98e29e25336e49eb38e25f2d412258fa7b4b95c2882072716df2c3e7bcdaae1bd29b00cafb465989892546cb6b8da16e4de2d935f71fd2b7988720377d768f616169c858a9422d07d8ef11049b95638871ef7dc84abaa8f6e14d860f1502d934fd172282770b46cfe13af020b09dbbe05ca8810af41d87c2431cef2737e91de92e4e02715c0577d1395fd"}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_CLASSID={0x8, 0x3, {0x8, 0xf}}, @TCA_BPF_FD={0x8, 0x6, r1}, @TCA_BPF_OPS={{0x6, 0x4, 0x6}, {0x34, 0x5, [{0x84, 0x7, 0x8, 0xd}, {0x7, 0x7, 0x1, 0x1}, {0x9, 0x2, 0x9, 0x8}, {0xa4, 0x68, 0x3}, {0x2b9e, 0xc, 0x4, 0x9}, {0x5, 0x7, 0x8, 0x10}]}}]}}]}, 0x730}, 0x1, 0x0, 0x0, 0x40004}, 0x804) setsockopt$MRT6_INIT(r1, 0x29, 0xc8, &(0x7f0000000940), 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f00000009c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_MPATH(r1, &(0x7f0000000ac0)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000a80)={0x0}, 0x1, 0x0, 0x0, 0x20040000}, 0x80d1) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000b00), 0x400581, 0x0) r4 = syz_genetlink_get_family_id$gtp(&(0x7f0000000b80), r1) sendmsg$GTP_CMD_ECHOREQ(r3, &(0x7f0000000c40)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000c00)={&(0x7f0000000bc0)={0x30, r4, 0x8, 0x70bd25, 0x25dfdbfc, {}, [@GTPA_MS_ADDR6={0x14, 0xc, @private2}, @GTPA_O_TEI={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x40008000}, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000cc0)={&(0x7f0000000c80)='cachefiles_vfs_error\x00', r1, 0x0, 0xac}, 0x18) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000d40), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r5, &(0x7f0000000e00)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000d80)={0x30, r6, 0x0, 0x70bd28, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0x4}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000}, 0x0) syz_genetlink_get_family_id$nl802154(&(0x7f0000000e40), r5) r7 = openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000e80), 0x2, 0x0) flistxattr(r7, &(0x7f0000000ec0)=""/219, 0xdb) sendmsg$WG_CMD_SET_DEVICE(r3, &(0x7f00000010c0)={&(0x7f0000000fc0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000001080)={&(0x7f0000001000)={0x44, 0x0, 0x200, 0x70bd25, 0x25dfdbfe, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg2\x00'}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r2}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}]}, 0x44}, 0x1, 0x0, 0x0, 0x15}, 0x4000) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000001100)=0x0) sched_setaffinity(r8, 0x8, &(0x7f0000001140)=0x6) syslog(0xa, &(0x7f0000001180)=""/7, 0x7) setsockopt$IP_VS_SO_SET_DELDEST(r1, 0x0, 0x488, &(0x7f00000011c0)={{0x2e, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e24, 0x4, 'wlc\x00', 0x2, 0x0, 0x2}, {@private=0xa010100, 0x4e21, 0x2, 0x9, 0x5, 0xd79d}}, 0x44) syslog(0x4, 0x0, 0x0) r9 = openat$nci(0xffffffffffffff9c, &(0x7f0000001240), 0x2, 0x0) cachestat(r9, &(0x7f0000001280)={0x7, 0xb3}, &(0x7f00000012c0), 0x0) socket$inet6_udp(0xa, 0x2, 0x0) copy_file_range(r7, &(0x7f00000013c0)=0x10000, r1, &(0x7f0000001400)=0x6, 0x0, 0x0) 3m1.745305518s ago: executing program 3 (id=9572): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000500)='./mnt\x00', 0x1000410, &(0x7f0000000100)={[{@grpid}, {@grpquota}]}, 0x4, 0x4eb, &(0x7f0000000540)="$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") r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001200)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bind$tipc(0xffffffffffffffff, &(0x7f00000002c0)=@nameseq={0x1e, 0x1, 0x2, {0x0, 0x0, 0x1}}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) r2 = open(&(0x7f0000000040)='./bus\x00', 0x145142, 0x0) ftruncate(r2, 0x2007ffb) sendfile(r2, r2, 0x0, 0x800000009) 3m1.742256657s ago: executing program 33 (id=9572): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000500)='./mnt\x00', 0x1000410, &(0x7f0000000100)={[{@grpid}, {@grpquota}]}, 0x4, 0x4eb, &(0x7f0000000540)="$eJzs3c9vVFsdAPDvnXZoKQMFZaFGBRFFQ5j+ABqCC2GjMYTESFy5gNoOTdMZpum0SCuLsnRvIokr/RPcuTBh5cKdO925wYUJKnkv9CVvMS/3zqUd2g7te7Qd6Hw+ye2955xhvufMcM6Ze2B6AuhZZyNiNSKORMS9iBjO85P8iButI33cq5ePp9ZePp5Kotm8878kK0/zou3PpI7lzzkYET/7ccQvk61xG8src5PVamUhT48s1uZHGssrl2YLec74xNjE6LXLV8f3rK1nan968aPZWz//y5+/8fzvq9//dVqt0m+OZ2Xt7dhLraYXo9SW1x8Rt/YjWJf0539/+PCkve1LEXEu6//D0Ze9mwDAYdZsDkdzuD0NABx26f1/KZJCOV8LKEWhUC631vBOx1ChWm8sXhyuLz2YjmwN62QUC/dnq5XRfK3wZBSTND2WXW+kxzelL0fEqYj47cDRLF2eqlenu/nBBwB62LFN8//HA635HwA45Aa7XQEA4MCZ/wGg95j/AaD3fI7537cDAeCQcP8PAL3H/A8AvWfH+f/JwdQDADgQP719Oz2aa/nvv55+uLz0g9LDS9OVxly5tjRVnqovzJdn6vWZaqU81Wzu9HzVen1+7Mp6srG8crdWX3qweHe2NjlTuVsp7nN7AICdnTrz7J9JRKxeP5od0baXg7kaDrdCtysAdE1ftysAdI3v80Dv2sU9vmUAOOS22aL3DR3/i9BTm7/Ch+rCV63/Q6+y/g+964ut//9wz+sBHDzr/9C7ms3Env8A0GOs8QPv9O//AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA0KNK2ZEUytle4Kvpz0K5HHE8Ik5GMbk/W62MRsSJiPjHQHEgTY91u9IAwDsq/CfJ9/+6MHy+tLn0SPLJQHaOiF/9/s7vHk0uLi6Mpfn/X89ffJrnjx/pRgMAgHY3tma15un83HYj/+rl46nXx0FW8cXN1uaiady1/GiV9Ed/dh6MYkQMfZTk6Zb080rfHsRffRIRX9lo/6O2CKVsDaS18+nm+Gns4/sQf+P13xy/8Eb8QlaWnovZa/HlPagL9JpnN1vjZN730i6W979CnM3O2/f/wWyEenevx7+1LeNfYX3869sSP8n6/Nn19Ntr8uLKX3+yJbM53Cp7EvG1/u3iJ+vxkw7j7/ldtvFfX//muU5lzT9EXIjt47fUsmF2ZLE2P9JYXrk0W5ucqcxUHoyPT4xNjF67fHV8JFujbv3823Yx/nv94olO8dP2D3WIP7hD+7+zy/b/8dN7v/jWW+J/79vbv/+n3xI/nRO/u8v4k0M3Om7fncaf7tD+nd7/i7uM//zfK9O7fCgAcAAayytzk9VqZWGHi/Sz5k6PcfFhXsRqxHtQDRfv1UW3RyZgv210+m7XBAAAAAAAAAAAAAAA6KSxvDI3EPv7daJutxEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIDD67MAAAD//w/PzvM=") r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001200)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bind$tipc(0xffffffffffffffff, &(0x7f00000002c0)=@nameseq={0x1e, 0x1, 0x2, {0x0, 0x0, 0x1}}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) r2 = open(&(0x7f0000000040)='./bus\x00', 0x145142, 0x0) ftruncate(r2, 0x2007ffb) sendfile(r2, r2, 0x0, 0x800000009) 2m56.291193981s ago: executing program 1 (id=9637): creat(&(0x7f00000002c0)='./file0\x00', 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000280)='msdos\x00', 0x0, &(0x7f0000000000)='\x06\x00\x00\x00\x04\xb0\xfe\x98\x9a!s\x91]\xab\xc9\xa2IV\xb6-\xd9z\x81\x91\x8aP}I\xc6\x0e\xd9\v\xda\xbfS\x16 \x04\r\xcd\xdb\x9a\xd4\xaf\r\x11\xa0\xd7\xd7\xb6\x9bz\x99\xaf\xfd\x87fN\xad\x90U\xb4A\xdf\xabB\xbba\x7f\xb8\x96\x1a\xe7\xc1\xab\x16\x02\x000x0}) r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x2000) ioctl$SNDRV_TIMER_IOCTL_SELECT(r5, 0x40345410, &(0x7f0000000400)={{0x1, 0x1, 0x0, 0x0, 0x2}}) close(r5) sendmsg$NL80211_CMD_SET_CHANNEL(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="00012abd7000ffdbdf254100f70008000300", @ANYRES32=r4, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x48081}, 0x0) gettid() syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000100), 0x2, 0x504, &(0x7f0000000a00)="$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") r6 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) syz_clone(0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x2000, 0x0, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0x13, 0x2000ac0a, r7) syz_io_uring_submit(0x0, 0x0, &(0x7f00000003c0)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x66, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r7}}) ioctl$PERF_EVENT_IOC_DISABLE(r6, 0x2401, 0x0) pwritev2(0xffffffffffffffff, 0x0, 0x0, 0x7800, 0x0, 0x3) r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r8}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r9}, 0x10) unshare(0x20000400) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x2, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 2m55.861046855s ago: executing program 1 (id=9650): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r0, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f00000005c0)=r1}, 0x20) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000380)={0x0, r2}, 0x8) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x800000, @void, @value}, 0x94) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r4 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000400), r4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYRES8=r3], 0x0, 0x8, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r5, 0x0, 0x9135}, 0x18) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) close(r6) 2m55.496475498s ago: executing program 1 (id=9658): r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f00000001c0)='mm_page_alloc\x00', r1}, 0x10) ioctl$AUTOFS_IOC_FAIL(r0, 0x4c80, 0xffffffffffffffb6) 2m55.487168548s ago: executing program 34 (id=9658): r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f00000001c0)='mm_page_alloc\x00', r1}, 0x10) ioctl$AUTOFS_IOC_FAIL(r0, 0x4c80, 0xffffffffffffffb6) 1m23.853560851s ago: executing program 5 (id=11618): mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000480)={{}, &(0x7f0000000400), 0x0}, 0x20) bpf$MAP_CREATE(0x1900000000000000, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) r2 = dup(r1) write$P9_RLERRORu(r2, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) write$binfmt_elf64(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB, @ANYRESHEX=r2]) creat(&(0x7f0000000380)='./file0\x00', 0x80) 1m23.828368001s ago: executing program 5 (id=11619): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000de0000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) r1 = open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) fcntl$setlease(r1, 0x400, 0x0) open(&(0x7f00009e1000)='./file0\x00', 0x0, 0x0) 1m23.809288041s ago: executing program 5 (id=11620): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007d000000180100002020732600000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000280)='./file1\x00', 0x8000, &(0x7f0000000000)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c004845160000000000"], 0x1, 0x2bd, &(0x7f0000000b40)="$eJzs3N9LU38YwPFHN92c6PaFL0FB9VA3dXPQ1X2NUIgGhTmpLoJjntXYaZNzxmIROYjotr9DuuwuqP4Bb6Kb7ruTIOjGi2jh+aGbTpu65dL3C8Z5js/n8fOoU54J+6zeef24mHeNvFmRwbjKoEhd1kRS61FgILgOevGwNKvLxdEfX07fvnvvRiabnZpRnc7MXkqr6vjZ90+evTn3sTI693b8XUxWUvdXv6e/rpxYObn6a/ZRwdWCq6VyRU2dL5cr5rxt6ULBLRqqt2zLdC0tlFzLacnn7fLiYk3N0sJYYtGxXFfNUk2LVk0rZa04NTUfmoWSGoahYwk53qIdrMktz8yYmR3TjUhXO0L3xVpvR9qtcZxMvX0yt9yrvgAAQP/aff73Z/2d5//snH/t8vwvwvzfI/WWuz/M/zgSHCdjJoLf31bM/wAAAAAAAAAAAAAAAAAAAAAA/AvWGo1ko9FIhtfwERORuIiE94fdJ3pjnz//K4fULrqs6Y17cRH7VTVXDa5+PpOXgthiyYQk5af3fAj48fT17NSEeoaCT5kTsZequYh3NoFXH0q1qz/z36Rfr/Jhva4a1A9Jonn/tCTl//b7pzfrw+MQlqq5YblwvqnekKR8eiBlsWXBe16vPy6/EMlOPZ9UvXYzu2X/EW8dAAAAAABHgaEbUq2vf/2zHw1vQVy25/36Pfx/YMvr66ic6uSISgAAAAAAcGBu7WnRtG3L2UcQE5EDlB/VICJ90caW4KqI9EEbTUG8l/3ERcT/iO6n/NtGeUdVjQ7WREWkT77zm8FAdMfUYf9lAgAAANBtm0P/Hoo+v+xhRwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHD+dHhUWrt+WChO7lDdtF/nrXyAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADQR34HAAD//8fyFuQ=") bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x100) getdents(r1, &(0x7f0000001fc0)=""/184, 0xb8) prctl$PR_SET_NAME(0xf, &(0x7f0000000200)='gtp\x00\xe4\xaa\xae\xdf~2\xa6X\x14\x92\xdarV\xf4U\xf7\xa2\xc3l\x1b@\xaf\xf9\xc9\xa9#\xf0S\xd9=q\xd6\x14\xedt\xc8!W\xe9@\xeb\x7f~\tB0EE\x9a:\xb7\xff\xc1\xfc\x9a\x1f\xf2\xfb\x19\xda#x\xc5F\x1c~\x8c\xe1\xdf\xdc\x01k\f\xde0~\x95\r\xa2\x80\b4M\x14\xe7\xd0\t`n!g\x14\xe6\xd1\xc2\xd3\x88\xf8cVtd\xbeY\xa5\xe7\x16sD\x96}7\n\x88e\x00\xf0\xff\xff\xf0\xcb\x94\xb4S\x00\x00') bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000300)='mm_page_alloc\x00', r0}, 0x18) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2000002, 0x4ca31, 0xffffffffffffffff, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000005f80)=@newtfilter={0x90, 0x2c, 0xd27, 0x70bd25, 0x2, {0x0, 0x0, 0x0, r5, {0x0, 0x1}, {}, {0x8}}, [@filter_kind_options=@f_flow={{0x9}, {0x58, 0x2, [@TCA_FLOW_ACT={0x54, 0x9, 0x0, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x1, 0x0, 0x20000001, 0x4, 0x2}, 0x1, r5}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}, @TCA_RATE={0x5, 0x5, {0xff, 0x5}}]}, 0x90}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="50000000090601020000000000000000020000000900020073797a31000000000500010007"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) syz_open_dev$vcsn(&(0x7f0000000040), 0x9, 0x40c00) 1m23.638179852s ago: executing program 5 (id=11621): syz_mount_image$ext4(&(0x7f0000000bc0)='ext4\x00', &(0x7f0000000240)='./file1\x00', 0x4000, &(0x7f00000000c0), 0x2, 0xbb8, &(0x7f00000017c0)="$eJzs3M1rXFUbAPDn3kymaZv3nfTlRawbIyItiNOkkmKLYCsVNy4E3QoN6aSETD9IIjVpFhP9B0RdC24EtSgu7LobRbdutN0qLoQisVEQ0cidjyQ2mTS1M70x/f3gzD3nnpl5nmcuM/cemJkA7luD2U0asT8iTiURpeb+NCKK9V5fRK1xv6XF+bFfF+fHklhefumnJJKIuLk4P9Z6rqS53dsc9EXE188m8b831sednp2bHK1WK1PN8aGZsxcOTc/OPTFxdvRM5Uzl3PCRp0YOjxwZOjrSsVp/++74lV8eef6H2u8f/nH557ffT+J49Dfn1tbRKYMxuPKarFWIiNFOB8tJT7OetXUmhds8KO1yUgAAtJWuuYZ7IErRE6sXb6X4/JtckwMAAAA6YrknYhkAAADY4RLrfwAAANjhWt8DuLk4P9Zq+X4j4d66cSIiBhr1LzVbY6YQtfq2L3ojYs/NJNb+rDVpPOyuDUbE99ePfpK16NLvkDdTW4iIBzc6/km9/oH6r7jX159GxFAH4g/eMv431X+8A/Hzrh+A+9PVE40T2frzX7py/RMbnP8KG5y7/om8z3+t67+lddd/q/X3tLn+e3GLMS598O7FdnNZ/U9fee7jVsviZ9u7KuoO3FiIeKiwUf3JSv1Jm/pPbTFG6c+LlXZzede//F7Egdi4/pZk8/8nOjQ+Ua0MNW43jLHw1chH7eLnXX92/Pe0qb/1/0/tjv+FLcZ45eTJT9ftvL7a3bz+9Mdi8nK9V2zueW10ZmZqOKKYvLB+/+HNc2ndp/UcWf0HH938/b9R/dlnQq35OmRrgYXmNhu/fkvMZy5f+qxdPq31X57H/3Sb47+2/i8L64//m1uM8dgXbx1sN7d2/Zu1LH5rLQwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALWlE9EeSllf6aVouR+yNiP/HnrR6fnrm8fHzr547nc1FDERvOj5RrQxFRKkxTrLxcL2/Oj58y/jJiNgXEe+UdtfH5bHz1dN5Fw8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMCKvRHRH0lajog0IpZKaVou550VAAAA0HEDeScAAAAAdJ31PwAAAOx81v8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB02b6Hr15LIqJ2bHe9ZYrNud5cMwO6Lc07ASA3PXknAOSmkHcCQG7ucI3vcgF2oOQ2831tZ3Z1PBcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAtq8D+69eSyKidmx3vWWKzbneXDMDui3NOwEgNz2bTRbuXR7AvectDvcva3wguc183+p9an+f2dW1nAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADYfvrrLUnLEVFs7iuXI/4TEQPRm4xPVCtDEfHfiPi21LsrGw/nnDMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACdNz07NzlarVamsk4azc7KHp3VTtJ4xWrbJR+du+wUY1uksU07eX8yAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACQh+nZucnRarUyNZ13JgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEDepmfnJker1cpUFzt51wgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQH7+CgAA//9gfgp0") mount$tmpfs(0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) syz_emit_ethernet(0x6a, &(0x7f0000000000)={@local, @random="424e1aa2e0d4", @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x1, 0x0, 0x11, 0x0, @private=0xa010101, @dev={0xac, 0x14, 0x14, 0x29}}, {0x0, 0x4e20, 0x48, 0x0, @wg=@cookie={0x3, 0x0, "6d4dfdeb8cf7bbfe143803bec2ce783e04cd32308cdd8dde", "c71cb8adfce542a4bc5a026c208fd0c45787e4aa384e3d26b21ea41cc128364c"}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x6, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="0000000000000000000000001811000000000000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000300)='kmem_cache_free\x00', r3}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r2}, &(0x7f0000000800), &(0x7f0000000840)=r3}, 0x20) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000e73f5aba005c00000000b15ea5067990be11239b11b2a4dddf00ef9118c7ec47e9943bed6343dea9adbebd778e668997f60689ed"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0xe, 0x4, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r5}, &(0x7f0000000240), 0x0}, 0x20) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='mpol=prefer:0']) r6 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x101000, 0x0, 0x22}, 0x18) mknodat$null(r6, &(0x7f00000000c0)='./file0\x00', 0x2, 0x103) 1m23.360717075s ago: executing program 5 (id=11627): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x3e, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x2410, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80107b73, 0x2, @perf_config_ext={0xf, 0x40}, 0x14105, 0x30, 0x6, 0x3, 0x2, 0x10001, 0x4, 0x0, 0x0, 0x0, 0x2004}, 0x0, 0x7, 0xffffffffffffffff, 0xb) syslog(0x2, &(0x7f0000000080)=""/218, 0xda) r0 = socket$key(0xf, 0x3, 0x2) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x2010008, &(0x7f00000001c0), 0xff, 0x52e, &(0x7f0000000640)="$eJzs3cFvI1cZAPBvnDib7GabFDhApZZCi7IVrJ00tI04lCIhOFVClPsSEieK4sRR7LSbqILsX4CEECBxggsXJP4AJLQSF44IqRKcQSoCIdiCBAfoINvjJDjjxFuceNf5/aTZeW/GM9/3vHnjGc/TOIAr69mIeC0i3k/T9IWImMmWF7IpDttT83XvPXh7pTklkaZv/DWJJFvW2VeSzW9km01GxFe/HPGN5HTc+v7B5nK1WtnN6uXG1k65vn9we2Nreb2yXtleXFx4eemVpZeW5gfSzpsR8eoX//i9b//kS6/+4jNv/eHOn299s5nWdLb+ZDse0vhZK9tNL16b7Npg9wMGexQ121PsVKb62+beBeYDAEBvzXP8D0XEJyPihZiJsbNPZwEAAIDHUPr56fh3EpHmm+ixHAAAAHiMFFpjYJNCKRsLMB2FQqnUHsP7kbheqNbqjU+v1fa2V9tjZWejWFjbqFbms7HCs1FMmvWFVvm4/mJXfTEinoyI785MteqllVp1ddhffgAAAMAVcaPr+v8fM+3rfwAAAGDEzA47AQAAAODCuf4HAACA0ef6HwAAAEbaV15/vTmlnd+/Xn1zf2+z9ubt1Up9s7S1t1Jaqe3ulNZrtfXWM/u2zttftVbb+Wxs790tNyr1Rrm+f3Bnq7a33bizEZOX0iAAAADglCc/fv93SUQcfm6qNTVNDDsp4FKMH5WSbJ7T+3//RHv+7iUlBVyKsT5e8+61/OXOE+DxNt69oEdfB0ZPcdgJAEOXnLO+5+CdX2fzTww2HwAAYPDmPpZ///+864GIw8IlpAdcIJ0Yrq6u+//pzLASAS5d6/5/vwN5nCzASCn2NQIQGGX/9/3/c6XpQyUEAAAM3HRrSgql7Ou96SgUSqWIm62fBSgmaxvVynxEPBERv50pXmvWF1pbJn2MEQAAAAAAAAAAAAAAAAAAAAAAAAAAovVU7iRSAAAAYKRFFP6U/LL9LP+5meenu78fmEj+1fpJ4ImIeOuHb3z/7nKjsbvQXP63o+WNH2TLXxzGNxgAAABAt851emv+z2FnAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMCoee/B2yudqY+XTw0q7l++EBGzefHHY7I1n4xiRFz/exLjJ7ZLImJsAPEP70XER/PiJ820jkLmxR/Em3BO/JjN3oW8+DcGEB+usvvN489ref2vEM+25vn9bzzif+ofVO/jXxwd/8Z69P+bfcZ46p2flXvGvxfx1Hj+8acTP+kR/7k+43/9awcHvdalP4qY63z+tI54JyMcl8qNrZ1yff/g9sbW8nplvbK9uLjw8tIrSy8tzZfXNqqV7N/cGN95+ufvn9X+67mff0mWTe/2P5+zv7zPpP+8c/fBhzuVw9Pxbz2XE/9XP85ecTp+IYvzqazcXD/XKR+2yyc989PfPHNW+1eP2198mP//W7122u1UR3m63z8dAOAC1PcPNper1cruyBaaV+mPQBoKj2DhWwPdYZqmabNP5ay6HxH97CeJAbe0kJ/PcaHnEWDYRyYAAGDQjk/6h50JAAAAAAAAAAAAAAAAAAAAXF2X8ZS17pjHj0BOBvEIbQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAgfhvAAAA//89e9P5") sendmsg$key(r0, &(0x7f0000000400)={0x10000000, 0x0, &(0x7f0000000040)={&(0x7f0000000840)=ANY=[@ANYBLOB="020e0080150000000000000000000000030005000000000002004e24ac1e00010000000000000000030006003c000000020000fc34000000000000000000000001001800000000000800120000000200fcffffff000000000600330000000000000000000000eafffd8000000000000000000000000000aa000000000000000000000000000000000400"], 0xa8}}, 0x2) 1m19.824919103s ago: executing program 5 (id=11673): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000de0000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) r0 = open(&(0x7f00009e1000)='./file0\x00', 0x0, 0x0) fcntl$setlease(r0, 0x400, 0x1) 1m19.782887894s ago: executing program 35 (id=11673): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000de0000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) r0 = open(&(0x7f00009e1000)='./file0\x00', 0x0, 0x0) fcntl$setlease(r0, 0x400, 0x1) 2.217756572s ago: executing program 6 (id=13015): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) write$tcp_mem(r0, &(0x7f0000000300)={0x8000000, 0x20, 0x4, 0x20, 0x3f}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x3, &(0x7f00000001c0)={r1, &(0x7f0000000240), 0x0}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r0, 0xffffffffffffffff}, &(0x7f0000000840), &(0x7f0000000880)=r0}, 0x20) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000c00)={'syztnl0\x00', &(0x7f0000000b40)={'syztnl0\x00', 0x0, 0x80, 0x700, 0xbda6, 0x4d2, {{0x13, 0x4, 0x1, 0x0, 0x4c, 0x65, 0x0, 0x2, 0x4, 0x0, @empty, @private=0xa010100, {[@cipso={0x86, 0x6, 0x1}, @noop, @lsrr={0x83, 0x1b, 0x3a, [@loopback, @private=0xa010102, @loopback, @multicast2, @remote, @empty]}, @ssrr={0x89, 0x13, 0x8f, [@rand_addr=0x64010101, @multicast1, @private=0xa010102, @rand_addr=0x64010101]}]}}}}}) bpf$PROG_LOAD(0x5, &(0x7f0000000e80)={0x1b, 0x15, &(0x7f00000009c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffffffff}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @map_val={0x18, 0x7, 0x2, 0x0, r0}, @tail_call={{0x18, 0x2, 0x1, 0x0, r2}}, @cb_func={0x18, 0x2, 0x4, 0x0, 0x3}]}, &(0x7f0000000900)='GPL\x00', 0x4, 0xaa, &(0x7f0000000a80)=""/170, 0x41100, 0x1, '\x00', r3, @fallback=0xc, 0xffffffffffffffff, 0x8, &(0x7f0000000c40)={0x3, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, r0, 0x0, &(0x7f0000000e40)=[r0], 0x0, 0x10, 0x40, @void, @value}, 0x94) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000050000000900000001", @ANYRES32=0x0], 0x48) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fd/3\x00') r8 = socket$l2tp6(0xa, 0x2, 0x73) getsockopt$inet6_buf(r8, 0x29, 0x44, &(0x7f0000000f40)=""/4096, &(0x7f0000001f40)=0x1000) r9 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_udp_SIOCINQ(r7, 0x541b, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r5, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) getsockopt$inet6_mreq(r9, 0x29, 0x14, &(0x7f0000000740)={@local, 0x0}, &(0x7f0000000780)=0x14) perf_event_open(&(0x7f0000000d00)={0x2, 0x80, 0x6d, 0x1, 0x0, 0x0, 0x0, 0x40, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x8, 0x1}, 0x1843, 0x3, 0x0, 0x5, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', &(0x7f0000000100), 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000007c0)=ANY=[@ANYRESDEC=r7, @ANYRES32=r6, @ANYRES32=r4, @ANYRES8=r6, @ANYRESDEC=r5], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', r10, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r11}, 0x10) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f0000000940)={[{@bsdgroups}, {@nodiscard}, {@noblock_validity}, {@grpjquota}, {@grpjquota}, {@noquota}, {@abort}, {@noload}, {@nodiscard}]}, 0x64, 0x50a, &(0x7f0000000200)="$eJzs3VFrHFsdAPD/bHZj06Y3ueqDXvB69V5Ji3Y3aWwbfKgVRJ8Kan2vMdmEkE02ZDdtE4qm+AEEERV80hdfBD+AIAVffBShoM+KiiLa6oMP2rns7iRN091k226zafb3g8mcc2Zm/+dsmNk5M4eZAAbWOxFxLSIep2l6PiLGsvJcNsV2a2qs9+jh3bnGlESa3vhnEklWtvNZSTY/k212KiK+9uWIbybPxq1tbi3PVirl9Sxfqq+slWqbWxeWVmYXy4vl1enpqcszV2YuzUz2pJ1nI+LqF//6g+/+7EtXf/WZ23+6+fdz32pUazRbvrcdzyl/0MJW0wvN72LvBusvGOw4yjdbmBlpt8bQMyX3XnGdAABor3GO/8GI+GREnI+xGDr4dBYAAAB4DaWfH43/JRFpe8MdygEAAIDXSK45BjbJFbOxAKORyxWLrTG8H47TuUq1Vv/0QnVjdb41VnY8CrmFpUp5MhsrPB6FpJGfaqaf5C/uy09HxJsR8f2xkWa+OFetzPf74gcAAAAMiDP7+v//GWv1/wEAAIATZrzfFQAAAABeOf1/AAAAOPn0/wEAAOBE+8r1640p3Xn/9fytzY3l6q0L8+XacnFlY644V11fKy5Wq4vNZ/atHPZ5lWp17bOxunGnVC/X6qXa5tbNlerGav3m0lOvwAYAAACO0Jsfv/+HJCK2PzfSnBqGu9u0y9WA4yq/m0qyeZvd+o9vtOZ/OaJKAUdiqN8VAPom3+8KAH1T6HcFgL5LDlnecfDOb7P5J3pbHwAAoPcmPtr5/n/uwC23D14MHHt2Yhhc7v/D4Gre/+92JK+TBThRCs4AYOC99P3/Q6Xpc1UIAADoudHmlOSK2eW90cjlisWIs83XAhSShaVKeTIi3oiI348VPtDITzW3TA7tMwAAAAAAAAAAAAAAAAAAAAAAAAAALWmaRAoAAACcaBG5vyW/bj3Lf2LsvdH91weGk/+ORfaK0Ns/vvHDO7P1+vpUo/xfu+X1H2XlF/txBQMAAAAGwnO9wH+nn77TjwcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAXnr08O7cznSUcf/xhYgYbxc/H6ea81NRiIjT/04iv2e7JCKGehB/pPHnI+3iJ41q7YZsF3+kB/G37x0YP8azb2F//OGIONOD+DDI7jeOP9fa7X+5eKc5b7//5SOeyr+ozse/2D3+DXU4/pztMsZbD35R6hj/XsRb+fbHn534SYf473YZ/xtf39rqtCz9ScRE29+f5KlYpfrKWqm2uXVhaWV2sbxYXp2enro8c2Xm0sxkaWGpUs7+to3xvY/98vFB7T/dIf74Ie1/r8v2///BnYcfaiUL7eKfe7dN/N/8NFvj2fi57LfvU1m6sXxiJ73dSu/19s9/9/ZB7Z/v0P7D/v/numz/+a9+589drgoAHIHa5tbybKVSXj+xiUYv/RhUQ+IYJr7d0w9M0zRt7FMv8TlJHIevpZno95EJAADotScn/f2uCQAAAAAAAAAAAAAAAAAAAAyuo3ic2P6Y27uppBeP0AYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA6In3AwAA///d8Nla") 2.195757343s ago: executing program 2 (id=13016): r0 = syz_open_procfs(0x0, &(0x7f0000000200)='ns\x00') getdents(r0, &(0x7f0000000740)=""/24, 0xff90) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffff, 0x4}, 0x6) write$binfmt_misc(r1, &(0x7f0000001280), 0x6) select(0x40, &(0x7f0000000000)={0xfffffffffffffffd, 0xb, 0xd3, 0x9, 0x9, 0x2, 0xf9, 0x8}, &(0x7f0000000040)={0x7fffffff, 0x40, 0x9e, 0x5, 0x9, 0x0, 0x2, 0x5}, 0x0, &(0x7f0000000180)) r2 = socket(0x2, 0x80805, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000100)={'veth1_vlan\x00', &(0x7f0000000140)=@ethtool_gstrings={0x34, 0x6, 0x18}}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_buf(r3, 0x29, 0x20, &(0x7f00000000c0)="0bbb268dd6ffa80800000000000000000000210d0000aaa8fa017242ba9380d424000000000000002900000002000000", 0xfe60) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001880), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000018c0)={0x124, r5, 0xacf5e67dd0b583a1, 0x0, 0x0, {{0x5}, {@val={0x8}, @void}}, [@beacon=[@NL80211_ATTR_FTM_RESPONDER={0x108, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_LCI={0x104, 0x2, "58bacf852d6cd8a0a67092951106db5fd4dd54d1a8ff25aaeb13427f8c41e0abe5a84337a19781305b9c53aab392e5318112b819a8c9ab7ab877d3f04141fb27934282376cfb3ce4daed06804de7b8fcd2d6f1c845dd2c6369f01684ad34b7935bd453d5dafc1b3e7f1136e3a64c7a1d210fca7de358cacb72c8a9eee543c39ed2e6a2f0e5b3bb98f042c4271c73ed0324262834a9f060a7cb6b01385dc22e30e45d1f610e68961fea21fd87903356797adecd523ba5bf21a72a030d296516e6e7aaccbf19e64d87aa8c18489eb244b4161fb996c867ed53be235232f8fc4d98cc385bdd99973d126dd9c87bff321d062883b96ae5cc8bf41b958ef22451753e"}]}]]}, 0x124}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'wlan1\x00'}) r6 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000140)={'batadv0\x00', &(0x7f0000000000)=@ethtool_stats}) 2.171063573s ago: executing program 2 (id=13017): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44000000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r1}, 0x18) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000080000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb70300000800"], 0x0, 0x10000, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7fffffff, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kfree\x00'}, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x30000c6, &(0x7f0000000080), 0x1, 0x553, &(0x7f0000001080)="$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") r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) fallocate(r3, 0x0, 0x0, 0x8000c62) 2.037709884s ago: executing program 2 (id=13018): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="1400000010000100edff0000000000000000000a58000000060a09040000000000000000020000002c000480280001800d00010073796e70726f787900000000140002800500020009000000080003400000000a0900010073797a30000000000900020073797a320000000014000000110001"], 0x80}}, 0x0) bpf$ENABLE_STATS(0x20, &(0x7f0000000800), 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffb}]}) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000000000100000000000000000850000007d000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={0x0, r2}, 0x18) r3 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r3, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r4 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r3, 0x5) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000400)={'sit0\x00', &(0x7f0000000500)={'gre0\x00', 0x0, 0x1, 0x20, 0x6, 0x7ffd, {{0x15, 0x4, 0x1, 0x2, 0x54, 0x67, 0x0, 0x6, 0x4, 0x0, @remote, @multicast2, {[@timestamp={0x44, 0x8, 0xec, 0x0, 0x1, [0x4a2]}, @ra={0x94, 0x4, 0x1}, @end, @noop, @rr={0x7, 0x7, 0x9b, [@loopback]}, @lsrr={0x83, 0x27, 0x37, [@private=0xa010101, @multicast1, @multicast2, @multicast1, @loopback, @dev={0xac, 0x14, 0x14, 0x3c}, @multicast1, @local, @local]}, @timestamp={0x44, 0x4, 0x86, 0x0, 0x7}]}}}}}) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e20, @local}, 0x10) sendmmsg(r4, &(0x7f0000002980), 0x400000000000239, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff) r8 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000840)={'vcan0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r8, 0x89f3, &(0x7f0000000900)={'syztnl0\x00', &(0x7f0000000880)={'syztnl2\x00', r9, 0x29, 0x3, 0x9, 0x6, 0x8, @private0, @mcast2, 0x382b8289422354bb, 0x1, 0x5, 0xafe}}) sendmsg$ETHTOOL_MSG_PAUSE_GET(r6, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f00000023c0)={0x2c, r7, 0x1, 0x70bd2c, 0x25dfdbfe, {0x21}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}]}]}, 0x2c}}, 0x0) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000027b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r11 = socket(0x2a, 0x2, 0xffffffff) getsockname$packet(r11, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0xfffffcb7, &(0x7f0000000280)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r12, {}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=@newtfilter={0x6c, 0x2c, 0xd27, 0x70bd29, 0x0, {0x0, 0x0, 0x0, r12, {}, {}, {0x2}}, [@filter_kind_options=@f_basic={{0xa}, {0x3c, 0x2, [@TCA_BASIC_EMATCHES={0x38, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x2c, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0x10, 0x1, 0x0, 0x0, {{0x1, 0x0, 0xa3cc}, 'p'}}, @TCF_EM_CMP={0x18, 0x2, 0x0, 0x0, {{0x5, 0x1, 0xffff}, {0x2, 0x29f, 0x8, 0x1, 0xa, 0x1}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x8a}}]}]}}]}, 0x6c}}, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000340), 0x2480, 0x0) fcntl$dupfd(r1, 0x406, r10) 1.990117334s ago: executing program 6 (id=13019): prctl$PR_SET_NAME(0xf, &(0x7f0000000200)='gtp\x00\xe4\xaa\xae\xdf~2\xa6X\x14\x92\xdarV\xf4U\xf7\xa2\xc3l\x1b@\xaf\xf9\xc9\xa9#\xf0S\xd9=q\xd6\x14\xedt\xc8!W\xe9@\xeb\x7f~\tB0EE\x9a:\xb7\xff\xc1\xfc\x9a\x1f\xf2\xfb\x19\xda#x\xc5F\x1c~\x8c\xe1\xdf\xdc\x01k\f\xde0~\x95\r\xa2\x80\b4M\x14\xe7\xd0\t`n!g\x14\xe6\xd1\xc2\xd3\x88\xf8cVtd\xbeY\xa5\xe7\x16sD\x96}7\n\x88e\x00\xf0\xff\xff\xf0\xcb\x94\xb4S\x00\x00') r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000300)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000b80)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0xe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000000c0)='./bus\x00', 0x200000, &(0x7f0000000280)={[{@noblock_validity}, {}, {@sysvgroups}, {@norecovery}, {@journal_dev={'journal_dev', 0x3d, 0x1}}, {@orlov}, {@errors_continue}, {@noauto_da_alloc}, {@nomblk_io_submit}]}, 0x2, 0x57b, &(0x7f0000000c00)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x107043, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x1a7042, 0x3) ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc028660f, &(0x7f0000000240)={0x3920e, r2, 0x0, 0x0, 0x2}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000b40)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0x80000000000000}, 0x18) open(&(0x7f0000000080)='./bus\x00', 0x143c62, 0x0) mount(&(0x7f0000000100), &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x0, &(0x7f0000000300)='trans=rdma,') bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f00000015c0)='kmem_cache_free\x00', r0}, 0x10) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x0, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000180)={0x8, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000640)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRESHEX=r5, @ANYBLOB="0000000000000000b7020000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x16, 0x0, 0x0, 0x0, r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, @void, @value}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008f00850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0xb, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r7}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r8, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r9}, 0x10) r10 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r10, &(0x7f0000001680)={0x0, 0x0, &(0x7f0000001640)={&(0x7f0000001700)=ANY=[@ANYBLOB="540200001600010000000000fedbdf25ff0100000000000000000000000000010a0101010000000000000000000000004e2200004e2300000a00200021000000", @ANYRES32=r10, @ANYRES32, @ANYBLOB="fc0000000000000000000000000000000000000033000000e0000002000000000000000000000000060000000000000019d000000000000009000000000000000000000000000000000000000000000008000000000000000000000000000000ff030000100000000300000000000000ffffffff00000000ffffff7f000000000900000000000000000000007f000000070000002bbd7000000000000200013f000000000000000001000000060000002c001300200100000000000000000000000000010000000000000000000000020000001c00040003004e204e210000fe"], 0x254}}, 0x40808) r11 = socket$inet6(0xa, 0x1, 0x8010800000000084) sendmmsg$inet6(r11, &(0x7f0000000040)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @private0}, 0x1c, &(0x7f0000000600)=[{&(0x7f00000000c0)='/', 0x1}], 0x1}}, {{&(0x7f0000000400)={0xa, 0x0, 0x0, @private0}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000d00)='[', 0x4d0}], 0x21}}], 0x2, 0x4008040) fcntl$setlease(r4, 0x400, 0x0) fsetxattr$trusted_overlay_redirect(r4, &(0x7f0000000040), 0x0, 0x0, 0x0) 1.988341194s ago: executing program 2 (id=13020): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000200)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) syz_mount_image$ext4(&(0x7f0000000500)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x0, &(0x7f00000021c0)={[{@dioread_nolock}, {@minixdf}, {@nolazytime}, {}]}, 0x1, 0x783, &(0x7f0000002200)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r2, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) 1.968950064s ago: executing program 7 (id=13021): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) write$tcp_mem(r0, &(0x7f0000000300)={0x8000000, 0x20, 0x4, 0x20, 0x3f}, 0x48) getpid() bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x3, &(0x7f00000001c0)={r1, &(0x7f0000000240), 0x0}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r0, 0xffffffffffffffff}, &(0x7f0000000840), &(0x7f0000000880)=r0}, 0x20) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000c00)={'syztnl0\x00', &(0x7f0000000b40)={'syztnl0\x00', 0x0, 0x80, 0x700, 0xbda6, 0x4d2, {{0x1e, 0x4, 0x1, 0x0, 0x78, 0x65, 0x0, 0x2, 0x4, 0x0, @empty, @private=0xa010100, {[@cipso={0x86, 0x34, 0x1, [{0x0, 0xe, "2c7db74356c882bab85f5ac4"}, {0x2, 0x7, "da767df891"}, {0x1, 0x7, "596368c183"}, {0x1, 0x5, 'Xi\v'}, {0x1, 0x5, "b6e8ce"}, {0x2, 0x8, "445fb0af4060"}]}, @noop, @lsrr={0x83, 0x1b, 0x3a, [@loopback, @private=0xa010102, @loopback, @multicast2, @remote, @empty]}, @ssrr={0x89, 0x13, 0x8f, [@rand_addr=0x64010101, @multicast1, @private=0xa010102, @rand_addr=0x64010101]}]}}}}}) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000e00)={r0, 0x20, &(0x7f0000000dc0)={&(0x7f0000000c80)=""/31, 0x1f, 0x0, &(0x7f0000000cc0)=""/225, 0xe1}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000e80)={0x1b, 0x15, &(0x7f00000009c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffffffff}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @map_val={0x18, 0x7, 0x2, 0x0, r0}, @tail_call={{0x18, 0x2, 0x1, 0x0, r2}}, @cb_func={0x18, 0x2, 0x4, 0x0, 0x3}]}, &(0x7f0000000900)='GPL\x00', 0x4, 0xaa, &(0x7f0000000a80)=""/170, 0x41100, 0x1, '\x00', r3, @fallback=0xc, 0xffffffffffffffff, 0x8, &(0x7f0000000c40)={0x3, 0x1}, 0x8, 0x10, 0x0, 0x0, r4, r0, 0x0, &(0x7f0000000e40)=[r0], 0x0, 0x10, 0x40, @void, @value}, 0x94) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000050000000900000001", @ANYRES32=0x0], 0x48) r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fd/3\x00') r9 = socket$l2tp6(0xa, 0x2, 0x73) getsockopt$inet6_buf(r9, 0x29, 0x44, &(0x7f0000000f40)=""/4096, &(0x7f0000001f40)=0x1000) r10 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_udp_SIOCINQ(r8, 0x541b, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) getsockopt$inet6_mreq(r10, 0x29, 0x14, &(0x7f0000000740)={@local, 0x0}, &(0x7f0000000780)=0x14) perf_event_open(&(0x7f0000000d00)={0x2, 0x80, 0x6d, 0x1, 0x0, 0x0, 0x0, 0x40, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x8, 0x1}, 0x1843, 0x3, 0x0, 0x5, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', &(0x7f0000000100), 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000007c0)=ANY=[@ANYRESDEC=r8, @ANYRES32=r7, @ANYRES32=r5, @ANYRES8=r7, @ANYRESDEC=r6], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', r11, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r12 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r12}, 0x10) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f0000000940)={[{@bsdgroups}, {@nodiscard}, {@noblock_validity}, {@grpjquota}, {@grpjquota}, {@noquota}, {@abort}, {@noload}, {@nodiscard}]}, 0x64, 0x50a, &(0x7f0000000200)="$eJzs3VFrHFsdAPD/bHZj06Y3ueqDXvB69V5Ji3Y3aWwbfKgVRJ8Kan2vMdmEkE02ZDdtE4qm+AEEERV80hdfBD+AIAVffBShoM+KiiLa6oMP2rns7iRN091k226zafb3g8mcc2Zm/+dsmNk5M4eZAAbWOxFxLSIep2l6PiLGsvJcNsV2a2qs9+jh3bnGlESa3vhnEklWtvNZSTY/k212KiK+9uWIbybPxq1tbi3PVirl9Sxfqq+slWqbWxeWVmYXy4vl1enpqcszV2YuzUz2pJ1nI+LqF//6g+/+7EtXf/WZ23+6+fdz32pUazRbvrcdzyl/0MJW0wvN72LvBusvGOw4yjdbmBlpt8bQMyX3XnGdAABor3GO/8GI+GREnI+xGDr4dBYAAAB4DaWfH43/JRFpe8MdygEAAIDXSK45BjbJFbOxAKORyxWLrTG8H47TuUq1Vv/0QnVjdb41VnY8CrmFpUp5MhsrPB6FpJGfaqaf5C/uy09HxJsR8f2xkWa+OFetzPf74gcAAAAMiDP7+v//GWv1/wEAAIATZrzfFQAAAABeOf1/AAAAOPn0/wEAAOBE+8r1640p3Xn/9fytzY3l6q0L8+XacnFlY644V11fKy5Wq4vNZ/atHPZ5lWp17bOxunGnVC/X6qXa5tbNlerGav3m0lOvwAYAAACO0Jsfv/+HJCK2PzfSnBqGu9u0y9WA4yq/m0qyeZvd+o9vtOZ/OaJKAUdiqN8VAPom3+8KAH1T6HcFgL5LDlnecfDOb7P5J3pbHwAAoPcmPtr5/n/uwC23D14MHHt2Yhhc7v/D4Gre/+92JK+TBThRCs4AYOC99P3/Q6Xpc1UIAADoudHmlOSK2eW90cjlisWIs83XAhSShaVKeTIi3oiI348VPtDITzW3TA7tMwAAAAAAAAAAAAAAAAAAAAAAAAAALWmaRAoAAACcaBG5vyW/bj3Lf2LsvdH91weGk/+ORfaK0Ns/vvHDO7P1+vpUo/xfu+X1H2XlF/txBQMAAAAGwnO9wH+nn77TjwcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAXnr08O7cznSUcf/xhYgYbxc/H6ea81NRiIjT/04iv2e7JCKGehB/pPHnI+3iJ41q7YZsF3+kB/G37x0YP8azb2F//OGIONOD+DDI7jeOP9fa7X+5eKc5b7//5SOeyr+ozse/2D3+DXU4/pztMsZbD35R6hj/XsRb+fbHn534SYf473YZ/xtf39rqtCz9ScRE29+f5KlYpfrKWqm2uXVhaWV2sbxYXp2enro8c2Xm0sxkaWGpUs7+to3xvY/98vFB7T/dIf74Ie1/r8v2///BnYcfaiUL7eKfe7dN/N/8NFvj2fi57LfvU1m6sXxiJ73dSu/19s9/9/ZB7Z/v0P7D/v/numz/+a9+589drgoAHIHa5tbybKVSXj+xiUYv/RhUQ+IYJr7d0w9M0zRt7FMv8TlJHIevpZno95EJAADotScn/f2uCQAAAAAAAAAAAAAAAAAAAAyuo3ic2P6Y27uppBeP0AYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA6In3AwAA///d8Nla") 1.791147536s ago: executing program 7 (id=13023): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007d000000180100002020732600000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000280)='./file1\x00', 0x8000, &(0x7f0000000000)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c004845160000000000"], 0x1, 0x2bd, &(0x7f0000000b40)="$eJzs3N9LU38YwPFHN92c6PaFL0FB9VA3dXPQ1X2NUIgGhTmpLoJjntXYaZNzxmIROYjotr9DuuwuqP4Bb6Kb7ruTIOjGi2jh+aGbTpu65dL3C8Z5js/n8fOoU54J+6zeef24mHeNvFmRwbjKoEhd1kRS61FgILgOevGwNKvLxdEfX07fvnvvRiabnZpRnc7MXkqr6vjZ90+evTn3sTI693b8XUxWUvdXv6e/rpxYObn6a/ZRwdWCq6VyRU2dL5cr5rxt6ULBLRqqt2zLdC0tlFzLacnn7fLiYk3N0sJYYtGxXFfNUk2LVk0rZa04NTUfmoWSGoahYwk53qIdrMktz8yYmR3TjUhXO0L3xVpvR9qtcZxMvX0yt9yrvgAAQP/aff73Z/2d5//snH/t8vwvwvzfI/WWuz/M/zgSHCdjJoLf31bM/wAAAAAAAAAAAAAAAAAAAAAA/AvWGo1ko9FIhtfwERORuIiE94fdJ3pjnz//K4fULrqs6Y17cRH7VTVXDa5+PpOXgthiyYQk5af3fAj48fT17NSEeoaCT5kTsZequYh3NoFXH0q1qz/z36Rfr/Jhva4a1A9Jonn/tCTl//b7pzfrw+MQlqq5YblwvqnekKR8eiBlsWXBe16vPy6/EMlOPZ9UvXYzu2X/EW8dAAAAAABHgaEbUq2vf/2zHw1vQVy25/36Pfx/YMvr66ic6uSISgAAAAAAcGBu7WnRtG3L2UcQE5EDlB/VICJ90caW4KqI9EEbTUG8l/3ERcT/iO6n/NtGeUdVjQ7WREWkT77zm8FAdMfUYf9lAgAAANBtm0P/Hoo+v+xhRwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHD+dHhUWrt+WChO7lDdtF/nrXyAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADQR34HAAD//8fyFuQ=") bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x100) getdents(r0, &(0x7f0000001fc0)=""/184, 0xb8) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000005f80)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd25, 0x2, {0x0, 0x0, 0x0, r4, {0x0, 0x1}, {}, {0x8}}, [@filter_kind_options=@f_flow={{0x9}, {0x4}}, @TCA_RATE={0x6, 0x5, {0xff, 0x5}}]}, 0x3c}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="50000000090601020000000000000000020000000900020073797a31000000000500010007"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) syz_open_dev$vcsn(&(0x7f0000000040), 0x9, 0x40c00) 1.619697237s ago: executing program 7 (id=13027): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x4837, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1600000000000000040000000100000000223cecb0d0000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x9, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000003, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r3) sendmsg$ETHTOOL_MSG_DEBUG_SET(r3, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000580)=ANY=[], 0x38}, 0x1, 0x0, 0x0, 0x20000844}, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_SET(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="328033ffdc", @ANYRES16=r4, @ANYBLOB="010028bd7000fbdbdf250300000005000500fb000000"], 0x1c}}, 0x8001) r5 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x10, 0x2, &(0x7f00000005c0)=ANY=[@ANYBLOB="61104000000000009500000000000000f52d2f95dad6fc3a841a69f3917b9b596d190480a14a87d5d52d614bbd7cc5"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) sendmsg$key(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="020800000100000000000001000000000100140003"], 0x18}}, 0x0) unshare(0x2a020480) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) io_setup(0x30, &(0x7f0000000600)=0x0) r7 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002) io_submit(r6, 0x1, &(0x7f0000000180)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, r7, &(0x7f00000000c0)="01", 0x24}]) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f00000001c0)='ext4_journal_start_reserved\x00', r1, 0x0, 0x8000000000001}, 0x18) syz_open_dev$usbfs(&(0x7f0000000040), 0x12, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0xe, 0x7fff0000}]}) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3e, 0x1, 0x0, 0x0, 0x0, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x800000000003}, 0x1320, 0xffffffff, 0x1, 0x5, 0x0, 0x1, 0xffff, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000640)="d8000000180081034e81f783db4cb9040a1d020006007c09e8fc55a10a0015000400142603600e120800140000000401a80009000800024004000000035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb71b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad9e3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd4e1ffffffffc1c9b6278754ca397c388b0dd6e4edef3d9300"/216, 0xd8}], 0x1}, 0x0) 1.616597447s ago: executing program 2 (id=13029): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000700)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) getpid() ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) ppoll(&(0x7f00000003c0)=[{0xffffffffffffffff, 0x80a0}], 0x1, 0x0, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a90000000030a0300000000000000000002e000000c00020000000000000000010900010073797a30"], 0xb8}, 0x1, 0x0, 0x0, 0x20008011}, 0x0) 1.598142097s ago: executing program 6 (id=13030): r0 = gettid() r1 = gettid() kcmp(r0, r1, 0x4, 0xffffffffffffffff, 0xffffffffffffffff) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7020000140000e5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = syz_open_dev$usbfs(&(0x7f0000000480), 0x200, 0xa401) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$USBDEVFS_SUBMITURB(r4, 0x8038550a, 0x0) 1.364989769s ago: executing program 6 (id=13031): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x3000000, &(0x7f00000006c0), 0x1, 0x513, &(0x7f0000000c40)="$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") openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r0, 0x0, 0x8000}, 0x18) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000100)=ANY=[@ANYBLOB="480000001000810500"/20, @ANYRES32, @ANYBLOB="0000000000000000280012800a00010063"], 0x48}}, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) recvmmsg(r1, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}], 0x40000000000012d, 0x2, 0x0) setsockopt$inet_int(r1, 0x0, 0x6, &(0x7f0000000180)=0x80000001, 0x4) bind$inet(r1, 0x0, 0x0) syz_emit_ethernet(0x32, &(0x7f0000000480)={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @void, {@ipv4={0x800, @udp={{0x6, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty, {[@timestamp={0x44, 0x4, 0x5e}]}}, {0x1, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r2, 0x8955, &(0x7f0000000340)={{0x2, 0x4e23, @empty}, {0x0, @link_local}, 0xa, {0x2, 0x0, @multicast2}, 'lo\x00'}) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = syz_io_uring_setup(0x3aec, &(0x7f0000000240)={0x0, 0x0, 0x10100}, &(0x7f0000000000), &(0x7f0000000100)) io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) io_uring_enter(r4, 0x7a98, 0x0, 0x0, 0x0, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r6, 0x0, 0x0) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, 0x0) gettid() sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r6, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x500, 0x0, 0x2000040}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x34, r7, 0x1, 0x70bd28, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_NETNS_FD={0x8}, @NL802154_ATTR_NETNS_FD={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000040}, 0x4000000) r8 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000000), r6) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f0000000140)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000180)={0x3c, r8, 0x1, 0x70bd25, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r9}, @NL802154_ATTR_SEC_DEVKEY={0x20, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0302}}, @NL802154_DEVKEY_ATTR_ID={0x10, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x4}, @NL802154_KEY_ID_ATTR_MODE={0x8}]}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40c4}, 0x40800) writev(r3, &(0x7f00000000c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) 1.29670382s ago: executing program 8 (id=13033): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00', 0x0}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', r0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x9, 0xc, &(0x7f0000000d40)=ANY=[@ANYBLOB="1800000000001a18110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095", @ANYRESHEX=r1, @ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="4a4c86561d165438fa4282b5e4658ee8acfabf34f3ae7a073e921153799e44eb3e3a692e6d34a40ca4930184c1ae0cb0ffe4e190e212839e1962626ad09b2cee362cb2fc47f037725e7596b6d4e652ccfbb19de1e58218b16edb246f5fb7657d86645eda42c9b13e75b03e672b50b9e1a4131555ac3f5a58820a49e61496ba1d8623748b647705e7b6482dcdf38979b046db7751e6575c9e481a7f90975a322965", @ANYRES8=r1, @ANYRES32, @ANYRES64=r1], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x400, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r4}, 0x10) r5 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r6 = dup(r5) ioctl$PTP_EXTTS_REQUEST2(r6, 0x43403d05, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r2}, 0x10) socketpair(0x1d, 0x2, 0x2, &(0x7f0000000300)={0x0, 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) r7 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400000, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{}, &(0x7f0000000180), &(0x7f00000001c0)=r7}, 0x20) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r8}, 0x10) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x1018e58, &(0x7f0000000000), 0x6, 0x5fd, &(0x7f0000000600)="$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") 1.071647452s ago: executing program 8 (id=13034): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4000000) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000015c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000c40)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b700000000000000"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x18) socket$caif_stream(0x25, 0x1, 0x1) bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000640)={{{@in=@loopback, @in=@private=0xa010101, 0x0, 0xfffc, 0x0, 0x2000, 0xa}, {0x0, 0x0, 0x0, 0x4, 0x0, 0x400, 0x27}, {0x0, 0x0, 0x0, 0x7}, 0x100, 0x0, 0x1}, {{@in6=@loopback, 0x0, 0x32}, 0x2, @in6=@private1, 0x1, 0x4, 0x2}}, 0xe8) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) 1.035566872s ago: executing program 8 (id=13035): prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x4, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) getrusage(0x0, &(0x7f00000003c0)) 1.015453412s ago: executing program 8 (id=13036): bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = socket$netlink(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) syz_usb_disconnect(r1) ioctl$EVIOCRMFF(r1, 0x40085507, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'geneve0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x1f, &(0x7f00000000c0)={&(0x7f0000000400)=@newlink={0x34, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0x600}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x4}}}]}, 0x34}, 0x1, 0x2}, 0x0) r4 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000280)=0xffffffffffffffff, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1c, 0xc, 0x0, 0x0, 0x9, 0x0, 0x0, 0x41100, 0x0, '\x00', r3, @fallback=0x28, r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sendmsg$nl_route_sched(r0, &(0x7f0000000500)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000780)=@newqdisc={0x26c, 0x24, 0x0, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0xfff3, 0x3}, {0x4, 0x3}, {0xc, 0xe}}, [@TCA_STAB={0x174, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x6, 0xdb, 0x2, 0x137c, 0x1, 0x5, 0x8, 0x6}}, {0x10, 0x2, [0x1d, 0x8, 0x4, 0x6, 0x26ae, 0x6]}}, {{0x1c, 0x1, {0x1, 0x0, 0xff, 0x0, 0x2, 0x8d, 0x8, 0x4}}, {0xc, 0x2, [0x1c00, 0x8001, 0xfffd, 0x7ff]}}, {{0x1c, 0x1, {0x9, 0x6, 0xd7, 0x8, 0x2, 0x4, 0x2, 0x6}}, {0x10, 0x2, [0x4d8, 0x3, 0x101, 0x42, 0x0, 0x5]}}, {{0x1c, 0x1, {0x8, 0x38, 0x0, 0xc, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x2, [0x74e9, 0x1]}}, {{0x1c, 0x1, {0xfa, 0x40, 0x81, 0x7, 0x1, 0xffffcf34, 0x7, 0x1}}, {0x6, 0x2, [0x8]}}, {{0x1c, 0x1, {0xa, 0x7, 0x2, 0x10, 0x1, 0x80, 0x1, 0x1}}, {0x6, 0x2, [0x0]}}, {{0x1c, 0x1, {0x3, 0x3, 0x9, 0xfffffffd, 0x0, 0x6, 0xfff, 0x9}}, {0x16, 0x2, [0x5fb, 0x9, 0x7ff, 0x9, 0x8001, 0x3ec, 0x3, 0x9, 0x1]}}, {{0x1c, 0x1, {0x81, 0x3, 0xffff, 0x3, 0x0, 0xab85, 0x3, 0x1}}, {0x6, 0x2, [0x5]}}, {{0x1c, 0x1, {0x1, 0x7, 0x1000, 0x8, 0x2, 0x80000001, 0x2, 0x6}}, {0x10, 0x2, [0x3, 0x9, 0x3, 0x1000, 0x7ff, 0x2]}}]}, @qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x6, 0xf, 0x9, 0x9, 0x6}, 0xfffffff7, 0x0, 0x1, 0x4, 0x3, 0x13, 0x19, 0x1b, 0x0, 0x1, {0x9, 0xfd9c, 0x914, 0x1, 0xdf, 0xfffff801}}}}, @qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_INITIAL_QUANTUM={0x8, 0x4, 0xf}]}}, @TCA_STAB={0x2c, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x4, 0x6, 0x2, 0x10001, 0x2, 0x5, 0x9, 0x3}}, {0xa, 0x2, [0x1, 0x2, 0x6]}}]}, @qdisc_kind_options=@q_codel={{0xa}, {0x34, 0x2, [@TCA_CODEL_INTERVAL={0x8, 0x3, 0x3ff}, @TCA_CODEL_ECN={0x8}, @TCA_CODEL_INTERVAL={0x8, 0x3, 0xde}, @TCA_CODEL_ECN={0x8}, @TCA_CODEL_ECN={0x8}, @TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x4}]}}]}, 0x26c}, 0x1, 0x0, 0x0, 0xc040}, 0x4000) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='hrtimer_init\x00', r5}, 0x10) clock_nanosleep(0x9, 0x0, &(0x7f0000000080)={0x0, 0x3938700}, 0x0) 1.014149992s ago: executing program 7 (id=13037): r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x220001, 0x120) socket$xdp(0x2c, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000140)={'syztnl2\x00', &(0x7f00000000c0)={'syztnl0\x00', 0x0, 0x2f, 0x9, 0x4, 0x7, 0x22, @local, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x1, 0x8, 0x2, 0x7f}}) sendmsg$nl_route_sched(r1, &(0x7f0000000900)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000008c0)={&(0x7f0000000180)=@newchain={0x714, 0x64, 0x20, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0xd, 0x6}, {0xc}, {0x1, 0x4}}, [@TCA_CHAIN={0x8, 0xb, 0x3}, @filter_kind_options=@f_bpf={{0x8}, {0x6e0, 0x2, [@TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_CLASSID={0x8, 0x3, {0x2, 0xffff}}, @TCA_BPF_ACT={0x670, 0x1, [@m_gact={0x1ec, 0xa, 0x0, 0x0, {{0x9}, {0xd0, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0xc, 0x3, {0x2, 0x174e, 0x20000000}}, @TCA_GACT_PARMS={0x18, 0x2, {0xa, 0x80000001, 0x3, 0xffffdfc7, 0x668}}, @TCA_GACT_PARMS={0x18, 0x2, {0x6, 0x3, 0x3, 0xa00, 0x6ed0}}, @TCA_GACT_PARMS={0x18, 0x2, {0xd, 0x1, 0x3, 0x6, 0x2}}, @TCA_GACT_PARMS={0x18, 0x2, {0x81, 0x3, 0x20000000, 0x7, 0x2d44}}, @TCA_GACT_PROB={0xc, 0x3, {0x1, 0x1bc4}}, @TCA_GACT_PROB={0xc, 0x3, {0x0, 0x14b8, 0x4}}, @TCA_GACT_PARMS={0x18, 0x2, {0x9, 0x5, 0x2, 0x6, 0x126}}, @TCA_GACT_PARMS={0x18, 0x2, {0xf, 0x3, 0x0, 0x6, 0x9}}, @TCA_GACT_PARMS={0x18, 0x2, {0xbcdb, 0x200, 0x20000000, 0x3, 0x5}}]}, {0xf1, 0x6, "f82700e6538680bf7c98c86ff5acfec985f834c28f3290d5d1aa76ce42d3417ac4039768b09a767266b616ebf855383fea01c4e1ce88c23e042a666bb3ff7862a3c9cda8d05d85269e899870b8292cff24f17d746dd6c11efe4f5cba5842f489e6d181bf6f7c41fb4bb55f38f9fb8d2f5462f03e39e2f724a5385fd4eeef2eec5a9f80334bfa86df9203814b6a42f01063da5a396e8b0624cdbac9eb87b3e898b48f859677f0f9a4944013f0ee65ae959631e882b657c0301ecf8cef349d40f91ce80ce2b99bd23915f64dd2a2b4320ad5681de5ee09167a5f5e674a8f00a004b1c3ff0934f1f35b0afc2103e5"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_tunnel_key={0xf8, 0x1, 0x0, 0x0, {{0xf}, {0x20, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x4e23}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @private0={0xfc, 0x0, '\x00', 0x1}}]}, {0xac, 0x6, "7174ec3a38055757bcf9485d6a2c16450f67b93acfd2e4b6b196718c01ad8fc02f529800a97ad49eb648c9ffa9b8d7e84123d46f2408ed0472a80690ce217f55674c4eb4249584484be8dfc7dd365c84f366e31a54aa07db5a59856e9c00aa66e02041c4c3935b652472d44d05fde8eba3189d1aca018fa9bbb6d7f147505f6cc0c0421aa2b9f71e4d3b14b151ed2471558c82be10136ef218e3b5a322cbc5f8e970fb6b6b823d83"}, {0xc}, {0xc, 0x8, {0x4, 0x1}}}}, @m_skbmod={0xfc, 0x9, 0x0, 0x0, {{0xb}, {0x48, 0x2, 0x0, 0x1, [@TCA_SKBMOD_DMAC={0xa, 0x3, @local}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x3}, @TCA_SKBMOD_DMAC={0xa, 0x3, @local}, @TCA_SKBMOD_SMAC={0xa, 0x4, @multicast}, @TCA_SKBMOD_DMAC={0xa, 0x3, @remote}, @TCA_SKBMOD_SMAC={0xa, 0x4, @local}]}, {0x8c, 0x6, "54ac5e953a12f9e1515061e36ed254f0a3e18a8943c4ad504099db9a47d6da1ed9fdc7e0467acfe56124ef0e8db94ffbf0fb4a60426aa703055450eb0ab8de427894848685928d7d1fd4b7e260c313f015be67675e33d67ea75a205999657f60c7a3b7430646aa409da6a2b867bfdb19cb0d3d6a010cf06d58bc501362511395b95c5bd3c507fd25"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x2}}}}, @m_nat={0x180, 0xa, 0x0, 0x0, {{0x8}, {0xa4, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x800, 0x8, 0x10000000, 0x49, 0x10}, @dev={0xac, 0x14, 0x14, 0x3c}, @dev={0xac, 0x14, 0x14, 0x44}, 0xff000000}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x7, 0xad, 0x20000000, 0x3, 0xea7c}, @local, @private=0xa010102, 0xffffffff, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x2, 0x0, 0x5, 0x6, 0xfffffffa}, @private=0xa010101, @broadcast, 0xff000000, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x7fff, 0x8, 0x8, 0x4, 0x8}, @multicast2, @multicast1, 0x0, 0x1}}]}, {0xb7, 0x6, "938b719bdf5c4ef125ffc3cb0165c9fb5c413b5a0c2b70be17231cf246cd3ed808b45f3b7b7c5d4cf98dab3698d9e9bfd8f63679570db851ba28b46b33fdbe518a8417a8e0d4106ff4516e5c2eb46ea872aaf2150d15f4858c25fc7190a2d086982b896056e3bdbf3ac712bab407fa0ee2e6096ef1e3372b1add0a32bb472114350aa68674e1f02430457bc648eb4770d2dee3f0df7255f1b82fc31d25e8ba106a2284799595702b5187d6237123f02719bb0b"}, {0xc}, {0xc, 0x8, {0x2, 0x1}}}}, @m_ctinfo={0x10c, 0x4, 0x0, 0x0, {{0xb}, {0xc, 0x2, 0x0, 0x1, [@TCA_CTINFO_ZONE={0x6, 0x4, 0x576}]}, {0xd6, 0x6, "837499675cfd44d038bc0208fd4da4a949d8023d902570cd5ae3249aca495b24e4f29d12711affb4c9bfaaad8c19f1d4c29ca57c884eb9514afb4afa2bfd549253914d1d14b576b98e29e25336e49eb38e25f2d412258fa7b4b95c2882072716df2c3e7bcdaae1bd29b00cafb465989892546cb6b8da16e4de2d935f71fd2b7988720377d768f616169c858a9422d07d8ef11049b95638871ef7dc84abaa8f6e14d860f1502d934fd172282770b46cfe13af020b09dbbe05ca8810af41d87c2431cef2737e91de92e4e02715c0577d1395fd"}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_CLASSID={0x8, 0x3, {0x8, 0xf}}, @TCA_BPF_FD={0x8, 0x6, r1}, @TCA_BPF_OPS={{0x6, 0x4, 0x6}, {0x34, 0x5, [{0x84, 0x7, 0x8, 0xd}, {0x7, 0x7, 0x1, 0x1}, {0x9, 0x2, 0x9, 0x8}, {0xa4, 0x68, 0x3}, {0x2b9e, 0xc, 0x4, 0x9}, {0x5, 0x7, 0x8, 0x10}]}}]}}]}, 0x714}, 0x1, 0x0, 0x0, 0x40004}, 0x804) setsockopt$MRT6_INIT(r1, 0x29, 0xc8, &(0x7f0000000940), 0x4) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000009c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_MPATH(r1, &(0x7f0000000ac0)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a00)={0x74, r3, 0x400, 0x70bd29, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}]}, 0x74}, 0x1, 0x0, 0x0, 0x20040000}, 0x80d1) r4 = openat$null(0xffffffffffffff9c, &(0x7f0000000b00), 0x400581, 0x0) r5 = syz_genetlink_get_family_id$gtp(&(0x7f0000000b80), r1) sendmsg$GTP_CMD_ECHOREQ(r4, &(0x7f0000000c40)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000c00)={&(0x7f0000000bc0)={0x30, r5, 0x8, 0x70bd25, 0x25dfdbfc, {}, [@GTPA_MS_ADDR6={0x14, 0xc, @private2}, @GTPA_O_TEI={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x40008000}, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000cc0)={&(0x7f0000000c80)='cachefiles_vfs_error\x00', r1, 0x0, 0xac}, 0x18) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000d40), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r6, &(0x7f0000000e00)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000d80)={0x30, r7, 0x0, 0x70bd28, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0x4}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000}, 0x0) syz_genetlink_get_family_id$nl802154(&(0x7f0000000e40), r6) r8 = openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000e80), 0x2, 0x0) flistxattr(r8, &(0x7f0000000ec0)=""/219, 0xdb) sendmsg$WG_CMD_SET_DEVICE(r4, &(0x7f00000010c0)={&(0x7f0000000fc0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000001080)={&(0x7f0000001000)={0x44, 0x0, 0x200, 0x70bd25, 0x25dfdbfe, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg2\x00'}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r2}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}]}, 0x44}, 0x1, 0x0, 0x0, 0x15}, 0x4000) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000001100)=0x0) sched_setaffinity(r9, 0x8, &(0x7f0000001140)=0x6) syslog(0xa, &(0x7f0000001180)=""/7, 0x7) setsockopt$IP_VS_SO_SET_DELDEST(r1, 0x0, 0x488, &(0x7f00000011c0)={{0x2e, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e24, 0x4, 'wlc\x00', 0x2, 0x0, 0x2}, {@private=0xa010100, 0x4e21, 0x2, 0x9, 0x5, 0xd79d}}, 0x44) syslog(0x4, 0x0, 0x0) r10 = openat$nci(0xffffffffffffff9c, &(0x7f0000001240), 0x2, 0x0) cachestat(r10, &(0x7f0000001280)={0x7, 0xb3}, &(0x7f00000012c0), 0x0) socket$inet6_udp(0xa, 0x2, 0x0) copy_file_range(r8, &(0x7f00000013c0)=0x10000, r1, &(0x7f0000001400)=0x6, 0x0, 0x0) 955.891202ms ago: executing program 7 (id=13038): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x3000000, &(0x7f00000006c0), 0x1, 0x513, &(0x7f0000000c40)="$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") openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r0, 0x0, 0x8000}, 0x18) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000100)=ANY=[@ANYBLOB="480000001000810500"/20, @ANYRES32, @ANYBLOB="0000000000000000280012800a00010063"], 0x48}}, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) recvmmsg(r1, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}], 0x40000000000012d, 0x2, 0x0) setsockopt$inet_int(r1, 0x0, 0x6, &(0x7f0000000180)=0x80000001, 0x4) bind$inet(r1, 0x0, 0x0) syz_emit_ethernet(0x32, &(0x7f0000000480)={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @void, {@ipv4={0x800, @udp={{0x6, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty, {[@timestamp={0x44, 0x4, 0x5e}]}}, {0x1, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r2, 0x8955, &(0x7f0000000340)={{0x2, 0x4e23, @empty}, {0x0, @link_local}, 0xa, {0x2, 0x0, @multicast2}, 'lo\x00'}) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = syz_io_uring_setup(0x3aec, &(0x7f0000000240)={0x0, 0x0, 0x10100}, &(0x7f0000000000), &(0x7f0000000100)) io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) io_uring_enter(r4, 0x7a98, 0x0, 0x0, 0x0, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r6, 0x0, 0x0) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, 0x0) gettid() sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r6, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x500, 0x0, 0x2000040}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x34, r7, 0x1, 0x70bd28, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_NETNS_FD={0x8}, @NL802154_ATTR_NETNS_FD={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000040}, 0x4000000) r8 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000000), r6) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f0000000140)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000180)={0x3c, r8, 0x1, 0x70bd25, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r9}, @NL802154_ATTR_SEC_DEVKEY={0x20, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0302}}, @NL802154_DEVKEY_ATTR_ID={0x10, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x4}, @NL802154_KEY_ID_ATTR_MODE={0x8}]}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40c4}, 0x40800) writev(r3, &(0x7f00000000c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) 681.053295ms ago: executing program 0 (id=13041): perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYRES16, @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket(0x29, 0x2, 0x10000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x1c, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}]}, 0x1c}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00'}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x0, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="851000000000181000000000", @ANYRES32, @ANYBLOB="000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@newnexthop={0x24, 0x68, 0x1, 0x2, 0x7ffffffc, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x4}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0xfffffffffffffda3, &(0x7f0000000180)={&(0x7f0000000200)=@delnexthop={0x20, 0x69, 0xb, 0x0, 0x0, {}, [{0x8, 0x1, 0x1}]}, 0x20}}, 0x4000000) 659.536885ms ago: executing program 0 (id=13042): r0 = syz_open_procfs(0x0, &(0x7f0000000200)='ns\x00') getdents(r0, &(0x7f0000000740)=""/24, 0xff90) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffff, 0x4}, 0x6) write$binfmt_misc(r1, &(0x7f0000001280), 0x6) select(0x40, &(0x7f0000000000)={0xfffffffffffffffd, 0xb, 0xd3, 0x9, 0x9, 0x2, 0xf9, 0x8}, &(0x7f0000000040)={0x7fffffff, 0x40, 0x9e, 0x5, 0x9, 0x0, 0x2, 0x5}, &(0x7f00000000c0)={0xc, 0xaa4, 0x1, 0x0, 0x800, 0x4, 0x0, 0x7f}, 0x0) r2 = socket(0x2, 0x80805, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000100)={'veth1_vlan\x00', &(0x7f0000000140)=@ethtool_gstrings={0x34, 0x6, 0x18}}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_buf(r3, 0x29, 0x20, &(0x7f00000000c0)="0bbb268dd6ffa80800000000000000000000210d0000aaa8fa017242ba9380d424000000000000002900000002000000", 0xfe60) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001880), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000018c0)={0x124, r5, 0xacf5e67dd0b583a1, 0x0, 0x0, {{0x5}, {@val={0x8}, @void}}, [@beacon=[@NL80211_ATTR_FTM_RESPONDER={0x108, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_LCI={0x104, 0x2, "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"}]}]]}, 0x124}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'wlan1\x00'}) r6 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000140)={'batadv0\x00', &(0x7f0000000000)=@ethtool_stats}) 641.630965ms ago: executing program 0 (id=13043): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00', 0x0}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', r0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x9, 0xc, &(0x7f0000000d40)=ANY=[@ANYBLOB="1800000000001a18110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095", @ANYRESHEX=r1, @ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="4a4c86561d165438fa4282b5e4658ee8acfabf34f3ae7a073e921153799e44eb3e3a692e6d34a40ca4930184c1ae0cb0ffe4e190e212839e1962626ad09b2cee362cb2fc47f037725e7596b6d4e652ccfbb19de1e58218b16edb246f5fb7657d86645eda42c9b13e75b03e672b50b9e1a4131555ac3f5a58820a49e61496ba1d8623748b647705e7b6482dcdf38979b046db7751e6575c9e481a7f90975a322965", @ANYRES8=r1, @ANYRES32, @ANYRES64=r1], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x400, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r4}, 0x10) r5 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r6 = dup(r5) ioctl$PTP_EXTTS_REQUEST2(r6, 0x43403d05, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r2}, 0x10) socketpair(0x1d, 0x2, 0x2, &(0x7f0000000300)={0x0, 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) r7 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400000, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{}, &(0x7f0000000180), &(0x7f00000001c0)=r7}, 0x20) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r8}, 0x10) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x1018e58, &(0x7f0000000000), 0x6, 0x5fd, &(0x7f0000000600)="$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") 555.912326ms ago: executing program 6 (id=13044): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x4837, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1600000000000000040000000100000000223cecb0d0000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x9, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000003, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r3) sendmsg$ETHTOOL_MSG_DEBUG_SET(r3, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000580)=ANY=[], 0x38}, 0x1, 0x0, 0x0, 0x20000844}, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_SET(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="328033ffdc", @ANYRES16=r4, @ANYBLOB="010028bd7000fbdbdf250300000005000500fb000000"], 0x1c}}, 0x8001) r5 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x10, 0x2, &(0x7f00000005c0)=ANY=[@ANYBLOB="61104000000000009500000000000000f52d2f95dad6fc3a841a69f3917b9b596d190480a14a87d5d52d614bbd7cc5"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) sendmsg$key(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="020800000100000000000001000000000100140003"], 0x18}}, 0x0) unshare(0x2a020480) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) io_setup(0x30, &(0x7f0000000600)=0x0) r7 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002) io_submit(r6, 0x1, &(0x7f0000000180)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, r7, &(0x7f00000000c0)="01", 0x24}]) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f00000001c0)='ext4_journal_start_reserved\x00', r1, 0x0, 0x8000000000001}, 0x18) syz_open_dev$usbfs(&(0x7f0000000040), 0x12, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0xe, 0x7fff0000}]}) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3e, 0x1, 0x0, 0x0, 0x0, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x800000000003}, 0x1320, 0xffffffff, 0x1, 0x5, 0x0, 0x1, 0xffff, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000640)="d8000000180081034e81f783db4cb9040a1d020006007c09e8fc55a10a0015000400142603600e120800140000000401a80009000800024004000000035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb71b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad9e3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd4e1ffffffffc1c9b6278754ca397c388b0dd6e4edef3d9300"/216, 0xd8}], 0x1}, 0x0) 435.678767ms ago: executing program 2 (id=13045): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffdfc, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000100)=',-\x10*\x00', &(0x7f0000000140)='\xbd`\xf4|\xfd\xe5\x1a\x9a\xfd\xd5f\xb4\xad\x00', 0x0) read(0xffffffffffffffff, 0x0, 0x0) 428.646837ms ago: executing program 0 (id=13046): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f00000001c0)=@gcm_256={{0x304}, "6ae04425ace3f60c", "acba84f0a6731f234db1cc7f3f382ad796bd667cb12ea99509873931d2873103", "0f9dafb4", "ec3fff9afd96e6c0"}, 0x38) close(r0) 382.797797ms ago: executing program 0 (id=13047): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x4837, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1600000000000000040000000100000000223cecb0d0000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x9, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000003, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r3) sendmsg$ETHTOOL_MSG_DEBUG_SET(r3, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000580)=ANY=[], 0x38}, 0x1, 0x0, 0x0, 0x20000844}, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_SET(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="328033ffdc", @ANYRES16=r4, @ANYBLOB="010028bd7000fbdbdf250300000005000500fb000000"], 0x1c}}, 0x8001) r5 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x10, 0x2, &(0x7f00000005c0)=ANY=[@ANYBLOB="61104000000000009500000000000000f52d2f95dad6fc3a841a69f3917b9b596d190480a14a87d5d52d614bbd7cc5"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) sendmsg$key(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="020800000100000000000001000000000100140003"], 0x18}}, 0x0) unshare(0x2a020480) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) io_setup(0x30, &(0x7f0000000600)=0x0) r7 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002) io_submit(r6, 0x1, &(0x7f0000000180)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, r7, &(0x7f00000000c0)="01", 0x24}]) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f00000001c0)='ext4_journal_start_reserved\x00', r1, 0x0, 0x8000000000001}, 0x18) syz_open_dev$usbfs(&(0x7f0000000040), 0x12, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0xe, 0x7fff0000}]}) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3e, 0x1, 0x0, 0x0, 0x0, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x800000000003}, 0x1320, 0xffffffff, 0x1, 0x5, 0x0, 0x1, 0xffff, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000640)="d8000000180081034e81f783db4cb9040a1d020006007c09e8fc55a10a0015000400142603600e120800140000000401a80009000800024004000000035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb71b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad9e3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd4e1ffffffffc1c9b6278754ca397c388b0dd6e4edef3d9300"/216, 0xd8}], 0x1}, 0x0) 218.899158ms ago: executing program 8 (id=13048): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) write$tcp_mem(r0, &(0x7f0000000300)={0x8000000, 0x20, 0x4, 0x20, 0x3f}, 0x48) getpid() bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x3, &(0x7f00000001c0)={r1, &(0x7f0000000240), 0x0}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r0, 0xffffffffffffffff}, &(0x7f0000000840), &(0x7f0000000880)=r0}, 0x20) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000c00)={'syztnl0\x00', &(0x7f0000000b40)={'syztnl0\x00', 0x0, 0x80, 0x700, 0xbda6, 0x4d2, {{0x1c, 0x4, 0x1, 0x0, 0x70, 0x65, 0x0, 0x2, 0x4, 0x0, @empty, @private=0xa010100, {[@cipso={0x86, 0x2d, 0x1, [{0x0, 0xe, "2c7db74356c882bab85f5ac4"}, {0x2, 0x7, "da767df891"}, {0x1, 0x7, "596368c183"}, {0x1, 0x5, 'Xi\v'}, {0x1, 0x6, "b6e8ce1a"}]}, @noop, @lsrr={0x83, 0x1b, 0x3a, [@loopback, @private=0xa010102, @loopback, @multicast2, @remote, @empty]}, @ssrr={0x89, 0x13, 0x8f, [@rand_addr=0x64010101, @multicast1, @private=0xa010102, @rand_addr=0x64010101]}]}}}}}) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000e00)={r0, 0x20, &(0x7f0000000dc0)={&(0x7f0000000c80)=""/31, 0x1f, 0x0, &(0x7f0000000cc0)=""/225, 0xe1}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000e80)={0x1b, 0x15, &(0x7f00000009c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffffffff}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @map_val={0x18, 0x7, 0x2, 0x0, r0}, @tail_call={{0x18, 0x2, 0x1, 0x0, r2}}, @cb_func={0x18, 0x2, 0x4, 0x0, 0x3}]}, &(0x7f0000000900)='GPL\x00', 0x4, 0xaa, &(0x7f0000000a80)=""/170, 0x41100, 0x1, '\x00', r3, @fallback=0xc, 0xffffffffffffffff, 0x8, &(0x7f0000000c40)={0x3, 0x1}, 0x8, 0x10, 0x0, 0x0, r4, r0, 0x0, &(0x7f0000000e40)=[r0], 0x0, 0x10, 0x40, @void, @value}, 0x94) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000050000000900000001", @ANYRES32=0x0], 0x48) r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fd/3\x00') r9 = socket$l2tp6(0xa, 0x2, 0x73) getsockopt$inet6_buf(r9, 0x29, 0x44, &(0x7f0000000f40)=""/4096, &(0x7f0000001f40)=0x1000) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_udp_SIOCINQ(r8, 0x541b, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000d00)={0x2, 0x80, 0x6d, 0x1, 0x0, 0x0, 0x0, 0x40, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x8, 0x1}, 0x1843, 0x3, 0x0, 0x5, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', &(0x7f0000000100), 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000007c0)=ANY=[@ANYRESDEC=r8, @ANYRES32=r7, @ANYRES32=r5, @ANYRES8=r7, @ANYRESDEC=r6], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r10}, 0x10) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f0000000940)={[{@bsdgroups}, {@nodiscard}, {@noblock_validity}, {@grpjquota}, {@grpjquota}, {@noquota}, {@abort}, {@noload}, {@nodiscard}]}, 0x64, 0x50a, &(0x7f0000000200)="$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") 104.49309ms ago: executing program 7 (id=13049): syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x1008002, &(0x7f0000000100)={[{@grpquota}, {@delalloc}, {@resuid}, {@debug}, {@dioread_nolock}, {@data_ordered}, {@nomblk_io_submit}, {@noauto_da_alloc}]}, 0x1, 0x5d8, &(0x7f00000005c0)="$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") mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, 0xffffffffffffffff, 0x0) openat$vcsu(0xffffffffffffff9c, &(0x7f0000002900), 0x200002, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f00000005c0)={[{@noblock_validity}, {}, {@sysvgroups}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@nomblk_io_submit}]}, 0x1, 0x56a, &(0x7f00000015c0)="$eJzs3c9rHFUcAPDvbJL+1qZQinqQQA9WajdN4o8KQutRtFjQe12SaSjZdEt2U5pYaHuwFy9SBBEL4h/g3WPxH/CvKGihSAl68BKZzWy7TbL5uXW3zucD0743M5s3b998335nZ5cNoLBGsn9KEa9GxDdJxOG2bYORbxxZ2W/p8Y3JbEliefmzP5NI8nWt/ZP8/4N55ZWI+PWriJOlte3WFxZnKtVqOpfXRxuzV0frC4unLs9WptPp9Mr4xMSZdybG33/v3a719c0Lf3//6f2Pznx9fOm7nx8euZvEuTiUb2vvxy7caq+MxEj+nAzFuVU7jnWhsX6S9PoA2JGBPM6HIpsDDsdAHvXA/9/NiFgGCioR/1BQrTygdW3fpevgF8ajD1cugNb2f3DlvZHY17w2OrCUPHNllF3vDneh/ayNX/64dzdbYpP3IW52oT2Allu3I+L04ODa+S/J57+dO91883hjq9so2usP9NL9LP95a738p/Qk/4l18p+D68TuTmwe/6WHXWimoyz/+2Dd/PfJ1DU8kNdeauZ8Q8mly9X0dES8HBEnYmhvVt/ofs6ZpQfLnba153/ZkrXfygXz43g4uPfZx0xVGpXd9Lndo9sRrz3Nf5NYM//va+a6q8c/ez4ubLGNY+m91ztt27z/7bqfAS//FPHGuuP/9I5WsvH9ydHm+TDaOivW+uvOsd86tb+9/ndfNv4HNu7/cNJ+v7a+/TZ+3PdP2mnbTs//PcnnzfKefN31SqMxNxaxJ/lk7frxp49t1Vv7Z/0/cXzj+W+9839/RHyxxf7fOXqn4679MP5T2xr/7RcefPzlD53a39r4v90sncjXbGX+2+oB7ua5AwAAAAAAgH5TiohDkZTKT8qlUrm88vmOo3GgVK3VGycv1eavTEXzu7LDMVRq3ek+3PZ5iLH887Ct+viq+kREHImIbwf2N+vlyVp1qtedBwAAAAAAAAAAAAAAAAAAgD5xsMP3/zO/D/T66IDnzk9+Q3FtGv/d+KUnoC95/YfiEv9QXOIfikv8Q3GJfygu8Q/FJf6huMQ/AAAAAAAAAAAAAAAAAAAAAAAAAAAAdNWF8+ezZXnp8Y3JrD51bWF+pnbt1FRanynPzk+WJ2tzV8vTtdp0NS1P1mY3+3vVWu3q2HjMXx9tpPXGaH1h8eJsbf5K4+Ll2cp0ejEd+k96BQAAAAAAAAAAAAAAAAAAAC+W+sLiTKVaTecUOhbORl8cxo4LyWajfDY/GXbUxGDvO6jwHAo9npgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoM2/AQAA///fKTPH") r0 = open(&(0x7f00000005c0)='./bus\x00', 0x66842, 0x19) pwritev2(r0, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0xffffffe4}], 0x1, 0x1400, 0x0, 0x0) 21.04094ms ago: executing program 0 (id=13050): futex_waitv(0x0, 0x0, 0x0, 0x0, 0x0) epoll_create1(0x0) epoll_create1(0x0) gettid() r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000300)={{r0, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000180)='%pS \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r1}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) select(0x40, &(0x7f0000000340)={0xd, 0x0, 0x0, 0x0, 0x0, 0x2e787ec3, 0x0, 0x1}, 0x0, 0x0, 0x0) 14.88037ms ago: executing program 8 (id=13051): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007d000000180100002020732600000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000280)='./file1\x00', 0x8000, &(0x7f0000000000)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c004845160000000000"], 0x1, 0x2bd, &(0x7f0000000b40)="$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") bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x100) getdents(r0, &(0x7f0000001fc0)=""/184, 0xb8) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000005f80)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd25, 0x2, {0x0, 0x0, 0x0, r4, {0x0, 0x1}, {}, {0x8}}, [@filter_kind_options=@f_flow={{0x9}, {0x4}}, @TCA_RATE={0x6, 0x5, {0xff, 0x5}}]}, 0x3c}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="50000000090601020000000000000000020000000900020073797a31000000000500010007"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) syz_open_dev$vcsn(&(0x7f0000000040), 0x9, 0x40c00) 0s ago: executing program 6 (id=13052): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) arch_prctl$ARCH_REQ_XCOMP_PERM(0x1023, 0x12) iopl(0x3) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000008500", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0) prctl$PR_GET_SECUREBITS(0x1b) unshare(0x22000400) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00'}) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000fdff00000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0xe, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r2}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r4}, 0x10) setfsuid(0x0) kernel console output (not intermixed with test programs): face batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 654.307745][ T7114] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 654.328185][ T4428] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 654.347436][ T7114] hsr_slave_0: entered promiscuous mode [ 654.363689][ T7114] hsr_slave_1: entered promiscuous mode [ 654.369918][ T7114] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 654.390188][ T7114] Cannot create hsr debugfs directory [ 654.508150][ T7209] loop7: detected capacity change from 0 to 2048 [ 654.538672][ T7211] loop8: detected capacity change from 0 to 2048 [ 654.564513][ T7209] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 654.566023][ T3401] IPVS: stop unused estimator thread 0... [ 654.576860][ T7209] ext4 filesystem being mounted at /16/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 654.599080][ T7211] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 654.612768][ T7216] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 345: padding at end of block bitmap is not set [ 654.627570][ T7211] ext4 filesystem being mounted at /200/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 654.654241][ T7196] netlink: 'syz.0.12604': attribute type 21 has an invalid length. [ 654.662164][ T7196] netlink: 'syz.0.12604': attribute type 20 has an invalid length. [ 654.670795][ T37] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 211 with error 117 [ 654.683388][ T37] EXT4-fs (loop7): This should not happen!! Data will be lost [ 654.683388][ T37] [ 654.693778][ T7216] EXT4-fs error (device loop8): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 345: padding at end of block bitmap is not set [ 654.732841][ T7220] ext2: Unknown parameter 'journal_p' [ 654.737071][T24626] EXT4-fs (loop8): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 1747 with error 117 [ 654.750972][T24626] EXT4-fs (loop8): This should not happen!! Data will be lost [ 654.750972][T24626] [ 654.782013][ T7114] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 654.801681][ T6851] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 654.814474][ T7114] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 654.824907][ T7114] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 654.836497][ T7114] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 654.881675][ T7114] 8021q: adding VLAN 0 to HW filter on device bond0 [ 654.902043][ T7114] 8021q: adding VLAN 0 to HW filter on device team0 [ 654.909048][ T4428] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 654.919277][T24626] bridge0: port 1(bridge_slave_0) entered blocking state [ 654.926377][T24626] bridge0: port 1(bridge_slave_0) entered forwarding state [ 654.943374][T24626] bridge0: port 2(bridge_slave_1) entered blocking state [ 654.943319][ T7231] usb usb2: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 654.950469][T24626] bridge0: port 2(bridge_slave_1) entered forwarding state [ 654.957824][ T7231] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 654.990043][ T7114] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 655.003594][ T7231] vhci_hcd: invalid port number 255 [ 655.008999][ T7234] loop8: detected capacity change from 0 to 512 [ 655.027319][ T7235] loop0: detected capacity change from 0 to 512 [ 655.042372][ T7235] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 655.054474][ T7234] EXT4-fs warning (device loop8): ext4_enable_quotas:7145: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 655.074807][ T7234] EXT4-fs (loop8): mount failed [ 655.080183][ T7240] loop2: detected capacity change from 0 to 1024 [ 655.095646][ T7235] EXT4-fs (loop0): orphan cleanup on readonly fs [ 655.105515][ T7235] EXT4-fs error (device loop0): ext4_acquire_dquot:6927: comm syz.0.12618: Failed to acquire dquot type 1 [ 655.125293][ T7235] EXT4-fs (loop0): 1 truncate cleaned up [ 655.128550][ T7247] loop7: detected capacity change from 0 to 2048 [ 655.138069][ T7240] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 655.153339][ T7235] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 655.167210][ T7114] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 655.176558][ T7240] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4115: comm syz.2.12619: Allocating blocks 385-513 which overlap fs metadata [ 655.193272][ T7247] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 655.195204][ T7236] EXT4-fs (loop2): pa ffff888106696bd0: logic 16, phys. 129, len 24 [ 655.212646][ T7247] ext4 filesystem being mounted at /19/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 655.213375][ T7236] EXT4-fs error (device loop2): ext4_mb_release_inode_pa:5366: group 0, free 0, pa_free 8 [ 655.242789][ T7260] loop8: detected capacity change from 0 to 512 [ 655.266156][ T3791] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 655.276423][ T4202] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 655.286207][ T7260] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 655.307718][ T7260] EXT4-fs warning (device loop8): dx_probe:869: inode #2: comm syz.8.12623: Unimplemented hash flags: 0x0001 [ 655.319339][ T7260] EXT4-fs warning (device loop8): dx_probe:966: inode #2: comm syz.8.12623: Corrupt directory, running e2fsck is recommended [ 655.332754][ T7260] syz.8.12623: attempt to access beyond end of device [ 655.332754][ T7260] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 655.348176][ T7260] netlink: 60 bytes leftover after parsing attributes in process `syz.8.12623'. [ 655.357792][ T7260] EXT4-fs warning (device loop8): dx_probe:869: inode #2: comm syz.8.12623: Unimplemented hash flags: 0x0001 [ 655.369405][ T7260] EXT4-fs warning (device loop8): dx_probe:966: inode #2: comm syz.8.12623: Corrupt directory, running e2fsck is recommended [ 655.386173][ T7267] loop0: detected capacity change from 0 to 2048 [ 655.390372][ T7260] EXT4-fs warning (device loop8): dx_probe:869: inode #2: comm syz.8.12623: Unimplemented hash flags: 0x0001 [ 655.404278][ T7260] EXT4-fs warning (device loop8): dx_probe:966: inode #2: comm syz.8.12623: Corrupt directory, running e2fsck is recommended [ 655.424369][ T7260] EXT4-fs warning (device loop8): dx_probe:869: inode #2: comm syz.8.12623: Unimplemented hash flags: 0x0001 [ 655.436051][ T7260] EXT4-fs warning (device loop8): dx_probe:966: inode #2: comm syz.8.12623: Corrupt directory, running e2fsck is recommended [ 655.464024][ T7267] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 655.485833][ T7267] ext4 filesystem being mounted at /235/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 655.510430][ T7114] veth0_vlan: entered promiscuous mode [ 655.520605][ T4428] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 655.538459][ T7114] veth1_vlan: entered promiscuous mode [ 655.579359][ T7114] veth0_macvtap: entered promiscuous mode [ 655.591958][ T7283] loop8: detected capacity change from 0 to 512 [ 655.594177][ T7114] veth1_macvtap: entered promiscuous mode [ 655.616373][ T7114] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 655.626898][ T7114] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 655.628908][T24626] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm kworker/u8:10: bg 0: block 345: padding at end of block bitmap is not set [ 655.636862][ T7114] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 655.661822][ T7114] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 655.664446][T24626] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 2048 with error 117 [ 655.671798][ T7114] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 655.684410][T24626] EXT4-fs (loop7): This should not happen!! Data will be lost [ 655.684410][T24626] [ 655.694879][ T7114] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 655.714396][ T7114] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 655.724850][ T7114] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 655.734708][ T7114] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 655.745145][ T7114] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 655.754978][ T7114] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 655.755899][ T7283] EXT4-fs warning (device loop8): ext4_enable_quotas:7145: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 655.765401][ T7114] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 655.789882][ T7114] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 655.800399][ T7114] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 655.810238][ T7114] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 655.820922][ T7114] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 655.845783][ T12] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 2065 with max blocks 2040 with error 28 [ 655.858600][ T12] EXT4-fs (loop7): This should not happen!! Data will be lost [ 655.858600][ T12] [ 655.868320][ T12] EXT4-fs (loop7): Total free blocks count 0 [ 655.874459][ T12] EXT4-fs (loop7): Free/Dirty block details [ 655.880407][ T12] EXT4-fs (loop7): free_blocks=0 [ 655.885445][ T12] EXT4-fs (loop7): dirty_blocks=2048 [ 655.890765][ T12] EXT4-fs (loop7): Block reservation details [ 655.897576][ T7283] EXT4-fs (loop8): mount failed [ 655.913386][ T7114] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 655.928662][ T7114] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 655.939246][ T7114] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 655.949132][ T7114] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 655.959579][ T7114] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 655.969412][ T7114] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 655.979957][ T7114] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 655.989893][ T7114] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 656.000384][ T7114] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 656.010305][ T7114] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 656.020772][ T7114] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 656.030610][ T7114] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 656.041070][ T7114] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 656.051227][ T7114] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 656.061755][ T7114] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 656.071603][ T7114] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 656.082114][ T7114] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 656.093180][ T7114] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 656.103269][ T7114] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 656.112003][ T7114] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 656.120802][ T7114] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 656.129730][ T7114] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 656.170111][T24626] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm kworker/u8:10: bg 0: block 345: padding at end of block bitmap is not set [ 656.190922][T24626] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 2048 with error 117 [ 656.203814][T24626] EXT4-fs (loop0): This should not happen!! Data will be lost [ 656.203814][T24626] [ 656.237171][ T7296] siw: device registration error -23 [ 656.266646][T24626] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 2065 with max blocks 2040 with error 28 [ 656.279495][T24626] EXT4-fs (loop0): This should not happen!! Data will be lost [ 656.279495][T24626] [ 656.289279][T24626] EXT4-fs (loop0): Total free blocks count 0 [ 656.295380][T24626] EXT4-fs (loop0): Free/Dirty block details [ 656.301293][T24626] EXT4-fs (loop0): free_blocks=0 [ 656.306499][T24626] EXT4-fs (loop0): dirty_blocks=2048 [ 656.311958][T24626] EXT4-fs (loop0): Block reservation details [ 656.365420][ T7305] loop8: detected capacity change from 0 to 512 [ 656.397588][ T7305] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 656.415124][ T7305] ext4 filesystem being mounted at /208/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 656.457134][ T7312] loop2: detected capacity change from 0 to 1024 [ 656.483393][ T7312] EXT4-fs: Ignoring removed nomblk_io_submit option [ 656.486556][ T7316] loop0: detected capacity change from 0 to 512 [ 656.509638][ T7316] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 656.520445][ T4428] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 656.545404][ T7312] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 656.556218][ T7318] loop7: detected capacity change from 0 to 512 [ 656.556502][ T7312] System zones: 0-1, 3-36 [ 656.568422][ T7318] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 656.583233][ T7316] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #16: comm syz.0.12639: invalid indirect mapped block 83886080 (level 1) [ 656.606633][ T7312] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 656.635188][ T7316] EXT4-fs (loop0): Remounting filesystem read-only [ 656.641964][ T7316] EXT4-fs (loop0): 1 orphan inode deleted [ 656.647767][ T7316] EXT4-fs (loop0): 1 truncate cleaned up [ 656.656325][ T7318] EXT4-fs error (device loop7): ext4_free_branches:1023: inode #16: comm syz.7.12638: invalid indirect mapped block 83886080 (level 1) [ 656.676072][ T30] kauditd_printk_skb: 122 callbacks suppressed [ 656.676090][ T30] audit: type=1400 audit(1742206287.105:34970): avc: denied { map } for pid=7311 comm="syz.2.12637" path="/dev/bus/usb/003/001" dev="devtmpfs" ino=153 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 656.707149][ T7316] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 656.739302][ T7318] EXT4-fs (loop7): Remounting filesystem read-only [ 656.760828][ T7312] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2240: inode #15: comm syz.2.12637: corrupted in-inode xattr: ea_inode specified without ea_inode feature enabled [ 656.780465][ T7318] EXT4-fs (loop7): 1 orphan inode deleted [ 656.786278][ T7318] EXT4-fs (loop7): 1 truncate cleaned up [ 656.803994][ T7307] netlink: 'syz.6.12636': attribute type 21 has an invalid length. [ 656.812007][ T7307] netlink: 'syz.6.12636': attribute type 20 has an invalid length. [ 656.820055][ T7307] IPv6: NLM_F_CREATE should be specified when creating new route [ 656.836757][ T7318] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 656.850138][ T7316] SELinux: (dev loop0, type ext4) getxattr errno 5 [ 656.853562][ T7318] SELinux: (dev loop7, type ext4) getxattr errno 5 [ 656.857676][ T7316] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 656.873213][ T7318] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 656.876281][ T3791] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 656.967675][ T7339] loop6: detected capacity change from 0 to 512 [ 656.977439][ T7339] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 656.986827][ T7339] EXT4-fs (loop6): orphan cleanup on readonly fs [ 656.993859][ T7339] Quota error (device loop6): do_check_range: Getting block 196613 out of range 1-5 [ 656.999979][ T30] audit: type=1326 audit(1742206287.425:34971): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7333 comm="syz.2.12644" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6bdc20d169 code=0x7ffc0000 [ 657.003300][ T7339] Quota error (device loop6): qtree_read_dquot: Can't read quota structure for id 0 [ 657.036446][ T7339] EXT4-fs error (device loop6): ext4_acquire_dquot:6927: comm syz.6.12645: Failed to acquire dquot type 1 [ 657.049573][ T7344] siw: device registration error -23 [ 657.056176][ T30] audit: type=1326 audit(1742206287.465:34972): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7333 comm="syz.2.12644" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6bdc20d169 code=0x7ffc0000 [ 657.056219][ T7339] EXT4-fs (loop6): 1 truncate cleaned up [ 657.085580][ T30] audit: type=1326 audit(1742206287.475:34973): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7333 comm="syz.2.12644" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6bdc20d169 code=0x7ffc0000 [ 657.109447][ T30] audit: type=1326 audit(1742206287.475:34974): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7333 comm="syz.2.12644" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6bdc20d169 code=0x7ffc0000 [ 657.133300][ T30] audit: type=1326 audit(1742206287.475:34975): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7333 comm="syz.2.12644" exe="/root/syz-executor" sig=0 arch=c000003e syscall=245 compat=0 ip=0x7f6bdc20d169 code=0x7ffc0000 [ 657.156912][ T30] audit: type=1326 audit(1742206287.475:34976): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7333 comm="syz.2.12644" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6bdc20d169 code=0x7ffc0000 [ 657.180598][ T30] audit: type=1326 audit(1742206287.485:34977): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7333 comm="syz.2.12644" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6bdc20d169 code=0x7ffc0000 [ 657.204649][ T7339] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 657.771517][ T7332] netlink: 1300 bytes leftover after parsing attributes in process `syz.8.12643'. [ 657.842125][ T7363] netlink: 100 bytes leftover after parsing attributes in process `syz.7.12653'. [ 657.854470][ T7366] loop8: detected capacity change from 0 to 512 [ 657.868181][ T7368] loop6: detected capacity change from 0 to 512 [ 657.888964][ T7366] ext4 filesystem being mounted at /213/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 657.906587][ T7368] ext4 filesystem being mounted at /5/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 658.020287][ T7381] loop6: detected capacity change from 0 to 2048 [ 658.035803][ T7381] ext4 filesystem being mounted at /6/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 658.146421][ T7392] netlink: 'syz.2.12655': attribute type 21 has an invalid length. [ 658.154502][ T7392] netlink: 'syz.2.12655': attribute type 20 has an invalid length. [ 658.211402][T10161] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm kworker/u8:8: bg 0: block 345: padding at end of block bitmap is not set [ 658.226160][T10161] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 2048 with error 117 [ 658.239038][T10161] EXT4-fs (loop6): This should not happen!! Data will be lost [ 658.239038][T10161] [ 658.268899][ T37] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 2065 with max blocks 2040 with error 28 [ 658.281705][ T37] EXT4-fs (loop6): This should not happen!! Data will be lost [ 658.281705][ T37] [ 658.291534][ T37] EXT4-fs (loop6): Total free blocks count 0 [ 658.297647][ T37] EXT4-fs (loop6): Free/Dirty block details [ 658.303585][ T37] EXT4-fs (loop6): free_blocks=0 [ 658.308530][ T37] EXT4-fs (loop6): dirty_blocks=2048 [ 658.313911][ T37] EXT4-fs (loop6): Block reservation details [ 658.319897][ T37] EXT4-fs (loop6): i_reserved_data_blocks=128 [ 658.886201][ T7410] loop0: detected capacity change from 0 to 128 [ 658.895811][ T7410] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 658.925900][ T7414] loop6: detected capacity change from 0 to 1024 [ 658.928334][ T7410] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 658.958906][ T7410] netlink: 40 bytes leftover after parsing attributes in process `syz.0.12667'. [ 659.003687][ T7412] loop8: detected capacity change from 0 to 1024 [ 659.015555][ T7412] EXT4-fs (loop8): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 659.040241][ T7412] EXT4-fs error (device loop8): ext4_read_block_bitmap_nowait:483: comm syz.8.12668: Invalid block bitmap block 0 in block_group 0 [ 659.056974][ T7412] EXT4-fs error (device loop8): ext4_acquire_dquot:6927: comm syz.8.12668: Failed to acquire dquot type 0 [ 659.070483][ T7412] EXT4-fs error (device loop8): ext4_free_blocks:6589: comm syz.8.12668: Freeing blocks not in datazone - block = 0, count = 4096 [ 659.085565][ T7412] EXT4-fs error (device loop8): ext4_read_inode_bitmap:139: comm syz.8.12668: Invalid inode bitmap blk 0 in block_group 0 [ 659.101897][ T7412] EXT4-fs error (device loop8) in ext4_free_inode:361: Corrupt filesystem [ 659.116054][T24626] EXT4-fs error (device loop8): ext4_release_dquot:6950: comm kworker/u8:10: Failed to release dquot type 0 [ 659.123224][ T7412] EXT4-fs (loop8): 1 orphan inode deleted [ 659.205052][ T7414] EXT4-fs error (device loop6): ext4_mb_mark_diskspace_used:4115: comm syz.6.12669: Allocating blocks 385-513 which overlap fs metadata [ 659.221189][ T7413] EXT4-fs (loop6): pa ffff8881064d4620: logic 16, phys. 129, len 24 [ 659.229371][ T7413] EXT4-fs error (device loop6): ext4_mb_release_inode_pa:5366: group 0, free 0, pa_free 8 [ 659.270767][ T7429] ext2: Unknown parameter 'journal_p' [ 659.308051][ T7432] loop0: detected capacity change from 0 to 512 [ 659.318998][ T7432] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 659.333594][ T7416] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12670'. [ 659.334559][ T7432] EXT4-fs (loop0): orphan cleanup on readonly fs [ 659.365354][ T7432] EXT4-fs error (device loop0): ext4_acquire_dquot:6927: comm syz.0.12675: Failed to acquire dquot type 1 [ 659.405748][ T7432] EXT4-fs (loop0): 1 truncate cleaned up [ 659.504533][ T7416] netlink: 'syz.2.12670': attribute type 21 has an invalid length. [ 659.512545][ T7416] netlink: 'syz.2.12670': attribute type 20 has an invalid length. [ 659.663056][ T7453] loop2: detected capacity change from 0 to 1024 [ 659.669808][ T7453] EXT4-fs: Ignoring removed nomblk_io_submit option [ 659.678556][ T7453] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 659.686766][ T7453] System zones: 0-1, 3-36 [ 659.994834][ T7459] netlink: 'syz.2.12683': attribute type 21 has an invalid length. [ 660.002832][ T7459] netlink: 'syz.2.12683': attribute type 20 has an invalid length. [ 660.142628][ T7462] loop8: detected capacity change from 0 to 1024 [ 660.151787][ T7462] EXT4-fs (loop8): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 660.167864][ T7462] EXT4-fs error (device loop8): ext4_read_block_bitmap_nowait:483: comm syz.8.12684: Invalid block bitmap block 0 in block_group 0 [ 660.183975][ T7462] EXT4-fs error (device loop8): ext4_acquire_dquot:6927: comm syz.8.12684: Failed to acquire dquot type 0 [ 660.196742][ T7462] EXT4-fs error (device loop8): ext4_free_blocks:6589: comm syz.8.12684: Freeing blocks not in datazone - block = 0, count = 4096 [ 660.213176][ T7462] EXT4-fs error (device loop8): ext4_read_inode_bitmap:139: comm syz.8.12684: Invalid inode bitmap blk 0 in block_group 0 [ 660.229222][ T7462] EXT4-fs error (device loop8) in ext4_free_inode:361: Corrupt filesystem [ 660.239837][ T7462] EXT4-fs (loop8): 1 orphan inode deleted [ 660.322558][ T12] EXT4-fs error (device loop8): ext4_release_dquot:6950: comm kworker/u8:0: Failed to release dquot type 0 [ 660.350373][ T7471] loop0: detected capacity change from 0 to 1024 [ 660.385433][ T7467] loop7: detected capacity change from 0 to 2048 [ 660.391919][ T7471] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4115: comm syz.0.12688: Allocating blocks 497-513 which overlap fs metadata [ 660.425477][ T7478] netlink: 1296 bytes leftover after parsing attributes in process `syz.6.12687'. [ 660.429963][ T7469] EXT4-fs (loop0): pa ffff8881064d4690: logic 16, phys. 145, len 23 [ 660.442861][ T7469] EXT4-fs error (device loop0): ext4_mb_release_inode_pa:5366: group 0, free 0, pa_free 1 [ 660.453665][ T7482] loop8: detected capacity change from 0 to 1024 [ 660.467788][ T7478] siw: device registration error -23 [ 660.476107][ T7467] ext4 filesystem being mounted at /31/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 660.502997][ T7488] loop2: detected capacity change from 0 to 512 [ 660.511020][ T7488] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 660.530253][ T7482] EXT4-fs error (device loop8): ext4_mb_mark_diskspace_used:4115: comm syz.8.12692: Allocating blocks 385-513 which overlap fs metadata [ 660.549631][ T7488] EXT4-fs (loop2): orphan cleanup on readonly fs [ 660.566825][ T7488] EXT4-fs error (device loop2): ext4_acquire_dquot:6927: comm syz.2.12695: Failed to acquire dquot type 1 [ 660.583238][ T7495] loop0: detected capacity change from 0 to 1024 [ 660.592244][ T7482] EXT4-fs (loop8): pa ffff8881064d4620: logic 16, phys. 129, len 24 [ 660.600341][ T7482] EXT4-fs error (device loop8): ext4_mb_release_inode_pa:5366: group 0, free 0, pa_free 8 [ 660.617652][ T7495] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 660.630349][ T7488] EXT4-fs (loop2): 1 truncate cleaned up [ 660.652080][ T7495] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:483: comm syz.0.12694: Invalid block bitmap block 0 in block_group 0 [ 660.708197][ T7495] EXT4-fs error (device loop0): ext4_acquire_dquot:6927: comm syz.0.12694: Failed to acquire dquot type 0 [ 660.720181][ T7495] EXT4-fs error (device loop0): ext4_free_blocks:6589: comm syz.0.12694: Freeing blocks not in datazone - block = 0, count = 4096 [ 660.729212][ T7504] loop8: detected capacity change from 0 to 1024 [ 660.744266][ T7504] EXT4-fs: Ignoring removed nomblk_io_submit option [ 660.750222][ T7495] EXT4-fs error (device loop0): ext4_read_inode_bitmap:139: comm syz.0.12694: Invalid inode bitmap blk 0 in block_group 0 [ 660.767444][ T12] EXT4-fs error (device loop0): ext4_release_dquot:6950: comm kworker/u8:0: Failed to release dquot type 0 [ 660.782624][ T7504] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 660.793068][ T7495] EXT4-fs error (device loop0) in ext4_free_inode:361: Corrupt filesystem [ 660.799070][ T7509] loop2: detected capacity change from 0 to 1024 [ 660.801634][ T7504] System zones: 0-1, 3-36 [ 660.808552][ T7509] EXT4-fs: Ignoring removed nomblk_io_submit option [ 660.814933][ T7495] EXT4-fs (loop0): 1 orphan inode deleted [ 660.851628][ T7509] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 660.860600][ T7509] System zones: 0-1, 3-36 [ 660.868929][ T37] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm kworker/u8:2: bg 0: block 345: padding at end of block bitmap is not set [ 660.885059][ T37] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 2048 with error 117 [ 660.897851][ T37] EXT4-fs (loop7): This should not happen!! Data will be lost [ 660.897851][ T37] [ 660.944088][ T37] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 2065 with max blocks 2040 with error 28 [ 660.949147][ T7509] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2240: inode #15: comm syz.2.12699: corrupted in-inode xattr: ea_inode specified without ea_inode feature enabled [ 660.956853][ T37] EXT4-fs (loop7): This should not happen!! Data will be lost [ 660.956853][ T37] [ 660.956871][ T37] EXT4-fs (loop7): Total free blocks count 0 [ 660.956887][ T37] EXT4-fs (loop7): Free/Dirty block details [ 660.995647][ T37] EXT4-fs (loop7): free_blocks=0 [ 661.000712][ T37] EXT4-fs (loop7): dirty_blocks=2048 [ 661.006045][ T37] EXT4-fs (loop7): Block reservation details [ 661.012043][ T37] EXT4-fs (loop7): i_reserved_data_blocks=128 [ 661.068910][ T7524] loop8: detected capacity change from 0 to 512 [ 661.081189][ T7522] netlink: 12 bytes leftover after parsing attributes in process `syz.0.12707'. [ 661.094893][ T7524] ext4 filesystem being mounted at /224/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 661.100347][ T7528] loop2: detected capacity change from 0 to 1024 [ 661.151525][ T7528] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4115: comm syz.2.12708: Allocating blocks 385-513 which overlap fs metadata [ 661.152203][ T7532] loop0: detected capacity change from 0 to 1024 [ 661.172981][ T7535] ext2: Unknown parameter 'journal_p' [ 661.194267][ T7532] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4115: comm syz.0.12710: Allocating blocks 385-513 which overlap fs metadata [ 661.217718][ T7528] EXT4-fs (loop2): pa ffff888106696cb0: logic 16, phys. 129, len 24 [ 661.225870][ T7528] EXT4-fs error (device loop2): ext4_mb_release_inode_pa:5366: group 0, free 0, pa_free 8 [ 661.228324][ T7531] EXT4-fs (loop0): pa ffff888106696d20: logic 16, phys. 129, len 24 [ 661.243953][ T7531] EXT4-fs error (device loop0): ext4_mb_release_inode_pa:5366: group 0, free 0, pa_free 8 [ 661.273758][ T7542] loop7: detected capacity change from 0 to 512 [ 661.281084][ T7542] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 661.289667][ T7544] loop8: detected capacity change from 0 to 128 [ 661.296686][ T7544] FAT-fs (loop8): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 661.309065][ T7544] FAT-fs (loop8): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 661.320870][ T7542] EXT4-fs (loop7): orphan cleanup on readonly fs [ 661.327488][ T7549] loop0: detected capacity change from 0 to 512 [ 661.334280][ T7542] EXT4-fs error (device loop7): ext4_acquire_dquot:6927: comm syz.7.12712: Failed to acquire dquot type 1 [ 661.349692][ T7542] EXT4-fs (loop7): 1 truncate cleaned up [ 661.350530][ T7544] netlink: 40 bytes leftover after parsing attributes in process `syz.8.12713'. [ 661.364581][ T7549] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 661.383698][ T7549] EXT4-fs (loop0): orphan cleanup on readonly fs [ 661.400836][ T7549] EXT4-fs error (device loop0): ext4_acquire_dquot:6927: comm syz.0.12714: Failed to acquire dquot type 1 [ 661.418376][ T7549] EXT4-fs (loop0): 1 truncate cleaned up [ 661.439955][ T7558] loop2: detected capacity change from 0 to 512 [ 661.447040][ T7558] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 661.450348][ T7556] IPVS: ovf: UDP 127.0.0.1:19999 - no destination available [ 661.466026][ T7558] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #16: comm syz.2.12720: invalid indirect mapped block 83886080 (level 1) [ 661.468501][ T1033] IPVS: starting estimator thread 0... [ 661.480363][ T7560] loop7: detected capacity change from 0 to 512 [ 661.486306][ T7558] EXT4-fs (loop2): Remounting filesystem read-only [ 661.502640][ T7558] EXT4-fs (loop2): 1 orphan inode deleted [ 661.508395][ T7558] EXT4-fs (loop2): 1 truncate cleaned up [ 661.517729][ T7558] SELinux: (dev loop2, type ext4) getxattr errno 5 [ 661.526190][ T7560] ext4 filesystem being mounted at /34/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 661.582866][ T7562] IPVS: using max 2016 ests per chain, 100800 per kthread [ 661.594101][ T7572] loop7: detected capacity change from 0 to 512 [ 661.605082][ T7566] netlink: 1300 bytes leftover after parsing attributes in process `syz.8.12722'. [ 661.615912][ T7566] siw: device registration error -23 [ 661.616503][ T7572] ext4 filesystem being mounted at /36/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 661.668464][ T7578] loop8: detected capacity change from 0 to 1024 [ 661.685028][ T7582] loop7: detected capacity change from 0 to 1024 [ 661.687889][ T7578] EXT4-fs error (device loop8): ext4_mb_mark_diskspace_used:4115: comm syz.8.12725: Allocating blocks 385-513 which overlap fs metadata [ 661.691749][ T7582] EXT4-fs: Ignoring removed nomblk_io_submit option [ 661.714549][ T7582] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 661.722850][ T7582] System zones: 0-1, 3-36 [ 661.751692][ T7581] loop2: detected capacity change from 0 to 1024 [ 661.763440][ T7581] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 661.765939][ T7578] EXT4-fs (loop8): pa ffff8881064d4620: logic 16, phys. 129, len 24 [ 661.781977][ T7578] EXT4-fs error (device loop8): ext4_mb_release_inode_pa:5366: group 0, free 0, pa_free 8 [ 661.806537][ T7581] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:483: comm syz.2.12727: Invalid block bitmap block 0 in block_group 0 [ 661.821599][ T7581] __quota_error: 232 callbacks suppressed [ 661.821696][ T7581] Quota error (device loop2): write_blk: dquota write failed [ 661.826741][ T7588] loop7: detected capacity change from 0 to 1024 [ 661.828089][ T7581] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 661.838332][ T7588] EXT4-fs: Ignoring removed nomblk_io_submit option [ 661.843747][ T7581] EXT4-fs error (device loop2): ext4_acquire_dquot:6927: comm syz.2.12727: Failed to acquire dquot type 0 [ 661.867931][ T7588] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 661.879907][ T7581] EXT4-fs error (device loop2): ext4_free_blocks:6589: comm syz.2.12727: Freeing blocks not in datazone - block = 0, count = 4096 [ 661.899297][ T7588] System zones: 0-1, 3-36 [ 661.908990][ T7581] EXT4-fs error (device loop2): ext4_read_inode_bitmap:139: comm syz.2.12727: Invalid inode bitmap blk 0 in block_group 0 [ 661.922727][ T37] Quota error (device loop2): do_check_range: Getting block 0 out of range 1-8 [ 661.922757][ T37] EXT4-fs error (device loop2): ext4_release_dquot:6950: comm kworker/u8:2: Failed to release dquot type 0 [ 661.945842][ T7581] EXT4-fs error (device loop2) in ext4_free_inode:361: Corrupt filesystem [ 661.956800][ T7581] EXT4-fs (loop2): 1 orphan inode deleted [ 661.960493][ T7588] EXT4-fs error (device loop7): ext4_xattr_ibody_find:2240: inode #15: comm syz.7.12728: corrupted in-inode xattr: ea_inode specified without ea_inode feature enabled [ 662.058816][ T7597] loop2: detected capacity change from 0 to 128 [ 662.065624][ T7597] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 662.080786][ T7597] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 662.096775][ T7597] netlink: 40 bytes leftover after parsing attributes in process `syz.2.12732'. [ 662.187693][ T30] audit: type=1326 audit(1742206292.615:35193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7607 comm="syz.2.12735" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6bdc20d169 code=0x7ffc0000 [ 662.197963][ T7608] loop2: detected capacity change from 0 to 2048 [ 662.219006][ T30] audit: type=1326 audit(1742206292.615:35194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7607 comm="syz.2.12735" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f6bdc20d169 code=0x7ffc0000 [ 662.242693][ T30] audit: type=1326 audit(1742206292.615:35195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7607 comm="syz.2.12735" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f6bdc20d1a3 code=0x7ffc0000 [ 662.266144][ T30] audit: type=1326 audit(1742206292.625:35196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7607 comm="syz.2.12735" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f6bdc20bc1f code=0x7ffc0000 [ 662.289718][ T30] audit: type=1326 audit(1742206292.625:35197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7607 comm="syz.2.12735" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f6bdc20d1f7 code=0x7ffc0000 [ 662.313238][ T30] audit: type=1326 audit(1742206292.625:35198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7607 comm="syz.2.12735" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f6bdc20bad0 code=0x7ffc0000 [ 662.325947][ T7608] ext4 filesystem being mounted at /217/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 662.336947][ T30] audit: type=1326 audit(1742206292.625:35199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7607 comm="syz.2.12735" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f6bdc20cd6b code=0x7ffc0000 [ 662.403089][ T7613] netlink: 1300 bytes leftover after parsing attributes in process `syz.6.12736'. [ 662.426126][ T7613] siw: device registration error -23 [ 662.456388][ T7615] loop0: detected capacity change from 0 to 512 [ 662.465706][ T7619] ext2: Unknown parameter 'journal_p' [ 662.499134][ T7615] ext4 filesystem being mounted at /254/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 662.529692][ T7625] loop6: detected capacity change from 0 to 2048 [ 662.549294][ T7625] ext4 filesystem being mounted at /20/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 662.615911][ T7634] netlink: 100 bytes leftover after parsing attributes in process `syz.7.12743'. [ 662.657501][ T7637] loop0: detected capacity change from 0 to 128 [ 662.664615][ T7637] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 662.679313][ T7637] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 662.707980][ T37] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm kworker/u8:2: bg 0: block 345: padding at end of block bitmap is not set [ 662.730236][ T7637] netlink: 40 bytes leftover after parsing attributes in process `syz.0.12745'. [ 662.742770][ T37] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 2048 with error 117 [ 662.755516][ T37] EXT4-fs (loop2): This should not happen!! Data will be lost [ 662.755516][ T37] [ 662.791400][ T51] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 2065 with max blocks 2040 with error 28 [ 662.804157][ T51] EXT4-fs (loop2): This should not happen!! Data will be lost [ 662.804157][ T51] [ 662.813882][ T51] EXT4-fs (loop2): Total free blocks count 0 [ 662.816513][ T7635] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.12741: bg 0: block 345: padding at end of block bitmap is not set [ 662.819857][ T51] EXT4-fs (loop2): Free/Dirty block details [ 662.819885][ T51] EXT4-fs (loop2): free_blocks=0 [ 662.837737][ T7635] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 16 with error 117 [ 662.840107][ T51] EXT4-fs (loop2): dirty_blocks=2048 [ 662.840125][ T51] EXT4-fs (loop2): Block reservation details [ 662.845061][ T7635] EXT4-fs (loop6): This should not happen!! Data will be lost [ 662.845061][ T7635] [ 662.857531][ T51] EXT4-fs (loop2): i_reserved_data_blocks=128 [ 662.921054][ T7641] ext2: Unknown parameter 'journal_p' [ 662.936277][ T51] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 32 with max blocks 2048 with error 117 [ 662.948990][ T51] EXT4-fs (loop6): This should not happen!! Data will be lost [ 662.948990][ T51] [ 662.978128][ T7646] loop2: detected capacity change from 0 to 1024 [ 662.982261][ T7644] loop8: detected capacity change from 0 to 512 [ 662.984934][ T7646] EXT4-fs: Ignoring removed nomblk_io_submit option [ 662.998672][ T7644] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 662.998756][ T51] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 2081 with max blocks 2024 with error 28 [ 663.021375][ T51] EXT4-fs (loop6): This should not happen!! Data will be lost [ 663.021375][ T51] [ 663.025475][ T7646] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 663.031034][ T51] EXT4-fs (loop6): Total free blocks count 0 [ 663.040928][ T7646] System zones: [ 663.045148][ T51] EXT4-fs (loop6): Free/Dirty block details [ 663.045166][ T51] EXT4-fs (loop6): free_blocks=0 [ 663.048691][ T7646] 0-1 [ 663.054575][ T51] EXT4-fs (loop6): dirty_blocks=2032 [ 663.067534][ T7646] , 3-36 [ 663.071493][ T7644] EXT4-fs error (device loop8): ext4_free_branches:1023: inode #16: comm syz.8.12750: invalid indirect mapped block 83886080 (level 1) [ 663.097334][ T7644] EXT4-fs (loop8): Remounting filesystem read-only [ 663.105555][ T7644] EXT4-fs (loop8): 1 orphan inode deleted [ 663.111412][ T7644] EXT4-fs (loop8): 1 truncate cleaned up [ 663.117592][ T7644] SELinux: (dev loop8, type ext4) getxattr errno 5 [ 663.220307][ T7657] loop2: detected capacity change from 0 to 512 [ 663.247036][ T7657] ext4 filesystem being mounted at /220/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 663.347456][ T7665] loop2: detected capacity change from 0 to 2048 [ 663.393232][ T7665] ext4 filesystem being mounted at /221/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 663.532049][ T7676] loop7: detected capacity change from 0 to 2048 [ 663.580789][ T7676] ext4 filesystem being mounted at /46/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 663.626326][ T7663] netlink: 'syz.8.12755': attribute type 21 has an invalid length. [ 663.634415][ T7663] netlink: 'syz.8.12755': attribute type 20 has an invalid length. [ 663.718114][ T51] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm kworker/u8:3: bg 0: block 345: padding at end of block bitmap is not set [ 663.749668][ T51] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 2048 with error 117 [ 663.762415][ T51] EXT4-fs (loop2): This should not happen!! Data will be lost [ 663.762415][ T51] [ 663.785360][ T7686] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.12759: bg 0: block 345: padding at end of block bitmap is not set [ 663.801881][ T7688] loop0: detected capacity change from 0 to 1024 [ 663.812142][ T7688] EXT4-fs: Ignoring removed nomblk_io_submit option [ 663.826121][ T7686] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 16 with error 117 [ 663.827108][ T51] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 2065 with max blocks 2040 with error 28 [ 663.838613][ T7686] EXT4-fs (loop7): This should not happen!! Data will be lost [ 663.838613][ T7686] [ 663.851262][ T51] EXT4-fs (loop2): This should not happen!! Data will be lost [ 663.851262][ T51] [ 663.851281][ T51] EXT4-fs (loop2): Total free blocks count 0 [ 663.876682][ T51] EXT4-fs (loop2): Free/Dirty block details [ 663.882631][ T51] EXT4-fs (loop2): free_blocks=0 [ 663.887593][ T51] EXT4-fs (loop2): dirty_blocks=2048 [ 663.892920][ T51] EXT4-fs (loop2): Block reservation details [ 663.898911][ T51] EXT4-fs (loop2): i_reserved_data_blocks=128 [ 663.902469][ T7688] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 663.913189][ T7688] System zones: 0-1, 3-36 [ 663.939879][ T12] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 32 with max blocks 2048 with error 117 [ 663.952930][ T12] EXT4-fs (loop7): This should not happen!! Data will be lost [ 663.952930][ T12] [ 663.990589][ T12] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 2081 with max blocks 2024 with error 28 [ 664.003416][ T12] EXT4-fs (loop7): This should not happen!! Data will be lost [ 664.003416][ T12] [ 664.013159][ T12] EXT4-fs (loop7): Total free blocks count 0 [ 664.019152][ T12] EXT4-fs (loop7): Free/Dirty block details [ 664.025149][ T12] EXT4-fs (loop7): free_blocks=0 [ 664.030112][ T12] EXT4-fs (loop7): dirty_blocks=2032 [ 664.206762][ T7710] loop2: detected capacity change from 0 to 1024 [ 664.230500][ T7710] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4115: comm syz.2.12767: Allocating blocks 385-513 which overlap fs metadata [ 664.253349][ T7707] EXT4-fs (loop2): pa ffff888106696d90: logic 16, phys. 129, len 24 [ 664.261376][ T7707] EXT4-fs error (device loop2): ext4_mb_release_inode_pa:5366: group 0, free 0, pa_free 8 [ 664.310690][ T7716] loop2: detected capacity change from 0 to 1024 [ 664.343424][ T7719] netlink: 100 bytes leftover after parsing attributes in process `syz.8.12768'. [ 664.347702][ T7716] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4115: comm syz.2.12769: Allocating blocks 385-513 which overlap fs metadata [ 664.375466][ T7716] EXT4-fs (loop2): pa ffff8881064d47e0: logic 16, phys. 129, len 24 [ 664.383575][ T7716] EXT4-fs error (device loop2): ext4_mb_release_inode_pa:5366: group 0, free 0, pa_free 8 [ 664.405141][ T7709] geneve0: entered allmulticast mode [ 664.451053][ T7731] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12774'. [ 664.462201][ T7693] netlink: 'syz.0.12765': attribute type 21 has an invalid length. [ 664.470269][ T7693] netlink: 'syz.0.12765': attribute type 20 has an invalid length. [ 664.483314][ T7731] vlan2: entered allmulticast mode [ 664.507817][ T7733] loop6: detected capacity change from 0 to 512 [ 664.515492][ T7735] loop2: detected capacity change from 0 to 512 [ 664.523254][ T7735] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 664.536552][ T7733] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 664.546668][ T7733] EXT4-fs (loop6): orphan cleanup on readonly fs [ 664.554669][ T7735] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #16: comm syz.2.12776: invalid indirect mapped block 83886080 (level 1) [ 664.557860][ T7733] EXT4-fs error (device loop6): ext4_acquire_dquot:6927: comm syz.6.12775: Failed to acquire dquot type 1 [ 664.569639][ T7735] EXT4-fs (loop2): Remounting filesystem read-only [ 664.581355][ T7733] EXT4-fs (loop6): 1 truncate cleaned up [ 664.604559][ T7735] EXT4-fs (loop2): 1 orphan inode deleted [ 664.610413][ T7735] EXT4-fs (loop2): 1 truncate cleaned up [ 664.616683][ T7735] SELinux: (dev loop2, type ext4) getxattr errno 5 [ 664.711210][ T7743] loop2: detected capacity change from 0 to 1024 [ 664.724165][ T7743] EXT4-fs: Ignoring removed nomblk_io_submit option [ 664.740401][ T7743] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 664.748629][ T7743] System zones: 0-1, 3-36 [ 664.785991][ T7749] loop6: detected capacity change from 0 to 1024 [ 664.823471][ T7749] EXT4-fs error (device loop6): ext4_mb_mark_diskspace_used:4115: comm syz.6.12781: Allocating blocks 385-513 which overlap fs metadata [ 664.847094][ T7748] EXT4-fs (loop6): pa ffff888106696d90: logic 16, phys. 129, len 24 [ 664.855248][ T7748] EXT4-fs error (device loop6): ext4_mb_release_inode_pa:5366: group 0, free 0, pa_free 8 [ 664.928376][ T7761] loop0: detected capacity change from 0 to 2048 [ 664.935053][ T7764] loop2: detected capacity change from 0 to 512 [ 664.942142][ T7764] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 664.944050][ T7761] ext4 filesystem being mounted at /262/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 664.964868][ T7764] EXT4-fs (loop2): orphan cleanup on readonly fs [ 664.971734][ T7764] EXT4-fs error (device loop2): ext4_acquire_dquot:6927: comm syz.2.12786: Failed to acquire dquot type 1 [ 664.975243][ T7769] netlink: 100 bytes leftover after parsing attributes in process `syz.6.12788'. [ 664.986644][ T7764] EXT4-fs (loop2): 1 truncate cleaned up [ 665.150836][ T7784] loop7: detected capacity change from 0 to 1024 [ 665.228396][ T7784] EXT4-fs error (device loop7): ext4_mb_mark_diskspace_used:4115: comm syz.7.12792: Allocating blocks 385-513 which overlap fs metadata [ 665.245052][ T12] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm kworker/u8:0: bg 0: block 345: padding at end of block bitmap is not set [ 665.249049][ T7788] netlink: 1284 bytes leftover after parsing attributes in process `syz.8.12794'. [ 665.260047][ T12] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 2048 with error 117 [ 665.276433][ T7788] siw: device registration error -23 [ 665.281424][ T12] EXT4-fs (loop0): This should not happen!! Data will be lost [ 665.281424][ T12] [ 665.295196][ T7784] EXT4-fs (loop7): pa ffff8881064d4850: logic 16, phys. 129, len 24 [ 665.304537][ T7784] EXT4-fs error (device loop7): ext4_mb_release_inode_pa:5366: group 0, free 0, pa_free 8 [ 665.321361][ T12] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 2065 with max blocks 2040 with error 28 [ 665.334339][ T12] EXT4-fs (loop0): This should not happen!! Data will be lost [ 665.334339][ T12] [ 665.344067][ T12] EXT4-fs (loop0): Total free blocks count 0 [ 665.350087][ T12] EXT4-fs (loop0): Free/Dirty block details [ 665.356033][ T12] EXT4-fs (loop0): free_blocks=0 [ 665.361075][ T12] EXT4-fs (loop0): dirty_blocks=2048 [ 665.366413][ T12] EXT4-fs (loop0): Block reservation details [ 665.372427][ T12] EXT4-fs (loop0): i_reserved_data_blocks=128 [ 665.425020][ T7794] loop7: detected capacity change from 0 to 512 [ 665.443049][ T7794] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 665.466446][ T7794] EXT4-fs error (device loop7): ext4_free_branches:1023: inode #16: comm syz.7.12796: invalid indirect mapped block 83886080 (level 1) [ 665.482489][ T7799] loop8: detected capacity change from 0 to 1024 [ 665.492636][ T7794] EXT4-fs (loop7): Remounting filesystem read-only [ 665.499742][ T7794] EXT4-fs (loop7): 1 orphan inode deleted [ 665.505554][ T7794] EXT4-fs (loop7): 1 truncate cleaned up [ 665.513309][ T7794] SELinux: (dev loop7, type ext4) getxattr errno 5 [ 665.516551][ T7799] EXT4-fs error (device loop8): ext4_mb_mark_diskspace_used:4115: comm syz.8.12797: Allocating blocks 385-513 which overlap fs metadata [ 665.534050][ T7802] loop0: detected capacity change from 0 to 2048 [ 665.552744][ T7797] EXT4-fs (loop8): pa ffff8881064d47e0: logic 16, phys. 129, len 24 [ 665.560776][ T7797] EXT4-fs error (device loop8): ext4_mb_release_inode_pa:5366: group 0, free 0, pa_free 8 [ 665.574520][ T7802] ext4 filesystem being mounted at /264/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 665.625893][ T12] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm kworker/u8:0: bg 0: block 345: padding at end of block bitmap is not set [ 665.664367][ T12] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 222 with error 117 [ 665.677049][ T12] EXT4-fs (loop0): This should not happen!! Data will be lost [ 665.677049][ T12] [ 665.707453][ T12] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 238 with max blocks 1 with error 117 [ 665.720008][ T12] EXT4-fs (loop0): This should not happen!! Data will be lost [ 665.720008][ T12] [ 665.814869][ T7820] netlink: 1300 bytes leftover after parsing attributes in process `syz.7.12806'. [ 665.826195][ T7820] siw: device registration error -23 [ 665.834223][ T7807] netlink: 'syz.2.12800': attribute type 21 has an invalid length. [ 665.842213][ T7807] netlink: 'syz.2.12800': attribute type 20 has an invalid length. [ 665.887200][ T7832] loop7: detected capacity change from 0 to 512 [ 665.894729][ T7832] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 665.905074][ T7832] EXT4-fs (loop7): orphan cleanup on readonly fs [ 665.933657][ T7832] EXT4-fs error (device loop7): ext4_acquire_dquot:6927: comm syz.7.12809: Failed to acquire dquot type 1 [ 665.947025][ T7832] EXT4-fs (loop7): 1 truncate cleaned up [ 665.994645][ T7834] netlink: 1284 bytes leftover after parsing attributes in process `syz.8.12808'. [ 666.009386][ T7834] siw: device registration error -23 [ 666.067565][ T7822] netlink: 12 bytes leftover after parsing attributes in process `syz.0.12804'. [ 666.107424][ T7838] loop8: detected capacity change from 0 to 512 [ 666.144636][ T7822] netlink: 'syz.0.12804': attribute type 21 has an invalid length. [ 666.152687][ T7822] netlink: 'syz.0.12804': attribute type 20 has an invalid length. [ 666.182134][ T7838] EXT4-fs (loop8): 1 orphan inode deleted [ 666.200585][ T12] EXT4-fs error (device loop8): ext4_release_dquot:6950: comm kworker/u8:0: Failed to release dquot type 1 [ 666.216754][ T7847] loop7: detected capacity change from 0 to 2048 [ 666.236442][ T7838] ext4 filesystem being mounted at /245/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 666.367595][ T7847] ext4 filesystem being mounted at /54/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 666.436578][ T7857] netlink: 'syz.8.12811': attribute type 4 has an invalid length. [ 666.516028][ T7861] netlink: 8 bytes leftover after parsing attributes in process `syz.6.12819'. [ 666.566982][ T7861] vlan2: entered allmulticast mode [ 666.629074][ T7858] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.12815: bg 0: block 345: padding at end of block bitmap is not set [ 666.649638][ T7858] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 16 with error 117 [ 666.662276][ T7858] EXT4-fs (loop7): This should not happen!! Data will be lost [ 666.662276][ T7858] [ 666.678232][ T7864] loop6: detected capacity change from 0 to 512 [ 666.685604][ T7864] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 666.701710][ T7865] loop2: detected capacity change from 0 to 512 [ 666.713879][ T7864] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #16: comm syz.6.12820: invalid indirect mapped block 83886080 (level 1) [ 666.733299][ T7865] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 666.737422][ T12] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 32 with max blocks 2048 with error 117 [ 666.744541][ T7864] EXT4-fs (loop6): Remounting filesystem read-only [ 666.755955][ T12] EXT4-fs (loop7): This should not happen!! Data will be lost [ 666.755955][ T12] [ 666.762541][ T7864] EXT4-fs (loop6): 1 orphan inode deleted [ 666.778051][ T7864] EXT4-fs (loop6): 1 truncate cleaned up [ 666.784297][ T7864] SELinux: (dev loop6, type ext4) getxattr errno 5 [ 666.791865][ T7865] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #16: comm syz.2.12818: invalid indirect mapped block 83886080 (level 1) [ 666.811766][ T12] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 2081 with max blocks 2024 with error 28 [ 666.824560][ T12] EXT4-fs (loop7): This should not happen!! Data will be lost [ 666.824560][ T12] [ 666.824734][ T7865] EXT4-fs (loop2): Remounting filesystem read-only [ 666.834261][ T12] EXT4-fs (loop7): Total free blocks count 0 [ 666.834277][ T12] EXT4-fs (loop7): Free/Dirty block details [ 666.834289][ T12] EXT4-fs (loop7): free_blocks=0 [ 666.834302][ T12] EXT4-fs (loop7): dirty_blocks=2032 [ 666.883048][ T7865] EXT4-fs (loop2): 1 orphan inode deleted [ 666.888827][ T7865] EXT4-fs (loop2): 1 truncate cleaned up [ 666.906670][ T7865] SELinux: (dev loop2, type ext4) getxattr errno 5 [ 666.919673][ T7877] loop7: detected capacity change from 0 to 512 [ 666.930510][ T7877] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 666.953410][ T7877] EXT4-fs (loop7): orphan cleanup on readonly fs [ 666.968094][ T7877] __quota_error: 316 callbacks suppressed [ 666.968110][ T7877] Quota error (device loop7): do_check_range: Getting block 196613 out of range 1-5 [ 666.983463][ T7877] Quota error (device loop7): qtree_read_dquot: Can't read quota structure for id 0 [ 666.992931][ T7877] EXT4-fs error (device loop7): ext4_acquire_dquot:6927: comm syz.7.12823: Failed to acquire dquot type 1 [ 667.005731][ T7877] EXT4-fs (loop7): 1 truncate cleaned up [ 667.121172][ T7891] loop7: detected capacity change from 0 to 1024 [ 667.132644][ T30] audit: type=1326 audit(1742206297.565:35509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7892 comm="syz.6.12831" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa519c2d169 code=0x7ffc0000 [ 667.142687][ T7891] EXT4-fs: Ignoring removed nomblk_io_submit option [ 667.156305][ T30] audit: type=1326 audit(1742206297.565:35510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7892 comm="syz.6.12831" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa519c2d169 code=0x7ffc0000 [ 667.209854][ T7891] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 667.235591][ T7891] System zones: 0-1, 3-36 [ 667.271197][ T7882] netlink: 8 bytes leftover after parsing attributes in process `syz.8.12826'. [ 667.316376][ T30] audit: type=1326 audit(1742206297.625:35511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7892 comm="syz.6.12831" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa519c2d169 code=0x7ffc0000 [ 667.340713][ T30] audit: type=1326 audit(1742206297.625:35512): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7892 comm="syz.6.12831" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa519c2d169 code=0x7ffc0000 [ 667.364841][ T30] audit: type=1326 audit(1742206297.625:35513): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7892 comm="syz.6.12831" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa519c2d169 code=0x7ffc0000 [ 667.388442][ T30] audit: type=1326 audit(1742206297.625:35514): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7892 comm="syz.6.12831" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa519c2d169 code=0x7ffc0000 [ 667.412171][ T30] audit: type=1326 audit(1742206297.625:35515): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7892 comm="syz.6.12831" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa519c2d169 code=0x7ffc0000 [ 667.435829][ T30] audit: type=1326 audit(1742206297.625:35516): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7892 comm="syz.6.12831" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa519c2d169 code=0x7ffc0000 [ 667.565291][ T7914] loop7: detected capacity change from 0 to 512 [ 667.577982][ T7913] loop6: detected capacity change from 0 to 2048 [ 667.605134][ T7918] loop2: detected capacity change from 0 to 512 [ 667.612119][ T7918] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 667.614350][ T7913] ext4 filesystem being mounted at /42/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 667.624640][ T7914] EXT4-fs (loop7): 1 orphan inode deleted [ 667.637112][ T3401] EXT4-fs error (device loop7): ext4_release_dquot:6950: comm kworker/u8:7: Failed to release dquot type 1 [ 667.645108][ T7914] ext4 filesystem being mounted at /58/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 667.653888][ T7906] netlink: 'syz.0.12827': attribute type 21 has an invalid length. [ 667.664682][ T7918] EXT4-fs (loop2): orphan cleanup on readonly fs [ 667.705590][ T7918] EXT4-fs error (device loop2): ext4_acquire_dquot:6927: comm syz.2.12835: Failed to acquire dquot type 1 [ 667.727899][ T7918] EXT4-fs (loop2): 1 truncate cleaned up [ 667.860328][T24626] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm kworker/u8:10: bg 0: block 345: padding at end of block bitmap is not set [ 667.880391][T24626] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 2048 with error 117 [ 667.893186][T24626] EXT4-fs (loop6): This should not happen!! Data will be lost [ 667.893186][T24626] [ 667.893363][ T7928] loop0: detected capacity change from 0 to 512 [ 667.913949][ T7928] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 667.925901][ T7928] EXT4-fs (loop0): orphan cleanup on readonly fs [ 667.932858][ T7928] EXT4-fs error (device loop0): ext4_acquire_dquot:6927: comm syz.0.12840: Failed to acquire dquot type 1 [ 667.951990][ T7928] EXT4-fs (loop0): 1 truncate cleaned up [ 667.952949][T24626] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 2065 with max blocks 2040 with error 28 [ 667.970362][T24626] EXT4-fs (loop6): This should not happen!! Data will be lost [ 667.970362][T24626] [ 667.980227][T24626] EXT4-fs (loop6): Total free blocks count 0 [ 667.986271][T24626] EXT4-fs (loop6): Free/Dirty block details [ 667.992172][T24626] EXT4-fs (loop6): free_blocks=0 [ 667.997141][T24626] EXT4-fs (loop6): dirty_blocks=2048 [ 668.002449][T24626] EXT4-fs (loop6): Block reservation details [ 668.008451][T24626] EXT4-fs (loop6): i_reserved_data_blocks=128 [ 668.018154][ T7933] netlink: 8 bytes leftover after parsing attributes in process `syz.8.12842'. [ 668.030054][ T7933] vlan2: entered allmulticast mode [ 668.103655][ T7935] siw: device registration error -23 [ 668.250222][ T7955] loop8: detected capacity change from 0 to 512 [ 668.270149][ T7955] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 668.286772][ T7955] EXT4-fs (loop8): orphan cleanup on readonly fs [ 668.295369][ T7955] EXT4-fs error (device loop8): ext4_acquire_dquot:6927: comm syz.8.12846: Failed to acquire dquot type 1 [ 668.309461][ T7962] loop0: detected capacity change from 0 to 512 [ 668.316822][ T7955] EXT4-fs (loop8): 1 truncate cleaned up [ 668.327646][ T7962] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 668.357598][ T7959] siw: device registration error -23 [ 668.364701][ T7962] EXT4-fs (loop0): orphan cleanup on readonly fs [ 668.393099][ T7962] EXT4-fs error (device loop0): ext4_acquire_dquot:6927: comm syz.0.12849: Failed to acquire dquot type 1 [ 668.426543][ T7962] EXT4-fs (loop0): 1 truncate cleaned up [ 668.531131][ T7979] siw: device registration error -23 [ 668.591340][ T7980] siw: device registration error -23 [ 668.620902][ T7988] loop6: detected capacity change from 0 to 512 [ 668.643672][ T7988] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 668.665340][ T7988] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #16: comm syz.6.12861: invalid indirect mapped block 83886080 (level 1) [ 668.702854][ T7992] loop0: detected capacity change from 0 to 512 [ 668.721341][ T7988] EXT4-fs (loop6): Remounting filesystem read-only [ 668.730296][ T7992] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 668.735039][ T7988] EXT4-fs (loop6): 1 orphan inode deleted [ 668.744613][ T7988] EXT4-fs (loop6): 1 truncate cleaned up [ 668.761826][ T7988] SELinux: (dev loop6, type ext4) getxattr errno 5 [ 668.784052][ T7978] validate_nla: 4 callbacks suppressed [ 668.784068][ T7978] netlink: 'syz.8.12856': attribute type 21 has an invalid length. [ 668.797579][ T7978] netlink: 'syz.8.12856': attribute type 20 has an invalid length. [ 668.818328][ T7995] loop2: detected capacity change from 0 to 1024 [ 668.829172][ T7992] EXT4-fs (loop0): orphan cleanup on readonly fs [ 668.830821][ T7995] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 668.836165][ T7992] EXT4-fs error (device loop0): ext4_acquire_dquot:6927: comm syz.0.12862: Failed to acquire dquot type 1 [ 668.860512][ T7992] EXT4-fs (loop0): 1 truncate cleaned up [ 668.874734][ T7995] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:483: comm syz.2.12860: Invalid block bitmap block 0 in block_group 0 [ 668.909401][ T7995] EXT4-fs error (device loop2): ext4_acquire_dquot:6927: comm syz.2.12860: Failed to acquire dquot type 0 [ 668.922367][ T7995] EXT4-fs error (device loop2): ext4_free_blocks:6589: comm syz.2.12860: Freeing blocks not in datazone - block = 0, count = 4096 [ 668.941754][ T7995] EXT4-fs error (device loop2): ext4_read_inode_bitmap:139: comm syz.2.12860: Invalid inode bitmap blk 0 in block_group 0 [ 668.956455][ T7995] EXT4-fs error (device loop2) in ext4_free_inode:361: Corrupt filesystem [ 668.967200][ T7995] EXT4-fs (loop2): 1 orphan inode deleted [ 668.972420][ T51] EXT4-fs error (device loop2): ext4_release_dquot:6950: comm kworker/u8:3: Failed to release dquot type 0 [ 669.056594][ T8008] loop8: detected capacity change from 0 to 512 [ 669.064642][ T8008] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 669.079803][ T8010] loop6: detected capacity change from 0 to 1024 [ 669.083423][ T8013] loop2: detected capacity change from 0 to 512 [ 669.093765][ T8013] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 669.104735][ T8008] EXT4-fs (loop8): orphan cleanup on readonly fs [ 669.111447][ T8013] EXT4-fs (loop2): orphan cleanup on readonly fs [ 669.111925][ T8008] EXT4-fs error (device loop8): ext4_acquire_dquot:6927: comm syz.8.12866: Failed to acquire dquot type 1 [ 669.121414][ T8013] EXT4-fs error (device loop2): ext4_acquire_dquot:6927: comm syz.2.12868: Failed to acquire dquot type 1 [ 669.133080][ T8008] EXT4-fs (loop8): 1 truncate cleaned up [ 669.153332][ T8010] EXT4-fs error (device loop6): ext4_mb_mark_diskspace_used:4115: comm syz.6.12867: Allocating blocks 385-513 which overlap fs metadata [ 669.169107][ T8013] EXT4-fs (loop2): 1 truncate cleaned up [ 669.173147][ T8020] loop0: detected capacity change from 0 to 2048 [ 669.176698][ T8009] EXT4-fs (loop6): pa ffff8881064d48c0: logic 16, phys. 129, len 24 [ 669.189157][ T8009] EXT4-fs error (device loop6): ext4_mb_release_inode_pa:5366: group 0, free 0, pa_free 8 [ 669.234988][ T8024] ext2: Unknown parameter 'journal_p' [ 669.243481][ T8020] ext4 filesystem being mounted at /283/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 669.284418][ T8028] loop2: detected capacity change from 0 to 1024 [ 669.364586][ T8028] EXT4-fs: Ignoring removed nomblk_io_submit option [ 669.386289][ T8028] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 669.396800][ T8028] System zones: 0-1, 3-36 [ 669.421782][ T8033] ext2: Unknown parameter 'journal_p' [ 669.551845][ T8047] loop2: detected capacity change from 0 to 128 [ 669.576116][ T8047] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 669.618439][ T8047] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 669.659344][ T8047] __nla_validate_parse: 5 callbacks suppressed [ 669.659363][ T8047] netlink: 40 bytes leftover after parsing attributes in process `syz.2.12878'. [ 669.708553][ T51] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm kworker/u8:3: bg 0: block 345: padding at end of block bitmap is not set [ 669.730501][ T8051] loop7: detected capacity change from 0 to 4096 [ 669.739510][ T51] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 2048 with error 117 [ 669.740599][ T8030] netlink: 'syz.6.12874': attribute type 21 has an invalid length. [ 669.752166][ T51] EXT4-fs (loop0): This should not happen!! Data will be lost [ 669.752166][ T51] [ 669.752796][ T8051] EXT4-fs: Ignoring removed nomblk_io_submit option [ 669.760243][ T8030] netlink: 'syz.6.12874': attribute type 20 has an invalid length. [ 669.792765][ T51] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 2065 with max blocks 2040 with error 28 [ 669.805526][ T51] EXT4-fs (loop0): This should not happen!! Data will be lost [ 669.805526][ T51] [ 669.815536][ T51] EXT4-fs (loop0): Total free blocks count 0 [ 669.821626][ T51] EXT4-fs (loop0): Free/Dirty block details [ 669.827618][ T51] EXT4-fs (loop0): free_blocks=0 [ 669.832660][ T51] EXT4-fs (loop0): dirty_blocks=2048 [ 669.838017][ T51] EXT4-fs (loop0): Block reservation details [ 669.844045][ T51] EXT4-fs (loop0): i_reserved_data_blocks=128 [ 669.883062][ T8056] usb usb2: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 669.890485][ T8056] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 669.904539][ T8056] vhci_hcd: invalid port number 255 [ 669.921729][ T8057] EXT4-fs error (device loop7): ext4_do_update_inode:5154: inode #15: comm syz.7.12879: corrupted inode contents [ 669.947973][ T8035] netlink: 'syz.8.12876': attribute type 21 has an invalid length. [ 669.955933][ T8035] netlink: 'syz.8.12876': attribute type 20 has an invalid length. [ 669.965722][ T8057] EXT4-fs error (device loop7): ext4_dirty_inode:6042: inode #15: comm syz.7.12879: mark_inode_dirty error [ 669.981400][ T8059] netlink: 28 bytes leftover after parsing attributes in process `syz.0.12880'. [ 669.993310][ T8061] netlink: 20 bytes leftover after parsing attributes in process `syz.2.12882'. [ 670.002366][ T8057] EXT4-fs error (device loop7): ext4_do_update_inode:5154: inode #15: comm syz.7.12879: corrupted inode contents [ 670.002582][ T8057] EXT4-fs error (device loop7): __ext4_ext_dirty:207: inode #15: comm syz.7.12879: mark_inode_dirty error [ 670.033039][ T8057] EXT4-fs error (device loop7): ext4_do_update_inode:5154: inode #15: comm syz.7.12879: corrupted inode contents [ 670.050877][ T8066] ext2: Unknown parameter 'journal_p' [ 670.076835][ T8057] EXT4-fs error (device loop7): __ext4_ext_dirty:207: inode #15: comm syz.7.12879: mark_inode_dirty error [ 670.097880][ T8068] loop2: detected capacity change from 0 to 128 [ 670.112882][ T8068] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 670.127217][ T8070] loop0: detected capacity change from 0 to 1024 [ 670.137154][ T8057] EXT4-fs error (device loop7): ext4_do_update_inode:5154: inode #15: comm syz.7.12879: corrupted inode contents [ 670.149350][ T8068] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 670.149882][ T8070] EXT4-fs: Ignoring removed nomblk_io_submit option [ 670.165618][ T8057] EXT4-fs error (device loop7): ext4_truncate:4240: inode #15: comm syz.7.12879: mark_inode_dirty error [ 670.180151][ T8073] loop8: detected capacity change from 0 to 512 [ 670.187934][ T8070] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 670.197853][ T8073] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 670.211493][ T8057] EXT4-fs error (device loop7): ext4_evict_inode:267: comm syz.7.12879: couldn't truncate inode 15 (err -117) [ 670.223296][ T8070] System zones: 0-1, 3-36 [ 670.227266][ T8068] netlink: 40 bytes leftover after parsing attributes in process `syz.2.12886'. [ 670.244730][ T8073] EXT4-fs error (device loop8): ext4_free_branches:1023: inode #16: comm syz.8.12887: invalid indirect mapped block 83886080 (level 1) [ 670.271807][ T8073] EXT4-fs (loop8): Remounting filesystem read-only [ 670.329903][ T8077] loop0: detected capacity change from 0 to 1024 [ 670.342477][ T8073] EXT4-fs (loop8): 1 orphan inode deleted [ 670.348305][ T8073] EXT4-fs (loop8): 1 truncate cleaned up [ 670.349659][ T8077] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 670.381332][ T8073] SELinux: (dev loop8, type ext4) getxattr errno 5 [ 670.395512][ T8077] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:483: comm syz.0.12888: Invalid block bitmap block 0 in block_group 0 [ 670.414589][ T8077] EXT4-fs error (device loop0): ext4_acquire_dquot:6927: comm syz.0.12888: Failed to acquire dquot type 0 [ 670.429449][ T8082] netlink: 20 bytes leftover after parsing attributes in process `syz.2.12890'. [ 670.441051][ T8077] EXT4-fs error (device loop0): ext4_free_blocks:6589: comm syz.0.12888: Freeing blocks not in datazone - block = 0, count = 4096 [ 670.463169][ T8077] EXT4-fs error (device loop0): ext4_read_inode_bitmap:139: comm syz.0.12888: Invalid inode bitmap blk 0 in block_group 0 [ 670.477985][ T8077] EXT4-fs error (device loop0) in ext4_free_inode:361: Corrupt filesystem [ 670.492549][ T8077] EXT4-fs (loop0): 1 orphan inode deleted [ 670.515966][ T8087] ext2: Unknown parameter 'journal_p' [ 670.536656][T10161] EXT4-fs error (device loop0): ext4_release_dquot:6950: comm kworker/u8:8: Failed to release dquot type 0 [ 670.555306][ T8080] netlink: 12 bytes leftover after parsing attributes in process `syz.7.12889'. [ 670.656139][ T8064] netlink: 'syz.6.12883': attribute type 21 has an invalid length. [ 670.664222][ T8064] netlink: 'syz.6.12883': attribute type 20 has an invalid length. [ 670.705903][ T6481] IPVS: starting estimator thread 0... [ 670.769686][ T8102] netlink: 100 bytes leftover after parsing attributes in process `syz.0.12896'. [ 670.798781][ T8104] loop6: detected capacity change from 0 to 1024 [ 670.812583][ T8100] IPVS: using max 2352 ests per chain, 117600 per kthread [ 670.835208][ T8104] EXT4-fs: Ignoring removed nomblk_io_submit option [ 670.846050][ T8104] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 670.864583][ T8104] System zones: 0-1, 3-36 [ 670.963963][ T8101] netlink: 'syz.8.12897': attribute type 21 has an invalid length. [ 670.971930][ T8101] netlink: 'syz.8.12897': attribute type 20 has an invalid length. [ 670.972165][ T8113] loop6: detected capacity change from 0 to 2048 [ 670.994058][ T8113] ext4 filesystem being mounted at /53/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 671.118078][ T8119] loop2: detected capacity change from 0 to 512 [ 671.128071][ T8120] ext2: Unknown parameter 'journal_p' [ 671.136572][ T8119] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 671.161006][ T8116] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.12900: bg 0: block 345: padding at end of block bitmap is not set [ 671.180000][ T8116] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 16 with error 117 [ 671.180122][ T8122] loop8: detected capacity change from 0 to 512 [ 671.192514][ T8116] EXT4-fs (loop6): This should not happen!! Data will be lost [ 671.192514][ T8116] [ 671.196281][ T8119] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #16: comm syz.2.12902: invalid indirect mapped block 83886080 (level 1) [ 671.224966][ T8119] EXT4-fs (loop2): Remounting filesystem read-only [ 671.231584][ T8119] EXT4-fs (loop2): 1 orphan inode deleted [ 671.237402][ T8119] EXT4-fs (loop2): 1 truncate cleaned up [ 671.240539][ T8122] ext4 filesystem being mounted at /261/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 671.244441][ T8119] SELinux: (dev loop2, type ext4) getxattr errno 5 [ 671.267075][T24626] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 32 with max blocks 2048 with error 117 [ 671.279837][T24626] EXT4-fs (loop6): This should not happen!! Data will be lost [ 671.279837][T24626] [ 671.313062][T24626] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 2081 with max blocks 2024 with error 28 [ 671.322084][ T8127] loop8: detected capacity change from 0 to 2048 [ 671.325792][T24626] EXT4-fs (loop6): This should not happen!! Data will be lost [ 671.325792][T24626] [ 671.341886][T24626] EXT4-fs (loop6): Total free blocks count 0 [ 671.347917][T24626] EXT4-fs (loop6): Free/Dirty block details [ 671.353859][T24626] EXT4-fs (loop6): free_blocks=0 [ 671.358799][T24626] EXT4-fs (loop6): dirty_blocks=2032 [ 671.366666][ T8127] ext4 filesystem being mounted at /262/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 671.428558][T24626] EXT4-fs error (device loop8): ext4_validate_block_bitmap:441: comm kworker/u8:10: bg 0: block 345: padding at end of block bitmap is not set [ 671.444522][T24626] EXT4-fs (loop8): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 1123 with error 117 [ 671.457239][T24626] EXT4-fs (loop8): This should not happen!! Data will be lost [ 671.457239][T24626] [ 671.490244][T10161] EXT4-fs (loop8): Delayed block allocation failed for inode 15 at logical offset 1139 with max blocks 49 with error 28 [ 671.503098][T10161] EXT4-fs (loop8): This should not happen!! Data will be lost [ 671.503098][T10161] [ 671.512847][T10161] EXT4-fs (loop8): Total free blocks count 0 [ 671.518844][T10161] EXT4-fs (loop8): Free/Dirty block details [ 671.518862][T10161] EXT4-fs (loop8): free_blocks=0 [ 671.518877][T10161] EXT4-fs (loop8): dirty_blocks=64 [ 671.534861][T10161] EXT4-fs (loop8): Block reservation details [ 671.540860][T10161] EXT4-fs (loop8): i_reserved_data_blocks=4 [ 671.587934][ T8141] ext2: Unknown parameter 'journal_p' [ 671.617293][ T8143] loop0: detected capacity change from 0 to 1024 [ 671.624062][ T8134] loop6: detected capacity change from 0 to 1024 [ 671.636766][ T8134] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 671.673659][ T8134] EXT4-fs error (device loop6): ext4_read_block_bitmap_nowait:483: comm syz.6.12906: Invalid block bitmap block 0 in block_group 0 [ 671.689343][ T8134] EXT4-fs error (device loop6): ext4_acquire_dquot:6927: comm syz.6.12906: Failed to acquire dquot type 0 [ 671.705463][ T8134] EXT4-fs error (device loop6): ext4_free_blocks:6589: comm syz.6.12906: Freeing blocks not in datazone - block = 0, count = 4096 [ 671.723095][ T8134] EXT4-fs error (device loop6): ext4_read_inode_bitmap:139: comm syz.6.12906: Invalid inode bitmap blk 0 in block_group 0 [ 671.736369][ T37] EXT4-fs error (device loop6): ext4_release_dquot:6950: comm kworker/u8:2: Failed to release dquot type 0 [ 671.749034][ T8134] EXT4-fs error (device loop6) in ext4_free_inode:361: Corrupt filesystem [ 671.756980][ T8143] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4115: comm syz.0.12911: Allocating blocks 385-513 which overlap fs metadata [ 671.781885][ T8134] EXT4-fs (loop6): 1 orphan inode deleted [ 671.848853][ T8142] EXT4-fs (loop0): pa ffff888106696d90: logic 16, phys. 129, len 24 [ 671.856980][ T8142] EXT4-fs error (device loop0): ext4_mb_release_inode_pa:5366: group 0, free 0, pa_free 8 [ 671.873829][ T8160] loop8: detected capacity change from 0 to 2048 [ 671.880441][ T8162] loop6: detected capacity change from 0 to 2048 [ 671.892989][ T8164] loop2: detected capacity change from 0 to 1024 [ 671.916620][ T8164] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4115: comm syz.2.12915: Allocating blocks 385-513 which overlap fs metadata [ 671.935449][ T8162] ext4 filesystem being mounted at /56/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 671.950994][ T8174] 8021q: adding VLAN 0 to HW filter on device team0 [ 671.961153][ T8160] ext4 filesystem being mounted at /264/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 671.965516][ T8174] bond0: (slave team0): Enslaving as an active interface with an up link [ 671.971902][T10161] __ib_cache_gid_add: unable to add gid fe80:0000:0000:0000:a8aa:aaff:feaa:aa17 error=-28 [ 671.995922][ T30] kauditd_printk_skb: 222 callbacks suppressed [ 671.995938][ T30] audit: type=1326 audit(1742206302.425:35715): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8159 comm="syz.8.12913" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f215420bad0 code=0x7ffc0000 [ 671.998051][ T8176] EXT4-fs (loop2): pa ffff8881064d4930: logic 16, phys. 129, len 24 [ 672.002597][ T30] audit: type=1326 audit(1742206302.425:35716): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8159 comm="syz.8.12913" exe="/root/syz-executor" sig=0 arch=c000003e syscall=80 compat=0 ip=0x7f215420beb7 code=0x7ffc0000 [ 672.025812][ T8176] EXT4-fs error (device loop2): ext4_mb_release_inode_pa:5366: group 0, free 0, pa_free 8 [ 672.034024][ T8150] IPv6: NLM_F_CREATE should be specified when creating new route [ 672.057596][ T30] audit: type=1326 audit(1742206302.455:35717): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8159 comm="syz.8.12913" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f215420bad0 code=0x7ffc0000 [ 672.098896][ T30] audit: type=1326 audit(1742206302.455:35718): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8159 comm="syz.8.12913" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f215420d169 code=0x7ffc0000 [ 672.124568][ T30] audit: type=1326 audit(1742206302.505:35719): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8159 comm="syz.8.12913" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f215420d169 code=0x7ffc0000 [ 672.148311][ T30] audit: type=1326 audit(1742206302.505:35720): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8159 comm="syz.8.12913" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f215420d169 code=0x7ffc0000 [ 672.171942][ T30] audit: type=1326 audit(1742206302.505:35721): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8159 comm="syz.8.12913" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f215420d169 code=0x7ffc0000 [ 672.195554][ T30] audit: type=1326 audit(1742206302.505:35722): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8159 comm="syz.8.12913" exe="/root/syz-executor" sig=0 arch=c000003e syscall=18 compat=0 ip=0x7f215420d169 code=0x7ffc0000 [ 672.370061][ T30] audit: type=1326 audit(1742206302.745:35723): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8159 comm="syz.8.12913" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f215420d169 code=0x7ffc0000 [ 672.375033][ T37] EXT4-fs error (device loop8): ext4_validate_block_bitmap:441: comm kworker/u8:2: bg 0: block 345: padding at end of block bitmap is not set [ 672.393786][ T30] audit: type=1326 audit(1742206302.745:35724): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8159 comm="syz.8.12913" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f215420d169 code=0x7ffc0000 [ 672.462087][ T8183] ext2: Unknown parameter 'journal_p' [ 672.470586][ T8181] loop2: detected capacity change from 0 to 2048 [ 672.485595][ T37] EXT4-fs (loop8): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 2048 with error 117 [ 672.486845][ T8186] ext2: Unknown parameter 'journal_p' [ 672.498228][ T37] EXT4-fs (loop8): This should not happen!! Data will be lost [ 672.498228][ T37] [ 672.513713][ T3401] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm kworker/u8:7: bg 0: block 345: padding at end of block bitmap is not set [ 672.533436][ T8187] loop0: detected capacity change from 0 to 512 [ 672.541608][ T8187] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 672.542653][ T8181] ext4 filesystem being mounted at /265/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 672.564816][ T3401] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 2048 with error 117 [ 672.565392][ T8187] EXT4-fs (loop0): orphan cleanup on readonly fs [ 672.577474][ T3401] EXT4-fs (loop6): This should not happen!! Data will be lost [ 672.577474][ T3401] [ 672.599692][ T37] EXT4-fs (loop8): Delayed block allocation failed for inode 15 at logical offset 2065 with max blocks 2040 with error 28 [ 672.612547][ T37] EXT4-fs (loop8): This should not happen!! Data will be lost [ 672.612547][ T37] [ 672.622191][ T37] EXT4-fs (loop8): Total free blocks count 0 [ 672.623645][T24626] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 2065 with max blocks 2040 with error 28 [ 672.628206][ T37] EXT4-fs (loop8): Free/Dirty block details [ 672.640895][T24626] EXT4-fs (loop6): This should not happen!! Data will be lost [ 672.640895][T24626] [ 672.646856][ T37] EXT4-fs (loop8): free_blocks=0 [ 672.656410][T24626] EXT4-fs (loop6): Total free blocks count 0 [ 672.661329][ T37] EXT4-fs (loop8): dirty_blocks=2048 [ 672.661346][ T37] EXT4-fs (loop8): Block reservation details [ 672.667324][T24626] EXT4-fs (loop6): Free/Dirty block details [ 672.667341][T24626] EXT4-fs (loop6): free_blocks=0 [ 672.672636][ T37] EXT4-fs (loop8): i_reserved_data_blocks=128 [ 672.678671][T24626] EXT4-fs (loop6): dirty_blocks=2048 [ 672.692407][ T8187] EXT4-fs error (device loop0): ext4_acquire_dquot:6927: comm syz.0.12923: Failed to acquire dquot type 1 [ 672.695764][T24626] EXT4-fs (loop6): Block reservation details [ 672.718359][T24626] EXT4-fs (loop6): i_reserved_data_blocks=128 [ 672.732649][ T8187] EXT4-fs (loop0): 1 truncate cleaned up [ 672.873184][ T8200] loop8: detected capacity change from 0 to 1024 [ 672.880058][ T8200] EXT4-fs: Ignoring removed nomblk_io_submit option [ 672.888050][ T8202] loop6: detected capacity change from 0 to 1024 [ 672.898961][ T8201] sd 0:0:1:0: device reset [ 672.904060][ T8202] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 672.921188][ T8201] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 672.931728][ T8201] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 672.941629][ T8201] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 672.952121][ T8201] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 672.961969][ T8201] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 672.966326][ T8202] EXT4-fs error (device loop6): ext4_read_block_bitmap_nowait:483: comm syz.6.12920: Invalid block bitmap block 0 in block_group 0 [ 672.972424][ T8201] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 672.972446][ T8201] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 672.972476][ T8201] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 672.972494][ T8201] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 672.972511][ T8201] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 672.972528][ T8201] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 672.972541][ T8201] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 672.972560][ T8201] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 672.972574][ T8201] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 672.972595][ T8201] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 672.972612][ T8201] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 672.972630][ T8201] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 672.972647][ T8201] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 672.977008][ T8200] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 672.988489][ T8201] batadv_slave_0: entered promiscuous mode [ 673.007143][ T8200] System zones: [ 673.018710][ T8202] EXT4-fs error (device loop6): ext4_acquire_dquot:6927: comm syz.6.12920: Failed to acquire dquot type 0 [ 673.027252][ T8200] 0-1, 3-36 [ 673.161819][ T8202] EXT4-fs error (device loop6): ext4_free_blocks:6589: comm syz.6.12920: Freeing blocks not in datazone - block = 0, count = 4096 [ 673.174917][ T37] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm kworker/u8:2: bg 0: block 345: padding at end of block bitmap is not set [ 673.180433][ T8202] EXT4-fs error (device loop6): ext4_read_inode_bitmap:139: comm syz.6.12920: Invalid inode bitmap blk 0 in block_group 0 [ 673.197357][ T8201] batadv_slave_0: left promiscuous mode [ 673.205537][ T8202] EXT4-fs error (device loop6) in ext4_free_inode:361: Corrupt filesystem [ 673.208626][ T3401] EXT4-fs error (device loop6): ext4_release_dquot:6950: comm kworker/u8:7: Failed to release dquot type 0 [ 673.210565][ T37] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 2048 with error 117 [ 673.218343][ T8202] EXT4-fs (loop6): 1 orphan inode deleted [ 673.228728][ T37] EXT4-fs (loop2): This should not happen!! Data will be lost [ 673.228728][ T37] [ 673.297356][ T37] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 2065 with max blocks 2040 with error 28 [ 673.310214][ T37] EXT4-fs (loop2): This should not happen!! Data will be lost [ 673.310214][ T37] [ 673.319938][ T37] EXT4-fs (loop2): Total free blocks count 0 [ 673.325963][ T37] EXT4-fs (loop2): Free/Dirty block details [ 673.331930][ T37] EXT4-fs (loop2): free_blocks=0 [ 673.336933][ T37] EXT4-fs (loop2): dirty_blocks=2048 [ 673.342240][ T37] EXT4-fs (loop2): Block reservation details [ 673.348275][ T37] EXT4-fs (loop2): i_reserved_data_blocks=128 [ 673.383637][ T8215] ext2: Unknown parameter 'journal_p' [ 673.418868][ T8217] loop6: detected capacity change from 0 to 1024 [ 673.467975][ T8217] EXT4-fs error (device loop6): ext4_mb_mark_diskspace_used:4115: comm syz.6.12934: Allocating blocks 385-513 which overlap fs metadata [ 673.504856][ T8216] EXT4-fs (loop6): pa ffff888106696e70: logic 16, phys. 129, len 24 [ 673.513040][ T8216] EXT4-fs error (device loop6): ext4_mb_release_inode_pa:5366: group 0, free 0, pa_free 8 [ 673.529994][ T8230] loop2: detected capacity change from 0 to 512 [ 673.541466][ T8230] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 673.555235][ T8230] EXT4-fs (loop2): orphan cleanup on readonly fs [ 673.562041][ T8230] EXT4-fs error (device loop2): ext4_acquire_dquot:6927: comm syz.2.12938: Failed to acquire dquot type 1 [ 673.581819][ T8230] EXT4-fs (loop2): 1 truncate cleaned up [ 673.651166][ T8234] loop6: detected capacity change from 0 to 1024 [ 673.662351][ T8234] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 673.685442][ T8234] EXT4-fs error (device loop6): ext4_read_block_bitmap_nowait:483: comm syz.6.12939: Invalid block bitmap block 0 in block_group 0 [ 673.702017][ T8234] EXT4-fs error (device loop6): ext4_acquire_dquot:6927: comm syz.6.12939: Failed to acquire dquot type 0 [ 673.716308][ T8234] EXT4-fs error (device loop6): ext4_free_blocks:6589: comm syz.6.12939: Freeing blocks not in datazone - block = 0, count = 4096 [ 673.719376][ T8239] loop2: detected capacity change from 0 to 512 [ 673.742141][ T8239] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 673.742252][ T8234] EXT4-fs error (device loop6): ext4_read_inode_bitmap:139: comm syz.6.12939: Invalid inode bitmap blk 0 in block_group 0 [ 673.751929][ T8239] EXT4-fs (loop2): orphan cleanup on readonly fs [ 673.765944][ T8234] EXT4-fs error (device loop6) in ext4_free_inode:361: Corrupt filesystem [ 673.770706][ T8239] EXT4-fs error (device loop2): ext4_acquire_dquot:6927: comm syz.2.12940: Failed to acquire dquot type 1 [ 673.783732][ T8234] EXT4-fs (loop6): 1 orphan inode deleted [ 673.790555][T24626] EXT4-fs error (device loop6): ext4_release_dquot:6950: comm kworker/u8:10: Failed to release dquot type 0 [ 673.791354][ T8239] EXT4-fs (loop2): 1 truncate cleaned up [ 673.845500][ T8242] FAULT_INJECTION: forcing a failure. [ 673.845500][ T8242] name failslab, interval 1, probability 0, space 0, times 0 [ 673.858256][ T8242] CPU: 1 UID: 0 PID: 8242 Comm: syz.7.12941 Tainted: G W 6.14.0-rc7-syzkaller #0 [ 673.858290][ T8242] Tainted: [W]=WARN [ 673.858363][ T8242] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 673.858378][ T8242] Call Trace: [ 673.858384][ T8242] [ 673.858430][ T8242] dump_stack_lvl+0xf2/0x150 [ 673.858458][ T8242] dump_stack+0x15/0x1a [ 673.858478][ T8242] should_fail_ex+0x24a/0x260 [ 673.858513][ T8242] should_failslab+0x8f/0xb0 [ 673.858579][ T8242] __kmalloc_node_noprof+0xad/0x410 [ 673.858603][ T8242] ? __vmalloc_node_range_noprof+0x3dc/0xe70 [ 673.858714][ T8242] __vmalloc_node_range_noprof+0x3dc/0xe70 [ 673.858748][ T8242] ? mod_objcg_state+0x3a7/0x4f0 [ 673.858818][ T8242] ? __memcg_slab_post_alloc_hook+0x510/0x660 [ 673.858856][ T8242] ? kmem_cache_alloc_node_noprof+0x22e/0x320 [ 673.858886][ T8242] dup_task_struct+0x4a2/0x710 [ 673.858921][ T8242] ? copy_process+0x3a9/0x1f50 [ 673.858951][ T8242] ? kstrtoull+0x110/0x140 [ 673.859036][ T8242] copy_process+0x3a9/0x1f50 [ 673.859068][ T8242] ? 0xffffffff81000000 [ 673.859080][ T8242] ? selinux_file_permission+0x22a/0x360 [ 673.859180][ T8242] kernel_clone+0x167/0x5e0 [ 673.859214][ T8242] ? vfs_write+0x644/0x920 [ 673.859248][ T8242] __x64_sys_clone+0xe7/0x120 [ 673.859292][ T8242] x64_sys_call+0x2d7e/0x2dc0 [ 673.859320][ T8242] do_syscall_64+0xc9/0x1c0 [ 673.859350][ T8242] ? clear_bhb_loop+0x55/0xb0 [ 673.859419][ T8242] ? clear_bhb_loop+0x55/0xb0 [ 673.859515][ T8242] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 673.859623][ T8242] RIP: 0033:0x7ff1de99d169 [ 673.859641][ T8242] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 673.859663][ T8242] RSP: 002b:00007ff1dd006fe8 EFLAGS: 00000202 ORIG_RAX: 0000000000000038 [ 673.859688][ T8242] RAX: ffffffffffffffda RBX: 00007ff1debb5fa0 RCX: 00007ff1de99d169 [ 673.859703][ T8242] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000c0027080 [ 673.859716][ T8242] RBP: 00007ff1dd007090 R08: 0000000000000000 R09: 0000000000000000 [ 673.859731][ T8242] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000001 [ 673.859743][ T8242] R13: 0000000000000000 R14: 00007ff1debb5fa0 R15: 00007ffe07da4bb8 [ 673.859803][ T8242] [ 673.859813][ T8242] syz.7.12941: vmalloc error: size 16384, failed to allocated page array size 32, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0 [ 674.102186][ T8242] CPU: 1 UID: 0 PID: 8242 Comm: syz.7.12941 Tainted: G W 6.14.0-rc7-syzkaller #0 [ 674.102276][ T8242] Tainted: [W]=WARN [ 674.102289][ T8242] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 674.102304][ T8242] Call Trace: [ 674.102313][ T8242] [ 674.102323][ T8242] dump_stack_lvl+0xf2/0x150 [ 674.102428][ T8242] dump_stack+0x15/0x1a [ 674.102456][ T8242] warn_alloc+0x145/0x1b0 [ 674.102486][ T8242] ? should_failslab+0x8f/0xb0 [ 674.102519][ T8242] __vmalloc_node_range_noprof+0x473/0xe70 [ 674.102567][ T8242] ? mod_objcg_state+0x3a7/0x4f0 [ 674.102647][ T8242] ? __memcg_slab_post_alloc_hook+0x510/0x660 [ 674.102691][ T8242] ? kmem_cache_alloc_node_noprof+0x22e/0x320 [ 674.102758][ T8242] dup_task_struct+0x4a2/0x710 [ 674.102791][ T8242] ? copy_process+0x3a9/0x1f50 [ 674.102826][ T8242] ? kstrtoull+0x110/0x140 [ 674.102853][ T8242] copy_process+0x3a9/0x1f50 [ 674.102900][ T8242] ? 0xffffffff81000000 [ 674.102913][ T8242] ? selinux_file_permission+0x22a/0x360 [ 674.102983][ T8242] kernel_clone+0x167/0x5e0 [ 674.103069][ T8242] ? vfs_write+0x644/0x920 [ 674.103174][ T8242] __x64_sys_clone+0xe7/0x120 [ 674.103212][ T8242] x64_sys_call+0x2d7e/0x2dc0 [ 674.103245][ T8242] do_syscall_64+0xc9/0x1c0 [ 674.103310][ T8242] ? clear_bhb_loop+0x55/0xb0 [ 674.103343][ T8242] ? clear_bhb_loop+0x55/0xb0 [ 674.103377][ T8242] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 674.103409][ T8242] RIP: 0033:0x7ff1de99d169 [ 674.103423][ T8242] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 674.103501][ T8242] RSP: 002b:00007ff1dd006fe8 EFLAGS: 00000202 ORIG_RAX: 0000000000000038 [ 674.103603][ T8242] RAX: ffffffffffffffda RBX: 00007ff1debb5fa0 RCX: 00007ff1de99d169 [ 674.103619][ T8242] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000c0027080 [ 674.103670][ T8242] RBP: 00007ff1dd007090 R08: 0000000000000000 R09: 0000000000000000 [ 674.103695][ T8242] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000001 [ 674.103716][ T8242] R13: 0000000000000000 R14: 00007ff1debb5fa0 R15: 00007ffe07da4bb8 [ 674.103740][ T8242] [ 674.316438][ T8242] Mem-Info: [ 674.319642][ T8242] active_anon:4570 inactive_anon:5 isolated_anon:0 [ 674.319642][ T8242] active_file:19704 inactive_file:2661 isolated_file:0 [ 674.319642][ T8242] unevictable:0 dirty:125 writeback:0 [ 674.319642][ T8242] slab_reclaimable:3415 slab_unreclaimable:25184 [ 674.319642][ T8242] mapped:34676 shmem:1027 pagetables:884 [ 674.319642][ T8242] sec_pagetables:0 bounce:0 [ 674.319642][ T8242] kernel_misc_reclaimable:0 [ 674.319642][ T8242] free:1813847 free_pcp:12789 free_cma:0 [ 674.364545][ T8242] Node 0 active_anon:18280kB inactive_anon:20kB active_file:78816kB inactive_file:10644kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:138704kB dirty:500kB writeback:0kB shmem:4108kB writeback_tmp:0kB kernel_stack:3344kB pagetables:3536kB sec_pagetables:0kB all_unreclaimable? no [ 674.392651][ T8242] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 674.419841][ T8242] lowmem_reserve[]: 0 2885 7863 7863 [ 674.425203][ T8242] Node 0 DMA32 free:2950828kB boost:0kB min:4136kB low:7068kB high:10000kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2954360kB mlocked:0kB bounce:0kB free_pcp:3532kB local_pcp:0kB free_cma:0kB [ 674.453653][ T8242] lowmem_reserve[]: 0 0 4978 4978 [ 674.458874][ T8242] Node 0 Normal free:4289200kB boost:0kB min:7184kB low:12280kB high:17376kB reserved_highatomic:0KB active_anon:18164kB inactive_anon:20kB active_file:78816kB inactive_file:10644kB unevictable:0kB writepending:500kB present:5242880kB managed:5098208kB mlocked:0kB bounce:0kB free_pcp:48032kB local_pcp:36600kB free_cma:0kB [ 674.489194][ T8242] lowmem_reserve[]: 0 0 0 0 [ 674.493738][ T8242] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 674.506549][ T8242] Node 0 DMA32: 3*4kB (M) 2*8kB (M) 1*16kB (M) 4*32kB (M) 4*64kB (M) 2*128kB (M) 2*256kB (M) 3*512kB (M) 3*1024kB (M) 2*2048kB (M) 718*4096kB (M) = 2950828kB [ 674.522739][ T8242] Node 0 Normal: 3461*4kB (UM) 1143*8kB (UM) 567*16kB (UM) 806*32kB (UM) 474*64kB (UM) 204*128kB (UM) 84*256kB (UME) 36*512kB (M) 30*1024kB (UME) 10*2048kB (UM) 997*4096kB (UME) = 4289148kB [ 674.541663][ T8242] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 674.550976][ T8242] 23420 total pagecache pages [ 674.555665][ T8242] 5 pages in swap cache [ 674.559832][ T8242] Free swap = 124708kB [ 674.564022][ T8242] Total swap = 124996kB [ 674.568178][ T8242] 2097051 pages RAM [ 674.571975][ T8242] 0 pages HighMem/MovableOnly [ 674.576718][ T8242] 80069 pages reserved [ 674.607512][ T8245] loop7: detected capacity change from 0 to 512 [ 674.644498][ T8245] EXT4-fs (loop7): 1 orphan inode deleted [ 674.669417][T24626] EXT4-fs error (device loop7): ext4_release_dquot:6950: comm kworker/u8:10: Failed to release dquot type 1 [ 674.673718][ T8245] ext4 filesystem being mounted at /71/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 674.686105][ T8258] ext2: Unknown parameter 'journal_p' [ 674.758697][ T8266] loop2: detected capacity change from 0 to 512 [ 674.768187][ T8262] netlink: 1300 bytes leftover after parsing attributes in process `syz.8.12950'. [ 674.778175][ T8266] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 674.793700][ T8262] siw: device registration error -23 [ 674.794141][ T8267] validate_nla: 7 callbacks suppressed [ 674.794156][ T8267] netlink: 'syz.7.12944': attribute type 4 has an invalid length. [ 674.822735][ T8266] EXT4-fs (loop2): orphan cleanup on readonly fs [ 674.829589][ T8266] EXT4-fs error (device loop2): ext4_acquire_dquot:6927: comm syz.2.12951: Failed to acquire dquot type 1 [ 674.844592][ T8266] EXT4-fs (loop2): 1 truncate cleaned up [ 674.851085][ T8269] loop0: detected capacity change from 0 to 128 [ 674.880642][ T8269] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 674.896367][ T8269] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 674.911099][ T8274] loop8: detected capacity change from 0 to 1024 [ 674.940684][ T8274] EXT4-fs error (device loop8): ext4_mb_mark_diskspace_used:4115: comm syz.8.12955: Allocating blocks 385-513 which overlap fs metadata [ 674.975526][ T8269] netlink: 40 bytes leftover after parsing attributes in process `syz.0.12953'. [ 674.994782][ T8281] EXT4-fs (loop8): pa ffff888106696e70: logic 16, phys. 129, len 24 [ 675.002856][ T8281] EXT4-fs error (device loop8): ext4_mb_release_inode_pa:5366: group 0, free 0, pa_free 8 [ 675.024800][ T8248] netlink: 'syz.6.12942': attribute type 21 has an invalid length. [ 675.032915][ T8248] netlink: 'syz.6.12942': attribute type 20 has an invalid length. [ 675.137809][ T8294] loop0: detected capacity change from 0 to 1024 [ 675.186194][ T8294] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4115: comm syz.0.12962: Allocating blocks 385-513 which overlap fs metadata [ 675.213218][ T8294] EXT4-fs (loop0): pa ffff888106696ee0: logic 16, phys. 129, len 24 [ 675.221284][ T8294] EXT4-fs error (device loop0): ext4_mb_release_inode_pa:5366: group 0, free 0, pa_free 8 [ 675.240986][ T8304] loop6: detected capacity change from 0 to 128 [ 675.248149][ T8304] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 675.263423][ T8304] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 675.283080][ T8304] netlink: 40 bytes leftover after parsing attributes in process `syz.6.12965'. [ 675.306538][ T8306] loop8: detected capacity change from 0 to 1024 [ 675.318459][ T8280] netlink: 'syz.2.12956': attribute type 21 has an invalid length. [ 675.318699][ T8306] EXT4-fs (loop8): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 675.326444][ T8280] netlink: 'syz.2.12956': attribute type 20 has an invalid length. [ 675.362198][ T8306] EXT4-fs error (device loop8): ext4_read_block_bitmap_nowait:483: comm syz.8.12966: Invalid block bitmap block 0 in block_group 0 [ 675.378019][ T8306] EXT4-fs error (device loop8): ext4_acquire_dquot:6927: comm syz.8.12966: Failed to acquire dquot type 0 [ 675.389485][ T8309] loop6: detected capacity change from 0 to 1024 [ 675.394526][ T8306] EXT4-fs error (device loop8): ext4_free_blocks:6589: comm syz.8.12966: Freeing blocks not in datazone - block = 0, count = 4096 [ 675.405650][ T8311] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 675.415408][ T8306] EXT4-fs error (device loop8): ext4_read_inode_bitmap:139: comm syz.8.12966: Invalid inode bitmap blk 0 in block_group 0 [ 675.425373][ T8311] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 675.433152][ T8306] EXT4-fs error (device loop8) in ext4_free_inode:361: Corrupt filesystem [ 675.451164][ T8306] EXT4-fs (loop8): 1 orphan inode deleted [ 675.452468][T10161] EXT4-fs error (device loop8): ext4_release_dquot:6950: comm kworker/u8:8: Failed to release dquot type 0 [ 675.488507][ T8309] EXT4-fs error (device loop6): ext4_mb_mark_diskspace_used:4115: comm syz.6.12968: Allocating blocks 385-513 which overlap fs metadata [ 675.519143][ T8311] xt_TCPMSS: Only works on TCP SYN packets [ 675.539599][ T8311] netlink: 100 bytes leftover after parsing attributes in process `syz.0.12967'. [ 675.565098][ T8309] EXT4-fs (loop6): pa ffff8881064d4a80: logic 16, phys. 129, len 24 [ 675.573272][ T8309] EXT4-fs error (device loop6): ext4_mb_release_inode_pa:5366: group 0, free 0, pa_free 8 [ 675.598273][ T8311] wg1 speed is unknown, defaulting to 1000 [ 675.616767][ T8311] hsr0 speed is unknown, defaulting to 1000 [ 675.689398][ T8331] SELinux: policydb string length -14 does not match expected length 8 [ 675.709340][ T8329] wg1 speed is unknown, defaulting to 1000 [ 675.721401][ T8329] hsr0 speed is unknown, defaulting to 1000 [ 675.731679][ T8331] SELinux: failed to load policy [ 675.781350][ T8345] loop7: detected capacity change from 0 to 164 [ 675.788710][ T8345] ISOFS: unable to read i-node block [ 675.794098][ T8345] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 675.840720][ T8351] loop2: detected capacity change from 0 to 1024 [ 675.848875][ T8351] EXT4-fs: Ignoring removed nomblk_io_submit option [ 675.857621][ T8351] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 675.865985][ T8351] System zones: 0-1, 3-36 [ 676.428808][ T8365] loop0: detected capacity change from 0 to 128 [ 676.435557][ T8365] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 676.447702][ T8365] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 676.466411][ T8365] netlink: 40 bytes leftover after parsing attributes in process `syz.0.12986'. [ 676.565656][ T8369] loop8: detected capacity change from 0 to 1024 [ 676.579264][ T8372] loop0: detected capacity change from 0 to 1024 [ 676.581962][ T8373] loop6: detected capacity change from 0 to 1024 [ 676.595682][ T8373] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 676.610173][ T8369] EXT4-fs error (device loop8): ext4_mb_mark_diskspace_used:4115: comm syz.8.12988: Allocating blocks 385-513 which overlap fs metadata [ 676.621526][ T8372] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4115: comm syz.0.12989: Allocating blocks 385-513 which overlap fs metadata [ 676.626181][ T8368] EXT4-fs (loop8): pa ffff888106696f50: logic 16, phys. 129, len 24 [ 676.646149][ T8368] EXT4-fs error (device loop8): ext4_mb_release_inode_pa:5366: group 0, free 0, pa_free 8 [ 676.664397][ T8373] EXT4-fs error (device loop6): ext4_read_block_bitmap_nowait:483: comm syz.6.12990: Invalid block bitmap block 0 in block_group 0 [ 676.681074][ T8373] EXT4-fs error (device loop6): ext4_acquire_dquot:6927: comm syz.6.12990: Failed to acquire dquot type 0 [ 676.685667][ T8372] EXT4-fs (loop0): pa ffff8881064d4af0: logic 16, phys. 129, len 24 [ 676.698398][ T8373] EXT4-fs error (device loop6): ext4_free_blocks:6589: comm syz.6.12990: Freeing blocks not in datazone - block = 0, count = 4096 [ 676.700486][ T8372] EXT4-fs error (device loop0): ext4_mb_release_inode_pa:5366: group 0, free 0, pa_free 8 [ 676.725092][ T8373] EXT4-fs error (device loop6): ext4_read_inode_bitmap:139: comm syz.6.12990: Invalid inode bitmap blk 0 in block_group 0 [ 676.740108][ T8373] EXT4-fs error (device loop6) in ext4_free_inode:361: Corrupt filesystem [ 676.748562][T10161] EXT4-fs error (device loop6): ext4_release_dquot:6950: comm kworker/u8:8: Failed to release dquot type 0 [ 676.766307][ T8373] EXT4-fs (loop6): 1 orphan inode deleted [ 676.783621][ T8387] loop8: detected capacity change from 0 to 512 [ 676.797201][ T8387] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 676.828234][ T8393] loop6: detected capacity change from 0 to 2048 [ 676.836291][ T8387] EXT4-fs (loop8): orphan cleanup on readonly fs [ 676.844002][ T8387] EXT4-fs error (device loop8): ext4_acquire_dquot:6927: comm syz.8.12993: Failed to acquire dquot type 1 [ 676.858231][ T8393] ext4 filesystem being mounted at /66/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 676.864729][ T8387] EXT4-fs (loop8): 1 truncate cleaned up [ 676.893245][ T8399] loop0: detected capacity change from 0 to 2048 [ 676.906163][ T8399] ext4 filesystem being mounted at /311/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 677.044966][ T8403] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.12996: bg 0: block 345: padding at end of block bitmap is not set [ 677.062185][ T8408] loop8: detected capacity change from 0 to 2048 [ 677.089217][ T8408] ext4 filesystem being mounted at /286/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 677.100359][ T8403] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 16 with error 117 [ 677.113409][ T8403] EXT4-fs (loop6): This should not happen!! Data will be lost [ 677.113409][ T8403] [ 677.153449][ T8406] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.12998: bg 0: block 345: padding at end of block bitmap is not set [ 677.175614][T24626] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 32 with max blocks 2048 with error 117 [ 677.188364][T24626] EXT4-fs (loop6): This should not happen!! Data will be lost [ 677.188364][T24626] [ 677.188611][ T8406] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 16 with error 117 [ 677.210557][ T8406] EXT4-fs (loop0): This should not happen!! Data will be lost [ 677.210557][ T8406] [ 677.245613][T24626] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 32 with max blocks 2048 with error 117 [ 677.248556][ T12] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 2081 with max blocks 2024 with error 28 [ 677.258267][T24626] EXT4-fs (loop0): This should not happen!! Data will be lost [ 677.258267][T24626] [ 677.280724][ T12] EXT4-fs (loop6): This should not happen!! Data will be lost [ 677.280724][ T12] [ 677.290399][ T12] EXT4-fs (loop6): Total free blocks count 0 [ 677.296543][ T12] EXT4-fs (loop6): Free/Dirty block details [ 677.302526][ T12] EXT4-fs (loop6): free_blocks=0 [ 677.307597][ T12] EXT4-fs (loop6): dirty_blocks=2032 [ 677.324983][T24626] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 2081 with max blocks 2024 with error 28 [ 677.337827][T24626] EXT4-fs (loop0): This should not happen!! Data will be lost [ 677.337827][T24626] [ 677.347594][T24626] EXT4-fs (loop0): Total free blocks count 0 [ 677.353665][T24626] EXT4-fs (loop0): Free/Dirty block details [ 677.359605][T24626] EXT4-fs (loop0): free_blocks=0 [ 677.364578][T24626] EXT4-fs (loop0): dirty_blocks=2032 [ 677.418203][ T8411] EXT4-fs error (device loop8): ext4_validate_block_bitmap:441: comm syz.8.13000: bg 0: block 345: padding at end of block bitmap is not set [ 677.440784][ T8413] loop6: detected capacity change from 0 to 512 [ 677.448065][ T8413] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 677.460895][ T8413] EXT4-fs (loop6): orphan cleanup on readonly fs [ 677.462821][ T8411] EXT4-fs (loop8): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 16 with error 117 [ 677.467947][ T8413] __quota_error: 108 callbacks suppressed [ 677.467965][ T8413] Quota error (device loop6): do_check_range: Getting block 196613 out of range 1-5 [ 677.479671][ T8411] EXT4-fs (loop8): This should not happen!! Data will be lost [ 677.479671][ T8411] [ 677.485496][ T8413] Quota error (device loop6): qtree_read_dquot: Can't read quota structure for id 0 [ 677.514002][ T8413] EXT4-fs error (device loop6): ext4_acquire_dquot:6927: comm syz.6.13001: Failed to acquire dquot type 1 [ 677.526004][ T8413] EXT4-fs (loop6): 1 truncate cleaned up [ 677.550862][ T51] EXT4-fs (loop8): Delayed block allocation failed for inode 15 at logical offset 32 with max blocks 2048 with error 117 [ 677.563625][ T51] EXT4-fs (loop8): This should not happen!! Data will be lost [ 677.563625][ T51] [ 677.614436][ T8420] loop7: detected capacity change from 0 to 1024 [ 677.621456][ T51] EXT4-fs (loop8): Delayed block allocation failed for inode 15 at logical offset 2081 with max blocks 2024 with error 28 [ 677.634227][ T51] EXT4-fs (loop8): This should not happen!! Data will be lost [ 677.634227][ T51] [ 677.643896][ T51] EXT4-fs (loop8): Total free blocks count 0 [ 677.649880][ T51] EXT4-fs (loop8): Free/Dirty block details [ 677.656001][ T51] EXT4-fs (loop8): free_blocks=0 [ 677.660960][ T51] EXT4-fs (loop8): dirty_blocks=2032 [ 677.680003][ T30] audit: type=1326 audit(1742206308.105:35810): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8424 comm="syz.6.13009" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa519c2d169 code=0x7ffc0000 [ 677.686143][ T8420] EXT4-fs error (device loop7): ext4_mb_mark_diskspace_used:4115: comm syz.7.13006: Allocating blocks 385-513 which overlap fs metadata [ 677.724289][ T8420] EXT4-fs (loop7): pa ffff888106696f50: logic 16, phys. 129, len 24 [ 677.732474][ T8420] EXT4-fs error (device loop7): ext4_mb_release_inode_pa:5366: group 0, free 0, pa_free 8 [ 677.742742][ T30] audit: type=1326 audit(1742206308.135:35811): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8424 comm="syz.6.13009" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fa519c2d169 code=0x7ffc0000 [ 677.766441][ T30] audit: type=1326 audit(1742206308.155:35812): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8424 comm="syz.6.13009" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa519c2d169 code=0x7ffc0000 [ 677.790179][ T30] audit: type=1326 audit(1742206308.155:35813): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8424 comm="syz.6.13009" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa519c2d169 code=0x7ffc0000 [ 677.807972][ T8433] netlink: 148 bytes leftover after parsing attributes in process `syz.2.13010'. [ 677.813752][ T30] audit: type=1326 audit(1742206308.155:35814): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8424 comm="syz.6.13009" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa519c2d169 code=0x7ffc0000 [ 677.813783][ T30] audit: type=1326 audit(1742206308.155:35815): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8424 comm="syz.6.13009" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa519c2d169 code=0x7ffc0000 [ 677.870146][ T30] audit: type=1326 audit(1742206308.155:35816): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8424 comm="syz.6.13009" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa519c2d169 code=0x7ffc0000 [ 677.893760][ T30] audit: type=1326 audit(1742206308.155:35817): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8424 comm="syz.6.13009" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa519c2d169 code=0x7ffc0000 [ 677.970074][ T8436] loop8: detected capacity change from 0 to 128 [ 677.981931][ T8443] loop2: detected capacity change from 0 to 512 [ 677.994210][ T8443] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 678.006102][ T8436] ext4 filesystem being mounted at /287/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 678.041008][ T8443] EXT4-fs (loop2): orphan cleanup on readonly fs [ 678.048740][ T8436] vhci_hcd vhci_hcd.0: pdev(8) rhport(0) sockfd(13) [ 678.049137][ T8443] EXT4-fs error (device loop2): ext4_acquire_dquot:6927: comm syz.2.13012: Failed to acquire dquot type 1 [ 678.055416][ T8436] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 678.055559][ T8436] vhci_hcd vhci_hcd.0: Device attached [ 678.072235][ T8443] EXT4-fs (loop2): 1 truncate cleaned up [ 678.103450][ T8453] vhci_hcd: connection closed [ 678.103684][T24626] vhci_hcd: stop threads [ 678.112717][T24626] vhci_hcd: release socket [ 678.117213][T24626] vhci_hcd: disconnect device [ 678.190434][ T8458] loop6: detected capacity change from 0 to 512 [ 678.206335][ T8458] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 678.218661][ T8462] loop2: detected capacity change from 0 to 1024 [ 678.226412][ T8458] EXT4-fs (loop6): orphan cleanup on readonly fs [ 678.233331][ T8458] EXT4-fs error (device loop6): ext4_acquire_dquot:6927: comm syz.6.13015: Failed to acquire dquot type 1 [ 678.245371][ T8458] EXT4-fs (loop6): 1 truncate cleaned up [ 678.251775][ T8438] netlink: 'syz.7.13011': attribute type 21 has an invalid length. [ 678.252669][ T8462] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4115: comm syz.2.13017: Allocating blocks 385-513 which overlap fs metadata [ 678.259898][ T8438] netlink: 'syz.7.13011': attribute type 20 has an invalid length. [ 678.285628][ T8461] EXT4-fs (loop2): pa ffff8881064d4bd0: logic 16, phys. 129, len 24 [ 678.293733][ T8461] EXT4-fs error (device loop2): ext4_mb_release_inode_pa:5366: group 0, free 0, pa_free 8 [ 678.332238][ T8469] loop6: detected capacity change from 0 to 1024 [ 678.339499][ T8469] EXT4-fs: Ignoring removed orlov option [ 678.345384][ T8469] EXT4-fs: Ignoring removed nomblk_io_submit option [ 678.385363][ T8473] loop2: detected capacity change from 0 to 2048 [ 678.405949][ T8477] loop7: detected capacity change from 0 to 512 [ 678.413490][ T8477] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 678.435583][ T8477] EXT4-fs (loop7): orphan cleanup on readonly fs [ 678.443178][ T8477] EXT4-fs error (device loop7): ext4_acquire_dquot:6927: comm syz.7.13021: Failed to acquire dquot type 1 [ 678.457109][ T8477] EXT4-fs (loop7): 1 truncate cleaned up [ 678.465853][ T8473] ext4 filesystem being mounted at /290/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 678.577485][ T8485] loop7: detected capacity change from 0 to 128 [ 678.600216][ T8485] FAT-fs (loop7): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 678.639794][ T8469] netlink: 268 bytes leftover after parsing attributes in process `gtp'. [ 678.648412][ T8469] unsupported nla_type 65024 [ 678.657721][ T8485] FAT-fs (loop7): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 678.679084][ T8485] netlink: 40 bytes leftover after parsing attributes in process `syz.7.13023'. [ 678.694708][ T8490] netlink: 1300 bytes leftover after parsing attributes in process `syz.8.13026'. [ 678.705339][ T8490] siw: device registration error -23 [ 678.769111][T10161] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm kworker/u8:8: bg 0: block 345: padding at end of block bitmap is not set [ 678.804981][T10161] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 2048 with error 117 [ 678.817760][T10161] EXT4-fs (loop2): This should not happen!! Data will be lost [ 678.817760][T10161] [ 678.868672][ T12] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 2065 with max blocks 2040 with error 28 [ 678.881569][ T12] EXT4-fs (loop2): This should not happen!! Data will be lost [ 678.881569][ T12] [ 678.891305][ T12] EXT4-fs (loop2): Total free blocks count 0 [ 678.897326][ T12] EXT4-fs (loop2): Free/Dirty block details [ 678.903271][ T12] EXT4-fs (loop2): free_blocks=0 [ 678.908299][ T12] EXT4-fs (loop2): dirty_blocks=2048 [ 678.913681][ T12] EXT4-fs (loop2): Block reservation details [ 678.919716][ T12] EXT4-fs (loop2): i_reserved_data_blocks=128 [ 678.962194][ T8500] loop6: detected capacity change from 0 to 512 [ 679.017373][ T8500] EXT4-fs (loop6): 1 orphan inode deleted [ 679.025770][ T8500] ext4 filesystem being mounted at /75/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 679.036681][ T51] EXT4-fs error (device loop6): ext4_release_dquot:6950: comm kworker/u8:3: Failed to release dquot type 1 [ 679.109394][ T8507] loop8: detected capacity change from 0 to 1024 [ 679.119774][ T8511] netlink: 'syz.6.13031': attribute type 4 has an invalid length. [ 679.128028][ T8507] EXT4-fs (loop8): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 679.132863][ T8512] netlink: 100 bytes leftover after parsing attributes in process `syz.2.13029'. [ 679.153389][ T8493] netlink: 'syz.7.13027': attribute type 21 has an invalid length. [ 679.161346][ T8493] netlink: 'syz.7.13027': attribute type 20 has an invalid length. [ 679.163584][ T8507] EXT4-fs error (device loop8): ext4_read_block_bitmap_nowait:483: comm syz.8.13033: Invalid block bitmap block 0 in block_group 0 [ 679.185253][ T8507] EXT4-fs error (device loop8): ext4_acquire_dquot:6927: comm syz.8.13033: Failed to acquire dquot type 0 [ 679.198114][ T8507] EXT4-fs error (device loop8): ext4_free_blocks:6589: comm syz.8.13033: Freeing blocks not in datazone - block = 0, count = 4096 [ 679.212745][ T8507] EXT4-fs error (device loop8): ext4_read_inode_bitmap:139: comm syz.8.13033: Invalid inode bitmap blk 0 in block_group 0 [ 679.226210][ T8507] EXT4-fs error (device loop8) in ext4_free_inode:361: Corrupt filesystem [ 679.235473][ T8507] EXT4-fs (loop8): 1 orphan inode deleted [ 679.243374][ T8507] EXT4-fs mount: 230 callbacks suppressed [ 679.243413][ T8507] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 679.269706][ T12] EXT4-fs error (device loop8): ext4_release_dquot:6950: comm kworker/u8:0: Failed to release dquot type 0 [ 679.282479][ T4428] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 679.404222][ T8530] loop7: detected capacity change from 0 to 512 [ 679.424504][ T8530] EXT4-fs (loop7): 1 orphan inode deleted [ 679.430724][ T8530] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 679.442407][ T12] EXT4-fs error (device loop7): ext4_release_dquot:6950: comm kworker/u8:0: Failed to release dquot type 1 [ 679.443696][ T8530] ext4 filesystem being mounted at /85/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 679.540316][ T8519] geneve0: entered allmulticast mode [ 679.555858][ T8534] siw: device registration error -23 [ 679.579911][ T8537] loop0: detected capacity change from 0 to 128 [ 679.586619][ T8537] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 679.598674][ T8537] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 679.769624][ T8543] loop0: detected capacity change from 0 to 1024 [ 679.779359][ T8543] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 679.795862][ T7114] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 679.805329][ T8543] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:483: comm syz.0.13043: Invalid block bitmap block 0 in block_group 0 [ 679.820601][ T8543] EXT4-fs error (device loop0): ext4_acquire_dquot:6927: comm syz.0.13043: Failed to acquire dquot type 0 [ 679.834488][ T8543] EXT4-fs error (device loop0): ext4_free_blocks:6589: comm syz.0.13043: Freeing blocks not in datazone - block = 0, count = 4096 [ 679.850828][ T8543] EXT4-fs error (device loop0): ext4_read_inode_bitmap:139: comm syz.0.13043: Invalid inode bitmap blk 0 in block_group 0 [ 679.865027][ T8543] EXT4-fs error (device loop0) in ext4_free_inode:361: Corrupt filesystem [ 679.874916][ T8543] EXT4-fs (loop0): 1 orphan inode deleted [ 679.885718][ T8543] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 679.901848][T10161] EXT4-fs error (device loop0): ext4_release_dquot:6950: comm kworker/u8:8: Failed to release dquot type 0 [ 679.925571][ T4202] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 680.148852][ T8560] loop8: detected capacity change from 0 to 512 [ 680.156025][ T8560] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 680.165505][ T8560] EXT4-fs (loop8): orphan cleanup on readonly fs [ 680.172897][ T8560] EXT4-fs error (device loop8): ext4_acquire_dquot:6927: comm syz.8.13048: Failed to acquire dquot type 1 [ 680.176682][ T8553] validate_nla: 1 callbacks suppressed [ 680.176698][ T8553] netlink: 'syz.0.13047': attribute type 21 has an invalid length. [ 680.193295][ T8560] EXT4-fs (loop8): 1 truncate cleaned up [ 680.197610][ T8553] netlink: 'syz.0.13047': attribute type 20 has an invalid length. [ 680.211421][ T8555] netlink: 'syz.6.13044': attribute type 21 has an invalid length. [ 680.211694][ T8560] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 680.219394][ T8555] netlink: 'syz.6.13044': attribute type 20 has an invalid length. [ 680.247772][ T6851] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 680.269299][ T8563] loop7: detected capacity change from 0 to 1024 [ 680.276009][ T8563] EXT4-fs: Ignoring removed nomblk_io_submit option [ 680.284209][ T8563] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 680.292485][ T8563] System zones: 0-1, 3-36 [ 680.297573][ T8563] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 680.339187][ T4428] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 680.351915][ T4428] ================================================================== [ 680.360019][ T4428] BUG: KCSAN: data-race in __find_get_block / has_bh_in_lru [ 680.367335][ T4428] [ 680.369671][ T4428] read-write to 0xffff888237d2ba28 of 8 bytes by task 8563 on cpu 1: [ 680.377731][ T4428] __find_get_block+0x42e/0x890 [ 680.382594][ T4428] bdev_getblk+0x30/0x3b0 [ 680.386932][ T4428] ext4_getblk+0x1bd/0x530 [ 680.391357][ T4428] ext4_bread+0x2c/0x110 [ 680.395606][ T4428] ext4_quota_read+0x105/0x1c0 [ 680.400388][ T4428] qtree_read_dquot+0x12e/0x4b0 [ 680.405242][ T4428] v2_read_dquot+0x96/0xd0 [ 680.409677][ T4428] dquot_acquire+0xc3/0x2b0 [ 680.414186][ T4428] ext4_acquire_dquot+0x170/0x210 [ 680.419209][ T4428] dqget+0x522/0x8b0 [ 680.423113][ T4428] __dquot_initialize+0x26d/0x760 [ 680.428147][ T4428] dquot_initialize+0x1a/0x20 [ 680.432838][ T4428] ext4_create+0x4b/0x2f0 [ 680.437174][ T4428] path_openat+0xea3/0x1fc0 [ 680.441682][ T4428] do_filp_open+0x107/0x230 [ 680.446191][ T4428] do_sys_openat2+0xab/0x120 [ 680.450781][ T4428] __x64_sys_open+0xe6/0x110 [ 680.455376][ T4428] x64_sys_call+0x13e1/0x2dc0 [ 680.460060][ T4428] do_syscall_64+0xc9/0x1c0 [ 680.464576][ T4428] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 680.470479][ T4428] [ 680.472800][ T4428] read to 0xffff888237d2ba28 of 8 bytes by task 4428 on cpu 0: [ 680.480349][ T4428] has_bh_in_lru+0x35/0x1f0 [ 680.484866][ T4428] smp_call_function_many_cond+0x305/0xbb0 [ 680.490679][ T4428] on_each_cpu_cond_mask+0x3c/0x90 [ 680.495793][ T4428] invalidate_bh_lrus+0x2a/0x30 [ 680.500658][ T4428] blkdev_flush_mapping+0x9b/0x1a0 [ 680.505806][ T4428] bdev_release+0x2f9/0x420 [ 680.510326][ T4428] blkdev_release+0x15/0x20 [ 680.514846][ T4428] __fput+0x2ac/0x640 [ 680.518831][ T4428] ____fput+0x1c/0x30 [ 680.522821][ T4428] task_work_run+0x13a/0x1a0 [ 680.527426][ T4428] syscall_exit_to_user_mode+0xa8/0x120 [ 680.532984][ T4428] do_syscall_64+0xd6/0x1c0 [ 680.537501][ T4428] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 680.543404][ T4428] [ 680.545725][ T4428] value changed: 0x0000000000000000 -> 0xffff88812713f138 [ 680.552833][ T4428] [ 680.555154][ T4428] Reported by Kernel Concurrency Sanitizer on: [ 680.561301][ T4428] CPU: 0 UID: 0 PID: 4428 Comm: syz-executor Tainted: G W 6.14.0-rc7-syzkaller #0 [ 680.571891][ T4428] Tainted: [W]=WARN [ 680.575689][ T4428] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 680.585748][ T4428] ================================================================== [ 680.604501][ T6851] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 680.617471][ T8570] loop8: detected capacity change from 0 to 128 [ 680.624523][ T8570] FAT-fs (loop8): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 680.637001][ T8570] FAT-fs (loop8): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 680.653200][ T8570] __nla_validate_parse: 2 callbacks suppressed [ 680.653215][ T8570] netlink: 40 bytes leftover after parsing attributes in process `syz.8.13051'.