last executing test programs: 1m11.20267836s ago: executing program 1 (id=1482): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r2, 0x0, 0x8008000000010, &(0x7f00000003c0)="17000000020001000003d68c5ee17688a2003208030300ecff3f0000000300000a0000000098fc5ad9485bbb6a880000d6c8db0000dba67e06000000e28900000200df018000000000f50607bdff59100ac45761547a681f009cee4a5acb3da400001fb700674f00c88ebbf9315033bf79ac2dff060115003901000000000000ea000000000000000002ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e0", 0xb8) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r3, 0x0, 0x8008000000010, &(0x7f00000003c0)="17000000020001000003d68c5ee17688a2003208030300ecff3f0000000300000a0000000098fc5ad9485bbb6a880000d6c8db0000dba67e06000000e28900000200df018000000000f50607bdff59100ac45761547a681f009cee4a5acb3da400001fb700674f00c88ebbf9315033bf79ac2dff060115003901000000000000ea000000000000000002ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e0", 0xb8) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x2, 0x13, 0x0, 0x0, 0x2}, 0x10}}, 0x0) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0x12, 0x0, 0x0, 0x2}, 0x10}}, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) 1m11.19950138s ago: executing program 1 (id=1485): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x4000, &(0x7f0000000c00)={[{@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@nombcache}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x4}}, {@mblk_io_submit}, {@resuid}, {@norecovery}]}, 0x8, 0x445, &(0x7f0000001dc0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./bus\x00', 0x1c5042, 0x12) write(r1, &(0x7f00000009c0)="3bf58d7d45d32c", 0x7) sendfile(r1, r0, 0x0, 0x3ffff) sendfile(r1, r0, 0x0, 0x7fffeffd) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000003c0)='sched_switch\x00', r2}, 0x18) bpf$MAP_CREATE(0x0, 0x0, 0x48) r4 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r4, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) recvmmsg(r4, &(0x7f0000005cc0)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000000c0)=""/71, 0x47}], 0x1}, 0x200}], 0x1, 0x102, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0xf, 0xb, &(0x7f00000005c0)=ANY=[@ANYRESDEC=r3], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x94) waitid$P_PIDFD(0x3, r0, &(0x7f0000000840), 0x1, &(0x7f0000000500)) 1m10.196080311s ago: executing program 1 (id=1497): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e21, @local}], 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018040000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000024"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1, 0x0, 0xfffffffffffffff8}, 0x18) sendmsg$inet_sctp(r0, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000380)='N', 0x2a000}], 0x1, 0x0, 0x0, 0x804c040}, 0x0) 1m9.262044917s ago: executing program 1 (id=1514): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="1801000000000000000000006dfeff00850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r0}, 0x10) wait4(0x0, 0x0, 0x1000008, 0x0) r1 = syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x4000, &(0x7f0000000c00)={[{@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@nombcache}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x4}}, {@mblk_io_submit}, {@resuid}, {@norecovery}]}, 0x8, 0x445, &(0x7f0000001dc0)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./bus\x00', 0x1c5042, 0x12) write(r3, &(0x7f00000009c0)="3bf58d7d45d32c", 0x7) sendfile(r3, r2, 0x0, 0x3ffff) sendfile(r3, r2, 0x0, 0x7fffeffd) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000003c0)='sched_switch\x00', r4}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r6 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r7 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r7, &(0x7f0000000140)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r7, 0x0) r8 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r8, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) r9 = accept4(r7, 0x0, 0x0, 0x0) sendto(r9, &(0x7f00000001c0)="4821c5eaf3bb85c04b8c64f61f3d79c75f16db859c703b726946d0b0d24748c80cc4e6544859a4779a615dfe39819a5ca43a6c57c6688008b4f3705a50ca07f29a447bf54ff4c3", 0x47, 0x40, 0x0, 0x0) recvmmsg(r8, &(0x7f0000005cc0)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000000c0)=""/71, 0x47}], 0x1}, 0x200}], 0x1, 0x102, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0xf, 0xb, &(0x7f00000005c0)=ANY=[@ANYRESDEC=r5], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x94) ioctl$FIDEDUPERANGE(r1, 0xc0189436, &(0x7f0000000ac0)=ANY=[@ANYBLOB="060000000000000006000000000000000400000000000000", @ANYRES32=r6, @ANYBLOB="000000000100008000"/28, @ANYRES32, @ANYBLOB='\x00\x00\x00\x001\a\x00'/28, @ANYRES32, @ANYBLOB="00000000770000000000000000000000000000000000000000000020eb245fc955f6c15daecbe716b5d3af01f00c6366c487323d86a6d9e708ed483688b0dcb7f121d60aac9f6827afb160442f0ab8bc80d7a783be3d30d065f07b0355ae7d7b05fd", @ANYRES32=r8, @ANYBLOB='\x00'/28]) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000640)='f2fs_gc_begin\x00', r0, 0x0, 0xffffffffffffffff}, 0x18) connect$pppoe(0xffffffffffffffff, &(0x7f0000000080)={0x18, 0x0, {0xfffe, @broadcast, 'geneve0\x00'}}, 0x1e) socket$pppoe(0x18, 0x1, 0x0) syz_clone(0x80000, &(0x7f0000000240)="45b58ef4444bd1683e965c36735528a290ca75b974a6b1766b8fcf686ca676d38363411d10f1545ac36128c4c76237eae6270801165282410fc481fe6b4df1e648b15e0b8e95f67ef1ab6a1e19cc6232bb8849130b30b9d28aa4b3ddfc829457d7d5a20649e4e406e7f4e15363d6ddd021c5ec10bab37513813c48a51f0b33a5a0a10a2d9682ada2629ff40f39aa9ef08274508d6280557c4c748efc75b36b1bbec5edd420f3d9c295c06d2154d857eaf947", 0xb2, &(0x7f0000000300), &(0x7f0000000380), &(0x7f00000003c0)="f0fb5b672ab19aed4f6b9599775bb05ddc6a1a0319bc750af81e3a83ea86f3381345b9e81891a1a8c6815b296cae4e87877720f5b9c94ab9f40635fd28c479878ce550194f31dcd62ee2d08e5b7d75ed9265e58c57d200625fd763b47060a9391708109b9f935208b55a515525eda4de36911e1641bf053981de6cc9ca780d2cda2d64540e4d801d2a2d22b58c78278ef3b8a15143cf7dcc4d48c6516b790ca81cf56a69cb051e24e33836d7") 1m8.938633473s ago: executing program 1 (id=1524): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x64, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) socket$key(0xf, 0x3, 0x2) socket(0x2, 0x80805, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r0, 0x10e, 0xc, &(0x7f0000000040)=0x8, 0x4) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB="28000000120001000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00', @ANYRES32=r0], 0x28}}, 0x802) 1m8.267436088s ago: executing program 1 (id=1539): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000000400000900000001", @ANYBLOB], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r0, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000840)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc0ed000e, &(0x7f0000000200)={[{@jqfmt_vfsold}, {@orlov}, {@debug}, {@noload}, {@nombcache}, {@noblock_validity}, {@init_itable_val={'init_itable', 0x3d, 0x601}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x8000}}]}, 0xfa, 0x47c, &(0x7f0000000a80)="$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") perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x8, 0x0, @perf_config_ext={0x1, 0xa}, 0x1184c, 0x9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r1 = openat$sysfs(0xffffff9c, &(0x7f0000000080)='/sys/power/pm_test', 0x0, 0x84) close_range(r1, 0xffffffffffffffff, 0x2) fsetxattr$trusted_overlay_origin(r1, &(0x7f0000000140), 0x0, 0x0, 0x2) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="54000000090601080000000000000000050000000900020073797a310000000005000100070000002c000780060004404e21000005000700e30000000c00018008000140850101010c000280"], 0x54}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1801000021100000000000003b810000850000006d000000850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x20000000}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f0000000000)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r4, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f00000003c0)=ANY=[@ANYBLOB="240000000408010100000000000000000000000a0600024000f500f6830003001100000063533b913bd626a2a57c8432cca48d08b03040b69eac63019078687b8980ae93bae5393f43406434683e727486b70b8e24e129dda52026b384d68243bf820604c35cf599c1b33ade06fc677650fcff55ac9c6d968127a95f44980ab081258abd56c8299249231f999d6ecc855679b7774b63d4e19826d4e221a36c3122927980c4413d02ac10a95f0cfdd981a65c25baaa2317240081c8fa9517c06e758ca64c"], 0x24}}, 0x10) read(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x40, 0x0, 0x0, 0x0}, 0x50) syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f0000000300)='./file0\x00', 0x2204080, &(0x7f0000000040)=ANY=[@ANYBLOB="6e6f646f74732c73686f77657865632c6e6f646f74732c6e66733d6e6f7374616c655f726f2c0030a66d3a1127e03fc4ec7721f7c77d616ce2d9a9b0ef6cf77d486df06aac6920f6f13474bc77836cb851c86e0cc5dc8611db21e0dafe4caa2c5b34"], 0x1, 0x28d, &(0x7f0000000640)="$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") openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r1, &(0x7f00000004c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x40, 0x140d, 0x400, 0x70bd2b, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_RES_MRN={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_RES_MRN={0x8, 0x3e, 0x5}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}]}, 0x40}}, 0x10) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000340)={0x1b, 0x0, 0x0, 0x8000, 0x0, r1, 0x7f, '\x00', 0x0, r1, 0x0, 0x4, 0x4}, 0x50) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f00000005c0)={'team0\x00', 0x0}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000c80)={{r1, 0xffffffffffffffff}, &(0x7f0000000b80), &(0x7f0000000bc0)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000d80)={0x20, 0x44, &(0x7f0000000f00)=ANY=[@ANYBLOB="1800000001800000000000001000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000183a00000300000000000000000000001842000005000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7030000009ccef3eb0432e412000c1898190c000000b70508000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000040000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082000000b7080000000000007b8af8ff00000000b7080000000800007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000a5000000b7080000000000007b8af8ff00000000b7080000ff7f00007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000a500000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000018270000", @ANYRES32=r1, @ANYBLOB="000000000400000018280000", @ANYRES32=r1, @ANYBLOB="0000000001010000bf91000000000000b7020000020000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000580)='GPL\x00', 0x21cdcd2f, 0x0, 0x0, 0x41000, 0x1, '\x00', r6, @netfilter, r1, 0x8, &(0x7f0000000600)={0x1, 0x4}, 0x8, 0x10, &(0x7f0000000b40)={0x4, 0xb, 0x5, 0x3}, 0x10, 0x0, r3, 0x6, &(0x7f0000000cc0)=[r1, r1, r7, r1, r1, 0x1, r1], &(0x7f0000000d00)=[{0x0, 0x3, 0x8, 0x9}, {0x5, 0x5, 0xf, 0x8}, {0x4, 0x3, 0xc, 0xa}, {0x0, 0x5, 0x6, 0x1}, {0x0, 0x2, 0xe, 0x2}, {0x4, 0x3, 0x7}], 0x10, 0x9}, 0x94) epoll_create1(0x0) ppoll(&(0x7f0000000200), 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r8}, 0x10) r9 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r9, &(0x7f0000000040)={0x0, 0xffffffffffffff8a, &(0x7f0000000000)=[{&(0x7f0000000140)="d800000010008104687da3aa7143a0b8c81d080b25000000e8fe55a11800150006001425000000120800030043000040a8002b000a00014006046109d67f6f94007134cf6ee0a000a0e408e8d8ef52a9d7c7c0b7a196e6f66112c88a2ddddbbb219c6c09136dd481c4a918d1bcf0f938baa5d060a517898516277ce06bbace80177ccbec4c2ee5a7cef4260027836b0d17a58af5d6d93424841f468430dfe1d9d322fe7c0aaa16b8ddc64193071e9f8775730d16a4683f785025ccc89e00360db70100000040fad95667e006dcabced7ad654fac9609f4fb", 0xd8}], 0x1}, 0x4004) 1m8.266762637s ago: executing program 32 (id=1539): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000000400000900000001", @ANYBLOB], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r0, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000840)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc0ed000e, &(0x7f0000000200)={[{@jqfmt_vfsold}, {@orlov}, {@debug}, {@noload}, {@nombcache}, {@noblock_validity}, {@init_itable_val={'init_itable', 0x3d, 0x601}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x8000}}]}, 0xfa, 0x47c, &(0x7f0000000a80)="$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") perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x8, 0x0, @perf_config_ext={0x1, 0xa}, 0x1184c, 0x9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r1 = openat$sysfs(0xffffff9c, &(0x7f0000000080)='/sys/power/pm_test', 0x0, 0x84) close_range(r1, 0xffffffffffffffff, 0x2) fsetxattr$trusted_overlay_origin(r1, &(0x7f0000000140), 0x0, 0x0, 0x2) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="54000000090601080000000000000000050000000900020073797a310000000005000100070000002c000780060004404e21000005000700e30000000c00018008000140850101010c000280"], 0x54}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1801000021100000000000003b810000850000006d000000850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x20000000}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f0000000000)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r4, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f00000003c0)=ANY=[@ANYBLOB="240000000408010100000000000000000000000a0600024000f500f6830003001100000063533b913bd626a2a57c8432cca48d08b03040b69eac63019078687b8980ae93bae5393f43406434683e727486b70b8e24e129dda52026b384d68243bf820604c35cf599c1b33ade06fc677650fcff55ac9c6d968127a95f44980ab081258abd56c8299249231f999d6ecc855679b7774b63d4e19826d4e221a36c3122927980c4413d02ac10a95f0cfdd981a65c25baaa2317240081c8fa9517c06e758ca64c"], 0x24}}, 0x10) read(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x40, 0x0, 0x0, 0x0}, 0x50) syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f0000000300)='./file0\x00', 0x2204080, &(0x7f0000000040)=ANY=[@ANYBLOB="6e6f646f74732c73686f77657865632c6e6f646f74732c6e66733d6e6f7374616c655f726f2c0030a66d3a1127e03fc4ec7721f7c77d616ce2d9a9b0ef6cf77d486df06aac6920f6f13474bc77836cb851c86e0cc5dc8611db21e0dafe4caa2c5b34"], 0x1, 0x28d, &(0x7f0000000640)="$eJzs3b9qFF0cBuCTTUI+8pGQStDGg1Y2Q5LaIkESCC4omhVUECZkosuOu2Fni51gEWsbwdI7EEs7QbyB3IVdmpAqlRGd/DEBq5DdIs/TzMu8c+D8GDhTzu7d969bG0WykfZCbWEk1BZCqB2MhJlQC8e2w50Pbz++e/z02f3Fen3pUYzLi6tz8zHG6Zvfnr/5fOt77/8nX6a/ToSdmRe7e/M/dq7tXN/9ufqqWcRmEdudXkzjWqfTS9fyLK43i1YS48M8S4ssNttF1j3Tb+Sdzc0ypu31qcnNblYUMW2XsZWVsdeJvW4Z05dpsx2TJIlTk4GLaHw6ODwMe4eVYe+GwfP+r7a/DvX/Qtjf7jf6jepa9csr9aXZ+Mf46ar9fr8xetLPVX0824+HyaN+/nx//Gm5XfW/u3sP6ufWT4T1S54dAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAqyuJJ2ZO7+73+43Rqk/+1VdpeaW+NHv0wNl+LNwYG9gYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHAhRbnVSvM86wqCIJyEYZ9MAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMHinP/0e9k4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYpqLcaqV5nnUvMQx7RgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC4qF8BAAD//3nQbMU=") openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r1, &(0x7f00000004c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x40, 0x140d, 0x400, 0x70bd2b, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_RES_MRN={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_RES_MRN={0x8, 0x3e, 0x5}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}]}, 0x40}}, 0x10) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000340)={0x1b, 0x0, 0x0, 0x8000, 0x0, r1, 0x7f, '\x00', 0x0, r1, 0x0, 0x4, 0x4}, 0x50) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f00000005c0)={'team0\x00', 0x0}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000c80)={{r1, 0xffffffffffffffff}, &(0x7f0000000b80), &(0x7f0000000bc0)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000d80)={0x20, 0x44, &(0x7f0000000f00)=ANY=[@ANYBLOB="1800000001800000000000001000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000183a00000300000000000000000000001842000005000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7030000009ccef3eb0432e412000c1898190c000000b70508000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000040000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082000000b7080000000000007b8af8ff00000000b7080000000800007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000a5000000b7080000000000007b8af8ff00000000b7080000ff7f00007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000a500000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000018270000", @ANYRES32=r1, @ANYBLOB="000000000400000018280000", @ANYRES32=r1, @ANYBLOB="0000000001010000bf91000000000000b7020000020000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000580)='GPL\x00', 0x21cdcd2f, 0x0, 0x0, 0x41000, 0x1, '\x00', r6, @netfilter, r1, 0x8, &(0x7f0000000600)={0x1, 0x4}, 0x8, 0x10, &(0x7f0000000b40)={0x4, 0xb, 0x5, 0x3}, 0x10, 0x0, r3, 0x6, &(0x7f0000000cc0)=[r1, r1, r7, r1, r1, 0x1, r1], &(0x7f0000000d00)=[{0x0, 0x3, 0x8, 0x9}, {0x5, 0x5, 0xf, 0x8}, {0x4, 0x3, 0xc, 0xa}, {0x0, 0x5, 0x6, 0x1}, {0x0, 0x2, 0xe, 0x2}, {0x4, 0x3, 0x7}], 0x10, 0x9}, 0x94) epoll_create1(0x0) ppoll(&(0x7f0000000200), 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r8}, 0x10) r9 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r9, &(0x7f0000000040)={0x0, 0xffffffffffffff8a, &(0x7f0000000000)=[{&(0x7f0000000140)="d800000010008104687da3aa7143a0b8c81d080b25000000e8fe55a11800150006001425000000120800030043000040a8002b000a00014006046109d67f6f94007134cf6ee0a000a0e408e8d8ef52a9d7c7c0b7a196e6f66112c88a2ddddbbb219c6c09136dd481c4a918d1bcf0f938baa5d060a517898516277ce06bbace80177ccbec4c2ee5a7cef4260027836b0d17a58af5d6d93424841f468430dfe1d9d322fe7c0aaa16b8ddc64193071e9f8775730d16a4683f785025ccc89e00360db70100000040fad95667e006dcabced7ad654fac9609f4fb", 0xd8}], 0x1}, 0x4004) 16.477135815s ago: executing program 0 (id=2300): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e21, @local}], 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018040000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1, 0x0, 0xfffffffffffffff8}, 0x18) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000240)={0x208, 0x8f, 0x206, 0xfffffffd, 0x3, 0xb37, 0xfffffe2f, 0x8}, 0x20) setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000000)={0x20d, 0x6, 0x807, 0x209b}, 0x8) sendmsg$inet_sctp(r0, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0)=[{0x0}], 0x1, 0x0, 0x0, 0x804c040}, 0x0) 16.434036298s ago: executing program 0 (id=2301): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e21, @local}], 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180400", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1, 0x0, 0xfffffffffffffff8}, 0x18) sendmsg$inet_sctp(r0, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000380)='N', 0x2a000}], 0x1, 0x0, 0x0, 0x804c040}, 0x0) 15.540169161s ago: executing program 0 (id=2315): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1b000000000000000000", @ANYRES32, @ANYBLOB="0000000e439fa523b9f8da00000009000000000000000006000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000001c0)='sched_switch\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000001c0)='block_plug\x00', r2}, 0x18) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0, 0x2}, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r4}, 0x10) mkdir(&(0x7f0000000000)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) r5 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x40082406, &(0x7f00000001c0)='cpu&00\t&&') bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="0a00000001010000fc7f0000cc00000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000fcffffffffffffff00"/28], 0x50) 15.408552381s ago: executing program 0 (id=2318): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="1801000000000000000000006dfeff00850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r0}, 0x10) wait4(0x0, 0x0, 0x1000008, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x4000, &(0x7f0000000c00)={[{@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@nombcache}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x4}}, {@mblk_io_submit}, {@resuid}, {@norecovery}]}, 0x8, 0x445, &(0x7f0000001dc0)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./bus\x00', 0x1c5042, 0x12) sendfile(r2, r1, 0x0, 0x3ffff) sendfile(r2, r1, 0x0, 0x7fffeffd) sendto(0xffffffffffffffff, &(0x7f00000001c0)="4821c5eaf3bb85c04b8c64f61f3d79c75f16db859c703b726946d0b0d24748c80cc4e6544859a4779a615dfe39819a5ca43a6c57c6688008b4f3705a50ca07f29a447bf54ff4c3", 0x47, 0x40, 0x0, 0x0) connect$pppoe(0xffffffffffffffff, &(0x7f0000000080)={0x18, 0x0, {0xfffe, @broadcast, 'geneve0\x00'}}, 0x1e) syz_clone(0x80000, &(0x7f0000000240)="45b58ef4444bd1683e965c36735528a290ca75b974a6b1766b8fcf686ca676d38363411d10f1545ac36128c4c76237eae6270801165282410fc481fe6b4df1e648b15e0b8e95f67ef1ab6a1e19cc6232bb8849130b30b9d28aa4b3ddfc829457d7d5a20649e4e406e7f4e15363d6ddd021c5ec10bab37513813c48a51f0b33a5a0a10a2d9682ada2629ff40f39aa9ef08274508d6280557c4c748efc75b36b1bbec5edd420f3d9c295c06d2154d857eaf947", 0xb2, &(0x7f0000000300), &(0x7f0000000380), &(0x7f00000003c0)="f0fb5b672ab19aed4f6b9599775bb05ddc6a1a0319bc750af81e3a83ea86f3381345b9e81891a1a8c6815b296cae4e87877720f5b9c94ab9f40635fd28c479878ce550194f31dcd62ee2d08e5b7d75ed9265e58c57d200625fd763b47060a9391708109b9f935208b55a515525eda4de36911e1641bf053981de6cc9ca780d2cda2d64540e4d801d2a2d22b58c78278ef3b8a15143cf7dcc4d48c6516b790ca81cf56a69cb051e24e33836d7") 15.17899206s ago: executing program 0 (id=2324): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000093850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffdde, 0x0, 0x0, 0x0}, 0x94) r1 = dup(r0) ioctl$SG_SET_DEBUG(r1, 0x227e, &(0x7f0000000080)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x18) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000dc0)={0x0, 0x3, 0x1000002, 0x0, 0xff, "d4e9002b2c000000ff00"}) r3 = syz_open_pts(r2, 0x0) r4 = dup(r3) ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000000c0)=0x3) dup3(r2, r4, 0x0) r5 = dup3(r3, r2, 0x0) ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000000)=0x13) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r4, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000840), 0x1a01, 0x0) ioctl$EVIOCGPROP(r6, 0x40047438, &(0x7f0000000180)=""/246) pwritev(r6, &(0x7f0000000300)=[{&(0x7f0000000600)="8414", 0x2}, {&(0x7f0000000640)='h', 0x1}, {&(0x7f0000000900)="0db834278411be986e8bd0ae880053c48bcda26f", 0x14}], 0x3, 0xffffffff, 0x4) ioctl$TCFLSH(r2, 0x540b, 0x1) bind$can_j1939(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000680)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f0000000200)={[{@quota}, {@oldalloc}, {@barrier_val={'barrier', 0x3d, 0x20003}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@block_validity}, {@jqfmt_vfsv1}]}, 0x3, 0x43c, &(0x7f0000000d80)="$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") r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) socket(0x10, 0x2, 0x0) fallocate(r7, 0x3, 0x1020003, 0x5) 14.523533933s ago: executing program 0 (id=2329): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1b000000000000000000", @ANYRES32, @ANYBLOB="0000000e439fa523b9f8da00000009000000000000000006000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000001c0)='sched_switch\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000080000000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000001c0)='block_plug\x00', r2}, 0x18) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0, 0x2}, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r4}, 0x10) mkdir(&(0x7f0000000000)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) r5 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x40082406, &(0x7f00000001c0)='cpu&00\t&&') bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="0a00000001010000fc7f0000cc00000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000fcffffffffffffff00"/28], 0x50) 14.523038543s ago: executing program 33 (id=2329): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1b000000000000000000", @ANYRES32, @ANYBLOB="0000000e439fa523b9f8da00000009000000000000000006000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000001c0)='sched_switch\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000080000000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000001c0)='block_plug\x00', r2}, 0x18) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0, 0x2}, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r4}, 0x10) mkdir(&(0x7f0000000000)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) r5 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x40082406, &(0x7f00000001c0)='cpu&00\t&&') bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="0a00000001010000fc7f0000cc00000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000fcffffffffffffff00"/28], 0x50) 3.107697518s ago: executing program 6 (id=2452): r0 = socket(0x1e, 0x4, 0x0) flock(r0, 0x1) r1 = socket$unix(0x1, 0x2, 0x0) bind$unix(r1, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) socket$unix(0x1, 0x2, 0x0) socket$unix(0x1, 0x2, 0x0) setxattr$security_capability(&(0x7f0000000100)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000200), &(0x7f00000003c0)=@v2={0x2000000, [{0xf, 0x1ff}, {0x5, 0x9}]}, 0x14, 0x2) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) getdents64(0xffffffffffffffff, &(0x7f0000000f80)=""/4096, 0x1000) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000010000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007"], 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) mlock(&(0x7f0000c00000/0x400000)=nil, 0x400000) openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$selinux_attr(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000000ec0), &(0x7f0000000180)='./file2\x00', 0x420c, &(0x7f0000003240)=ANY=[], 0x6, 0x379, &(0x7f0000002300)="$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") r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0x105042, 0x40) mmap$IORING_OFF_SQ_RING(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x100000b, 0x2013, r4, 0x0) write$cgroup_subtree(r4, &(0x7f0000000000)=ANY=[], 0x32600) 2.33779786s ago: executing program 2 (id=2456): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000093850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffdde, 0x0, 0x0, 0x0}, 0x94) r1 = dup(r0) ioctl$SG_SET_DEBUG(r1, 0x227e, &(0x7f0000000080)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x18) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000dc0)={0x0, 0x3, 0x1000002, 0x0, 0xff, "d4e9002b2c000000ff00"}) r3 = syz_open_pts(r2, 0x0) r4 = dup(r3) ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000000c0)=0x3) dup3(r2, r4, 0x0) r5 = dup3(r3, r2, 0x0) ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000000)=0x13) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r4, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000840), 0x1a01, 0x0) ioctl$EVIOCGPROP(r6, 0x40047438, &(0x7f0000000180)=""/246) pwritev(r6, &(0x7f0000000300)=[{&(0x7f0000000600)}, {&(0x7f0000000640)='hQ', 0x2}, {&(0x7f0000000900)="0db834278411be986e8bd0ae880053c48bcda26f", 0x14}], 0x3, 0xffffffff, 0x4) ioctl$TCFLSH(r2, 0x540b, 0x1) bind$can_j1939(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000680)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f0000000200)={[{@quota}, {@oldalloc}, {@barrier_val={'barrier', 0x3d, 0x20003}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@block_validity}, {@jqfmt_vfsv1}]}, 0x3, 0x43c, &(0x7f0000000d80)="$eJzs28tvG0UYAPBv10lKX8SU8ugDCBRExCNp0gI9cAGBxAEkJDiUY0jSqtRtUBMkWlW0IFSOqBJ3xBGJv4ATXBBwQuIKd1SpQr20cDJaezdxHNtNgh0X/PtJ287sjjXzeXbsmZ04gIE1lv2TROyKiN8iYrSeXV1grP7frRsXZ/+6cXE2iWr1rT+TWrmbNy7OFkWL1+3MM+NpRPppEgda1Lt4/sLpmUpl/lyen1w68/7k4vkLz546M3Ny/uT82eljx44emXrh+ennuhJn1qab+z9aOLjvtXeuvjF7/Oq7P32TFPE3xdElY50uPlGtdrm6/trdkE6G+tgQNqQUEVl3DdfG/2iUYqXzRuPVT/raOKCnqtVqdWf7y5erwP9YEv1uAdAfxRd9tv4tji2aetwRrr9UXwBlcd/Kj/qVoUjzMsNN69tuGouI45f//jI7ojfPIQAAVvkum/8802r+l8b9DeXuzveGyhFxT0TsiYh7I2JvRNwXUSv7QEQ8uMH6mzdJ1s5/0mubCmydsvnfi/ne1ur5XzH7i3Ipz+2uxT+cnDhVmT+cvyfjMbwty091qOP7V379vN21xvlfdmT1F3PBvB3Xhratfs3czNLMv4m50fWPI/YPtYo/Wd4JSCJiX0Ts32Qdp576+mC7a/X4q5ci2sXfQRf2mapfRTxZ7//L0RR/Iem8Pzl5V1TmD08Wd8VaP/9y5c129d++/3sr6/8dLe//5fjLSeN+7eLG67jy+2dt1zSbvf9Hkrdr6ZH83IczS0vnpiJGktfrjW48P73y2iJflM/iHz/UevzviZV34kBEZDfxQxHxcEQ8krf90Yh4LCIOdYj/x5cff2/z8fdWFv/chvp/JTESzWdaJ0qnf/h2VaXljcSf9f/RWmo8P7Oez7/1tGtzdzMAAAD896QRsSuSdGI5naYTE/W/l98bO9LKwuLS0ycWPjg7V/+NQDmG0+JJ12jD89CpfFlf5Keb8kfy58ZflLbX8hOzC5W5fgcPA25nm/Gf+aPU79YBPef3WjC4jH8YXMY/DC7jHwZXi/G/vVP5cg/bAmytVt//l/rQDmDrNY1/234wQKz/YXAZ/zC4jH8YSIvb4/Y/kpeQWJOI9I5ohkSPEv3+ZAIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOiOfwIAAP//XRHl7Q==") r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) socket(0x10, 0x2, 0x0) fallocate(r7, 0x3, 0x1020003, 0x5) 2.212296731s ago: executing program 2 (id=2459): socket(0x10, 0x3, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff) r2 = gettid() r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000000)={0x9, 0xfffffffe}, 0x10) write(r3, &(0x7f00000006c0)="240000001e005f0214fffffffffffff80700000001000000040000010500080002000000", 0x24) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, 0x0, 0x0) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="05000000040000000800000005"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r8}, 0x10) ioctl$SNDRV_TIMER_IOCTL_CREATE(0xffffffffffffffff, 0xc02054a5, &(0x7f0000000680)={0x6, r7, 'id1\x00'}) sendmsg$key(r9, 0x0, 0x4000010) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r0, &(0x7f00000007c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x2}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4008840}, 0x4000) r10 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r10, 0x89f1, &(0x7f00000004c0)={'ip6tnl0\x00', &(0x7f0000000740)={'syztnl1\x00', 0x0, 0x29, 0x0, 0x3, 0x0, 0x8, @mcast1, @local, 0x7, 0x7, 0x202, 0x8}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r10, 0x89f2, &(0x7f0000000600)={'syztnl1\x00', 0x0}) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x24, r1, 0x1, 0x70bd28, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_PID={0x8, 0x1c, r2}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000040}, 0x4000000) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'}) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYRES64], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x23, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000340)='kfree\x00', r11, 0x0, 0x40}, 0x18) 2.160100305s ago: executing program 6 (id=2460): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000001500)=0x2, 0x4) syz_mount_image$ext4(&(0x7f00000007c0)='ext4\x00', &(0x7f00000006c0)='./file1\x00', 0x40, &(0x7f00000000c0)={[{@user_xattr}, {@nodioread_nolock}]}, 0x1, 0x576, &(0x7f0000000140)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r1, &(0x7f00000005c0)='\"', 0x1, 0x4fed0) sendfile(r1, r1, 0x0, 0xe3aa6ea) renameat2(0xffffffffffffff9c, &(0x7f00000007c0)='./file1\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./file3\x00', 0x4) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) preadv(0xffffffffffffffff, 0x0, 0x0, 0x4309, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB], 0x50) socket(0xa, 0x3, 0x3a) symlinkat(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) umount2(&(0x7f0000000580)='./file0\x00', 0x3) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x800) lstat(&(0x7f0000001d40)='./file0\x00', &(0x7f0000001d80)) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000001c0)='kmem_cache_free\x00', r2, 0x0, 0x7}, 0x18) alarm(0x7f) 1.999799608s ago: executing program 4 (id=2463): r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018040000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1, 0x0, 0xfffffffffffffff8}, 0x18) setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000000)={0x20d, 0x6, 0x807, 0x209b}, 0x8) sendmsg$inet_sctp(r0, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0), 0x0, 0x0, 0x0, 0x804c040}, 0x0) 1.916544614s ago: executing program 4 (id=2465): r0 = syz_open_dev$loop(&(0x7f00000000c0), 0x763, 0x3e383) ioctl$LOOP_SET_STATUS(r0, 0x4c02, 0x0) capset(&(0x7f0000000000)={0x20071026}, &(0x7f0000000280)) r1 = syz_io_uring_setup(0x749e, &(0x7f0000000080)={0x0, 0x0, 0x10100, 0x0, 0x2e7}, &(0x7f0000000100), &(0x7f0000000140)) syz_io_uring_setup(0x1005c20, &(0x7f0000000240)={0x0, 0xa454, 0x4000, 0x2, 0x1eb}, &(0x7f0000000100), 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) syz_usb_disconnect(r2) syz_usb_connect(0x4, 0x24, &(0x7f00000000c0)=ANY=[], 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000e40)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0xfffffffe, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r4}, 0x10) ioctl$EVIOCRMFF(r2, 0x40095505, 0x0) io_uring_enter(r1, 0x2d3e, 0x0, 0x0, 0x0, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x8401) r5 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f00000002c0)={0x8, &(0x7f00000004c0)=[{0x7, 0x3, 0x8, 0xefeb}, {0x80, 0x7, 0x1, 0x20005}, {0x5, 0x0, 0x9, 0x1}, {0x400, 0x7, 0x9, 0x8001}, {0x5d4, 0x3e, 0x1, 0x725}, {0x5, 0x1, 0x3, 0xfff}, {0xb9, 0x80, 0x8, 0x1}, {0x0, 0x9, 0x6d, 0x1}]}, 0x10) close(0xffffffffffffffff) r6 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x19, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000000000000640000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], 0x0, 0x4, 0x0, 0x0, 0x41100, 0x21, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffd0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000380)='netfs_sreq_ref\x00', r7}, 0x18) r8 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r8, &(0x7f0000000200)={0x28, 0x0, 0xffffffff, @my=0x1}, 0x10) connect$vsock_stream(r8, &(0x7f0000000600)={0x28, 0x0, 0x0, @local}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x70, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x7, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100cb3a}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='kmem_cache_free\x00', r9, 0x0, 0x2}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r10 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$KDSETKEYCODE(r10, 0x4b4d, &(0x7f0000000000)={0x7fff, 0xd}) 1.905825256s ago: executing program 6 (id=2466): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000380)=ANY=[@ANYRESDEC=r0], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="18090000002300810000000000000000850000007b00000095"], &(0x7f0000000400)='syzkaller\x00', 0x9, 0x0, 0x0, 0x40f00, 0x6, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x10) r3 = openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1b00e4cb9ea3370b9d4756bc6c000000002300008070a6ffec", @ANYRES32=0xffffffffffffffff, @ANYBLOB='\x00'/10, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r6}, 0x10) add_key$keyring(&(0x7f0000000540), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000900)=@newtaction={0xa0, 0x30, 0xb, 0x5, 0x0, {}, [{0x8c, 0x1, [@m_ct={0x88, 0x1, 0x0, 0x0, {{0x7}, {0x60, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x80000001, 0x0, 0x0, 0x0, 0x400}}, @TCA_CT_ACTION={0x6, 0x3, 0x19}, @TCA_CT_NAT_IPV4_MIN={0x8, 0x9, @private=0xa010102}, @TCA_CT_LABELS={0x14, 0x7, "e142a1dc6b3a3dd0aaeb9317676b63d2"}, @TCA_CT_MARK={0x8, 0x5, 0x9}, @TCA_CT_NAT_PORT_MIN={0x6, 0xd, 0x4e24}, @TCA_CT_NAT_PORT_MAX={0x6, 0xe, 0x4e22}, @TCA_CT_MARK_MASK={0x8, 0x6, 0x8000}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x8890}, 0x40) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x808003, &(0x7f0000000000), 0x3, 0x4ed, &(0x7f00000005c0)="$eJzs3d9rW28ZAPDnpM1st8526sUcuBVRtqFL2tVtxYttgujVQJ33XW3TUpo2pUm3tQzp8FoEERW90StvBP8AQfYniDDQ+yGiDNnmhRdq5CQnW79d0nYsafZtPx94+77nR87zvAk5yXvOaU4Ax9Z4RNyOiIGIuBwRo9n8XFZiu1nS9V6+eDSXliTq9bv/TCLJ5rW2lWT1qexhQxHxnW9GfC9JmjN2qG5uLc+Wy6X1bLpYW1krVje3riytzC6WFkurU1OT16dvTF+bnuhaX29+/W8//dFvvnHzD19+8GzmH5e+n+Y7ki3b2Y9uaj4n+cZz0TIYEeu9CNYHA1l/8gdZOel9PgAA7C39jv+piPh8RLz6Rb+zAQAAAHqhfmsk/pNE1AEAAIAjK9e4BjbJFbJrAUYilysUmtfwfiZuRblSrX1pobKxOt+8VnYs8rmFpXJpIrtWeCzySTo92Wi/mb66a3oqIs5ExE9GhxvThblKeb7fBz8AAADgmEjH+SO5Zjut/jXaHP8DAAAAR8xYvxMAAAAAes74HwAAAI6+t8f/480qGTz8ZAAAAIBu+9adO2mpt+5/PX9/c2O5cv/KfKm6XFjZmCvMVdbXCouVymLjN/tW9tteuVJZ+0qsbjws1krVWrG6uTWzUtlYrc007us9UzrQfaIBAACArjpz4clfkojY/upwo6ROZMuM1eFoy73b6kmv8gAO30C/EwD6xgW+cHwZ4wP7DeyHDikPAACgdy5+9vX5/+HYcf7/9DPHBuCoe8fz/8AR4vw/HF+7zv//ql95AIfPGB/Y7zhAx/P/f+x+LgAAQG+MNEqSK2RjgJHI5QqFiNON2wLkk4WlcmkiIj4ZEX8ezX8inZ7sd9IAAAAAAAAAAAAAAAAAAAAAAAAA8DFTrydRBwAAAI60iNzfk4hIYihi9Asju48PnEj+PdqoI+LBL+/+7OFsLSLupbNez6/9vDG/tn61DwcwAAAAgLe0xumN2o38AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOiyly8ezbXKYcZ9/rWIGGsXfzCGGvVQ5CPi5KskBnc8LomIgS7E334cEWfbxU/StGIsy2J3/FxEDPc5/qkuxIfj7Em6/7nd7v2Xi/FG3f79N5iV9/V8vNP+L/d6/zfQYf93ep9tn8jqc09/V+wY/3HEucH2+59W/OQ997/3vru11WlZ/dcRF9t+/iQfiVWsrawVq5tbV5ZWZhdLi6XVqanJ69M3pq9NTxQXlsql7G/bGD/+3O//t1f/T3aIP9ap/0kzp3q9/TYv7Jr+79OHLz7dbsUk4vkPs3ab1/9sp/jZc//F7HMgXX6x1d5utnc6/9s/nd+r//Md+r/f63+p00Z3ufztH/y12cof8BEAQC9VN7eWZ8vl0vpBG+mg98ArH2Ij7cwHkEYXG+MfRhoax7PR7z0TAADQbW++9Pc7EwAAAAAAAAAAAAAAAAAAADi+Wv//3/ot5178nNjOeEOtRpIcel8BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPby/wAAAP//nXrOGw==") mount(0x0, &(0x7f0000000d80)='.\x00', 0x0, 0x2200020, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x101c01, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000001500000000000000000000000200000000000000000008"], 0x1c}, 0x1, 0x0, 0x0, 0x20040091}, 0x800) r7 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r7, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) setsockopt$inet_msfilter(r7, 0x0, 0x29, &(0x7f0000000f80)=ANY=[@ANYRES32=r3, @ANYBLOB="e00000027f0000010000000003", @ANYRES16=r1, @ANYRESDEC=r4, @ANYRESDEC=r5, @ANYBLOB="7a224df487eab9deace5284c6b1e9c9eba9c8f63bf560d5f361e3dd2addb9f3f270fee1671fb26aa6b215fdc0c90406270a62965c44212e78a471e127c2e91780fa8d63cacd13ff5501dcf49081de016814771f3b344f78bbd0b664501d2955852abe6a000b3212321e95d799e92ef948ea92292ba78d4ff95528aabe99feb2e058507a4ffcda0dd85036107961dc34d74483b9ceddb156b0e167e4271a42fc8351b5baa651f2a06dbcef3410d671f3475df707233007d0fc926e0540944a203f20aaa891f386d5a418e3f29f918a071ef04a1be5bc4fba7b597026600c5f2b3dd502a5fc6011426c6aa20ee04395d853943743f5f1b468eb8926b3aa67574fd8aeea21746ff47e3597436296be10068f143dc93553bcb6b3449d6fcd7cf218936635177c3e08d20dd11ae2780ca5b767256020d5ef44efb157af2f33e5693e42882f07dbd4d18c0da568c350106df142f96d1690a3511e06cd91696ffb1856361dc00a4e551cc7e857dd360059ec4a563589596ef6d0a102dc7696d48ffdde74e2c32713adb202a73630d7b274e995cfff652e78923feb1d578d07831ce561e066264a30facd92f3f9c18c64fbfd252cc64a91af1eee9515a5157b29bc37cf5aa39f5a760a468a72cc82967197350f8a2f8128ec498d1fccc8293c0e8b5a705d7a89e39d1079d14f6bbb274562f7e6e66450277f735494badf8ddfb5c2dc993f547ec441cd5c7ce744e65e12c357637a816bc7104bde5abf4c30209d42e82e37e0983839ebb15bcd2aa0da0df5ae1538f1e755bd195fde164de662c3a85a8f5dbecef187a408d4474a92a6c6d781aa0f25af3d163c9d51660f9dbfd08470759377c8a5953c314bdc5952681b49c4f3f00f13fc0faf3b0029cc350803ba5deebb5516e0792151775318da375fe88624d8d7792f7b34cc2ab72917689a9b8c6a905d632feb8c8194ecea5c2d99512e5d766785617e70737973aa5e11998e41725feb204a9ce12110b3bb8cbf6448a580a9ecccbaf1f35a4fdf9b673120704a2557ea99c115c657657ff2e8a29deab021b4d13458c15e773ab2b75fd231986f7b489c2f06796223b2419a13aeb637c613f7266ba1f4599e590f555a26e26ce38684252a0dbaa7217273a33edfc22759f71e720c7de489962cb53d5110e65d20ebea4ba7e3b5ce5bbc38b85cd6b65970be139502b4f34c1cf45d7dfe4d0e2e275a48e957239d1abac2e8a972346df08b0f99c1410e0951f2f48079c92fd51d62586a3516802a088148e144bead04b961b5041b85ecdfbe0112df02380e2cb926c8ad07df54f44cc0d9d01fec7789088cdf53fd63f3c34c9a98628e43bc28a1a7646b3671c3b69b485bc150e06e7b85c8a7b7d9349f316d8223fd2a42613f62271a636d13d068a405f176106319b61a161a24cd09126355a164bd0d0a7bcf834ca097eb1b65538ef16b347433b4ce3ecd9c31832dde155807496757153d6aedf710c78670d1ac4ad4011591ebdbce276c7db6154e165737b6fe4aacdf4d5b1c97a7619865999e6e5ae59860649673de4407504a7317571a63069bc69812a982f2b002926954825fb9044943cc0100659191dbb4a0777f6b657a1f28da1f77462ec2e021f97ae9baadb02f2143c72583329b4a418ad39989e69786d7b772556f38cf73c31d1d90e882585d61a90ee5be5325fe4c44e58191ae26d96dcfccfbf98e10472ca2f930048876f1c4e65f05ed95a7738f327162f19b7227f658e418d96483fccec9bdb092e4e53cc761a249b5870fe1dc9c8f1524cebd2a9d790db54274a66787fcf4aee4fa9e4f092a93ccedd0b3181d4c99e5c6f865159295dd331fb11d7761ddcabf3678bb04f4168986106e90fd944172d5068ab3ac8cd31c4c084cc4585fe663dcaead26e1234f6d281b4e5c7895f126e805990d9ce842a63ed3598ca37f50ec898adcb4a0af755e4a6fa6e9d67e345dae10a8c859937abe6df3fc15b705b25b1ea0edd91d4df89c36d14d3d34ec9fedf48fe762fd70323a24466f1ce6e22540a1e5362f5fe3ae6ddbc61d4c6486880059addcefc64bbeb72d0d18ac1f457fd2004c6486d05b923dcd86f917e1882abc4b330908e0baf4cb7c68360fdc8a0f6c89f43a8cc6e6a36dad8a8e68af82bb996bb1a5b3e774d59e5b608e2407c13180dbd60eaecd071502063211d8a3cb8bc031498d6d2c82c5433574524bf989e0f3252e22b9b5f5f111530bb768f6bbf11f38416a65d5475545ebbd2ad20e0174aa16db0800c41f96992662227181516249b97e035a33fb9f1ef074cbd637940b44a5d960dd81d09d10d4fc7f9b1fd15d664490d4441bc5ecd04c41706e70574fe0988221be6a456f38d5da61a23b051c1992d59f2875ec9b53b8ce78aed5aa862e5c5f657fd36216b618685dcf675a098c6b04fbd1f5f7f657e0de862feecddb0a6002a22623825cbf1cbeaee450bfbcef4d65b673afaa6b1973ec49e939eb031466f8f3283a34821a4eaf038041676d98f6708bc1547e58f8dcd65a023bbc905c81fe1a03258073bb4cbe867c705cb6b3127a0cd80c9cd410fb945258f546c4cbc4c9b07f2212e1cb20db1bc5cb3bfb53f4c0a04aa01eea19eac78fb437b069a1b21d26a73d36e99efb62bd1cae9a9089dee58822ae4d1d4bdbab1889f97e46013eb41c42635e8f6bfcc127d3f3742de11bae4e866027add0208619e6fced9c0caccd4bd938224f72e0bad27df2b1ca14e72335de4b3d51bb41229eba021168e8b8300c805bc559c37ef72af144c6d17e23e56d02681608459961f5013ec846930747b9ac816b4630b797b85c9e131b892b08cb0bb99e40cab318d465fa131adb902b3ec3c1983691eac1298ec5c9c907945e5be0987c6eb660adcbea7266b80f8e3c9feba502dc34ceea22be98c3cce9fa6edde05ee43790c8556aa5c1e02eb6ff76f0dd339ecaa197f4ac43e11ff31ffecdc2a13a26de5e3366dae84fcaa885482f4d6721537c87a479203f36f359d56367d11e1c02c5450f7986c4ede02b6c6fdd845539b34f238ded73bc55854e874abc1148d52891c4e05f0d215de477431f3e57f47c513900dbe7ff00a2ee0cd45e172321109d682b201b8ce07f776be0ffef2409edd1c6882d6394201b645b2266cb9a307bfad44a383add5285401b875794b2eed2f526dd4208fd04d28c3e9b23db8bc5627e3b828227f628b3de03b40b5cc7254128d7169514bb0f6b162cbdb12f53b4b05cfbff60536fff295bf81556f9de2f42af22772ece7d23448be313048a0e85d39b5acd03450a017c63ce3cecac850172ab93545f7749cb558edf6c2cb5faa0779ea84e8dd1ddd62ee4346a18f1f60cd5cc311cfd36f72c5fbd639ef5d3f091d58a4c495dfe7b6bebd74fdbc38d6b069e9fce120395f6071194a33dd67cb580f20dc43ab7e04669032a5103410b3b435bb6f3c2affc14d86d59386c13bf790813567b13c86bac36b11c9fbef174be60680a3c639ddd383b7b1ff13ad67801d2470b2da22335fd9dae517599d6830dfd9f0b66d11b600ec0d6a3212725962b231680c557636bffe9f27e98db587fa4c3f7a1e11c3d5495f8ea8df2eae7412b0262a2d4184933cecd20d3fee4edbdafaf7a0a106ae68b44a4c60aca2c0ab40c36455af4cbe913cfabfb8b1efa6ace268fe119dc0254cba1a82497fcf935b7a83eafb376466d23dd33de706a6f976b79bc48be30830fb760a3aff7fbc8b874e28e79447291cab921698307bcf1cb85bf9594b1bf0b3380ad042fb8b13a3aa16db9fad62086777e3bb7e7305ba2b4d749e92fccaf6c3f54242788f63a5fd113ac656a3a0527398ae464a305de809b5116aa5b8fde1f8cf89ae32a1ae20316d292ca633d5f3bdd24a2161b967c61185add4b85863ebb8f96e24322ece8c045e7cbd32620d0472028815ca55df630558d9a97744f81a14f626c92d80f42e6e28b90c5515fdd1137ba451560467ee2da1b4b18e4392af18bdd53ea218bf665a087fe2baa4e544895b3edd9e4e18211c0cda2df3b7c3846d4e62892382a1642d5f69388fe2cac5e3a5af45586285c08560cece96776ca0b6b2833485a0b2e1b8eeb102a1934bda0e67fa689ff980d52c29694253dabcb915037ec65f5762ac17bda1b9330ff8ec2404d922977fde5ade6cfa2d0658e2a8ffdb1399136c6ac7858bf77c187d80b3d4e0d3a431bbd604341c71082219b46f26e20a7341206a4c4549bf2fc34a7d93c1e085486ba69e6b58081d9215a314f62c1d32bb3babed452ddcdebdf4959c0e69bc60fe56d73f029cb713b279a19f3804334f0fea5edba09ffde95adfdff535a0cfb992daf67be346ba0ec08df8db36afe6fe5b0256181456aebed822401db5e37797af24ba715cce8be858d27011f7fa8a484c47d1608a7a7ebe0b95ff0d39ba2c4d02b10d1056eb28aba8b3aef48e9b2c053dee379133349810f5f9c3b9f033f39e5541c58e01bd93e9a9a3429af942c3b247c84b9c41816cecce9802267a4a52fe3d7e10470859f925a0cad1cf1e38de1e5b6b174e72b658efe4283dbd487a3daf50801912633d3c26bb08fb86b1ae4aea0da3b178628b8245599c6943d11bb8f9a3a3bdf08605a143197bdf3a31cccbb1c744f7ba42156ee3bc4078ac7b6d10d8b02f40651992a17b70b9bf8c5f04abffd98eba7d3d13d77e695519f412d0b279993f4846e556b1688f13ddc1ee042a7dec338916ad506fe6b5f362ec9909f9076015691c299904827731852bd6af519bc9def24676bb4b481abbe07583f983a013a1273566e2542836508e1a2130e0f57a82a63c7f7fa53401beb17f0709407e5c425526bfd5e9499f388c73d1ae0931416d002be8093c75a34e8987245581a05196e16db84e5c9adf855b8793c9addc22bf20757467c231b5829597b2c3e72476bef0d7d3d28427855c95de74fbfe7134f133fbcb52ef3fc74f53d59419a9b389072486a48bf5c59833592359d5997e58fb05690743a65a762873cb5f35a5ed4847235198ae109bea152220ac5780a9ec1d9907eaa4891e93ee3a73603fd850319564beb15a85dfa0830a891af5db26bbbaaa948c2e15e12bd9907082ce8a72e992d1f46fb56e02fc58085819b63bb5420b02ae490677c1770dce9495930f50f1a11df4e32ecefdc2bc5a1879b749928b717dc8d464ccae071645c3bbf0ea72d071fd8982398e65c1fa9ae82fed089b80b25a697d6d94c26be05641564846b855fbde5dfa73f19548145f8082ae9ecde822f76be8370d6730df929541c016af8d2fd077619c136be563762333dfc92512ae50240c6be3792049158612679953b3f97f34b85e3b98e20ae94d1857cbf17cd5a466071177c45d9b5ad46dabd4d7fd69420ec20069472548f792033e54015960959507f09ef5c328d36b9be906d12a062ffd4527ca45268f74eb22ab2ae5f3e20ec64a349fde7c0ac7dba5d2ee7fca78aa31992d722e5c0a13c13c4d7f52b7e04d140add992b42750483c5298fece482711b41eb82e87a37992d994092e9dfab1e5b08baac3752dbb06de82c31e3d2d3b8621e86cc5bc1e4d734c8e56ed6a65988abdaf220435824e634f129f469b0eacf840281f00bf3f10c2cf0a8e30f974742551845bc0c502889e37a064eb26e0f585d4e3c5f44b8bef9b4c522b59131336b4ff606d0142a96e37d2d735d256868d50ffaf6b582b2acbde7341b98dbc1b425683ef5d3dee66b920da39af81c875d425cb463ab5749b822ee9d1b87f6971ddfb67585321ec9badfaa55eb62cabf4a"], 0x1c) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0700000004000000800000000400000028000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYBLOB], 0x50) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r9}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41002, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r10}, 0x18) socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r11 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r11, 0x0, 0x2a, &(0x7f00000008c0)={0x1, {{0x2, 0x0, @private=0xa010100}}}, 0x88) writev(r8, &(0x7f00000003c0)=[{&(0x7f0000000280)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) 1.711932631s ago: executing program 6 (id=2468): r0 = socket(0x1e, 0x4, 0x0) flock(r0, 0x1) r1 = socket$unix(0x1, 0x2, 0x0) bind$unix(r1, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) socket$unix(0x1, 0x2, 0x0) socket$unix(0x1, 0x2, 0x0) setxattr$security_capability(&(0x7f0000000100)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000200), &(0x7f00000003c0)=@v2={0x2000000, [{0xf, 0x1ff}, {0x5, 0x9}]}, 0x14, 0x2) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) socket$vsock_stream(0x28, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[], 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x4, 0x7ffc1ffb}]}) bpf$MAP_CREATE(0x0, 0x0, 0x50) getdents64(0xffffffffffffffff, &(0x7f0000000f80)=""/4096, 0x1000) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007"], 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) mlock(&(0x7f0000c00000/0x400000)=nil, 0x400000) openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$selinux_attr(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=ANY=[@ANYBLOB="0a000045090f2a00080000000200000000001000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) syz_mount_image$vfat(&(0x7f0000000ec0), &(0x7f0000000180)='./file2\x00', 0x420c, &(0x7f0000003240)=ANY=[], 0x6, 0x379, &(0x7f0000002300)="$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") r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0x105042, 0x40) mmap$IORING_OFF_SQ_RING(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x100000b, 0x2013, r4, 0x0) write$cgroup_subtree(r4, &(0x7f0000000000)=ANY=[], 0x32600) 1.399641357s ago: executing program 3 (id=2469): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000093850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffdde, 0x0, 0x0, 0x0}, 0x94) r1 = dup(r0) ioctl$SG_SET_DEBUG(r1, 0x227e, &(0x7f0000000080)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x18) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000dc0)={0x0, 0x3, 0x1000002, 0x0, 0xff, "d4e9002b2c000000ff00"}) r3 = syz_open_pts(r2, 0x0) r4 = dup(r3) ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000000c0)=0x3) dup3(r2, r4, 0x0) r5 = dup3(r3, r2, 0x0) ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000000)=0x13) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r4, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000840), 0x1a01, 0x0) ioctl$EVIOCGPROP(r6, 0x40047438, &(0x7f0000000180)=""/246) pwritev(r6, &(0x7f0000000300)=[{&(0x7f0000000600)="84", 0x1}, {&(0x7f0000000640)='hQ', 0x2}, {&(0x7f0000000900)="0db834278411be986e8bd0ae880053c48bcda26f", 0x14}], 0x3, 0xffffffff, 0x4) ioctl$TCFLSH(r2, 0x540b, 0x1) bind$can_j1939(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000680)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f0000000200)={[{@quota}, {@oldalloc}, {@barrier_val={'barrier', 0x3d, 0x20003}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@block_validity}, {@jqfmt_vfsv1}]}, 0x3, 0x43c, &(0x7f0000000d80)="$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") r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) socket(0x10, 0x2, 0x0) fallocate(r7, 0x3, 0x1020003, 0x5) 1.370919719s ago: executing program 5 (id=2470): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000012c0)={&(0x7f0000000040)='kfree\x00'}, 0x10) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)=ANY=[@ANYBLOB="3c000000860ad7a668"], 0x3c}, 0x1, 0x0, 0x0, 0x4844}, 0x4008815) r0 = socket(0x10, 0x803, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) 1.276311497s ago: executing program 3 (id=2471): r0 = socket(0x1e, 0x4, 0x0) flock(r0, 0x1) r1 = socket$unix(0x1, 0x2, 0x0) bind$unix(r1, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) socket$unix(0x1, 0x2, 0x0) socket$unix(0x1, 0x2, 0x0) setxattr$security_capability(&(0x7f0000000100)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000200), &(0x7f00000003c0)=@v2={0x2000000, [{0xf, 0x1ff}, {0x5, 0x9}]}, 0x14, 0x2) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) getdents64(0xffffffffffffffff, &(0x7f0000000f80)=""/4096, 0x1000) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000010000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007"], 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) mlock(&(0x7f0000c00000/0x400000)=nil, 0x400000) openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$selinux_attr(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000000ec0), &(0x7f0000000180)='./file2\x00', 0x420c, &(0x7f0000003240)=ANY=[], 0x6, 0x379, &(0x7f0000002300)="$eJzs3c9rI2UYwPEnaTKbZNkmB1lRkL64F70MTfQsBtkFIeDS3Yi7gjC7nWjImJRMqEbEtiev4t2T4GHpzYKHgvYfyMWL6EWE3noRPFhBHZlfyWSStGlMG22/H1hm9n3fZ+Z9M2/K86aZztFbn73fqNl6zehIMqMkISJyLFKQpIQSwTbp7WsStS0vXv/tx+fuPahm/AJ1p3z/pZJSannl2w8+zgbN9q9Jr/DO0a+lw97N3jNHf99/r26ruq2arY4y1KPWzx3jkWWq9brd0JW6a5mGbap60zbbfv3XwXGs1sZGVxnN9Ru5jbZp28podlXD7KpOS3XaXWW8a9SbStd1dSMnV9sPU7SpPllbM8oznuDxjHG4YO122VgSkexITfXJQjoEAAAWKp7/J92Ufpb8/6EsVyq315TbeJD/7z5/0Ln+5t5ykP/va4e9m8V4/v/yT/6xhvJ/dzkxyP9b/vqgdnr+/4WcIf8fzYiulpnz/8I5dAazWdFGihJDGzf/zwXvX8/O27ur3g75PwAAAAAAAAAAAAAAAAAAAAAA/wfHjpN3HCcfbsN//Zt+JPg/LqVJ1/+aiGTcq+9w/S+zew8eSsa7cc+9xtanm9XNqr8NGhyIiCXmX06cOzfCO4+UqyDfWVtB/NZmdcmrKdek7sZLUfJS8OaT4ziZIN5x7rxeuV1UviC+f5tSLhpfkrw8Fca7vvFmpxtfGo4Pzq/JC7ci8brk5fvH0hJL1r3Iwfk/KSr12huVWHzWayciv8RessSFXBgAAAAAAOZIV31j1++6PqneXwiXa97HRKasSl7+jK7PB+vr1bHr81T+2dSiRw8AAAAAwNVgdz9qGJI0296OZY3bycrEqjnspIZK0iIytrEWK0mfdOSlyAin7Y8m/hNM/u24vgxf1bNEhV+kcDverwqeqCKz9Sccv1eSSPWr/jjruBLb4k2A7WhVUqYIT8U7v+IWqLGNb008zo43DG0wnPBjI23C6yx3R4+TPGEmpEdKnMRsE+Dpz7/6fX5vkFf2ghnw4emNdyzT2RIJ37DTT2P3FKNV6XP+sQMAAABgAQZJf1jyarQ6+l336MNy+M09AAAAAAAAAAAAAAAAAAAAAAAAAAAAAABzdC5/0i+2s+gxAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAP8V/wQAAP//wjLvAQ==") r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0x105042, 0x40) mmap$IORING_OFF_SQ_RING(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x100000b, 0x2013, r4, 0x0) write$cgroup_subtree(r4, &(0x7f0000000000)=ANY=[], 0x32600) 1.275752137s ago: executing program 2 (id=2472): r0 = syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x4000, &(0x7f0000000c00)={[{@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@nombcache}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x4}}, {@mblk_io_submit}, {@resuid}, {@norecovery}]}, 0x8, 0x445, &(0x7f0000001dc0)="$eJzs28tvG0UYAPBv105KX8RU5dEHECiIikfSpKX0wAEQSBxAQoJDOYYkrUrdBjVBolUFBaFyRJW4I45I/AWc4IKAExJX4IwqVSiXFk5Ga+82jmunSbDrEP9+0tYzu+POfJ4de3YnG8DAGs3+SSJ2RMRvETHSyC4vMNp4ubF4cfrvxYvTSdRqb/6V1MtdX7w4XRQt3re9yJQj0k+T2Nem3vnzF05PVauz5/L8+MKZ98bnz1945tSZqZOzJ2fPTh47duTwxHNHJ5/tSpxZXNf3fji3f8+rb195ffr4lXd++iYp4m+Jo0tG2+4tN14er9W6XF1/7WxKJ+U+NoQ1KeWn5FB9/I9EKZY6byRe+aSvjQN6qlar1e7rfPhSDdjEkuh3C4D+KH7os+vfYrtDU48N4dqLjQugLO4b+dY4Uo40LzPUcn3bTaMRcfzSP19mW7Teh9jao0oBgIH2XTb/ebrd/C+N5vtCd+drKJWIuCcidkXE0YjYHRH3RtTL3h8RD6yx/tZFklvnn+nVdQW2Stn87/l8bWv5/K+Y/UWllOd21uMfSk6cqs4eyj+TgzG0JctPrFDH9y//+nmnY83zv2zL6i/mgnk7rpa3LH/PzNTC1H+Judm1jyP2ltvFn9xcCUgiYk9EvLDOOk49+fX+Tsc6xD+8qv+4C+tMta8inmj0/6Voib+QrLw+OX5XVGcPjRdnxa1+/uXyG53qv33/91bW/9vanv9F/H9Ukub12vm113H59886XlOu9/wfTt5atu+DqYWFcxMRw8lr9Xylef9kS7nJpfJZ/AcPtB//u2Lpk9gXEdlJ/GBEPBQRD+dtfyQiHo2IAyvE/+NLj727/vh7K4t/ZsX+j5b+X0oMR+ue9onS6R++XVZpZS3xZ/1/pJ46mO9Zzfffatq1vrMZAAAA/n/SiNgRSTp2M52mY2ONv+HfHdvS6tz8wlMn5t4/O9N4RqASQ2lxp2uk6X7oRH5ZX+QnW/KH8/vGX5S21vNj03PVmX4HDwNue4fxn/mz1O/WAT3neS0YXMY/DC7jHwaX8Q+Dq8349+gZDIh2v/8f9aEdwJ3XMv5XXPYzMYDNxfU/DC7jHwaX8Q8DaX5r3P4h+c2RSCNiAzRjsyQi3RDNkOhRot/fTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAN3xbwAAAP//ynflmQ==") r1 = openat(0xffffffffffffff9c, 0x0, 0x40, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./bus\x00', 0x1c5042, 0x12) write(r2, &(0x7f00000009c0)="3bf58d7d45d32c", 0x7) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x48) recvmmsg(0xffffffffffffffff, &(0x7f0000005cc0)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000000c0)=""/71, 0x47}], 0x1}, 0x200}], 0x1, 0x102, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0xf, 0xb, &(0x7f00000005c0)=ANY=[@ANYRESDEC], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x94) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f0000000ac0)=ANY=[@ANYBLOB="060000000000000006000000000000000400000000000000", @ANYRES32=r3, @ANYBLOB="000000000100008000"/28, @ANYRES32, @ANYBLOB='\x00\x00\x00\x001\a\x00'/28, @ANYRES32, @ANYBLOB="00000000770000000000000000000000000000000000000000000020eb245fc955f6c15daecbe716b5d3af01f00c6366c487323d86a6d9e708ed483688b0dcb7f121d60aac9f6827afb160442f0ab8bc80d7a783be3d30d065f07b0355ae7d7b05fd", @ANYRES32, @ANYBLOB='\x00'/28]) waitid$P_PIDFD(0x3, r1, &(0x7f0000000840), 0x1, &(0x7f0000000500)) 1.187858494s ago: executing program 5 (id=2473): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x143a82, 0x2) r1 = dup(r0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x18, 0x5, &(0x7f0000000080)=ANY=[@ANYBLOB], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r2}, 0x10) write$binfmt_script(r1, &(0x7f0000000380)={'#! ', './file0'}, 0xb) 1.147262957s ago: executing program 4 (id=2474): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000095"], &(0x7f0000000280)='syzkaller\x00'}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0a00000007000000060000008c00000000000000", @ANYRES32, @ANYBLOB="008ce0cdc74e5613f180bd910c9523e9358f539414e1f26d1111373a00"/38, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000580)=ANY=[@ANYRESDEC=r1, @ANYRES32=0x0, @ANYRESDEC=r0, @ANYRES8=r0, @ANYRESDEC=r1, @ANYRESOCT, @ANYRESDEC, @ANYRES32, @ANYRES16], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) pipe(&(0x7f00000000c0)) fcntl$setpipe(0xffffffffffffffff, 0x407, 0xffffffff7ffffffc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000380)=ANY=[@ANYRES8=r2], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000600)='sched_switch\x00', r2}, 0xffffffffffffff6a) r3 = socket$packet(0x11, 0x2, 0x300) r4 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r4, 0x1, 0x3c, &(0x7f0000000340)={0x1, 0x4}, 0x8) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x41, &(0x7f00000003c0)=0x491b, 0x4) sendmmsg$inet6(r4, &(0x7f00000002c0)=[{{&(0x7f0000000000)={0xa, 0x4e21, 0x0, @mcast2}, 0x1c, 0x0}}], 0x1, 0x4004000) setsockopt$packet_tx_ring(r3, 0x107, 0xd, &(0x7f0000000000)=@req3={0x410000, 0x100000001, 0x210000, 0x1, 0xa, 0x0, 0xffffffff}, 0x1c) close(r3) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x19, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000fdff00000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0xe, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0x24, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x4040, 0x10000, 0x8, 0x6, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) getpid() ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(0xffffffffffffffff, 0xc08c5335, &(0x7f00000001c0)={0x0, 0x80, 0x0, 'queue0\x00'}) socket$inet6_tcp(0xa, 0x1, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4801}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000000)={'syzkaller0\x00', @broadcast}) write$cgroup_devices(r5, &(0x7f0000000200)=ANY=[@ANYBLOB="1b23000d"], 0xffdd) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) 1.125522989s ago: executing program 2 (id=2475): r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018040000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1, 0x0, 0xfffffffffffffff8}, 0x18) setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000000)={0x20d, 0x6, 0x807, 0x209b}, 0x8) sendmsg$inet_sctp(r0, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0), 0x0, 0x0, 0x0, 0x804c040}, 0x0) 1.080134493s ago: executing program 5 (id=2476): syz_read_part_table(0x104a, &(0x7f0000001080)="$eJzsz7EJAjEAheEXPc8DLc7ddB4zjwPYOooT2DmAmKCVrYjwfU0C7yeQ8GPXpCSL5Lb7uA/JOsk9m1atpoyv6X3JlCwv29T0OP0sNTk+szLPGXJOzZh9aXl7+XD69u8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4B88AgAA//8oswgx") r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000000000850000008600000095dc79733baa58985400000000000000d5b30500c2d40e3ebf55605548f4b1f7479d5e4f25e6d4b3c3d9431f6076ea8c272db023bff289adcd0c59c700b062cffa9979cdfabbe1eb"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000ff0f000007"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f00000007c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000500)={{r2}, &(0x7f0000000400), &(0x7f00000004c0)=r3}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r3}, 0x10) getpriority(0x0, 0x0) msync(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x6) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r4 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x34120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4000, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r5}, &(0x7f0000000180), &(0x7f00000001c0)=r4}, 0x20) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = socket$netlink(0x10, 0x3, 0x0) syz_mount_image$iso9660(&(0x7f0000002900), &(0x7f0000000000)='./file0\x00', 0x2, &(0x7f00000002c0)=ANY=[], 0x1, 0x5b1, &(0x7f0000001000)="$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") seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x0, &(0x7f0000000100)}) sendmsg$netlink(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001d40)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="2c00000010008100000000000080000000000000", @ANYRES32=0x0, @ANYBLOB="0a043cbf", @ANYRES32, @ANYBLOB="0a001b"], 0x2c}], 0x1}, 0x0) preadv2(0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffffffde, 0x9) r8 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r8, 0x0, 0xc8, 0x0, 0x0) setsockopt$MRT_ADD_VIF(r8, 0x0, 0xca, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0}, 0x18) stat(0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r6}, 0x10) 979.601061ms ago: executing program 2 (id=2477): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000001500)=0x2, 0x4) syz_mount_image$ext4(&(0x7f00000007c0)='ext4\x00', &(0x7f00000006c0)='./file1\x00', 0x40, &(0x7f00000000c0)={[{@user_xattr}, {@nodioread_nolock}]}, 0x1, 0x576, &(0x7f0000000140)="$eJzs3T1sG2UfAPD/neO3X3nf9JXeVwLUoQKkIlV1kn5AYWpXRKVKHZBYIHLcqIoTV7EDTZQh3StEBwSoS9lgYAQxMCAWRlYWEDNSRSOQmg5g5K80TZzglDouud9POvuee87+P8+d/499pzs5gMw62nhII56OiItJxMi6uqFoVx5trbe6slS8v7JUTKJev/RLEklE3FtZKnbWT9rPhyJiOSKeiohv8hHH081xqwuL0xPlcmmuXR6tzVwdrS4snrgyMzFVmirNnnrp5TNnT58ZPzm+/mX36+tL+Z319caPN9+98d2rt29++tmR5eL7E0mci+F23fp+PE6tbZKPcxuWn+5HsAFKBt0AHkmuneeNVPp/jESunfXd1Ed2tWlAn9X3RdSBjErkP2RU53dA4/i3M+3m748751sHII24q+2pVTPUOjcR+5vHJgd/TR46Mmkcbx7ezYayJy1fj4ixoaHNn/+k/fl7dGOPo4H01dfnWztq8/5P18af6DL+DHfOnf5NnfFvddP49yB+bovx72KPMX5/46ePtox/PeKZrvGTtfhJl/hpRLzVY/xbr395dqu6+scRx6J7/I5k+/PDo5evlEtjrceuMb46duSV7fp/cIv4rXO2+5tfM922f5fT2l198e3nzy5vE/+F57bf/922/4GIeK/H+P+998lrW9XduZ7cbfwK2On+TyIft3uM/+K5oz/0uCoAAAAAAAAAALADafNatiQtrM2naaHQuof3f3EwLVeqteOXK/Ozk61r3g5HPu1caTXSKieN8nj7etxO+eSG8qlcO2DuQLNcKFbKkwPuOwAAAAAAAAAAAAAAAAAAADwpDm24//+3XPP+/41/Vw3sVVv/5Tew18l/yK6H8z8ZWDuA3ef7HzKrLv8hu+Q/ZJf8h+yS/5Bd8h+yS/5Ddsl/AAAAAAAAAAAAAAAAAAAAAAAAAADoi4sXLjSm+v2VpWKjPDm0MD9defvEZKk6XZiZLxaKlbmrhalKZapcKhQrM3/1fkmlcnUsZuevjdZK1dpodWHxzZnK/GznP0VL+b73CAAAAAAAAAAAAAAAAAAAAP55hptTkhYiIm3Op2mhEPHviDicRHL5Srk0FhH/iYjvc/l9jfL4oBsNAAAAAAAAAAAAAAAAAAAAe0x1YXF6olwuzWVkZmgnK0fE8uNtRuMdd/yqfHtfPSnb0EwWZgY8MAEAAAAAAAAAAAAAAAAAQAY9uOm311f80d8GAQAAAAAAAAAAAAAAAAAAQCalPycR0ZiOjTw/vLH2X8lqrvkcEe/cuvTBtYlabW68sfzu2vLah+3lJwfRfqBXnTzt5DEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwQHVhcXqiXC7N9XFm0H0EAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeBR/BgAA///eANcP") r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r1, &(0x7f00000005c0)='\"', 0x1, 0x4fed0) sendfile(r1, r1, 0x0, 0xe3aa6ea) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r2, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r2, 0x6611) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) preadv(0xffffffffffffffff, 0x0, 0x0, 0x4309, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB], 0x50) socket(0xa, 0x3, 0x3a) symlinkat(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) umount2(&(0x7f0000000580)='./file0\x00', 0x3) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x800) lstat(&(0x7f0000001d40)='./file0\x00', &(0x7f0000001d80)) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000001c0)='kmem_cache_free\x00', r3, 0x0, 0x7}, 0x18) alarm(0x7f) 950.692973ms ago: executing program 4 (id=2478): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000380)=ANY=[@ANYRESDEC=r0], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="18090000002300810000000000000000850000007b00000095"], &(0x7f0000000400)='syzkaller\x00', 0x9, 0x0, 0x0, 0x40f00, 0x6, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x10) r3 = openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) write$selinux_validatetrans(r3, &(0x7f0000000180)=ANY=[@ANYBLOB='system_u:object_r:semanage_t system_u:object_r:fixed_disk_device_t:s0 00'], 0x79) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1b00e4cb9ea3370b9d4756bc6c000000002300008070a6ffec", @ANYRES32=0xffffffffffffffff, @ANYBLOB='\x00'/10, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r6}, 0x10) add_key$keyring(&(0x7f0000000540), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000900)=@newtaction={0xa0, 0x30, 0xb, 0x5, 0x0, {}, [{0x8c, 0x1, [@m_ct={0x88, 0x1, 0x0, 0x0, {{0x7}, {0x60, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x80000001, 0x0, 0x0, 0x0, 0x400}}, @TCA_CT_ACTION={0x6, 0x3, 0x19}, @TCA_CT_NAT_IPV4_MIN={0x8, 0x9, @private=0xa010102}, @TCA_CT_LABELS={0x14, 0x7, "e142a1dc6b3a3dd0aaeb9317676b63d2"}, @TCA_CT_MARK={0x8, 0x5, 0x9}, @TCA_CT_NAT_PORT_MIN={0x6, 0xd, 0x4e24}, @TCA_CT_NAT_PORT_MAX={0x6, 0xe, 0x4e22}, @TCA_CT_MARK_MASK={0x8, 0x6, 0x8000}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x8890}, 0x40) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x808003, &(0x7f0000000000), 0x3, 0x4ed, &(0x7f00000005c0)="$eJzs3d9rW28ZAPDnpM1st8526sUcuBVRtqFL2tVtxYttgujVQJ33XW3TUpo2pUm3tQzp8FoEERW90StvBP8AQfYniDDQ+yGiDNnmhRdq5CQnW79d0nYsafZtPx94+77nR87zvAk5yXvOaU4Ax9Z4RNyOiIGIuBwRo9n8XFZiu1nS9V6+eDSXliTq9bv/TCLJ5rW2lWT1qexhQxHxnW9GfC9JmjN2qG5uLc+Wy6X1bLpYW1krVje3riytzC6WFkurU1OT16dvTF+bnuhaX29+/W8//dFvvnHzD19+8GzmH5e+n+Y7ki3b2Y9uaj4n+cZz0TIYEeu9CNYHA1l/8gdZOel9PgAA7C39jv+piPh8RLz6Rb+zAQAAAHqhfmsk/pNE1AEAAIAjK9e4BjbJFbJrAUYilysUmtfwfiZuRblSrX1pobKxOt+8VnYs8rmFpXJpIrtWeCzySTo92Wi/mb66a3oqIs5ExE9GhxvThblKeb7fBz8AAADgmEjH+SO5Zjut/jXaHP8DAAAAR8xYvxMAAAAAes74HwAAAI6+t8f/480qGTz8ZAAAAIBu+9adO2mpt+5/PX9/c2O5cv/KfKm6XFjZmCvMVdbXCouVymLjN/tW9tteuVJZ+0qsbjws1krVWrG6uTWzUtlYrc007us9UzrQfaIBAACArjpz4clfkojY/upwo6ROZMuM1eFoy73b6kmv8gAO30C/EwD6xgW+cHwZ4wP7DeyHDikPAACgdy5+9vX5/+HYcf7/9DPHBuCoe8fz/8AR4vw/HF+7zv//ql95AIfPGB/Y7zhAx/P/f+x+LgAAQG+MNEqSK2RjgJHI5QqFiNON2wLkk4WlcmkiIj4ZEX8ezX8inZ7sd9IAAAAAAAAAAAAAAAAAAAAAAAAA8DFTrydRBwAAAI60iNzfk4hIYihi9Asju48PnEj+PdqoI+LBL+/+7OFsLSLupbNez6/9vDG/tn61DwcwAAAAgLe0xumN2o38AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOiyly8ezbXKYcZ9/rWIGGsXfzCGGvVQ5CPi5KskBnc8LomIgS7E334cEWfbxU/StGIsy2J3/FxEDPc5/qkuxIfj7Em6/7nd7v2Xi/FG3f79N5iV9/V8vNP+L/d6/zfQYf93ep9tn8jqc09/V+wY/3HEucH2+59W/OQ997/3vru11WlZ/dcRF9t+/iQfiVWsrawVq5tbV5ZWZhdLi6XVqanJ69M3pq9NTxQXlsql7G/bGD/+3O//t1f/T3aIP9ap/0kzp3q9/TYv7Jr+79OHLz7dbsUk4vkPs3ab1/9sp/jZc//F7HMgXX6x1d5utnc6/9s/nd+r//Md+r/f63+p00Z3ufztH/y12cof8BEAQC9VN7eWZ8vl0vpBG+mg98ArH2Ij7cwHkEYXG+MfRhoax7PR7z0TAADQbW++9Pc7EwAAAAAAAAAAAAAAAAAAADi+Wv//3/ot5178nNjOeEOtRpIcel8BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPby/wAAAP//nXrOGw==") mount(0x0, &(0x7f0000000d80)='.\x00', 0x0, 0x2200020, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x101c01, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000001500000000000000000000000200000000000000000008"], 0x1c}, 0x1, 0x0, 0x0, 0x20040091}, 0x800) r7 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r7, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) setsockopt$inet_msfilter(r7, 0x0, 0x29, &(0x7f0000000f80)=ANY=[@ANYRES32=r3, @ANYBLOB="e00000027f0000010000000003", @ANYRES16=r1, @ANYRESDEC=r4, @ANYRESDEC=r5, @ANYBLOB="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"], 0x1c) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0700000004000000800000000400000028000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYBLOB], 0x50) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r9}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41002, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r10}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r11 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r11, 0x0, 0x2a, &(0x7f00000008c0)={0x1, {{0x2, 0x0, @private=0xa010100}}}, 0x88) writev(r8, &(0x7f00000003c0)=[{&(0x7f0000000280)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) 788.640566ms ago: executing program 6 (id=2479): bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b70500000800000085"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x5, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) creat(&(0x7f00000000c0)='./file0\x00', 0x48) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) r2 = dup(r1) write$P9_RLERRORu(r2, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000800)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085"], 0x0, 0x101, 0x0, 0x0, 0x41100, 0x59}, 0x94) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000080000000000000004850000006d00000095"], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r3}, 0x10) write$binfmt_elf64(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) creat(&(0x7f00000003c0)='./file0\x00', 0x36) 757.652619ms ago: executing program 2 (id=2480): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x4000, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x800) recvmsg$unix(0xffffffffffffffff, 0x0, 0x40000100) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) lsm_get_self_attr(0x67, 0x0, &(0x7f00000010c0), 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000200)={[{@init_itable_val}, {@jqfmt_vfsold}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@user_xattr}, {@dioread_lock}, {@quota}]}, 0x3, 0x42f, &(0x7f0000000940)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143441, 0x98) fallocate(r1, 0x10, 0x160483b7, 0x5) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[], 0x50) r2 = socket(0x1e, 0x4, 0x0) r3 = socket(0x1e, 0x2, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, 0x0, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f00000011c0)=@req3={0x81, 0x3, 0x3, 0x5, 0x7fff, 0x7, 0x3}, 0x8) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000012c0), 0x0, 0x0) readv(r5, &(0x7f0000000000)=[{&(0x7f00000001c0)=""/4096, 0x1000}], 0x1) ioctl$TIOCVHANGUP(r5, 0x5437, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x1, r6}, 0x38) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000019200)={0x11, 0xd, &(0x7f0000000240)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r7, 0x0, 0x2}, 0x18) r8 = memfd_create(&(0x7f0000000bc0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85Q\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~Mx\x02\x00(v\xe6`\x026\xfcgC\xb5\xf0\x13.zb\xc5bj+@\x00\x00\x00\x00\x00\x00\x00.\xd4`=z\xd1n\x8d\x8f\xa5hS\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{\'\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x80\x1ch\x89\xe7\xdd]q,\xec\xc4\xa5\x93\xe5,\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+}5dy\xb1\xef\xf1m\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc00xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) getsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, 0x0, &(0x7f0000000180)) r3 = dup(r2) write$P9_RLERRORu(r3, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000080000000000000004850000006d00000095"], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r4}, 0x10) write$binfmt_elf64(r3, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) creat(&(0x7f00000003c0)='./file0\x00', 0x36) 697.495013ms ago: executing program 6 (id=2482): mount$9p_tcp(0x0, &(0x7f0000000680)='.\x00', &(0x7f00000006c0), 0x8010, &(0x7f0000000080)=ANY=[@ANYBLOB='trans=tcp']) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) bind$unix(r1, &(0x7f0000000180)=@file={0x1, './file0\x00'}, 0x6e) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x18) mount$tmpfs(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300), 0x0, &(0x7f0000000000)=ANY=[@ANYRESHEX=r2]) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000001c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) mkdir(0x0, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000380)='rpc_pipefs\x00', 0x0, 0x0) chroot(&(0x7f0000000040)='./file0\x00') umount2(&(0x7f00000000c0)='./file0\x00', 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000000280)={0xa, 0x2, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) listen(r5, 0xfffffff8) syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x45, 0xc3, 0x3f, 0x8, 0x5ac, 0x247, 0xb023, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x10, 0x2}}]}}]}}, 0x0) r6 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r6, &(0x7f0000000700)=ANY=[@ANYBLOB="3800000078009106000000000000004a07"], 0xfe33) r7 = socket$inet_tcp(0x2, 0x1, 0x0) write(0xffffffffffffffff, 0x0, 0x0) connect$inet(r7, &(0x7f0000000040)={0x2, 0x2, @local}, 0x10) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000001c0)={{}, &(0x7f0000000100), &(0x7f0000000180)='%ps \x00'}, 0x20) close_range(r5, 0xffffffffffffffff, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x7d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f0000000980)='sys_enter\x00', r8}, 0x10) syz_open_dev$ptys(0xc, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x6, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x5, 0x0, 0xb, 0x9, 0x0, 0x2, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfe00}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x4}, {0x3, 0x0, 0x6, 0xa, 0x9, 0xfe04, 0xa0}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x8}, {0x7, 0x1, 0xb, 0x4, 0xa, 0x20}, {}, {}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 588.583742ms ago: executing program 4 (id=2483): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e21, @local}], 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018040000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1, 0x0, 0xfffffffffffffff8}, 0x18) sendmsg$inet_sctp(r0, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000380)='N', 0x2a000}], 0x1, 0x0, 0x0, 0x804c040}, 0x0) 396.377828ms ago: executing program 3 (id=2484): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b707000008000000850000006900000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) r2 = socket$netlink(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x8, 0x0, @perf_config_ext={0x1, 0xa}, 0x1184c, 0x9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) bpf$MAP_CREATE(0x0, 0x0, 0x48) brk(0x8000000000000001) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="4800000010000507000000000000000016000000", @ANYRES32=r4, @ANYBLOB="0000000200000000280012000c00010076657468"], 0x48}}, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0100000000000000000001000000050004008e07af5405000a000000"], 0x24}}, 0x0) sendmsg$FOU_CMD_ADD(r5, &(0x7f0000000440)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="58000000b21b637e79c92427335dce82488bb4b95fe32ef834345256b133596b0224cf017ade32149434811c698915a87236e3a91dbf3c0696dba88a51562005d999165b271a084ea0316d7c74318cd7cbb6c9edeaa190f7550fb8320d601e0845c224a0d180b67a7310fa74adf209114458f157a1f16cac54ec904ff5abf0038ddea40550a3f0cdb42f4c05128d0a3223514154d5e58e2104899e29996afbeed87b1477ae3596fb634bae97ff0592f830cd251765ed70ea91ea2a3e97d5fadf9195f2f2fc56b047680b7013ee4d8b", @ANYRES16=0x0, @ANYBLOB="00022bbd7000fddbdf2501000000050004000100000005000400000000000500020002000000060001004e21000006000a004e230000050002000200000014000900fc0200"/82], 0x58}, 0x1, 0x0, 0x0, 0x8010}, 0x8001) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f0000000140)=0x1, 0x4) connect$inet6(r5, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1}}, 0x80001}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f00000002c0), 0x3) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f000000e0c0), 0x10010) setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x1, &(0x7f0000000000)=@gcm_256={{0x303}, "d2487b822050386f", "4946115b8e1acab11dda0ee7d5239a0ff818a4b776b238dccb81bfd9652cb934", "f728d519", "0cb42238c52f3b48"}, 0x38) sendfile(r5, r6, &(0x7f0000000100)=0x10, 0x10001) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newqdisc={0x24, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}}, 0x24}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) set_mempolicy_home_node(&(0x7f0000349000/0xa000)=nil, 0xa000, 0x0, 0x0) r7 = socket(0x10, 0x803, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r7) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(r3, 0xc0bc5310, &(0x7f00000006c0)) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) 218.119883ms ago: executing program 5 (id=2485): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r2, 0x0, 0x8008000000010, &(0x7f00000003c0)="17000000020001000003d68c5ee17688a2003208030300ecff3f0000000300000a0000000098fc5ad9485bbb6a880000d6c8db0000dba67e06000000e28900000200df018000000000f50607bdff59100ac45761547a681f009cee4a5acb3da400001fb700674f00c88ebbf9315033bf79ac2dff060115003901000000000000ea000000000000000002ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6", 0xb7) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r3, 0x0, 0x8008000000010, &(0x7f00000003c0)="17000000020001000003d68c5ee17688a2003208030300ecff3f0000000300000a0000000098fc5ad9485bbb6a880000d6c8db0000dba67e06000000e28900000200df018000000000f50607bdff59100ac45761547a681f009cee4a5acb3da400001fb700674f00c88ebbf9315033bf79ac2dff060115003901000000000000ea000000000000000002ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e0", 0xb8) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x2, 0x13, 0x0, 0x0, 0x2}, 0x10}}, 0x0) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0x12, 0x0, 0x0, 0x2}, 0x10}}, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) 215.543983ms ago: executing program 3 (id=2486): r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r0, 0x10e, 0xc, &(0x7f0000000040)=0x8, 0x4) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000012000100"/18, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b'], 0x28}}, 0x802) 190.412524ms ago: executing program 3 (id=2487): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000400000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10) io_setup(0x8f0, &(0x7f0000002400)=0x0) io_submit(r5, 0x1, &(0x7f0000000340)=[&(0x7f0000000100)={0x2002000000, 0x4, 0x0, 0x1, 0x0, r2, &(0x7f0000000040)="008800040000", 0x6, 0x0, 0x0, 0x2}]) 168.803196ms ago: executing program 5 (id=2488): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x10, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000510700140000000000000001b7080000000000007b8af8ff00000000b7080000fcffffff7b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb702000008000000182300", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='mm_page_alloc\x00', r1}, 0x10) r2 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) write$binfmt_aout(r2, &(0x7f00000000c0)=ANY=[], 0x20) open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x8, 0x80, 0x0, 0x4, 0x0, 0x7, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x4}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 119.677511ms ago: executing program 3 (id=2489): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="1801000000000000000000006dfeff00850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r0}, 0x10) wait4(0x0, 0x0, 0x1000008, 0x0) r1 = syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x4000, &(0x7f0000000c00)={[{@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@nombcache}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x4}}, {@mblk_io_submit}, {@resuid}, {@norecovery}]}, 0x8, 0x445, &(0x7f0000001dc0)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./bus\x00', 0x1c5042, 0x12) write(r3, &(0x7f00000009c0)="3bf58d7d45d32c", 0x7) sendfile(r3, r2, 0x0, 0x3ffff) sendfile(r3, r2, 0x0, 0x7fffeffd) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) bind$vsock_stream(0xffffffffffffffff, &(0x7f0000000140)={0x28, 0x0, 0x2710, @local}, 0x10) r4 = socket$vsock_stream(0x28, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0xf, 0xb, &(0x7f00000005c0)=ANY=[@ANYRESDEC], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x94) ioctl$FIDEDUPERANGE(r1, 0xc0189436, &(0x7f0000000ac0)=ANY=[@ANYBLOB="060000000000000006000000000000000400000000000000", @ANYRES32, @ANYBLOB="000000000100008000"/28, @ANYRES32, @ANYBLOB='\x00\x00\x00\x001\a\x00'/28, @ANYRES32, @ANYBLOB="00000000770000000000000000000000000000000000000000000020eb245fc955f6c15daecbe716b5d3af01f00c6366c487323d86a6d9e708ed483688b0dcb7f121d60aac9f6827afb160442f0ab8bc80d7a783be3d30d065f07b0355ae7d7b05fd", @ANYRES32=r4, @ANYBLOB='\x00'/28]) syz_clone(0x80000, &(0x7f0000000240)="45b58ef4444bd1683e965c36735528a290ca75b974a6b1766b8fcf686ca676d38363411d10f1545ac36128c4c76237eae6270801165282410fc481fe6b4df1e648b15e0b8e95f67ef1ab6a1e19cc6232bb8849130b30b9d28aa4b3ddfc829457d7d5a20649e4e406e7f4e15363d6ddd021c5ec10bab37513813c48a51f0b33a5a0a10a2d9682ada2629ff40f39aa9ef08274508d6280557c4c748efc75b36b1bbec5edd420f3d9c295c06d2154d857eaf947", 0xb2, &(0x7f0000000300), &(0x7f0000000380), &(0x7f00000003c0)="f0fb5b672ab19aed4f6b9599775bb05ddc6a1a0319bc750af81e3a83ea86f3381345b9e81891a1a8c6815b296cae4e87877720f5b9c94ab9f40635fd28c479878ce550194f31dcd62ee2d08e5b7d75ed9265e58c57d200625fd763b47060a9391708109b9f935208b55a515525eda4de36911e1641bf053981de6cc9ca780d2cda2d64540e4d801d2a2d22b58c78278ef3b8a15143cf7dcc4d48c6516b790ca81cf56a69cb051e24e33836d7") 0s ago: executing program 5 (id=2490): r0 = syz_open_dev$loop(&(0x7f00000000c0), 0x763, 0x3e383) ioctl$LOOP_SET_STATUS(r0, 0x4c02, 0x0) capset(&(0x7f0000000000)={0x20071026}, &(0x7f0000000280)) r1 = syz_io_uring_setup(0x749e, &(0x7f0000000080)={0x0, 0x0, 0x10100, 0x0, 0x2e7}, &(0x7f0000000100), &(0x7f0000000140)) syz_io_uring_setup(0x1005c20, &(0x7f0000000240)={0x0, 0xa454, 0x4000, 0x2, 0x1eb}, &(0x7f0000000100), &(0x7f0000000000)) r2 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) syz_usb_disconnect(r2) syz_usb_connect(0x4, 0x24, &(0x7f00000000c0)=ANY=[], 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000e40)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0xfffffffe, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r4}, 0x10) ioctl$EVIOCRMFF(r2, 0x40095505, 0x0) io_uring_enter(r1, 0x2d3e, 0x0, 0x0, 0x0, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x8401) r5 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f00000002c0)={0x9, &(0x7f00000004c0)=[{0x7, 0x3, 0x8, 0xefeb}, {0x1, 0xa, 0x8, 0x8}, {0x80, 0x7, 0x1, 0x20005}, {0x5, 0x0, 0x9, 0x1}, {0x400, 0x7, 0x9, 0x8001}, {0x5d4, 0x3e, 0x1, 0x725}, {0x5, 0x1, 0x3, 0xfff}, {0xb9, 0x80, 0x8, 0x1}, {0x0, 0x9, 0x6d, 0x1}]}, 0x10) close(0xffffffffffffffff) r6 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x19, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000000000000640000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], 0x0, 0x4, 0x0, 0x0, 0x41100, 0x21, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffd0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000380)='netfs_sreq_ref\x00', r7}, 0x18) r8 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r8, &(0x7f0000000200)={0x28, 0x0, 0xffffffff, @my=0x1}, 0x10) connect$vsock_stream(r8, &(0x7f0000000600)={0x28, 0x0, 0x0, @local}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x70, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x7, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100cb3a}, 0x94) r9 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='kmem_cache_free\x00', r9, 0x0, 0x2}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r10 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$KDSETKEYCODE(r10, 0x4b4d, &(0x7f0000000000)={0x7fff, 0xd}) kernel console output (not intermixed with test programs): nized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=10226 comm=syz.4.2196 [ 183.716284][T10237] loop0: detected capacity change from 0 to 512 [ 183.740090][T10237] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349) [ 183.760359][T10237] EXT4-fs (loop0): orphan cleanup on readonly fs [ 183.791336][T10237] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:517: comm syz.0.2200: Block bitmap for bg 0 marked uninitialized [ 183.814175][T10237] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 183.828634][T10245] loop3: detected capacity change from 0 to 512 [ 183.837634][T10245] EXT4-fs: Ignoring removed oldalloc option [ 183.844306][T10245] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 183.855395][T10237] EXT4-fs (loop0): 1 orphan inode deleted [ 183.869275][T10237] EXT4-fs: Ignoring sb option on remount [ 183.875101][T10237] EXT4-fs: Ignoring removed orlov option [ 183.881845][T10237] EXT4-fs: Ignoring removed nomblk_io_submit option [ 183.889040][T10237] EXT4-fs: Remounting fs w/o journal so ignoring data_err option [ 183.898715][T10245] EXT4-fs (loop3): 1 truncate cleaned up [ 183.918968][T10237] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 183.934520][T10237] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 183.947263][T10248] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 183.956882][T10248] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 183.965391][T10248] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2204'. [ 184.047133][T10252] loop2: detected capacity change from 0 to 1024 [ 184.054011][T10252] EXT4-fs: Ignoring removed bh option [ 184.059907][T10252] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 184.071117][T10252] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 184.081413][T10252] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #3: block 2: comm syz.2.2206: lblock 2 mapped to illegal pblock 2 (length 1) [ 184.096937][T10252] Quota error (device loop2): qtree_write_dquot: dquota write failed [ 184.105104][T10252] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #3: block 48: comm syz.2.2206: lblock 0 mapped to illegal pblock 48 (length 1) [ 184.119404][T10252] Quota error (device loop2): v2_write_file_info: Can't write info structure [ 184.128273][T10252] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.2206: Failed to acquire dquot type 0 [ 184.139805][T10252] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 184.149449][T10252] EXT4-fs error (device loop2): ext4_evict_inode:254: inode #11: comm syz.2.2206: mark_inode_dirty error [ 184.161061][T10252] EXT4-fs warning (device loop2): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 184.171796][T10252] EXT4-fs (loop2): 1 orphan inode deleted [ 184.182199][ T31] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:1: lblock 1 mapped to illegal pblock 1 (length 1) [ 184.196630][ T31] Quota error (device loop2): remove_tree: Can't read quota data block 1 [ 184.205090][ T31] EXT4-fs error (device loop2): ext4_release_dquot:6969: comm kworker/u8:1: Failed to release dquot type 0 [ 184.216884][T10252] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #3: block 48: comm syz.2.2206: lblock 0 mapped to illegal pblock 48 (length 1) [ 184.231567][T10252] Quota error (device loop2): v2_read_header: Failed header read: expected=8 got=-117 [ 184.302914][T10256] loop2: detected capacity change from 0 to 512 [ 184.309512][T10256] EXT4-fs: Ignoring removed mblk_io_submit option [ 184.316303][T10256] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 184.327454][T10256] EXT4-fs (loop2): 1 truncate cleaned up [ 184.519848][T10262] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2208'. [ 184.574839][T10264] loop5: detected capacity change from 0 to 512 [ 184.581419][T10264] EXT4-fs: Ignoring removed orlov option [ 184.595192][T10264] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 184.609399][T10264] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8042c119, mo2=0002] [ 184.624861][T10264] EXT4-fs error (device loop5): ext4_iget_extra_inode:5104: inode #15: comm syz.5.2209: corrupted in-inode xattr: e_value size too large [ 184.644748][T10264] EXT4-fs error (device loop5): ext4_orphan_get:1397: comm syz.5.2209: couldn't read orphan inode 15 (err -117) [ 184.650142][T10271] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=10271 comm=syz.4.2208 [ 184.738473][T10264] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2209'. [ 184.765429][T10276] loop3: detected capacity change from 0 to 512 [ 184.776237][T10277] loop4: detected capacity change from 0 to 512 [ 184.785209][T10276] EXT4-fs: Ignoring removed oldalloc option [ 184.798457][T10277] netlink: 'syz.4.2213': attribute type 4 has an invalid length. [ 184.809683][T10276] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 184.823717][T10276] EXT4-fs (loop3): 1 truncate cleaned up [ 184.905253][T10286] loop3: detected capacity change from 0 to 512 [ 184.919165][T10287] loop0: detected capacity change from 0 to 1024 [ 184.926696][T10287] EXT4-fs: Ignoring removed bh option [ 184.933616][T10286] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349) [ 184.943560][T10287] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 184.954750][T10286] EXT4-fs (loop3): orphan cleanup on readonly fs [ 184.961339][T10286] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:517: comm syz.3.2215: Block bitmap for bg 0 marked uninitialized [ 184.975824][T10287] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 184.984281][T10286] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 184.994997][T10287] EXT4-fs error (device loop0): ext4_map_blocks:778: inode #3: block 2: comm syz.0.2218: lblock 2 mapped to illegal pblock 2 (length 1) [ 185.023539][T10286] EXT4-fs (loop3): 1 orphan inode deleted [ 185.029907][T10287] Quota error (device loop0): qtree_write_dquot: dquota write failed [ 185.051050][T10286] EXT4-fs: Ignoring sb option on remount [ 185.056784][T10286] EXT4-fs: Ignoring removed orlov option [ 185.063603][T10287] EXT4-fs error (device loop0): ext4_map_blocks:778: inode #3: block 48: comm syz.0.2218: lblock 0 mapped to illegal pblock 48 (length 1) [ 185.078194][T10286] EXT4-fs: Ignoring removed nomblk_io_submit option [ 185.085906][T10287] Quota error (device loop0): v2_write_file_info: Can't write info structure [ 185.094762][T10287] EXT4-fs error (device loop0): ext4_acquire_dquot:6933: comm syz.0.2218: Failed to acquire dquot type 0 [ 185.106997][T10286] EXT4-fs: Remounting fs w/o journal so ignoring data_err option [ 185.114940][T10286] EXT4-fs (loop3): warning: mounting fs with errors, running e2fsck is recommended [ 185.124505][T10286] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 185.128749][T10287] EXT4-fs error (device loop0) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 185.149575][T10287] EXT4-fs error (device loop0): ext4_evict_inode:254: inode #11: comm syz.0.2218: mark_inode_dirty error [ 185.161705][T10287] EXT4-fs warning (device loop0): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 185.172072][T10287] EXT4-fs (loop0): 1 orphan inode deleted [ 185.182485][ T31] EXT4-fs error (device loop0): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:1: lblock 1 mapped to illegal pblock 1 (length 1) [ 185.198724][ T31] Quota error (device loop0): remove_tree: Can't read quota data block 1 [ 185.207299][ T31] EXT4-fs error (device loop0): ext4_release_dquot:6969: comm kworker/u8:1: Failed to release dquot type 0 [ 185.213276][T10294] netlink: 'syz.5.2209': attribute type 1 has an invalid length. [ 185.226673][T10294] netlink: 152 bytes leftover after parsing attributes in process `syz.5.2209'. [ 185.235847][T10294] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 185.252971][T10287] EXT4-fs error (device loop0): ext4_map_blocks:778: inode #3: block 48: comm syz.0.2218: lblock 0 mapped to illegal pblock 48 (length 1) [ 185.267432][T10287] Quota error (device loop0): v2_read_header: Failed header read: expected=8 got=-117 [ 185.353127][T10297] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 185.361822][T10297] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 185.370347][T10297] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2221'. [ 185.677099][T10304] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2224'. [ 185.698459][T10308] loop5: detected capacity change from 0 to 512 [ 185.706415][T10308] EXT4-fs: Ignoring removed oldalloc option [ 185.712938][T10308] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 185.725177][T10308] EXT4-fs (loop5): 1 truncate cleaned up [ 185.740321][T10310] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=10310 comm=syz.4.2224 [ 185.792542][T10316] tmpfs: Unknown parameter '0x0000000000000006' [ 185.801124][T10316] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 185.809907][T10316] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 185.831439][T10316] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2229'. [ 185.842140][T10314] netlink: 'syz.5.2227': attribute type 4 has an invalid length. [ 185.866725][T10318] loop4: detected capacity change from 0 to 512 [ 185.873711][T10318] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349) [ 185.884169][T10318] EXT4-fs (loop4): orphan cleanup on readonly fs [ 185.890887][T10318] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:517: comm syz.4.2230: Block bitmap for bg 0 marked uninitialized [ 185.904428][T10318] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 185.913522][T10318] EXT4-fs (loop4): 1 orphan inode deleted [ 185.932033][T10318] EXT4-fs: Ignoring sb option on remount [ 185.937779][T10318] EXT4-fs: Ignoring removed orlov option [ 185.954579][T10318] EXT4-fs: Ignoring removed nomblk_io_submit option [ 185.961622][T10318] EXT4-fs: Remounting fs w/o journal so ignoring data_err option [ 185.970775][T10325] loop5: detected capacity change from 0 to 512 [ 185.977310][T10318] EXT4-fs (loop4): warning: mounting fs with errors, running e2fsck is recommended [ 185.977668][T10325] EXT4-fs: Ignoring removed orlov option [ 185.994035][T10325] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 186.002534][T10318] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 186.002613][T10323] loop0: detected capacity change from 0 to 1024 [ 186.002986][T10323] EXT4-fs: Ignoring removed bh option [ 186.024517][T10323] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 186.034951][T10325] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8042c119, mo2=0002] [ 186.043185][T10325] EXT4-fs error (device loop5): ext4_iget_extra_inode:5104: inode #15: comm syz.5.2233: corrupted in-inode xattr: e_value size too large [ 186.062028][T10325] EXT4-fs error (device loop5): ext4_orphan_get:1397: comm syz.5.2233: couldn't read orphan inode 15 (err -117) [ 186.062531][T10323] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 186.085877][T10323] EXT4-fs error (device loop0): ext4_map_blocks:778: inode #3: block 2: comm syz.0.2232: lblock 2 mapped to illegal pblock 2 (length 1) [ 186.100292][T10323] EXT4-fs error (device loop0): ext4_map_blocks:778: inode #3: block 48: comm syz.0.2232: lblock 0 mapped to illegal pblock 48 (length 1) [ 186.115549][T10323] EXT4-fs error (device loop0): ext4_acquire_dquot:6933: comm syz.0.2232: Failed to acquire dquot type 0 [ 186.128929][T10323] EXT4-fs error (device loop0) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 186.140160][T10323] EXT4-fs error (device loop0): ext4_evict_inode:254: inode #11: comm syz.0.2232: mark_inode_dirty error [ 186.151850][T10323] EXT4-fs warning (device loop0): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 186.168898][T10325] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2233'. [ 186.170923][T10323] EXT4-fs (loop0): 1 orphan inode deleted [ 186.184039][ T3720] EXT4-fs error (device loop0): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:10: lblock 1 mapped to illegal pblock 1 (length 1) [ 186.216653][ T3720] EXT4-fs error (device loop0): ext4_release_dquot:6969: comm kworker/u8:10: Failed to release dquot type 0 [ 186.228812][T10323] EXT4-fs error (device loop0): ext4_map_blocks:778: inode #3: block 48: comm syz.0.2232: lblock 0 mapped to illegal pblock 48 (length 1) [ 186.310992][T10333] loop4: detected capacity change from 0 to 512 [ 186.317564][T10333] EXT4-fs: Ignoring removed oldalloc option [ 186.327196][T10333] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 186.338524][T10333] EXT4-fs (loop4): 1 truncate cleaned up [ 186.348258][T10337] netlink: 'syz.5.2233': attribute type 1 has an invalid length. [ 186.356077][T10337] netlink: 152 bytes leftover after parsing attributes in process `syz.5.2233'. [ 186.365286][T10337] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 186.414027][T10343] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2240'. [ 186.458930][T10343] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=10343 comm=syz.4.2240 [ 186.495875][T10345] netlink: 'syz.4.2241': attribute type 4 has an invalid length. [ 186.589255][T10347] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 186.597922][T10347] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 186.606571][T10347] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2242'. [ 186.819555][T10349] loop5: detected capacity change from 0 to 512 [ 186.826240][T10349] EXT4-fs: Ignoring removed mblk_io_submit option [ 186.833012][T10349] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 186.844186][T10349] EXT4-fs (loop5): 1 truncate cleaned up [ 186.940333][T10353] loop3: detected capacity change from 0 to 512 [ 186.947377][T10353] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349) [ 186.958486][T10353] EXT4-fs (loop3): orphan cleanup on readonly fs [ 186.966306][T10353] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:517: comm syz.3.2244: Block bitmap for bg 0 marked uninitialized [ 186.979876][T10353] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 186.989190][T10353] EXT4-fs (loop3): 1 orphan inode deleted [ 187.002385][T10353] EXT4-fs: Ignoring sb option on remount [ 187.008095][T10353] EXT4-fs: Ignoring removed orlov option [ 187.013999][T10353] EXT4-fs: Ignoring removed nomblk_io_submit option [ 187.020758][T10353] EXT4-fs: Remounting fs w/o journal so ignoring data_err option [ 187.028826][T10353] EXT4-fs (loop3): warning: mounting fs with errors, running e2fsck is recommended [ 187.038715][T10353] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 187.137245][T10360] loop2: detected capacity change from 0 to 1024 [ 187.163899][T10360] EXT4-fs: Ignoring removed bh option [ 187.169648][T10362] loop4: detected capacity change from 0 to 512 [ 187.195779][T10364] tmpfs: Unknown parameter '0x0000000000000006' [ 187.202076][T10360] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 187.205030][T10364] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 187.214398][T10362] EXT4-fs: Ignoring removed mblk_io_submit option [ 187.221114][T10364] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 187.252649][T10362] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 187.279653][T10360] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 187.291138][T10362] EXT4-fs (loop4): 1 truncate cleaned up [ 187.299290][T10360] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #3: block 2: comm syz.2.2246: lblock 2 mapped to illegal pblock 2 (length 1) [ 187.350906][T10360] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #3: block 48: comm syz.2.2246: lblock 0 mapped to illegal pblock 48 (length 1) [ 187.368180][T10360] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.2246: Failed to acquire dquot type 0 [ 187.380073][T10360] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 187.389673][T10360] EXT4-fs error (device loop2): ext4_evict_inode:254: inode #11: comm syz.2.2246: mark_inode_dirty error [ 187.401200][T10360] EXT4-fs warning (device loop2): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 187.422823][T10360] EXT4-fs (loop2): 1 orphan inode deleted [ 187.442399][ T51] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:3: lblock 1 mapped to illegal pblock 1 (length 1) [ 187.460235][ T51] EXT4-fs error (device loop2): ext4_release_dquot:6969: comm kworker/u8:3: Failed to release dquot type 0 [ 187.483279][T10360] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #3: block 48: comm syz.2.2246: lblock 0 mapped to illegal pblock 48 (length 1) [ 187.630325][T10371] loop2: detected capacity change from 0 to 1024 [ 187.664697][T10371] ext4 filesystem being mounted at /468/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 187.723833][T10371] EXT4-fs error (device loop2): ext4_map_blocks:814: inode #15: block 1: comm syz.2.2249: lblock 1 mapped to illegal pblock 1 (length 15) [ 187.755532][T10375] loop5: detected capacity change from 0 to 512 [ 187.762334][T10375] EXT4-fs: Ignoring removed oldalloc option [ 187.771612][T10371] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 15 with error 117 [ 187.784102][T10371] EXT4-fs (loop2): This should not happen!! Data will be lost [ 187.784102][T10371] [ 187.785445][T10375] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 187.826475][T10378] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #15: block 1: comm syz.2.2249: lblock 1 mapped to illegal pblock 1 (length 3) [ 187.843028][T10371] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 187.861135][T10375] EXT4-fs (loop5): 1 truncate cleaned up [ 187.889654][T10371] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #15: block 1: comm syz.2.2249: lblock 1 mapped to illegal pblock 1 (length 3) [ 187.905776][T10384] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=10384 comm=syz.0.2252 [ 188.056149][T10389] loop4: detected capacity change from 0 to 512 [ 188.073552][T10389] EXT4-fs: Ignoring removed mblk_io_submit option [ 188.080432][T10389] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 188.091765][T10389] EXT4-fs (loop4): 1 truncate cleaned up [ 188.182914][T10400] loop3: detected capacity change from 0 to 512 [ 188.203115][T10400] EXT4-fs warning (device loop3): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 188.225897][T10400] netlink: 'syz.3.2259': attribute type 4 has an invalid length. [ 188.323799][T10404] loop3: detected capacity change from 0 to 1024 [ 188.330664][T10404] EXT4-fs: Ignoring removed bh option [ 188.337580][T10404] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 188.350369][T10404] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 188.360194][T10404] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #3: block 2: comm syz.3.2260: lblock 2 mapped to illegal pblock 2 (length 1) [ 188.374524][T10404] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #3: block 48: comm syz.3.2260: lblock 0 mapped to illegal pblock 48 (length 1) [ 188.388953][T10404] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.2260: Failed to acquire dquot type 0 [ 188.400683][T10404] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 188.410193][T10404] EXT4-fs error (device loop3): ext4_evict_inode:254: inode #11: comm syz.3.2260: mark_inode_dirty error [ 188.411219][T10407] loop4: detected capacity change from 0 to 512 [ 188.422377][T10404] EXT4-fs warning (device loop3): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 188.428862][T10407] EXT4-fs: Ignoring removed mblk_io_submit option [ 188.439105][T10404] EXT4-fs (loop3): 1 orphan inode deleted [ 188.445012][T10407] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 188.460398][ T31] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:1: lblock 1 mapped to illegal pblock 1 (length 1) [ 188.461393][T10407] EXT4-fs (loop4): 1 truncate cleaned up [ 188.475970][ T31] __quota_error: 11 callbacks suppressed [ 188.475989][ T31] Quota error (device loop3): remove_tree: Can't read quota data block 1 [ 188.494573][ T31] EXT4-fs error (device loop3): ext4_release_dquot:6969: comm kworker/u8:1: Failed to release dquot type 0 [ 188.506528][T10404] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #3: block 48: comm syz.3.2260: lblock 0 mapped to illegal pblock 48 (length 1) [ 188.520854][T10404] Quota error (device loop3): v2_read_header: Failed header read: expected=8 got=-117 [ 188.602044][T10412] tmpfs: Unknown parameter '0x0000000000000006' [ 188.617781][T10412] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 188.632538][T10412] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 188.729811][T10415] loop4: detected capacity change from 0 to 512 [ 188.736662][T10415] EXT4-fs: Ignoring removed oldalloc option [ 188.759080][T10415] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 188.772748][T10420] loop2: detected capacity change from 0 to 512 [ 188.779733][T10420] EXT4-fs: Ignoring removed mblk_io_submit option [ 188.780454][T10415] EXT4-fs (loop4): 1 truncate cleaned up [ 188.786986][T10420] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 188.812037][T10420] EXT4-fs (loop2): 1 truncate cleaned up [ 188.868773][T10431] loop2: detected capacity change from 0 to 512 [ 188.918696][T10432] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=10432 comm=syz.4.2269 [ 188.977963][T10431] Quota error (device loop2): v2_read_file_info: Free block number 58381 out of range (1, 6). [ 188.988388][T10431] EXT4-fs warning (device loop2): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 189.003931][T10437] loop0: detected capacity change from 0 to 1024 [ 189.017210][T10437] ext4 filesystem being mounted at /476/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 189.017850][T10431] netlink: 'syz.2.2270': attribute type 4 has an invalid length. [ 189.058379][T10437] EXT4-fs error (device loop0): ext4_map_blocks:814: inode #15: block 1: comm syz.0.2271: lblock 1 mapped to illegal pblock 1 (length 15) [ 189.077717][T10442] loop4: detected capacity change from 0 to 512 [ 189.091045][T10442] EXT4-fs: Ignoring removed orlov option [ 189.103533][T10437] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 15 with error 117 [ 189.115983][T10437] EXT4-fs (loop0): This should not happen!! Data will be lost [ 189.115983][T10437] [ 189.127202][T10442] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 189.143280][T10442] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8042c119, mo2=0002] [ 189.164083][T10444] EXT4-fs error (device loop0): ext4_map_blocks:778: inode #15: block 1: comm syz.0.2271: lblock 1 mapped to illegal pblock 1 (length 3) [ 189.182014][T10442] EXT4-fs error (device loop4): ext4_iget_extra_inode:5104: inode #15: comm syz.4.2272: corrupted in-inode xattr: e_value size too large [ 189.212844][T10446] syzkaller0: entered promiscuous mode [ 189.218383][T10446] syzkaller0: entered allmulticast mode [ 189.230965][T10448] loop3: detected capacity change from 0 to 512 [ 189.238823][T10437] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 189.254750][T10442] EXT4-fs error (device loop4): ext4_orphan_get:1397: comm syz.4.2272: couldn't read orphan inode 15 (err -117) [ 189.267120][T10448] EXT4-fs: Ignoring removed mblk_io_submit option [ 189.274827][T10448] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 189.292884][T10444] EXT4-fs error (device loop0): ext4_map_blocks:778: inode #15: block 1: comm syz.0.2271: lblock 1 mapped to illegal pblock 1 (length 3) [ 189.317592][T10448] EXT4-fs (loop3): 1 truncate cleaned up [ 189.327627][T10436] EXT4-fs error (device loop0): ext4_map_blocks:778: inode #15: block 1: comm syz.0.2271: lblock 1 mapped to illegal pblock 1 (length 3) [ 189.579886][ T3307] EXT4-fs unmount: 210 callbacks suppressed [ 189.579908][ T3307] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 189.697504][T10465] loop3: detected capacity change from 0 to 512 [ 189.704390][T10465] EXT4-fs: Ignoring removed mblk_io_submit option [ 189.711100][T10465] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 189.723331][T10465] EXT4-fs (loop3): 1 truncate cleaned up [ 189.729454][T10465] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 189.730656][T10469] netlink: 'syz.4.2272': attribute type 1 has an invalid length. [ 189.749348][T10469] __nla_validate_parse: 5 callbacks suppressed [ 189.749368][T10469] netlink: 152 bytes leftover after parsing attributes in process `syz.4.2272'. [ 189.764781][T10469] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 189.780705][ T3307] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 189.801162][T10471] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2282'. [ 189.845668][T10471] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=10471 comm=syz.3.2282 [ 189.917279][ T3311] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 189.937191][T10475] loop4: detected capacity change from 0 to 512 [ 189.945295][T10475] EXT4-fs (loop4): mounted filesystem 00800000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 189.964938][T10475] Quota error (device loop4): v2_read_file_info: Free block number 58381 out of range (1, 6). [ 189.975489][T10475] EXT4-fs warning (device loop4): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 189.995655][T10475] netlink: 'syz.4.2284': attribute type 4 has an invalid length. [ 190.052047][ T3311] EXT4-fs (loop4): unmounting filesystem 00800000-0000-0000-0000-000000000000. [ 190.079214][T10481] syzkaller0: entered promiscuous mode [ 190.084844][T10481] syzkaller0: entered allmulticast mode [ 190.155013][T10485] loop2: detected capacity change from 0 to 1024 [ 190.173952][T10485] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 190.186238][T10485] ext4 filesystem being mounted at /476/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 190.204402][T10485] EXT4-fs error (device loop2): ext4_map_blocks:814: inode #15: block 1: comm syz.2.2288: lblock 1 mapped to illegal pblock 1 (length 15) [ 190.218830][T10485] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 15 with error 117 [ 190.231335][T10485] EXT4-fs (loop2): This should not happen!! Data will be lost [ 190.231335][T10485] [ 190.242451][T10485] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 190.257419][T10489] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #15: block 1: comm syz.2.2288: lblock 1 mapped to illegal pblock 1 (length 3) [ 190.272714][T10489] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #15: block 1: comm syz.2.2288: lblock 1 mapped to illegal pblock 1 (length 3) [ 190.287959][T10489] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #15: block 1: comm syz.2.2288: lblock 1 mapped to illegal pblock 1 (length 3) [ 190.293133][ T29] audit: type=1326 audit(1755285800.967:5264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10490 comm="syz.4.2289" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f1005f3ebe9 code=0x0 [ 190.303545][T10489] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #15: block 1: comm syz.2.2288: lblock 1 mapped to illegal pblock 1 (length 3) [ 190.366239][ T3301] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 190.375472][T10492] loop4: detected capacity change from 0 to 128 [ 190.384922][T10492] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 190.392879][T10492] FAT-fs (loop4): Filesystem has been set read-only [ 190.399919][T10492] bio_check_eod: 8945 callbacks suppressed [ 190.399936][T10492] syz.4.2289: attempt to access beyond end of device [ 190.399936][T10492] loop4: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 190.419861][T10492] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 190.427760][T10492] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 190.436855][T10492] syz.4.2289: attempt to access beyond end of device [ 190.436855][T10492] loop4: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 190.457391][T10492] syz.4.2289: attempt to access beyond end of device [ 190.457391][T10492] loop4: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 190.470895][T10492] syz.4.2289: attempt to access beyond end of device [ 190.470895][T10492] loop4: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 190.488915][T10492] syz.4.2289: attempt to access beyond end of device [ 190.488915][T10492] loop4: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 190.503058][T10492] syz.4.2289: attempt to access beyond end of device [ 190.503058][T10492] loop4: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 190.516601][T10492] syz.4.2289: attempt to access beyond end of device [ 190.516601][T10492] loop4: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 190.518653][ T29] audit: type=1326 audit(1755285801.187:5265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10496 comm="syz.0.2291" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc1c2c6ebe9 code=0x0 [ 190.531537][T10492] syz.4.2289: attempt to access beyond end of device [ 190.531537][T10492] loop4: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 190.566658][T10492] syz.4.2289: attempt to access beyond end of device [ 190.566658][T10492] loop4: rw=0, sector=2065, nr_sectors = 1 limit=128 [ 190.579908][T10492] buffer_io_error: 8942 callbacks suppressed [ 190.579928][T10492] Buffer I/O error on dev loop4, logical block 2065, async page read [ 190.594165][T10492] syz.4.2289: attempt to access beyond end of device [ 190.594165][T10492] loop4: rw=0, sector=2066, nr_sectors = 1 limit=128 [ 190.607552][T10492] Buffer I/O error on dev loop4, logical block 2066, async page read [ 190.616042][T10492] Buffer I/O error on dev loop4, logical block 2067, async page read [ 190.624362][T10492] Buffer I/O error on dev loop4, logical block 2068, async page read [ 190.632647][T10492] Buffer I/O error on dev loop4, logical block 2069, async page read [ 190.640842][T10492] Buffer I/O error on dev loop4, logical block 2070, async page read [ 190.650812][T10492] Buffer I/O error on dev loop4, logical block 2071, async page read [ 190.659132][T10492] Buffer I/O error on dev loop4, logical block 2072, async page read [ 190.667373][T10495] Buffer I/O error on dev loop4, logical block 2065, async page read [ 190.676379][T10498] loop0: detected capacity change from 0 to 128 [ 190.684612][T10495] Buffer I/O error on dev loop4, logical block 2066, async page read [ 190.699721][T10498] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 190.707623][T10498] FAT-fs (loop0): Filesystem has been set read-only [ 190.725032][T10498] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 190.732976][T10498] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 190.754117][T10502] loop2: detected capacity change from 0 to 512 [ 190.760763][T10502] EXT4-fs: Ignoring removed mblk_io_submit option [ 190.769995][T10504] loop5: detected capacity change from 0 to 512 [ 190.787426][T10502] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 190.797408][T10504] EXT4-fs: Ignoring removed orlov option [ 190.904280][T10504] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 191.098754][T10502] EXT4-fs (loop2): 1 truncate cleaned up [ 191.105202][T10504] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8042c119, mo2=0002] [ 191.122736][T10504] EXT4-fs error (device loop5): ext4_iget_extra_inode:5104: inode #15: comm syz.5.2294: corrupted in-inode xattr: e_value size too large [ 191.137349][T10502] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 191.161921][T10504] EXT4-fs error (device loop5): ext4_orphan_get:1397: comm syz.5.2294: couldn't read orphan inode 15 (err -117) [ 191.249034][T10504] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 191.264432][T10515] loop3: detected capacity change from 0 to 1024 [ 191.285889][T10519] syzkaller0: entered promiscuous mode [ 191.291409][T10519] syzkaller0: entered allmulticast mode [ 191.297582][T10515] EXT4-fs: Ignoring removed bh option [ 191.303893][T10515] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 191.340807][T10504] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2294'. [ 191.357804][T10515] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 191.393515][T10515] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #3: block 2: comm syz.3.2298: lblock 2 mapped to illegal pblock 2 (length 1) [ 191.422897][T10515] Quota error (device loop3): qtree_write_dquot: dquota write failed [ 191.431080][T10515] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #3: block 48: comm syz.3.2298: lblock 0 mapped to illegal pblock 48 (length 1) [ 191.469118][T10515] Quota error (device loop3): v2_write_file_info: Can't write info structure [ 191.478005][T10515] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.2298: Failed to acquire dquot type 0 [ 191.509050][T10515] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 191.521787][T10515] EXT4-fs error (device loop3): ext4_evict_inode:254: inode #11: comm syz.3.2298: mark_inode_dirty error [ 191.533726][T10515] EXT4-fs warning (device loop3): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 191.545074][T10515] EXT4-fs (loop3): 1 orphan inode deleted [ 191.551296][T10515] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 191.554230][ T3301] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 191.578351][ T3720] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:10: lblock 1 mapped to illegal pblock 1 (length 1) [ 191.596789][ T3720] Quota error (device loop3): remove_tree: Can't read quota data block 1 [ 191.605450][ T3720] EXT4-fs error (device loop3): ext4_release_dquot:6969: comm kworker/u8:10: Failed to release dquot type 0 [ 191.622366][T10515] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #3: block 48: comm syz.3.2298: lblock 0 mapped to illegal pblock 48 (length 1) [ 191.647764][T10528] loop2: detected capacity change from 0 to 512 [ 191.659195][T10515] Quota error (device loop3): v2_read_header: Failed header read: expected=8 got=-117 [ 191.669070][T10528] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349) [ 191.679665][T10528] EXT4-fs (loop2): orphan cleanup on readonly fs [ 191.686434][T10528] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:517: comm syz.2.2302: Block bitmap for bg 0 marked uninitialized [ 191.722777][ T3307] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 191.738744][T10528] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 191.767010][T10528] EXT4-fs (loop2): 1 orphan inode deleted [ 191.781205][T10528] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 191.813499][T10528] EXT4-fs: Ignoring sb option on remount [ 191.819220][T10528] EXT4-fs: Ignoring removed orlov option [ 191.824967][T10528] EXT4-fs: Ignoring removed nomblk_io_submit option [ 191.831564][T10528] EXT4-fs: Remounting fs w/o journal so ignoring data_err option [ 191.839418][T10528] EXT4-fs (loop2): warning: mounting fs with errors, running e2fsck is recommended [ 191.849033][T10528] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 191.861117][T10536] netlink: 'syz.5.2294': attribute type 1 has an invalid length. [ 191.868906][T10536] netlink: 152 bytes leftover after parsing attributes in process `syz.5.2294'. [ 191.877978][T10536] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 191.894106][ T3301] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 191.936005][T10542] loop3: detected capacity change from 0 to 512 [ 191.944887][T10542] EXT4-fs (loop3): mounted filesystem 00800000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 191.963062][T10542] EXT4-fs warning (device loop3): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 191.983801][T10542] netlink: 'syz.3.2309': attribute type 4 has an invalid length. [ 192.004860][T10546] loop2: detected capacity change from 0 to 512 [ 192.011655][T10546] EXT4-fs: Ignoring removed oldalloc option [ 192.018202][T10546] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 192.019144][ T8386] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 192.033969][T10546] EXT4-fs (loop2): 1 truncate cleaned up [ 192.044268][T10546] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 192.066188][ T3307] EXT4-fs (loop3): unmounting filesystem 00800000-0000-0000-0000-000000000000. [ 192.087637][ T3301] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 192.096739][T10553] loop3: detected capacity change from 0 to 1024 [ 192.111566][T10551] syzkaller0: entered promiscuous mode [ 192.117255][T10551] syzkaller0: entered allmulticast mode [ 192.127136][T10553] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 192.139590][T10555] loop2: detected capacity change from 0 to 1024 [ 192.139921][T10553] ext4 filesystem being mounted at /473/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 192.146507][T10555] EXT4-fs: Ignoring removed bh option [ 192.162338][T10555] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 192.168432][T10553] EXT4-fs error (device loop3): ext4_map_blocks:814: inode #15: block 1: comm syz.3.2312: lblock 1 mapped to illegal pblock 1 (length 15) [ 192.174447][T10555] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 192.187178][T10553] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 15 with error 117 [ 192.196069][T10555] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #3: block 2: comm syz.2.2314: lblock 2 mapped to illegal pblock 2 (length 1) [ 192.207352][T10553] EXT4-fs (loop3): This should not happen!! Data will be lost [ 192.207352][T10553] [ 192.222487][T10555] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #3: block 48: comm syz.2.2314: lblock 0 mapped to illegal pblock 48 (length 1) [ 192.233480][T10553] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 192.245801][T10555] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.2314: Failed to acquire dquot type 0 [ 192.271434][T10559] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #15: block 1: comm syz.3.2312: lblock 1 mapped to illegal pblock 1 (length 3) [ 192.285526][T10555] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 192.286962][T10559] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #15: block 1: comm syz.3.2312: lblock 1 mapped to illegal pblock 1 (length 3) [ 192.310514][T10559] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #15: block 1: comm syz.3.2312: lblock 1 mapped to illegal pblock 1 (length 3) [ 192.312332][T10555] EXT4-fs error (device loop2): ext4_evict_inode:254: inode #11: comm syz.2.2314: mark_inode_dirty error [ 192.336256][T10555] EXT4-fs warning (device loop2): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 192.347808][T10555] EXT4-fs (loop2): 1 orphan inode deleted [ 192.348121][T10559] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #15: block 1: comm syz.3.2312: lblock 1 mapped to illegal pblock 1 (length 3) [ 192.354023][T10555] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 192.381096][ T31] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:1: lblock 1 mapped to illegal pblock 1 (length 1) [ 192.395665][ T31] EXT4-fs error (device loop2): ext4_release_dquot:6969: comm kworker/u8:1: Failed to release dquot type 0 [ 192.408091][T10555] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #3: block 48: comm syz.2.2314: lblock 0 mapped to illegal pblock 48 (length 1) [ 192.434274][ T3307] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 192.454459][ T3301] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 192.486075][T10565] loop0: detected capacity change from 0 to 512 [ 192.493772][T10565] EXT4-fs: Ignoring removed mblk_io_submit option [ 192.523542][T10571] loop2: detected capacity change from 0 to 512 [ 192.523582][T10565] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 192.543922][T10571] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349) [ 192.544607][T10565] EXT4-fs (loop0): 1 truncate cleaned up [ 192.562408][T10571] EXT4-fs (loop2): orphan cleanup on readonly fs [ 192.563724][T10577] loop4: detected capacity change from 0 to 512 [ 192.569611][T10565] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 192.576270][T10577] EXT4-fs: Ignoring removed orlov option [ 192.587785][T10571] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:517: comm syz.2.2317: Block bitmap for bg 0 marked uninitialized [ 192.598143][T10577] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 192.607864][T10571] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 192.633600][T10577] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8042c119, mo2=0002] [ 192.643052][T10571] EXT4-fs (loop2): 1 orphan inode deleted [ 192.650955][T10577] EXT4-fs error (device loop4): ext4_iget_extra_inode:5104: inode #15: comm syz.4.2321: corrupted in-inode xattr: e_value size too large [ 192.672772][T10571] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 192.678195][ T3300] EXT4-fs error (device loop0): ext4_readdir:264: inode #11: block 54: comm syz-executor: path /483/bus/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 192.709937][T10577] EXT4-fs error (device loop4): ext4_orphan_get:1397: comm syz.4.2321: couldn't read orphan inode 15 (err -117) [ 192.722924][T10577] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 192.730003][T10584] loop5: detected capacity change from 0 to 512 [ 192.736740][ T3300] EXT4-fs error (device loop0): ext4_empty_dir:3124: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 192.761420][ T3300] EXT4-fs error (device loop0): ext4_readdir:264: inode #11: block 54: comm syz-executor: path /483/bus/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 192.785251][T10584] EXT4-fs (loop5): mounted filesystem 00800000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 192.799802][ T3300] EXT4-fs error (device loop0): ext4_empty_dir:3124: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 192.823978][ T3300] EXT4-fs error (device loop0): ext4_readdir:264: inode #11: block 54: comm syz-executor: path /483/bus/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 192.846917][ T3300] EXT4-fs error (device loop0): ext4_empty_dir:3124: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 192.870153][T10571] EXT4-fs: Ignoring sb option on remount [ 192.871646][T10577] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2321'. [ 192.875886][T10571] EXT4-fs: Ignoring removed orlov option [ 192.881687][T10588] netlink: 'syz.5.2325': attribute type 4 has an invalid length. [ 192.900182][T10571] EXT4-fs: Ignoring removed nomblk_io_submit option [ 192.907061][T10571] EXT4-fs: Remounting fs w/o journal so ignoring data_err option [ 192.916377][T10571] EXT4-fs (loop2): warning: mounting fs with errors, running e2fsck is recommended [ 192.926711][T10584] EXT4-fs warning (device loop5): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 192.942661][T10571] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 192.951603][ T3300] EXT4-fs error (device loop0): ext4_readdir:264: inode #11: block 54: comm syz-executor: path /483/bus/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 192.986713][ T3301] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 192.999117][ T3300] EXT4-fs error (device loop0): ext4_empty_dir:3124: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 193.024457][ T3300] EXT4-fs error (device loop0): ext4_readdir:264: inode #11: block 54: comm syz-executor: path /483/bus/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 193.048937][ T3300] EXT4-fs error (device loop0): ext4_empty_dir:3124: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 193.081626][T10590] loop2: detected capacity change from 0 to 1024 [ 193.095563][ T8386] EXT4-fs (loop5): unmounting filesystem 00800000-0000-0000-0000-000000000000. [ 193.131898][T10590] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 193.150132][T10590] ext4 filesystem being mounted at /485/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 193.186107][T10594] loop5: detected capacity change from 0 to 1024 [ 193.201538][ T3300] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 193.221494][T10594] EXT4-fs: Ignoring removed bh option [ 193.227792][T10590] EXT4-fs error (device loop2): ext4_map_blocks:814: inode #15: block 1: comm syz.2.2327: lblock 1 mapped to illegal pblock 1 (length 15) [ 193.246019][T10594] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 193.257350][T10590] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 15 with error 117 [ 193.269761][T10590] EXT4-fs (loop2): This should not happen!! Data will be lost [ 193.269761][T10590] [ 193.277724][T10594] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 193.282662][T10590] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 193.288616][T10594] EXT4-fs error (device loop5): ext4_map_blocks:778: inode #3: block 2: comm syz.5.2328: lblock 2 mapped to illegal pblock 2 (length 1) [ 193.317630][T10594] EXT4-fs error (device loop5): ext4_map_blocks:778: inode #3: block 48: comm syz.5.2328: lblock 0 mapped to illegal pblock 48 (length 1) [ 193.319734][T10590] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #15: block 1: comm syz.2.2327: lblock 1 mapped to illegal pblock 1 (length 3) [ 193.333636][T10594] EXT4-fs error (device loop5): ext4_acquire_dquot:6933: comm syz.5.2328: Failed to acquire dquot type 0 [ 193.358345][T10594] EXT4-fs error (device loop5) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 193.363106][T10597] netlink: 'syz.4.2321': attribute type 1 has an invalid length. [ 193.367977][T10594] EXT4-fs error (device loop5): ext4_evict_inode:254: inode #11: comm syz.5.2328: mark_inode_dirty error [ 193.375716][T10597] netlink: 152 bytes leftover after parsing attributes in process `syz.4.2321'. [ 193.388184][T10594] EXT4-fs warning (device loop5): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 193.395979][T10597] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 193.407045][T10594] EXT4-fs (loop5): 1 orphan inode deleted [ 193.427981][ T3720] EXT4-fs error (device loop5): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:10: lblock 1 mapped to illegal pblock 1 (length 1) [ 193.443361][T10589] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #15: block 1: comm syz.2.2327: lblock 1 mapped to illegal pblock 1 (length 3) [ 193.443402][ T3720] EXT4-fs error (device loop5): ext4_release_dquot:6969: comm kworker/u8:10: Failed to release dquot type 0 [ 193.470172][T10594] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 193.483040][T10590] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #15: block 1: comm syz.2.2327: lblock 1 mapped to illegal pblock 1 (length 3) [ 193.497555][T10589] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #15: block 1: comm syz.2.2327: lblock 1 mapped to illegal pblock 1 (length 3) [ 193.524200][T10594] EXT4-fs error (device loop5): ext4_map_blocks:778: inode #3: block 48: comm syz.5.2328: lblock 0 mapped to illegal pblock 48 (length 1) [ 193.539346][T10594] __quota_error: 9 callbacks suppressed [ 193.539366][T10594] Quota error (device loop5): v2_read_header: Failed header read: expected=8 got=-117 [ 193.540196][T10589] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #15: block 1: comm syz.2.2327: lblock 1 mapped to illegal pblock 1 (length 3) [ 193.569295][T10589] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #15: block 1: comm syz.2.2327: lblock 1 mapped to illegal pblock 1 (length 3) [ 193.601595][ T8386] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 193.610994][T10590] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #15: block 1: comm syz.2.2327: lblock 1 mapped to illegal pblock 1 (length 3) [ 193.628481][T10590] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #15: block 1: comm syz.2.2327: lblock 1 mapped to illegal pblock 1 (length 3) [ 193.645379][ T51] bond0 (unregistering): Released all slaves [ 193.652817][ T3311] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 193.824654][T10616] loop5: detected capacity change from 0 to 512 [ 193.831249][ T51] hsr_slave_0: left promiscuous mode [ 193.832238][T10616] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 193.846639][ T51] hsr_slave_1: left promiscuous mode [ 193.889730][T10616] EXT4-fs (loop5): 1 truncate cleaned up [ 193.923733][ T3301] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 193.925095][T10616] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 193.987495][T10624] loop2: detected capacity change from 0 to 512 [ 194.007041][T10624] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349) [ 194.019387][T10624] EXT4-fs (loop2): orphan cleanup on readonly fs [ 194.053401][T10624] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:517: comm syz.2.2337: Block bitmap for bg 0 marked uninitialized [ 194.067174][T10624] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 194.082565][T10624] EXT4-fs (loop2): 1 orphan inode deleted [ 194.088950][T10624] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 194.125975][T10598] chnl_net:caif_netlink_parms(): no params data found [ 194.154332][T10624] EXT4-fs: Ignoring sb option on remount [ 194.160039][T10624] EXT4-fs: Ignoring removed orlov option [ 194.166190][T10624] EXT4-fs: Ignoring removed nomblk_io_submit option [ 194.175360][T10624] EXT4-fs: Remounting fs w/o journal so ignoring data_err option [ 194.183466][T10624] EXT4-fs (loop2): warning: mounting fs with errors, running e2fsck is recommended [ 194.196001][T10624] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 194.217415][ T3301] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 194.278929][T10634] loop2: detected capacity change from 0 to 8192 [ 194.305022][T10598] bridge0: port 1(bridge_slave_0) entered blocking state [ 194.312234][T10598] bridge0: port 1(bridge_slave_0) entered disabled state [ 194.321177][T10598] bridge_slave_0: entered allmulticast mode [ 194.327761][T10598] bridge_slave_0: entered promiscuous mode [ 194.335586][T10598] bridge0: port 2(bridge_slave_1) entered blocking state [ 194.342829][T10598] bridge0: port 2(bridge_slave_1) entered disabled state [ 194.350548][T10634] loop2: p1 p2 p3 p4[DM] [ 194.355821][T10634] loop2: p1 size 835331 extends beyond EOD, truncated [ 194.363545][T10634] loop2: p2 size 16777223 extends beyond EOD, truncated [ 194.371035][T10634] loop2: p3 start 1052673 is beyond EOD, truncated [ 194.377641][T10634] loop2: p4 size 262144 extends beyond EOD, truncated [ 194.385572][T10598] bridge_slave_1: entered allmulticast mode [ 194.392328][T10598] bridge_slave_1: entered promiscuous mode [ 194.427681][ T29] audit: type=1326 audit(1755285805.097:5266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10633 comm="syz.2.2338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe0a1cebe9 code=0x7ffc0000 [ 194.451337][ T29] audit: type=1326 audit(1755285805.097:5267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10633 comm="syz.2.2338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7efe0a1cebe9 code=0x7ffc0000 [ 194.474926][ T29] audit: type=1326 audit(1755285805.097:5268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10633 comm="syz.2.2338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe0a1cebe9 code=0x7ffc0000 [ 194.510608][T10611] syz.5.2334 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 194.524820][T10611] CPU: 1 UID: 0 PID: 10611 Comm: syz.5.2334 Not tainted 6.17.0-rc1-syzkaller-00165-gee94b00c1a64 #0 PREEMPT(voluntary) [ 194.524859][T10611] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 194.524943][T10611] Call Trace: [ 194.524950][T10611] [ 194.524959][T10611] __dump_stack+0x1d/0x30 [ 194.524987][T10611] dump_stack_lvl+0xe8/0x140 [ 194.525010][T10611] dump_stack+0x15/0x1b [ 194.525032][T10611] dump_header+0x81/0x220 [ 194.525084][T10611] oom_kill_process+0x342/0x400 [ 194.525129][T10611] out_of_memory+0x979/0xb80 [ 194.525260][T10611] try_charge_memcg+0x5e6/0x9e0 [ 194.525321][T10611] obj_cgroup_charge_pages+0xa6/0x150 [ 194.525408][T10611] __memcg_kmem_charge_page+0x9f/0x170 [ 194.525445][T10611] __alloc_frozen_pages_noprof+0x188/0x360 [ 194.525490][T10611] alloc_pages_mpol+0xb3/0x250 [ 194.525534][T10611] alloc_pages_noprof+0x90/0x130 [ 194.525570][T10611] __vmalloc_node_range_noprof+0x6f2/0xe00 [ 194.525683][T10611] __kvmalloc_node_noprof+0x30f/0x4e0 [ 194.525717][T10611] ? ip_set_alloc+0x1f/0x30 [ 194.525753][T10611] ? ip_set_alloc+0x1f/0x30 [ 194.525787][T10611] ? __kmalloc_cache_noprof+0x189/0x320 [ 194.525888][T10611] ip_set_alloc+0x1f/0x30 [ 194.525929][T10611] hash_netiface_create+0x282/0x740 [ 194.525969][T10611] ? __pfx_hash_netiface_create+0x10/0x10 [ 194.526049][T10611] ip_set_create+0x3c9/0x960 [ 194.526081][T10611] ? __nla_parse+0x40/0x60 [ 194.526108][T10611] nfnetlink_rcv_msg+0x4c6/0x590 [ 194.526182][T10611] netlink_rcv_skb+0x120/0x220 [ 194.526202][T10611] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 194.526312][T10611] nfnetlink_rcv+0x16b/0x1690 [ 194.526370][T10611] ? __list_del_entry_valid_or_report+0x65/0x130 [ 194.526404][T10611] ? __rmqueue_pcplist+0x9d2/0xbd0 [ 194.526443][T10611] ? should_fail_ex+0x30/0x280 [ 194.526465][T10611] ? selinux_nlmsg_lookup+0x99/0x890 [ 194.526550][T10611] ? __rcu_read_unlock+0x34/0x70 [ 194.526581][T10611] ? __netlink_lookup+0x266/0x2a0 [ 194.526609][T10611] netlink_unicast+0x5c0/0x690 [ 194.526760][T10611] netlink_sendmsg+0x58b/0x6b0 [ 194.526786][T10611] ? __pfx_netlink_sendmsg+0x10/0x10 [ 194.526883][T10611] __sock_sendmsg+0x145/0x180 [ 194.526920][T10611] ____sys_sendmsg+0x31e/0x4e0 [ 194.526948][T10611] ___sys_sendmsg+0x17b/0x1d0 [ 194.526987][T10611] __x64_sys_sendmsg+0xd4/0x160 [ 194.527032][T10611] x64_sys_call+0x191e/0x2ff0 [ 194.527056][T10611] do_syscall_64+0xd2/0x200 [ 194.527085][T10611] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 194.527181][T10611] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 194.527209][T10611] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 194.527233][T10611] RIP: 0033:0x7f1f2322ebe9 [ 194.527249][T10611] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 194.527313][T10611] RSP: 002b:00007f1f21c8f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 194.527367][T10611] RAX: ffffffffffffffda RBX: 00007f1f23455fa0 RCX: 00007f1f2322ebe9 [ 194.527453][T10611] RDX: 0000000000000800 RSI: 0000200000000040 RDI: 0000000000000003 [ 194.527467][T10611] RBP: 00007f1f232b1e19 R08: 0000000000000000 R09: 0000000000000000 [ 194.527480][T10611] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 194.527493][T10611] R13: 00007f1f23456038 R14: 00007f1f23455fa0 R15: 00007ffccebf08d8 [ 194.527514][T10611] [ 194.527525][T10611] memory: usage 307200kB, limit 307200kB, failcnt 624 [ 194.566448][T10636] loop4: detected capacity change from 0 to 512 [ 194.569638][T10611] memory+swap: usage 307664kB, limit 9007199254740988kB, failcnt 0 [ 194.569659][T10611] kmem: usage 307176kB, limit 9007199254740988kB, failcnt 0 [ 194.582775][T10636] EXT4-fs: Ignoring removed mblk_io_submit option [ 194.583617][T10611] Memory cgroup stats for [ 194.609429][T10636] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 194.610269][T10611] /syz5 [ 194.663457][T10636] EXT4-fs (loop4): 1 truncate cleaned up [ 194.665938][T10611] : [ 194.671364][T10636] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 194.693225][T10611] cache 12288 [ 194.699912][ T29] audit: type=1326 audit(1755285805.197:5269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10633 comm="syz.2.2338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7efe0a1cebe9 code=0x7ffc0000 [ 194.702414][T10611] rss 4096 [ 194.707661][ T29] audit: type=1326 audit(1755285805.207:5270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10633 comm="syz.2.2338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe0a1cebe9 code=0x7ffc0000 [ 194.712624][T10611] shmem 0 [ 194.712636][T10611] mapped_file 0 [ 194.712658][T10611] dirty 0 [ 194.712667][T10611] writeback 12288 [ 194.712676][T10611] workingset_refault_anon 210 [ 194.712685][T10611] workingset_refault_file 6 [ 194.712693][T10611] swap 475136 [ 194.712699][T10611] swapcached 4096 [ 194.712706][T10611] pgpgin 24207 [ 194.717766][ T29] audit: type=1326 audit(1755285805.217:5271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10633 comm="syz.2.2338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe0a1cebe9 code=0x7ffc0000 [ 194.722703][T10611] pgpgout 24201 [ 194.722712][T10611] pgfault 26055 [ 194.722720][T10611] pgmajfault 104 [ 194.722727][T10611] inactive_anon 4096 [ 194.727494][ T29] audit: type=1326 audit(1755285805.217:5272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10633 comm="syz.2.2338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7efe0a1cebe9 code=0x7ffc0000 [ 194.732825][T10611] active_anon 0 [ 194.737475][ T29] audit: type=1326 audit(1755285805.217:5273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10633 comm="syz.2.2338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe0a1cebe9 code=0x7ffc0000 [ 194.742257][T10611] inactive_file 12288 [ 194.742301][T10611] active_file 8192 [ 194.746976][ T29] audit: type=1326 audit(1755285805.217:5274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10633 comm="syz.2.2338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7efe0a1cebe9 code=0x7ffc0000 [ 194.751884][T10611] unevictable 0 [ 194.751895][T10611] hierarchical_memory_limit 314572800 [ 194.751908][T10611] hierarchical_memsw_limit 9223372036854771712 [ 195.147297][T10611] total_cache 12288 [ 195.151210][T10611] total_rss 4096 [ 195.154835][T10611] total_shmem 0 [ 195.158308][T10611] total_mapped_file 0 [ 195.162349][T10611] total_dirty 0 [ 195.165826][T10611] total_writeback 12288 [ 195.170007][T10611] total_workingset_refault_anon 210 [ 195.175235][T10611] total_workingset_refault_file 6 [ 195.180333][T10611] total_swap 475136 [ 195.184178][T10611] total_swapcached 4096 [ 195.188341][T10611] total_pgpgin 24207 [ 195.192336][T10611] total_pgpgout 24201 [ 195.196417][T10611] total_pgfault 26055 [ 195.200408][T10611] total_pgmajfault 104 [ 195.204511][T10611] total_inactive_anon 4096 [ 195.208977][T10611] total_active_anon 0 [ 195.212986][T10611] total_inactive_file 12288 [ 195.217498][T10611] total_active_file 8192 [ 195.221787][T10611] total_unevictable 0 [ 195.225805][T10611] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz5,task_memcg=/syz5,task=syz.5.2334,pid=10609,uid=0 [ 195.240592][T10611] Memory cgroup out of memory: Killed process 10609 (syz.5.2334) total-vm:93896kB, anon-rss:1072kB, file-rss:22312kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 195.274657][T10598] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 195.295955][T10598] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 195.385970][T10598] team0: Port device team_slave_0 added [ 195.395755][T10598] team0: Port device team_slave_1 added [ 195.407817][ T3311] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 195.441353][T10598] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 195.448456][T10598] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 195.474560][T10598] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 195.495878][T10634] netlink: 'syz.2.2338': attribute type 27 has an invalid length. [ 195.528384][T10648] loop4: detected capacity change from 0 to 128 [ 195.539696][T10598] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 195.546869][T10598] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 195.572921][T10598] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 195.603891][T10648] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 195.611808][T10648] FAT-fs (loop4): Filesystem has been set read-only [ 195.620361][T10648] bio_check_eod: 26669 callbacks suppressed [ 195.620401][T10648] syz.4.2342: attempt to access beyond end of device [ 195.620401][T10648] loop4: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 195.641677][T10648] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 195.644199][T10598] hsr_slave_0: entered promiscuous mode [ 195.649686][T10648] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 195.656567][T10598] hsr_slave_1: entered promiscuous mode [ 195.663603][T10648] syz.4.2342: attempt to access beyond end of device [ 195.663603][T10648] loop4: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 195.682253][T10598] debugfs: 'hsr0' already exists in 'hsr' [ 195.682824][ T8386] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 195.688127][T10598] Cannot create hsr debugfs directory [ 195.699158][T10648] syz.4.2342: attempt to access beyond end of device [ 195.699158][T10648] loop4: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 195.716430][T10648] syz.4.2342: attempt to access beyond end of device [ 195.716430][T10648] loop4: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 195.741440][T10656] syz.4.2342: attempt to access beyond end of device [ 195.741440][T10656] loop4: rw=0, sector=2065, nr_sectors = 1 limit=128 [ 195.754834][T10656] buffer_io_error: 25838 callbacks suppressed [ 195.754855][T10656] Buffer I/O error on dev loop4, logical block 2065, async page read [ 195.778231][T10659] loop3: detected capacity change from 0 to 1024 [ 195.788507][T10656] syz.4.2342: attempt to access beyond end of device [ 195.788507][T10656] loop4: rw=0, sector=2066, nr_sectors = 1 limit=128 [ 195.801806][T10656] Buffer I/O error on dev loop4, logical block 2066, async page read [ 195.805268][T10659] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 195.810903][T10656] syz.4.2342: attempt to access beyond end of device [ 195.810903][T10656] loop4: rw=0, sector=2067, nr_sectors = 1 limit=128 [ 195.822676][T10659] ext4 filesystem being mounted at /484/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 195.836049][T10656] Buffer I/O error on dev loop4, logical block 2067, async page read [ 195.857390][T10656] syz.4.2342: attempt to access beyond end of device [ 195.857390][T10656] loop4: rw=0, sector=2068, nr_sectors = 1 limit=128 [ 195.870722][T10656] Buffer I/O error on dev loop4, logical block 2068, async page read [ 195.881702][T10656] syz.4.2342: attempt to access beyond end of device [ 195.881702][T10656] loop4: rw=0, sector=2069, nr_sectors = 1 limit=128 [ 195.894301][T10659] EXT4-fs error (device loop3): ext4_map_blocks:814: inode #15: block 1: comm syz.3.2347: lblock 1 mapped to illegal pblock 1 (length 15) [ 195.895015][T10656] Buffer I/O error on dev loop4, logical block 2069, async page read [ 195.895111][T10656] syz.4.2342: attempt to access beyond end of device [ 195.895111][T10656] loop4: rw=0, sector=2070, nr_sectors = 1 limit=128 [ 195.909921][T10659] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 15 with error 117 [ 195.917373][T10656] Buffer I/O error on dev loop4, logical block 2070, async page read [ 195.930603][T10659] EXT4-fs (loop3): This should not happen!! Data will be lost [ 195.930603][T10659] [ 195.943283][T10656] Buffer I/O error on dev loop4, logical block 2071, async page read [ 195.954529][T10659] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1289: group 0, [ 195.960937][T10656] Buffer I/O error on dev loop4, logical block 2072, async page read [ 195.968927][T10659] block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 195.977462][T10656] Buffer I/O error on dev loop4, logical block 2065, async page read [ 195.994899][T10660] syzkaller0: entered promiscuous mode [ 196.007774][T10660] syzkaller0: entered allmulticast mode [ 196.009149][T10656] Buffer I/O error on dev loop4, logical block 2066, async page read [ 196.021533][T10659] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #15: block 1: comm syz.3.2347: lblock 1 mapped to illegal pblock 1 (length 3) [ 196.060415][T10598] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 196.069483][T10598] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 196.076392][T10657] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #15: block 1: comm syz.3.2347: lblock 1 mapped to illegal pblock 1 (length 3) [ 196.101557][T10657] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #15: block 1: comm syz.3.2347: lblock 1 mapped to illegal pblock 1 (length 3) [ 196.104058][T10598] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 196.124558][T10657] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #15: block 1: comm syz.3.2347: lblock 1 mapped to illegal pblock 1 (length 3) [ 196.142410][T10659] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #15: block 1: comm syz.3.2347: lblock 1 mapped to illegal pblock 1 (length 3) [ 196.157633][T10670] loop5: detected capacity change from 0 to 512 [ 196.167267][T10598] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 196.175591][T10659] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #15: block 1: comm syz.3.2347: lblock 1 mapped to illegal pblock 1 (length 3) [ 196.192509][T10670] EXT4-fs (loop5): mounted filesystem 00800000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 196.207682][T10657] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #15: block 1: comm syz.3.2347: lblock 1 mapped to illegal pblock 1 (length 3) [ 196.225151][T10659] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #15: block 1: comm syz.3.2347: lblock 1 mapped to illegal pblock 1 (length 3) [ 196.243526][T10670] EXT4-fs warning (device loop5): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 196.294419][T10680] tmpfs: Unknown parameter '0x0000000000000006' [ 196.302461][T10598] 8021q: adding VLAN 0 to HW filter on device bond0 [ 196.303252][T10680] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 196.314952][T10598] 8021q: adding VLAN 0 to HW filter on device team0 [ 196.326033][T10680] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 196.358000][T10682] loop4: detected capacity change from 0 to 128 [ 196.360731][ T3718] bridge0: port 1(bridge_slave_0) entered blocking state [ 196.371429][ T3718] bridge0: port 1(bridge_slave_0) entered forwarding state [ 196.380816][ T3718] bridge0: port 2(bridge_slave_1) entered blocking state [ 196.387368][T10682] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 196.387938][ T3718] bridge0: port 2(bridge_slave_1) entered forwarding state [ 196.395751][T10682] FAT-fs (loop4): Filesystem has been set read-only [ 196.416494][T10682] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 196.418001][T10670] netlink: 'syz.5.2349': attribute type 4 has an invalid length. [ 196.424450][T10682] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 196.444541][T10680] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2350'. [ 196.554667][T10598] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 196.567178][ T8386] EXT4-fs (loop5): unmounting filesystem 00800000-0000-0000-0000-000000000000. [ 196.674695][ T3307] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 196.707605][T10696] loop3: detected capacity change from 0 to 512 [ 196.725932][T10696] EXT4-fs: Ignoring removed mblk_io_submit option [ 196.741458][T10696] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 196.778796][T10696] EXT4-fs (loop3): 1 truncate cleaned up [ 196.785171][T10696] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 196.855586][ T3307] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 196.895240][T10598] veth0_vlan: entered promiscuous mode [ 196.903468][T10598] veth1_vlan: entered promiscuous mode [ 196.927831][T10598] veth0_macvtap: entered promiscuous mode [ 196.936824][T10598] veth1_macvtap: entered promiscuous mode [ 196.955049][T10598] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 196.967557][T10598] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 196.990378][ T3446] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 197.004431][ T3446] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 197.021290][ T3446] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 197.041045][T10711] loop3: detected capacity change from 0 to 8192 [ 197.047903][ T3446] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 197.102681][T10711] loop3: p1 p2 p3 p4[DM] [ 197.107081][T10711] loop3: p1 size 835331 extends beyond EOD, truncated [ 197.107233][T10717] loop6: detected capacity change from 0 to 512 [ 197.132550][T10711] loop3: p2 size 16777223 extends beyond EOD, truncated [ 197.140146][T10711] loop3: p3 start 1052673 is beyond EOD, truncated [ 197.146717][T10711] loop3: p4 size 262144 extends beyond EOD, truncated [ 197.158096][T10717] EXT4-fs: Ignoring removed oldalloc option [ 197.184089][T10717] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 197.230637][T10717] EXT4-fs (loop6): 1 truncate cleaned up [ 197.245198][T10717] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 197.345536][T10598] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 197.409058][T10725] loop4: detected capacity change from 0 to 1024 [ 197.428065][T10725] EXT4-fs: Ignoring removed bh option [ 197.446635][T10725] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 197.461102][T10727] loop6: detected capacity change from 0 to 512 [ 197.474727][T10725] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 197.478409][T10711] netlink: 'syz.3.2354': attribute type 27 has an invalid length. [ 197.495912][T10727] EXT4-fs (loop6): mounted filesystem 00800000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 197.509738][T10725] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #3: block 2: comm syz.4.2359: lblock 2 mapped to illegal pblock 2 (length 1) [ 197.544366][T10725] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #3: block 48: comm syz.4.2359: lblock 0 mapped to illegal pblock 48 (length 1) [ 197.564067][T10727] EXT4-fs warning (device loop6): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 197.584925][T10725] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.2359: Failed to acquire dquot type 0 [ 197.598006][T10725] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 197.613486][T10725] EXT4-fs error (device loop4): ext4_evict_inode:254: inode #11: comm syz.4.2359: mark_inode_dirty error [ 197.616431][T10734] syzkaller0: entered promiscuous mode [ 197.625912][T10725] EXT4-fs warning (device loop4): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 197.630312][T10734] syzkaller0: entered allmulticast mode [ 197.641449][T10736] netlink: 'syz.6.2358': attribute type 4 has an invalid length. [ 197.646901][T10725] EXT4-fs (loop4): 1 orphan inode deleted [ 197.660331][T10725] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 197.673029][ T31] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:1: lblock 1 mapped to illegal pblock 1 (length 1) [ 197.689559][ T31] EXT4-fs error (device loop4): ext4_release_dquot:6969: comm kworker/u8:1: Failed to release dquot type 0 [ 197.701565][T10725] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #3: block 48: comm syz.4.2359: lblock 0 mapped to illegal pblock 48 (length 1) [ 197.730058][ T3311] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 197.739323][T10738] loop3: detected capacity change from 0 to 128 [ 197.747759][T10738] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 197.755679][T10738] FAT-fs (loop3): Filesystem has been set read-only [ 197.762495][T10738] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 197.770330][T10738] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 197.789866][T10740] loop2: detected capacity change from 0 to 512 [ 197.800546][T10598] EXT4-fs (loop6): unmounting filesystem 00800000-0000-0000-0000-000000000000. [ 197.810176][T10740] EXT4-fs: Ignoring removed mblk_io_submit option [ 197.824288][T10743] loop4: detected capacity change from 0 to 512 [ 197.831236][T10745] tmpfs: Unknown parameter '0x0000000000000006' [ 197.840795][T10743] EXT4-fs (loop4): mounted filesystem 00800000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 197.840878][T10745] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 197.863492][T10745] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 197.871582][T10740] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 197.882471][T10745] netlink: 32 bytes leftover after parsing attributes in process `syz.6.2365'. [ 197.897353][T10748] netlink: 'syz.4.2363': attribute type 4 has an invalid length. [ 197.902688][T10743] EXT4-fs warning (device loop4): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 197.934184][T10740] EXT4-fs (loop2): 1 truncate cleaned up [ 197.942876][T10740] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 197.968320][T10751] loop5: detected capacity change from 0 to 128 [ 197.984305][T10751] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000100) [ 197.992187][T10751] FAT-fs (loop5): Filesystem has been set read-only [ 198.018373][ T3311] EXT4-fs (loop4): unmounting filesystem 00800000-0000-0000-0000-000000000000. [ 198.028404][T10751] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000100) [ 198.036302][T10751] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000100) [ 198.046868][ T3301] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 198.097990][T10756] loop2: detected capacity change from 0 to 1024 [ 198.125692][T10756] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 198.150224][T10761] loop4: detected capacity change from 0 to 512 [ 198.152500][T10756] ext4 filesystem being mounted at /494/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 198.168996][T10761] EXT4-fs: Ignoring removed oldalloc option [ 198.262354][T10761] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 198.398731][T10763] EXT4-fs error (device loop2): ext4_map_blocks:814: inode #15: block 1: comm syz.2.2368: lblock 1 mapped to illegal pblock 1 (length 15) [ 198.436262][T10763] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 15 with error 117 [ 198.448764][T10763] EXT4-fs (loop2): This should not happen!! Data will be lost [ 198.448764][T10763] [ 198.463539][T10761] EXT4-fs (loop4): 1 truncate cleaned up [ 198.472743][T10761] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 198.652681][ T3311] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 198.664102][T10763] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 198.804073][ T3446] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 128 with max blocks 192 with error 28 [ 198.816908][ T3446] EXT4-fs (loop2): This should not happen!! Data will be lost [ 198.816908][ T3446] [ 198.826812][ T3446] EXT4-fs (loop2): Total free blocks count 0 [ 198.833028][ T3446] EXT4-fs (loop2): Free/Dirty block details [ 198.838953][ T3446] EXT4-fs (loop2): free_blocks=4293918720 [ 198.844719][ T3446] EXT4-fs (loop2): dirty_blocks=192 [ 198.845849][T10769] loop4: detected capacity change from 0 to 8192 [ 198.849919][ T3446] EXT4-fs (loop2): Block reservation details [ 198.900516][T10778] loop3: detected capacity change from 0 to 512 [ 198.913220][T10778] EXT4-fs (loop3): mounted filesystem 00800000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 198.935758][T10778] __quota_error: 194 callbacks suppressed [ 198.935777][T10778] Quota error (device loop3): v2_read_file_info: Free block number 58381 out of range (1, 6). [ 198.952001][T10778] EXT4-fs warning (device loop3): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 198.967145][T10781] loop2: detected capacity change from 0 to 1024 [ 198.968721][T10769] loop4: p1 p2 p3 p4[DM] [ 198.974067][T10781] EXT4-fs: Ignoring removed bh option [ 198.983902][T10769] loop4: p1 size 835331 extends beyond EOD, truncated [ 198.991354][T10781] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 198.998066][T10778] netlink: 'syz.3.2376': attribute type 4 has an invalid length. [ 199.001946][T10769] loop4: p2 size 16777223 extends beyond EOD, truncated [ 199.017463][T10769] loop4: p3 start 1052673 is beyond EOD, truncated [ 199.024096][T10769] loop4: p4 size 262144 extends beyond EOD, truncated [ 199.033722][T10781] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 199.041951][ T29] audit: type=1326 audit(1755285809.707:5462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10768 comm="syz.4.2371" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1005f3ebe9 code=0x7ffc0000 [ 199.043961][T10781] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #3: block 2: comm syz.2.2373: lblock 2 mapped to illegal pblock 2 (length 1) [ 199.065687][ T29] audit: type=1326 audit(1755285809.707:5463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10768 comm="syz.4.2371" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1005f3ebe9 code=0x7ffc0000 [ 199.080807][T10781] Quota error (device loop2): qtree_write_dquot: dquota write failed [ 199.112222][T10781] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #3: block 48: comm syz.2.2373: lblock 0 mapped to illegal pblock 48 (length 1) [ 199.127899][ T29] audit: type=1326 audit(1755285809.787:5464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10768 comm="syz.4.2371" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1005f3ebe9 code=0x7ffc0000 [ 199.146381][T10781] Quota error (device loop2): v2_write_file_info: Can't write info structure [ 199.151463][ T29] audit: type=1326 audit(1755285809.787:5465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10768 comm="syz.4.2371" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1005f3ebe9 code=0x7ffc0000 [ 199.160231][T10781] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.2373: Failed to acquire dquot type 0 [ 199.183667][ T29] audit: type=1326 audit(1755285809.787:5466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10768 comm="syz.4.2371" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1005f3ebe9 code=0x7ffc0000 [ 199.218472][ T29] audit: type=1326 audit(1755285809.787:5467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10768 comm="syz.4.2371" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1005f3ebe9 code=0x7ffc0000 [ 199.218505][ T29] audit: type=1326 audit(1755285809.787:5468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10768 comm="syz.4.2371" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1005f3ebe9 code=0x7ffc0000 [ 199.284692][T10781] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 199.296510][T10781] EXT4-fs error (device loop2): ext4_evict_inode:254: inode #11: comm syz.2.2373: mark_inode_dirty error [ 199.325074][ T3307] EXT4-fs (loop3): unmounting filesystem 00800000-0000-0000-0000-000000000000. [ 199.334998][T10781] EXT4-fs warning (device loop2): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 199.393386][T10781] EXT4-fs (loop2): 1 orphan inode deleted [ 199.415534][ T3446] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:7: lblock 1 mapped to illegal pblock 1 (length 1) [ 199.443399][ T3446] EXT4-fs error (device loop2): ext4_release_dquot:6969: comm kworker/u8:7: Failed to release dquot type 0 [ 199.459165][T10781] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #3: block 48: comm syz.2.2373: lblock 0 mapped to illegal pblock 48 (length 1) [ 199.482512][T10769] netlink: 'syz.4.2371': attribute type 27 has an invalid length. [ 199.525943][T10792] loop4: detected capacity change from 0 to 512 [ 199.555116][T10794] syzkaller0: entered promiscuous mode [ 199.560644][T10794] syzkaller0: entered allmulticast mode [ 199.569425][T10792] EXT4-fs warning (device loop4): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 199.590568][T10792] netlink: 'syz.4.2378': attribute type 4 has an invalid length. [ 199.627419][T10799] loop2: detected capacity change from 0 to 512 [ 199.634248][T10799] EXT4-fs: Ignoring removed mblk_io_submit option [ 199.641008][T10799] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 199.654046][T10799] EXT4-fs (loop2): 1 truncate cleaned up [ 199.661254][T10802] tmpfs: Unknown parameter '0x0000000000000006' [ 199.670088][T10802] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 199.679054][T10802] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 199.698206][T10802] netlink: 32 bytes leftover after parsing attributes in process `syz.6.2381'. [ 199.714922][T10804] loop2: detected capacity change from 0 to 512 [ 199.721766][T10804] EXT4-fs: Ignoring removed oldalloc option [ 199.729234][T10804] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 199.740806][T10804] EXT4-fs (loop2): 1 truncate cleaned up [ 199.768362][T10808] loop4: detected capacity change from 0 to 128 [ 199.778527][T10808] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 199.786633][T10808] FAT-fs (loop4): Filesystem has been set read-only [ 199.794777][T10808] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 199.802552][T10811] loop2: detected capacity change from 0 to 1024 [ 199.802840][T10808] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 199.830265][T10811] ext4 filesystem being mounted at /499/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 199.842616][T10816] loop5: detected capacity change from 0 to 512 [ 199.853033][T10811] EXT4-fs error (device loop2): ext4_map_blocks:814: inode #15: block 1: comm syz.2.2385: lblock 1 mapped to illegal pblock 1 (length 15) [ 199.868798][T10811] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 15 with error 117 [ 199.881260][T10811] EXT4-fs (loop2): This should not happen!! Data will be lost [ 199.881260][T10811] [ 199.892447][T10816] EXT4-fs warning (device loop5): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 199.908146][T10811] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 199.927008][T10821] loop3: detected capacity change from 0 to 128 [ 199.956082][T10821] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 199.964046][T10821] FAT-fs (loop3): Filesystem has been set read-only [ 199.973699][T10821] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 199.981805][T10821] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 199.990794][T10816] netlink: 'syz.5.2387': attribute type 4 has an invalid length. [ 200.127020][T10828] loop2: detected capacity change from 0 to 8192 [ 200.170576][T10830] loop5: detected capacity change from 0 to 1024 [ 200.179608][T10830] EXT4-fs: Ignoring removed bh option [ 200.192191][T10830] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 200.203559][T10828] loop2: p1 p2 p3 p4[DM] [ 200.208033][T10828] loop2: p1 size 835331 extends beyond EOD, truncated [ 200.221053][T10828] loop2: p2 size 16777223 extends beyond EOD, truncated [ 200.237027][T10828] loop2: p3 start 1052673 is beyond EOD, truncated [ 200.243658][T10828] loop2: p4 size 262144 extends beyond EOD, truncated [ 200.258559][T10830] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 200.273660][T10830] EXT4-fs error (device loop5): ext4_map_blocks:778: inode #3: block 2: comm syz.5.2390: lblock 2 mapped to illegal pblock 2 (length 1) [ 200.447288][T10830] EXT4-fs error (device loop5): ext4_map_blocks:778: inode #3: block 48: comm syz.5.2390: lblock 0 mapped to illegal pblock 48 (length 1) [ 200.463840][T10830] EXT4-fs error (device loop5): ext4_acquire_dquot:6933: comm syz.5.2390: Failed to acquire dquot type 0 [ 200.475653][T10830] EXT4-fs error (device loop5) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 200.524708][T10830] EXT4-fs error (device loop5): ext4_evict_inode:254: inode #11: comm syz.5.2390: mark_inode_dirty error [ 200.582421][T10830] EXT4-fs warning (device loop5): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 200.622294][T10821] bio_check_eod: 282494 callbacks suppressed [ 200.622317][T10821] syz.3.2386: attempt to access beyond end of device [ 200.622317][T10821] loop3: rw=0, sector=2069, nr_sectors = 1 limit=128 [ 200.626610][T10830] EXT4-fs (loop5): 1 orphan inode deleted [ 200.628452][T10821] syz.3.2386: attempt to access beyond end of device [ 200.628452][T10821] loop3: rw=0, sector=2070, nr_sectors = 1 limit=128 [ 200.652016][ T3446] EXT4-fs error (device loop5): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:7: lblock 1 mapped to illegal pblock 1 (length 1) [ 200.660732][T10821] syz.3.2386: attempt to access beyond end of device [ 200.660732][T10821] loop3: rw=0, sector=2071, nr_sectors = 1 limit=128 [ 200.703417][T10821] syz.3.2386: attempt to access beyond end of device [ 200.703417][T10821] loop3: rw=0, sector=2072, nr_sectors = 1 limit=128 [ 200.718416][ T3446] EXT4-fs error (device loop5): ext4_release_dquot:6969: comm kworker/u8:7: Failed to release dquot type 0 [ 200.738360][T10830] EXT4-fs error (device loop5): ext4_map_blocks:778: inode #3: block 48: comm syz.5.2390: lblock 0 mapped to illegal pblock 48 (length 1) [ 200.755585][T10844] loop4: detected capacity change from 0 to 512 [ 200.762345][T10844] EXT4-fs: Ignoring removed mblk_io_submit option [ 200.837613][T10846] loop3: detected capacity change from 0 to 512 [ 200.842420][T10844] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 200.845724][T10846] EXT4-fs: Ignoring removed oldalloc option [ 200.860513][T10846] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 200.886988][T10849] loop5: detected capacity change from 0 to 512 [ 200.895688][T10844] EXT4-fs (loop4): 1 truncate cleaned up [ 200.920908][T10846] EXT4-fs (loop3): 1 truncate cleaned up [ 200.933393][T10849] EXT4-fs warning (device loop5): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 200.957948][T10849] netlink: 'syz.5.2394': attribute type 4 has an invalid length. [ 201.002020][T10828] netlink: 'syz.2.2389': attribute type 27 has an invalid length. [ 201.035277][T10858] syzkaller0: entered promiscuous mode [ 201.040796][T10858] syzkaller0: entered allmulticast mode [ 201.084252][T10860] loop5: detected capacity change from 0 to 1024 [ 201.119324][T10864] loop2: detected capacity change from 0 to 512 [ 201.128395][T10860] ext4 filesystem being mounted at /134/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 201.148599][T10860] EXT4-fs error (device loop5): ext4_map_blocks:814: inode #15: block 1: comm syz.5.2399: lblock 1 mapped to illegal pblock 1 (length 15) [ 201.166606][T10860] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 15 with error 117 [ 201.179140][T10860] EXT4-fs (loop5): This should not happen!! Data will be lost [ 201.179140][T10860] [ 201.195139][T10860] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 201.212088][T10864] EXT4-fs warning (device loop2): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 201.233703][T10864] netlink: 'syz.2.2401': attribute type 4 has an invalid length. [ 201.269242][T10871] tmpfs: Unknown parameter '0x0000000000000006' [ 201.281502][T10871] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 201.290570][T10871] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 201.298934][T10871] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2402'. [ 201.333256][T10873] loop6: detected capacity change from 0 to 128 [ 201.339771][T10877] loop5: detected capacity change from 0 to 1024 [ 201.343635][T10873] FAT-fs (loop6): error, invalid access to FAT (entry 0x00000100) [ 201.346868][T10877] EXT4-fs: Ignoring removed bh option [ 201.354095][T10873] FAT-fs (loop6): Filesystem has been set read-only [ 201.367695][T10873] syz.6.2403: attempt to access beyond end of device [ 201.367695][T10873] loop6: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 201.373485][T10877] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 201.381564][T10873] FAT-fs (loop6): error, invalid access to FAT (entry 0x00000100) [ 201.393925][T10877] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 201.399706][T10873] FAT-fs (loop6): error, invalid access to FAT (entry 0x00000100) [ 201.410328][T10877] EXT4-fs error (device loop5): ext4_map_blocks:778: inode #3: block 2: comm syz.5.2404: lblock 2 mapped to illegal pblock 2 (length 1) [ 201.417003][T10881] syz.6.2403: attempt to access beyond end of device [ 201.417003][T10881] loop6: rw=0, sector=2065, nr_sectors = 1 limit=128 [ 201.431253][T10877] EXT4-fs error (device loop5): ext4_map_blocks:778: inode #3: block 48: comm syz.5.2404: lblock 0 mapped to illegal pblock 48 (length 1) [ 201.442924][T10881] buffer_io_error: 279862 callbacks suppressed [ 201.442945][T10881] Buffer I/O error on dev loop6, logical block 2065, async page read [ 201.458453][T10877] EXT4-fs error (device loop5): ext4_acquire_dquot:6933: comm syz.5.2404: Failed to acquire dquot type 0 [ 201.482869][T10881] syz.6.2403: attempt to access beyond end of device [ 201.482869][T10881] loop6: rw=0, sector=2066, nr_sectors = 1 limit=128 [ 201.496268][T10881] Buffer I/O error on dev loop6, logical block 2066, async page read [ 201.496545][T10882] loop2: detected capacity change from 0 to 128 [ 201.510740][T10881] syz.6.2403: attempt to access beyond end of device [ 201.510740][T10881] loop6: rw=0, sector=2067, nr_sectors = 1 limit=128 [ 201.510686][T10877] EXT4-fs error (device loop5) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 201.511740][T10877] EXT4-fs error (device loop5): ext4_evict_inode:254: inode #11: comm syz.5.2404: mark_inode_dirty error [ 201.524215][T10881] Buffer I/O error on dev loop6, logical block 2067, async page read [ 201.537498][T10877] EXT4-fs warning (device loop5): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 201.545717][T10882] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 201.554331][T10877] EXT4-fs (loop5): 1 orphan inode deleted [ 201.563327][T10882] FAT-fs (loop2): Filesystem has been set read-only [ 201.572064][T10881] syz.6.2403: attempt to access beyond end of device [ 201.572064][T10881] loop6: rw=0, sector=2068, nr_sectors = 1 limit=128 [ 201.577026][ T3718] EXT4-fs error (device loop5): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:9: lblock 1 mapped to illegal pblock 1 (length 1) [ 201.583566][T10881] Buffer I/O error on dev loop6, logical block 2068, async page read [ 201.606210][T10882] syz.2.2406: attempt to access beyond end of device [ 201.606210][T10882] loop2: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 201.619893][T10881] Buffer I/O error on dev loop6, logical block 2069, async page read [ 201.632861][ T3718] EXT4-fs error (device loop5): ext4_release_dquot:6969: comm kworker/u8:9: Failed to release dquot type 0 [ 201.642002][T10881] Buffer I/O error on dev loop6, logical block 2070, async page read [ 201.654771][T10882] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 201.660727][T10881] Buffer I/O error on dev loop6, logical block 2071, async page read [ 201.668369][T10882] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 201.678457][T10881] Buffer I/O error on dev loop6, logical block 2072, async page read [ 201.685784][T10882] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 201.692685][T10873] Buffer I/O error on dev loop6, logical block 2065, async page read [ 201.700827][T10883] Buffer I/O error on dev loop2, logical block 2065, async page read [ 201.717363][T10877] EXT4-fs error (device loop5): ext4_map_blocks:778: inode #3: block 48: comm syz.5.2404: lblock 0 mapped to illegal pblock 48 (length 1) [ 201.718133][T10882] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 201.739412][T10882] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 201.789841][T10885] loop4: detected capacity change from 0 to 512 [ 201.806797][T10885] EXT4-fs: Ignoring removed mblk_io_submit option [ 201.829167][T10885] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 201.863044][T10889] loop3: detected capacity change from 0 to 512 [ 201.877891][T10885] EXT4-fs (loop4): 1 truncate cleaned up [ 201.890158][T10892] loop5: detected capacity change from 0 to 512 [ 201.896880][T10892] EXT4-fs: Ignoring removed oldalloc option [ 201.904955][T10889] EXT4-fs warning (device loop3): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 201.937246][T10892] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 201.949411][T10892] EXT4-fs (loop5): 1 truncate cleaned up [ 202.026111][T10902] syzkaller0: entered promiscuous mode [ 202.031648][T10902] syzkaller0: entered allmulticast mode [ 202.047873][T10898] loop4: detected capacity change from 0 to 8192 [ 202.083288][T10898] loop4: p1 p2 p3 p4[DM] [ 202.091029][T10898] loop4: p1 size 835331 extends beyond EOD, truncated [ 202.104940][T10898] loop4: p2 size 16777223 extends beyond EOD, truncated [ 202.133602][T10898] loop4: p3 start 1052673 is beyond EOD, truncated [ 202.140150][T10898] loop4: p4 size 262144 extends beyond EOD, truncated [ 202.182855][T10906] loop6: detected capacity change from 0 to 1024 [ 202.239763][T10906] ext4 filesystem being mounted at /9/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 202.270328][T10906] EXT4-fs error (device loop6): ext4_map_blocks:814: inode #15: block 1: comm syz.6.2415: lblock 1 mapped to illegal pblock 1 (length 15) [ 202.292125][T10912] loop5: detected capacity change from 0 to 512 [ 202.317527][T10906] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 15 with error 117 [ 202.330044][T10906] EXT4-fs (loop6): This should not happen!! Data will be lost [ 202.330044][T10906] [ 202.346637][T10912] EXT4-fs warning (device loop5): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 202.375422][T10906] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 202.438533][T10921] tmpfs: Unknown parameter '0x0000000000000006' [ 202.453272][T10921] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 202.477647][T10923] loop5: detected capacity change from 0 to 1024 [ 202.491167][T10921] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 202.499674][T10898] validate_nla: 2 callbacks suppressed [ 202.499719][T10898] netlink: 'syz.4.2411': attribute type 27 has an invalid length. [ 202.512726][T10923] EXT4-fs: Ignoring removed bh option [ 202.521590][T10921] netlink: 32 bytes leftover after parsing attributes in process `syz.6.2419'. [ 202.532058][T10923] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 202.550092][T10923] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 202.570659][T10923] EXT4-fs error (device loop5): ext4_map_blocks:778: inode #3: block 2: comm syz.5.2420: lblock 2 mapped to illegal pblock 2 (length 1) [ 202.592808][T10923] EXT4-fs error (device loop5): ext4_map_blocks:778: inode #3: block 48: comm syz.5.2420: lblock 0 mapped to illegal pblock 48 (length 1) [ 202.612091][T10923] EXT4-fs error (device loop5): ext4_acquire_dquot:6933: comm syz.5.2420: Failed to acquire dquot type 0 [ 202.639727][T10923] EXT4-fs error (device loop5) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 202.666247][T10923] EXT4-fs error (device loop5): ext4_evict_inode:254: inode #11: comm syz.5.2420: mark_inode_dirty error [ 202.684028][T10932] loop4: detected capacity change from 0 to 512 [ 202.690651][T10932] EXT4-fs: Ignoring removed oldalloc option [ 202.697796][T10932] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 202.707811][T10923] EXT4-fs warning (device loop5): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 202.720370][T10923] EXT4-fs (loop5): 1 orphan inode deleted [ 202.732229][T10932] EXT4-fs (loop4): 1 truncate cleaned up [ 202.734702][ T3720] EXT4-fs error (device loop5): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:10: lblock 1 mapped to illegal pblock 1 (length 1) [ 202.764538][ T3720] EXT4-fs error (device loop5): ext4_release_dquot:6969: comm kworker/u8:10: Failed to release dquot type 0 [ 202.779379][T10923] EXT4-fs error (device loop5): ext4_map_blocks:778: inode #3: block 48: comm syz.5.2420: lblock 0 mapped to illegal pblock 48 (length 1) [ 202.844116][T10937] loop4: detected capacity change from 0 to 128 [ 202.854493][T10937] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 202.862420][T10937] FAT-fs (loop4): Filesystem has been set read-only [ 202.874946][T10937] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 202.882913][T10937] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 202.895925][T10939] loop5: detected capacity change from 0 to 512 [ 202.925191][T10939] EXT4-fs warning (device loop5): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 202.959657][T10939] netlink: 'syz.5.2426': attribute type 4 has an invalid length. [ 203.025729][T10944] syzkaller0: entered promiscuous mode [ 203.031278][T10944] syzkaller0: entered allmulticast mode [ 203.075698][T10950] loop6: detected capacity change from 0 to 1024 [ 203.096014][T10950] ext4 filesystem being mounted at /11/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 203.151866][T10950] EXT4-fs error (device loop6): ext4_map_blocks:814: inode #15: block 1: comm syz.6.2430: lblock 1 mapped to illegal pblock 1 (length 15) [ 203.167716][T10953] loop5: detected capacity change from 0 to 128 [ 203.185762][T10955] loop2: detected capacity change from 0 to 512 [ 203.201933][T10953] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000100) [ 203.209849][T10953] FAT-fs (loop5): Filesystem has been set read-only [ 203.217481][T10953] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000100) [ 203.225432][T10953] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000100) [ 203.250766][T10950] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 15 with error 117 [ 203.263254][T10950] EXT4-fs (loop6): This should not happen!! Data will be lost [ 203.263254][T10950] [ 203.283463][T10950] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 203.395166][T10963] netlink: 'syz.2.2431': attribute type 4 has an invalid length. [ 203.468470][T10961] loop3: detected capacity change from 0 to 8192 [ 203.480126][T10965] loop6: detected capacity change from 0 to 512 [ 203.497172][T10965] EXT4-fs: Ignoring removed oldalloc option [ 203.517938][T10965] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 203.546557][T10961] loop3: p1 p2 p3 p4[DM] [ 203.561677][T10965] EXT4-fs (loop6): 1 truncate cleaned up [ 203.580092][T10961] loop3: p1 size 835331 extends beyond EOD, truncated [ 203.627705][T10961] loop3: p2 size 16777223 extends beyond EOD, truncated [ 203.660753][T10955] EXT4-fs warning (device loop2): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 203.675745][T10961] loop3: p3 start 1052673 is beyond EOD, truncated [ 203.682328][T10961] loop3: p4 size 262144 extends beyond EOD, truncated [ 203.758443][T10973] loop4: detected capacity change from 0 to 1024 [ 203.770336][T10973] EXT4-fs: Ignoring removed bh option [ 203.794796][T10973] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 203.823900][T10979] loop2: detected capacity change from 0 to 512 [ 203.845946][T10973] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 203.857213][T10973] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #3: block 2: comm syz.4.2437: lblock 2 mapped to illegal pblock 2 (length 1) [ 203.904671][T10973] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #3: block 48: comm syz.4.2437: lblock 0 mapped to illegal pblock 48 (length 1) [ 203.921557][T10982] netlink: 'syz.2.2440': attribute type 4 has an invalid length. [ 203.941865][T10979] EXT4-fs warning (device loop2): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 203.958077][T10973] __quota_error: 301 callbacks suppressed [ 203.958096][T10973] Quota error (device loop4): v2_write_file_info: Can't write info structure [ 203.973602][T10973] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.2437: Failed to acquire dquot type 0 [ 203.997306][T10986] tmpfs: Unknown parameter '0x0000000000000006' [ 204.003763][T10973] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 204.005931][T10986] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 204.014586][T10973] EXT4-fs error (device loop4): ext4_evict_inode:254: inode #11: comm syz.4.2437: mark_inode_dirty error [ 204.021599][T10986] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 204.033133][T10973] EXT4-fs warning (device loop4): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 204.051920][T10986] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2441'. [ 204.082933][T10973] EXT4-fs (loop4): 1 orphan inode deleted [ 204.092743][ T29] audit: type=1326 audit(1755285814.757:5746): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10959 comm="syz.3.2433" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f6a3a50d84a code=0x7ffc0000 [ 204.122810][ T29] audit: type=1326 audit(1755285814.797:5747): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10959 comm="syz.3.2433" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a3a50ebe9 code=0x7ffc0000 [ 204.149286][ T3446] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:7: lblock 1 mapped to illegal pblock 1 (length 1) [ 204.153750][ T29] audit: type=1326 audit(1755285814.827:5748): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10959 comm="syz.3.2433" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a3a50ebe9 code=0x7ffc0000 [ 204.165084][T10961] netlink: 'syz.3.2433': attribute type 27 has an invalid length. [ 204.200868][ T3446] Quota error (device loop4): remove_tree: Can't read quota data block 1 [ 204.209418][ T3446] EXT4-fs error (device loop4): ext4_release_dquot:6969: comm kworker/u8:7: Failed to release dquot type 0 [ 204.232064][T10973] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #3: block 48: comm syz.4.2437: lblock 0 mapped to illegal pblock 48 (length 1) [ 204.246650][T10973] Quota error (device loop4): v2_read_header: Failed header read: expected=8 got=-117 [ 204.283804][ T29] audit: type=1326 audit(1755285814.897:5749): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10959 comm="syz.3.2433" exe="/root/syz-executor" sig=0 arch=c000003e syscall=327 compat=0 ip=0x7f6a3a50ebe9 code=0x7ffc0000 [ 204.307458][ T29] audit: type=1326 audit(1755285814.897:5750): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10959 comm="syz.3.2433" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a3a50ebe9 code=0x7ffc0000 [ 204.331130][ T29] audit: type=1326 audit(1755285814.897:5751): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10959 comm="syz.3.2433" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a3a50ebe9 code=0x7ffc0000 [ 204.354738][ T29] audit: type=1326 audit(1755285814.897:5752): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10959 comm="syz.3.2433" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f6a3a50ebe9 code=0x7ffc0000 [ 204.384321][T10991] syzkaller0: entered promiscuous mode [ 204.389927][T10991] syzkaller0: entered allmulticast mode [ 204.491027][T10997] loop4: detected capacity change from 0 to 512 [ 204.497669][T10997] EXT4-fs: Ignoring removed oldalloc option [ 204.503974][T10997] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 204.515333][T10997] EXT4-fs (loop4): 1 truncate cleaned up [ 204.544830][T11000] loop4: detected capacity change from 0 to 1024 [ 204.563833][T11000] ext4 filesystem being mounted at /529/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 204.584216][T11000] EXT4-fs error (device loop4): ext4_map_blocks:814: inode #15: block 1: comm syz.4.2446: lblock 1 mapped to illegal pblock 1 (length 15) [ 204.610386][T11000] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 15 with error 117 [ 204.623062][T11000] EXT4-fs (loop4): This should not happen!! Data will be lost [ 204.623062][T11000] [ 204.651326][T11000] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 204.672778][T11004] loop3: detected capacity change from 0 to 128 [ 204.693372][T11004] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 204.701717][T11004] FAT-fs (loop3): Filesystem has been set read-only [ 204.714725][T11004] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 204.722712][T11004] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 204.734489][T11010] loop5: detected capacity change from 0 to 512 [ 204.763047][T11010] EXT4-fs warning (device loop5): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 204.783840][T11010] netlink: 'syz.5.2451': attribute type 4 has an invalid length. [ 204.820447][T11019] loop6: detected capacity change from 0 to 128 [ 204.829183][T11019] FAT-fs (loop6): error, invalid access to FAT (entry 0x00000100) [ 204.837137][T11019] FAT-fs (loop6): Filesystem has been set read-only [ 204.853344][T11019] FAT-fs (loop6): error, invalid access to FAT (entry 0x00000100) [ 204.861218][T11019] FAT-fs (loop6): error, invalid access to FAT (entry 0x00000100) [ 204.889928][T11022] loop5: detected capacity change from 0 to 512 [ 204.903505][T11022] EXT4-fs warning (device loop5): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 204.931146][T11022] netlink: 'syz.5.2453': attribute type 4 has an invalid length. [ 205.094079][T11026] loop5: detected capacity change from 0 to 8192 [ 205.172542][T11026] loop5: p1 p2 p3 p4[DM] [ 205.181825][T11026] loop5: p1 size 835331 extends beyond EOD, truncated [ 205.202369][T11026] loop5: p2 size 16777223 extends beyond EOD, truncated [ 205.219025][T11028] loop2: detected capacity change from 0 to 1024 [ 205.221891][T11026] loop5: p3 start 1052673 is beyond EOD, truncated [ 205.231961][T11026] loop5: p4 size 262144 extends beyond EOD, truncated [ 205.252716][T11028] EXT4-fs: Ignoring removed bh option [ 205.267674][T11028] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 205.304077][T11028] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 205.329107][T11028] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #3: block 2: comm syz.2.2455: lblock 2 mapped to illegal pblock 2 (length 1) [ 205.354679][T11028] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #3: block 48: comm syz.2.2455: lblock 0 mapped to illegal pblock 48 (length 1) [ 205.389001][T11028] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.2455: Failed to acquire dquot type 0 [ 205.400725][T11028] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 205.411340][T11028] EXT4-fs error (device loop2): ext4_evict_inode:254: inode #11: comm syz.2.2455: mark_inode_dirty error [ 205.424172][T11028] EXT4-fs warning (device loop2): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 205.434540][T11028] EXT4-fs (loop2): 1 orphan inode deleted [ 205.452457][ T3718] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:9: lblock 1 mapped to illegal pblock 1 (length 1) [ 205.480919][ T3718] EXT4-fs error (device loop2): ext4_release_dquot:6969: comm kworker/u8:9: Failed to release dquot type 0 [ 205.505739][T11028] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #3: block 48: comm syz.2.2455: lblock 0 mapped to illegal pblock 48 (length 1) [ 205.567578][T11032] loop3: detected capacity change from 0 to 512 [ 205.596147][T11032] EXT4-fs: Ignoring removed mblk_io_submit option [ 205.607103][T11034] loop2: detected capacity change from 0 to 512 [ 205.613864][T11034] EXT4-fs: Ignoring removed oldalloc option [ 205.621121][T11034] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 205.634041][T11032] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 205.647030][T11034] EXT4-fs (loop2): 1 truncate cleaned up [ 205.690989][T11037] syzkaller0: entered promiscuous mode [ 205.696636][T11037] syzkaller0: entered allmulticast mode [ 205.713266][T11032] EXT4-fs (loop3): 1 truncate cleaned up [ 205.752177][T11042] loop6: detected capacity change from 0 to 1024 [ 205.768579][T11026] netlink: 'syz.5.2454': attribute type 27 has an invalid length. [ 205.795740][T11042] ext4 filesystem being mounted at /19/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 205.809003][T11048] tmpfs: Unknown parameter '0x0000000000000006' [ 205.825425][T11042] EXT4-fs error (device loop6): ext4_map_blocks:814: inode #15: block 1: comm syz.6.2460: lblock 1 mapped to illegal pblock 1 (length 15) [ 205.843114][T11048] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 205.851841][T11048] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 205.863116][T11042] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 15 with error 117 [ 205.875616][T11042] EXT4-fs (loop6): This should not happen!! Data will be lost [ 205.875616][T11042] [ 205.884756][T11048] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2462'. [ 205.929007][T11042] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 205.950017][T11054] loop5: detected capacity change from 0 to 512 [ 205.962880][T11054] EXT4-fs warning (device loop5): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 205.983514][T11054] netlink: 'syz.5.2464': attribute type 4 has an invalid length. [ 206.009062][T11060] loop6: detected capacity change from 0 to 512 [ 206.022733][T11060] EXT4-fs warning (device loop6): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 206.068516][T11060] netlink: 'syz.6.2466': attribute type 4 has an invalid length. [ 206.081963][T11065] loop5: detected capacity change from 0 to 1024 [ 206.090057][T11065] EXT4-fs: Ignoring removed bh option [ 206.097973][T11065] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 206.111235][T11065] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 206.120362][T11065] EXT4-fs error (device loop5): ext4_map_blocks:778: inode #3: block 2: comm syz.5.2467: lblock 2 mapped to illegal pblock 2 (length 1) [ 206.135605][T11065] EXT4-fs error (device loop5): ext4_map_blocks:778: inode #3: block 48: comm syz.5.2467: lblock 0 mapped to illegal pblock 48 (length 1) [ 206.149919][T11065] EXT4-fs error (device loop5): ext4_acquire_dquot:6933: comm syz.5.2467: Failed to acquire dquot type 0 [ 206.175965][T11065] EXT4-fs error (device loop5) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 206.185675][T11065] EXT4-fs error (device loop5): ext4_evict_inode:254: inode #11: comm syz.5.2467: mark_inode_dirty error [ 206.198320][T11065] EXT4-fs warning (device loop5): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 206.208987][T11065] EXT4-fs (loop5): 1 orphan inode deleted [ 206.227158][ T51] EXT4-fs error (device loop5): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:3: lblock 1 mapped to illegal pblock 1 (length 1) [ 206.241722][T11068] loop6: detected capacity change from 0 to 128 [ 206.251153][T11068] FAT-fs (loop6): error, invalid access to FAT (entry 0x00000100) [ 206.259112][T11068] FAT-fs (loop6): Filesystem has been set read-only [ 206.266865][T11068] bio_check_eod: 235865 callbacks suppressed [ 206.266886][T11068] syz.6.2468: attempt to access beyond end of device [ 206.266886][T11068] loop6: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 206.287747][T11068] FAT-fs (loop6): error, invalid access to FAT (entry 0x00000100) [ 206.295699][T11068] FAT-fs (loop6): error, invalid access to FAT (entry 0x00000100) [ 206.304834][ T51] EXT4-fs error (device loop5): ext4_release_dquot:6969: comm kworker/u8:3: Failed to release dquot type 0 [ 206.317357][T11069] syz.6.2468: attempt to access beyond end of device [ 206.317357][T11069] loop6: rw=0, sector=2065, nr_sectors = 1 limit=128 [ 206.330835][T11069] syz.6.2468: attempt to access beyond end of device [ 206.330835][T11069] loop6: rw=0, sector=2066, nr_sectors = 1 limit=128 [ 206.344262][T11069] syz.6.2468: attempt to access beyond end of device [ 206.344262][T11069] loop6: rw=0, sector=2067, nr_sectors = 1 limit=128 [ 206.357798][T11069] syz.6.2468: attempt to access beyond end of device [ 206.357798][T11069] loop6: rw=0, sector=2068, nr_sectors = 1 limit=128 [ 206.371204][T11069] syz.6.2468: attempt to access beyond end of device [ 206.371204][T11069] loop6: rw=0, sector=2069, nr_sectors = 1 limit=128 [ 206.377839][T11065] EXT4-fs error (device loop5): ext4_map_blocks:778: inode #3: block 48: comm syz.5.2467: lblock 0 mapped to illegal pblock 48 (length 1) [ 206.384682][T11069] syz.6.2468: attempt to access beyond end of device [ 206.384682][T11069] loop6: rw=0, sector=2070, nr_sectors = 1 limit=128 [ 206.411950][T11069] syz.6.2468: attempt to access beyond end of device [ 206.411950][T11069] loop6: rw=0, sector=2071, nr_sectors = 1 limit=128 [ 206.425598][T11069] syz.6.2468: attempt to access beyond end of device [ 206.425598][T11069] loop6: rw=0, sector=2072, nr_sectors = 1 limit=128 [ 206.439046][T11068] syz.6.2468: attempt to access beyond end of device [ 206.439046][T11068] loop6: rw=0, sector=2065, nr_sectors = 1 limit=128 [ 206.452410][T11068] buffer_io_error: 233526 callbacks suppressed [ 206.452428][T11068] Buffer I/O error on dev loop6, logical block 2065, async page read [ 206.466962][T11068] Buffer I/O error on dev loop6, logical block 2066, async page read [ 206.475081][T11068] Buffer I/O error on dev loop6, logical block 2067, async page read [ 206.487964][T11068] Buffer I/O error on dev loop6, logical block 2068, async page read [ 206.496647][T11068] Buffer I/O error on dev loop6, logical block 2069, async page read [ 206.505217][T11068] Buffer I/O error on dev loop6, logical block 2070, async page read [ 206.513602][T11068] Buffer I/O error on dev loop6, logical block 2071, async page read [ 206.514471][T11071] loop3: detected capacity change from 0 to 512 [ 206.522991][T11068] Buffer I/O error on dev loop6, logical block 2072, async page read [ 206.536438][T11069] Buffer I/O error on dev loop6, logical block 2065, async page read [ 206.544611][T11069] Buffer I/O error on dev loop6, logical block 2066, async page read [ 206.547643][T11071] EXT4-fs: Ignoring removed oldalloc option [ 206.561038][T11071] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 206.586995][T11071] EXT4-fs (loop3): 1 truncate cleaned up [ 206.623799][T11074] loop2: detected capacity change from 0 to 512 [ 206.630803][T11074] EXT4-fs: Ignoring removed mblk_io_submit option [ 206.655176][T11074] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 206.666531][T11074] EXT4-fs (loop2): 1 truncate cleaned up [ 206.702333][T11082] loop3: detected capacity change from 0 to 128 [ 206.710964][T11082] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 206.718954][T11082] FAT-fs (loop3): Filesystem has been set read-only [ 206.769447][T11082] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 206.777406][T11082] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 206.790772][T11084] syzkaller0: entered promiscuous mode [ 206.796609][T11084] syzkaller0: entered allmulticast mode [ 206.879596][T11091] loop2: detected capacity change from 0 to 1024 [ 206.906435][T11089] loop5: detected capacity change from 0 to 8192 [ 206.938012][T11091] ext4 filesystem being mounted at /516/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 206.952668][T11089] loop5: p1 p2 p3 p4[DM] [ 206.957134][T11089] loop5: p1 size 835331 extends beyond EOD, truncated [ 206.968539][T11095] loop4: detected capacity change from 0 to 512 [ 206.986780][T11091] EXT4-fs error (device loop2): ext4_map_blocks:814: inode #15: block 1: comm syz.2.2477: lblock 1 mapped to illegal pblock 1 (length 15) [ 207.007227][T11089] loop5: p2 size 16777223 extends beyond EOD, truncated [ 207.024377][T11095] EXT4-fs warning (device loop4): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 207.040375][T11089] loop5: p3 start 1052673 is beyond EOD, truncated [ 207.046958][T11091] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 15 with error 117 [ 207.046986][T11089] loop5: p4 size 262144 extends beyond EOD, truncated [ 207.059368][T11091] EXT4-fs (loop2): This should not happen!! Data will be lost [ 207.059368][T11091] [ 207.197567][T11106] loop2: detected capacity change from 0 to 512 [ 207.235841][T11106] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 207.263771][T11109] tmpfs: Unknown parameter '0x0000000000000006' [ 207.300397][T11109] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 207.352674][T11109] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 207.360691][T11106] EXT4-fs (loop2): 1 truncate cleaned up [ 207.367894][T11109] netlink: 32 bytes leftover after parsing attributes in process `syz.6.2482'. [ 207.513380][T11115] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2484'. [ 207.537568][T11089] validate_nla: 1 callbacks suppressed [ 207.537692][T11089] netlink: 'syz.5.2476': attribute type 27 has an invalid length. [ 207.621656][T11117] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=11117 comm=syz.3.2484 [ 207.775569][T11128] loop3: detected capacity change from 0 to 512 [ 207.782614][T11128] EXT4-fs: Ignoring removed mblk_io_submit option [ 207.789678][T11128] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 207.800846][T11128] EXT4-fs (loop3): 1 truncate cleaned up [ 207.888475][T11130] ================================================================== [ 207.896617][T11130] BUG: KCSAN: data-race in xas_find_marked / xas_set_mark [ 207.903873][T11130] [ 207.906234][T11130] write to 0xffff8881198d828c of 4 bytes by task 11128 on cpu 1: [ 207.913974][T11130] xas_set_mark+0x12b/0x140 [ 207.918524][T11130] __folio_start_writeback+0x1dd/0x440 [ 207.924013][T11130] ext4_bio_write_folio+0x5ad/0x9f0 [ 207.929243][T11130] mpage_process_page_bufs+0x4a1/0x620 [ 207.934829][T11130] mpage_prepare_extent_to_map+0x786/0xc00 [ 207.940672][T11130] ext4_do_writepages+0xa05/0x2750 [ 207.945923][T11130] ext4_writepages+0x176/0x300 [ 207.950750][T11130] do_writepages+0x1c6/0x310 [ 207.955372][T11130] file_write_and_wait_range+0x156/0x2c0 [ 207.961066][T11130] generic_buffers_fsync_noflush+0x45/0x120 [ 207.966983][T11130] ext4_sync_file+0x1ab/0x690 [ 207.971685][T11130] vfs_fsync_range+0x10a/0x130 [ 207.976476][T11130] ext4_buffered_write_iter+0x34f/0x3c0 [ 207.982045][T11130] ext4_file_write_iter+0xdbf/0xf00 [ 207.987352][T11130] iter_file_splice_write+0x669/0x9e0 [ 207.992741][T11130] direct_splice_actor+0x156/0x2a0 [ 207.997864][T11130] splice_direct_to_actor+0x312/0x680 [ 208.003243][T11130] do_splice_direct+0xda/0x150 [ 208.008016][T11130] do_sendfile+0x380/0x650 [ 208.012479][T11130] __x64_sys_sendfile64+0x105/0x150 [ 208.017698][T11130] x64_sys_call+0x2bb0/0x2ff0 [ 208.022394][T11130] do_syscall_64+0xd2/0x200 [ 208.026924][T11130] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 208.032832][T11130] [ 208.035159][T11130] read to 0xffff8881198d828c of 4 bytes by task 11130 on cpu 0: [ 208.042901][T11130] xas_find_marked+0x5dc/0x620 [ 208.047682][T11130] find_get_entry+0x5d/0x380 [ 208.052302][T11130] filemap_get_folios_tag+0x92/0x210 [ 208.057594][T11130] mpage_prepare_extent_to_map+0x320/0xc00 [ 208.063414][T11130] ext4_do_writepages+0x708/0x2750 [ 208.068547][T11130] ext4_writepages+0x176/0x300 [ 208.073316][T11130] do_writepages+0x1c6/0x310 [ 208.077916][T11130] filemap_write_and_wait_range+0x144/0x340 [ 208.083832][T11130] filemap_invalidate_pages+0xa4/0x1a0 [ 208.089302][T11130] kiocb_invalidate_pages+0x6e/0x80 [ 208.094507][T11130] __iomap_dio_rw+0x5d4/0x1250 [ 208.099281][T11130] iomap_dio_rw+0x40/0x90 [ 208.103619][T11130] ext4_file_write_iter+0xad9/0xf00 [ 208.108836][T11130] iter_file_splice_write+0x669/0x9e0 [ 208.114214][T11130] direct_splice_actor+0x156/0x2a0 [ 208.119331][T11130] splice_direct_to_actor+0x312/0x680 [ 208.124712][T11130] do_splice_direct+0xda/0x150 [ 208.129490][T11130] do_sendfile+0x380/0x650 [ 208.133921][T11130] __x64_sys_sendfile64+0x105/0x150 [ 208.139153][T11130] x64_sys_call+0x2bb0/0x2ff0 [ 208.143850][T11130] do_syscall_64+0xd2/0x200 [ 208.148377][T11130] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 208.154286][T11130] [ 208.156631][T11130] value changed: 0x0a000021 -> 0x04000021 [ 208.162352][T11130] [ 208.164687][T11130] Reported by Kernel Concurrency Sanitizer on: [ 208.170847][T11130] CPU: 0 UID: 0 PID: 11130 Comm: syz.3.2489 Not tainted 6.17.0-rc1-syzkaller-00165-gee94b00c1a64 #0 PREEMPT(voluntary) [ 208.183353][T11130] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 208.193414][T11130] ==================================================================