last executing test programs: 29m57.861379902s ago: executing program 32 (id=12): ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000007c0)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b708000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r3, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f0000000740)={[{@bsdgroups}, {@nodiscard}, {@noblock_validity}, {@grpjquota}, {@grpjquota}, {@noquota}, {@auto_da_alloc}, {@noload}, {@nodiscard}]}, 0x64, 0x50a, &(0x7f0000000200)="$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") syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r5 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r5, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_int(r5, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r5, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r5, 0x6, 0x16, &(0x7f0000000340)=[@window, @window={0x3, 0x564, 0x1}, @window={0x3, 0x3, 0x4}, @window={0x3, 0x8, 0x6}, @sack_perm, @timestamp, @mss={0x2, 0x1}, @sack_perm], 0x8) sendto$inet(r5, &(0x7f0000000380)='M', 0x1, 0x60004410, 0x0, 0x2b) setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r5, &(0x7f0000000100)="14", 0x126c, 0x241, 0x0, 0x0) 29m21.190826642s ago: executing program 33 (id=141): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)) prlimit64(0x0, 0xe, &(0x7f0000000780)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000440)={&(0x7f00000000c0)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000007000000050000002000000cede18abe86dea86e9e0000000000000000bd7700"], 0x0, 0x2b}, 0x28) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x4f0c3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000240)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x4000000000000c5, 0x400) recvmmsg(r0, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) socket(0x10, 0x803, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x302, 0x0) socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r4 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0xfffffffffffffe24, &(0x7f0000000780)={&(0x7f00000006c0)=@newqdisc={0x3c, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r6, {0x0, 0xc}, {0xffff, 0xffff}, {0x1, 0xffff}}, [@qdisc_kind_options=@q_codel={{0xa}, {0xc, 0x2, [@TCA_CODEL_LIMIT={0x7, 0x2, 0x5}]}}]}, 0x3c}}, 0x44080) 5m0.181934182s ago: executing program 34 (id=4310): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x8, &(0x7f00000005c0)={[{@errors_remount}, {}]}, 0x4, 0x4f3, &(0x7f00000012c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0xc0185879, 0x0) 3m0.122180691s ago: executing program 35 (id=4726): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0xffff, 0x0, 0x0, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$BTRFS_IOC_RM_DEV(0xffffffffffffffff, 0x5000940b, &(0x7f0000000a80)={{r2}, "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"}) ioctl$KVM_RUN(r4, 0xae80, 0x0) 2m54.991942452s ago: executing program 36 (id=4749): gettid() r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f00000000c0)={0x0, 0x0, 0x2, r3, 0xb}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f0000000100)={0x3, 0x0, 0x8, r3, 0x7}) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00', r4}, 0x10) waitid(0x0, 0x0, 0x0, 0x8, 0x0) shutdown(0xffffffffffffffff, 0x1) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x1c916, &(0x7f0000000540)={[{@usrjquota}, {@noblock_validity}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x181fffc}}, {@inlinecrypt}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x7}}, {@discard}, {@nobarrier}, {@dioread_nolock}, {@resgid={'resgid', 0x3d, 0xee00}, 0x32}]}, 0x1b, 0x4f1, &(0x7f0000000880)="$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") 2m51.699142128s ago: executing program 37 (id=4768): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x4c, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000840)=@abs={0x0, 0x0, 0x4e20}, 0x9) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r3}, 0x10) socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f0000000140), 0x1, 0x4fa, &(0x7f0000000ac0)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) 2m0.596390873s ago: executing program 38 (id=4923): ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000007c0)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b708000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r3, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f0000000740)={[{@bsdgroups}, {@nodiscard}, {@noblock_validity}, {@grpjquota}, {@grpjquota}, {@noquota}, {@auto_da_alloc}, {@noload}, {@nodiscard}]}, 0x64, 0x50a, &(0x7f0000000200)="$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") syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r5 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r5, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r5, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) write$binfmt_elf64(r5, &(0x7f0000000280)=ANY=[], 0x40) setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f00000001c0), 0x4) 1m22.22322131s ago: executing program 39 (id=5086): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000000800000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0, 0x0, 0x800000000000000}, 0x18) r2 = gettid() rt_sigsuspend(&(0x7f0000000040)={[0x3]}, 0x8) tkill(r2, 0x7) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="19000000040000000400000008"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1000000004000000080000000800000000000000", @ANYBLOB="cb9ec4afd71b74bd3f7fee5dab92ad89bbb5e231223c0a368b1add0727237a9012b97650d686c75336549c7e790152024c5f1e6aeed814065d7e25fa649db14ab36ebc0353c0e21696c5ffb2456f27cd86b916d27fb2af0352b076c0436e1686ff9efe5cf9306b1451b6f87c1389135d7ae8fc9260ef5e130a373e0548be01c030", @ANYBLOB="0400000000000000000000002000000000000000ac18d41bf7cf200a8e4fdfe15610e16ec2242c0e15fa", @ANYRES32=0x0, @ANYBLOB="7fca807e2ca5272d38a4dbb96d05b4464d060df84aa1a55acb474e371f44e3a0bd3e993df586333f3109252a3b93315f47d8971972dd75c661c14315799e8eb794a52c4f4de70e4cba562209a7206f05e1c93c61dc8c992de89a9205a91074c89598e92eab2b3a1a42b0", @ANYBLOB="00000000000080"], 0x50) socket$netlink(0x10, 0x3, 0x8000000004) r5 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x40) ioctl$EXT4_IOC_MOVE_EXT(r5, 0xc028660f, 0x0) bind$inet(r5, &(0x7f0000000000)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x3a}}, 0x10) writev(r1, &(0x7f0000000140)=[{&(0x7f0000000240)="580000001400192340834b80040d8c560a067f0200ff00000051f5bf6e0d6ac3e1da35000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd0000000c000100080c10000000000000000000", 0x62}], 0x1) 52.12593204s ago: executing program 40 (id=5203): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/249, 0xf9}], 0x1}, 0x40000000) close(r0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="16000000ffffffff040000000100000000800000", @ANYRES32, @ANYBLOB="00003200000000efffffffffffffff00eedeeb00", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0500"/20, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00'], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r4}, 0x10) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x810100, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1, 0x0, 0x0, 0x3}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000c80)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000016"], 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) r6 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000d40)={0x10200, 0x2, 0x5000, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x88e, &(0x7f00000001c0)={[{@debug}, {@auto_da_alloc}, {@inlinecrypt}, {@test_dummy_encryption_v1}, {@barrier}, {@mblk_io_submit}, {@nomblk_io_submit}]}, 0x3, 0x445, &(0x7f0000000800)="$eJzs3M9rHFUcAPDv7CZt06YmlvqjadVoFYM/kiattQcvioIHBUEP9RiTtMRuG2ki2BI0itSjFLyLR8G/wJNeRD0JXvUuhSK5tIqHldmdSXY3u2k2blzNfj4wyXszb3nvuzNv9715mQTQs0bTH0nEYET8EhFD1Wx9gdHqr9uryzN/rC7PJFEuv/57Uil3a3V5Ji+av+5AnumLKHycxNEm9S5euXphulSau5zlJ5YuvjOxeOXq0/MXp8/PnZ+7NHXmzKmTk8+ennqmI3Gmcd0aeX/h2JGX37z+6szZ62/98FWSx98QR4eMbnbwsXK5w9V118GadNLXxYbQlmK1m0Z/pf8PRTHWT95QvPRRVxsH7KhyuVy+t/XhlTKwiyXR7RYA3ZF/0afz33zbfMDQ0eFH1918vjoBSuO+nW3VI31RyMr0N8xvO2k0Is6u/Pl5usXO3IcAAKjzTTr+earZ+K8QtfeF7srWUIYj4u6IOBQRpyPicETcE1Epe19E3N9m/Y2LJBvHP4Ub2wpsi9Lx33PZ2lb9+C8f/cVwMcsdrMTfn5ybL82dyN6Tsejfm+YnN6nj2xd//rTVsdrxX7ql9edjwawdN/r21r9mdnpp+p/EXOvmhxEjfc3iT9ZWApKIOBIRI9usY/6JL4+1Onbn+JurvCUdWGcqfxHxePX8r0RD/Llk8/XJiX1RmjsxkV8VG/3407XXWtW/3fg7JT3/+5te/2vxDye167WL7ddx7ddPWs5ptnv970neqNv33vTS0uXJiD3JK9VG1+6faig3tV4+jX/sePP+fyjW34mjEZFexA9ExIMR8VDW9ocj4pGIOL5J/N+/8OjbdTvGBtuIf2el8c+2df7XE3uicU/zRPHCd1/XVTocbcSfnv9TldRYtmcrn39badf2rmYAAAD4/ylExGAkhfG1dKEwPl79G/7Dsb9QWlhcevLcwruXZqvPCAxHfyG/0zVUcz90MpvW5/mphvzJ7L7xZ8WBSn58ZqE02+3goccdaNH/U78Vu906YMd5Xgt6l/4PvUv/h96l/0PvatL/Bzbu+qvhkUFgN2j2/f9BF9oB/Psa+r9lP+gh5v/Qu/R/6F36P/SkxYG480PyEhIbElH4TzRj5xP7tvhvLnZZotufTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJ3xdwAAAP//FX7vJg==") r7 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x140, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0) socket$tipc(0x1e, 0x2, 0x0) r9 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r9, 0x10f, 0x87, &(0x7f0000000300)={0x22000042, 0x1, 0x2}, 0x10) r10 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r10, &(0x7f0000000380)={&(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42, 0x80000009}}}, 0x10, 0x0}, 0x0) write(r8, &(0x7f0000004200)='t', 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sendfile(r8, r7, 0x0, 0x3ffff) 49.29322344s ago: executing program 41 (id=5213): bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000010000000a00"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000002000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) writev(r1, &(0x7f0000000040)=[{&(0x7f0000000100)="89e7ee2c78dad9b4b473fec988cafbe863cac50580cd8b", 0x17}, {0x0}], 0x2) 34.504240927s ago: executing program 42 (id=5237): bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) keyctl$instantiate_iov(0x14, 0x0, &(0x7f0000000000), 0x10000002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00'}, 0x18) io_setup(0x3, &(0x7f0000000000)=0x0) r5 = eventfd(0x6d) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) r6 = socket$pptp(0x18, 0x1, 0x2) io_submit(r4, 0x3, &(0x7f0000000600)=[&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x7, 0x1, r3, &(0x7f0000000300)="30c50bd89c03e7d94f40548f1e49fa6d25799f5c0eaa1196a97ed0f6bee599acc8ca8604de5d900c7305c2cd8b", 0x2d, 0x4, 0x0, 0x2, r5}, 0x0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x8, 0x4, r6, &(0x7f0000000540), 0x0, 0x3}]) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'veth1_to_team\x00'}) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='tracefs\x00', 0x8010, &(0x7f0000000280)='\x00') r7 = syz_usb_connect$hid(0x3, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0x56a, 0xd4, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x20, 0x6, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0xfffe, 0x0, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x40}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r7, 0x0, 0x0) 24.403998008s ago: executing program 2 (id=5263): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x4c, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000840)=@abs={0x0, 0x0, 0x4e20}, 0x9) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r4}, 0x10) socket$netlink(0x10, 0x3, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f0000000140), 0x1, 0x4fa, &(0x7f0000000ac0)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) 23.780071107s ago: executing program 3 (id=5266): ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000007c0)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r3, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000080000000000000000000001811", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f0000000740)={[{@bsdgroups}, {@nodiscard}, {@noblock_validity}, {@grpjquota}, {@grpjquota}, {@noquota}, {@auto_da_alloc}, {@noload}, {@nodiscard}]}, 0x64, 0x50a, &(0x7f0000000200)="$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") syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r5 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r5, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_int(r5, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r5, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r5, 0x6, 0x16, &(0x7f0000000340)=[@window, @window={0x3, 0x564, 0x1}, @window={0x3, 0x3, 0x4}, @window={0x3, 0x8, 0x6}, @sack_perm, @timestamp, @mss={0x2, 0x1}, @sack_perm], 0x8) write$binfmt_elf64(r5, &(0x7f0000000280)=ANY=[], 0x40) sendto$inet(r5, &(0x7f0000000380)='M', 0x1, 0x60004410, 0x0, 0x2b) setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r5, &(0x7f0000000100)="14", 0x126c, 0x241, 0x0, 0x0) 23.779776617s ago: executing program 43 (id=5266): ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000007c0)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r3, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000080000000000000000000001811", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f0000000740)={[{@bsdgroups}, {@nodiscard}, {@noblock_validity}, {@grpjquota}, {@grpjquota}, {@noquota}, {@auto_da_alloc}, {@noload}, {@nodiscard}]}, 0x64, 0x50a, &(0x7f0000000200)="$eJzs3VFrHFsdAPD/bHZr06Y3ueqDXvB6tZW0aHeTxrbBh1pB9Kmg1vcak00I2WRDdtM2oWiKH0AQUcEnffFF8AMIUvDFRxEK+qyoKKKtPvigncvuTtI03U227TabZn8/mMw5Z2b2f86GmZ0zc5gJYGC9FxHXI+JJmqYXImI0K89lU2y1psZ6jx/dm21MSaTpzX8mkWRl25+VZPPT2WYnI+JrX474ZvJ83NrG5tJMpVJey/Kl+vJqqbaxeXFxeWahvFBemZqavDJ9dfry9ERP2nkmIq598a8/+O7PvnTtV5+586dbfz//rUa1RrLlu9vxgvL7LWw1vdD8LnZvsPaSwY6ifLOFmeF2aww9V3L/NdcJAID2Guf4H4yIT0bEhRiNof1PZwEAAIA3UPr5kfhfEpG2d6JDOQAAAPAGyTXHwCa5YjYWYCRyuWKxNYb3w3EqV6nW6p+er66vzLXGyo5FITe/WClPZGOFx6KQNPKTzfTT/KU9+amIeDsivj863MwXZ6uVuX5f/AAAAIABcXpP//8/o63+PwAAAHDMjPW7AgAAAMBrp/8PAAAAx5/+PwAAABxrX7lxozGl2++/nru9sb5UvX1xrlxbKi6vzxZnq2urxYVqdaH5zL7lgz6vUq2ufjZW1u+W6uVavVTb2Ly1XF1fqd9afOYV2AAAAMAhevvjD/6QRMTW54abU8OJ7jbtcjXgqMrvpJJs3ma3/uNbrflfDqlSwKEY6ncFgL7J97sCQN8U+l0BoO+SA5Z3HLzz22z+id7WBwAA6L3xj3a+/5/bd8ut/RcDR56dGAaX+/8wuJr3/7sdyetkAY6VgjMAGHivfP//QGn6QhUCAAB6bqQ5JblidnlvJHK5YjHiTPO1AIVkfrFSnoiItyLi96OFDzTyk80tkwP7DAAAAAAAAAAAAAAAAAAAAAAAAABAS5omkQIAAADHWkTub8mvW8/yHx89N7L3+sCJ5L+jkb0i9M6Pb/7w7ky9vjbZKP/XTnn9R1n5pX5cwQAAAICB8EIv8N/up2/34wEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACglx4/uje7PR1m3H98ISLG2sXPx8nm/GQUIuLUv5PI79ouiYihHsQfbvz5SLv4SaNaOyHbxR/uQfyt+/vGj7HsW2gX/3QP4sMge9A4/lxvt//l4r3mvP3+l494Jv+yOh//Yuf4N9Rh/z/TZYx3Hv6i1DH+/Yh38u2PP9vxkw7xz3YZ/xtf39zstCz9ScR429+f5JlYpfryaqm2sXlxcXlmobxQXpmamrwyfXX68vREaX6xUs7+to3xvY/98sl+7T/VIf7YAe0/12X7///w7qMPtZKFdvHPn20T/zc/zdZ4Pn4u++37VJZuLB/fTm+10ru9+/Pfvbtf++c6tP+g///5Ltt/4avf+XOXqwIAh6C2sbk0U6mU145totFLPwLVkDiCiW/39APTNE0b+9QrfE4SR+FraSb6fWQCAAB67elJf79rAgAAAAAAAAAAAAAAAAAAAIPrMB4ntjfm1k4q6cUjtAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeuL9AAAA//+GAdlV") syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r5 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r5, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_int(r5, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r5, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r5, 0x6, 0x16, &(0x7f0000000340)=[@window, @window={0x3, 0x564, 0x1}, @window={0x3, 0x3, 0x4}, @window={0x3, 0x8, 0x6}, @sack_perm, @timestamp, @mss={0x2, 0x1}, @sack_perm], 0x8) write$binfmt_elf64(r5, &(0x7f0000000280)=ANY=[], 0x40) sendto$inet(r5, &(0x7f0000000380)='M', 0x1, 0x60004410, 0x0, 0x2b) setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r5, &(0x7f0000000100)="14", 0x126c, 0x241, 0x0, 0x0) 23.56911819s ago: executing program 8 (id=5268): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x8, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="300000001d000100000000000000000007000000", @ANYRES32=r2, @ANYBLOB="000096000a0002"], 0x30}}, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00') read$FUSE(r7, &(0x7f0000003440)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r10, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r10, 0x6, 0x14, 0x0, 0x0) connect$inet6(r10, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback}, 0x1c) lstat(&(0x7f0000000280)='./file0\x00', &(0x7f0000000300)) setxattr$system_posix_acl(0x0, &(0x7f00000000c0)='system.posix_acl_default\x00', &(0x7f0000000540)=ANY=[@ANYBLOB="02000000010003000000000002000000", @ANYRES32=r8, @ANYBLOB="040006000000000008000100", @ANYRES32=r9, @ANYBLOB="08000200", @ANYRES32=r9, @ANYBLOB='\b\x00', @ANYRES32=r9, @ANYBLOB="0800060079b1f9b9465e2d53317acb3e44412ad4580dfd4a09e58acbd22cdedfbccf153c6cc25669387036b6aed5c0f5065c7941e82aa20270b25396744e7504c1438d2b8101e92556363f95051a319a877eb639c3b808000000d25853d90ec69d6719317fa03c7706cdcaa06d9d46103ed6f8d152ecf355a733262c2ca64e6b89bc2ec159350b8f1e68b135c0daa067dcdda7b53d3f5bcca1632658c91e73ce1e038b0579803fcd6ba6543ca870", @ANYBLOB="10000000000000"], 0x4c, 0x0) sendmsg$OSF_MSG_REMOVE(r10, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000003fc0)=ANY=[], 0x1060}, 0x1, 0x0, 0x0, 0x4805}, 0x20000000) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, 0xffffffffffffffff, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000001f00)=""/4106, 0xfffffffffffffccb, 0x0, 0x0}, &(0x7f0000000080)=0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x50) socket$nl_generic(0x10, 0x3, 0x10) 23.528835781s ago: executing program 2 (id=5269): mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) r0 = socket$netlink(0x10, 0x3, 0xf) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) timer_gettime(0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) sendmsg$OSF_MSG_REMOVE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000ac0)=ANY=[], 0x1060}}, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f00000003c0)=0x6, 0xdc) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000004480)=@newtaction={0x14, 0x30, 0x1, 0x0, 0x25dfdbff, {0x0, 0x0, 0x1300}}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x0) pipe2$9p(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff"], 0x15) r3 = dup(r2) ioctl$TIOCGSERIAL(r3, 0x541e, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=""/105}) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) read$FUSE(r3, &(0x7f0000000b00)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_BMAP(r3, &(0x7f0000000080)={0x18, 0xffffffffffffffda, r4, {0x8}}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) chdir(&(0x7f0000000000)='./file0\x00') mount$incfs(0x0, &(0x7f0000000300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) 23.429942972s ago: executing program 2 (id=5271): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setns(0xffffffffffffffff, 0x4000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x11}, 0x0) r3 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000240)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1e7d, 0x2d50, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x5, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x33, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0xc, 0x0, 0x7}}}}}]}}]}}, 0x0) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io(r3, &(0x7f00000003c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="000457000063fd3bc518194b120c1eccb78502ff2e7b3504ff87da2a1dae8706cbfd10f3c080b733000000000000000800000000000000ea7a288982d5337c364daf03bd400d66293b000000000000"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r3, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x1, 0x5e, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000001ec0), 0xffffffffffffffff) unshare(0x62040200) 22.224108998s ago: executing program 8 (id=5273): r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x4}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x3e, 0x0, 0x0) mount$tmpfs(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='huge=always']) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000004, 0x28011, r1, 0x0) madvise(&(0x7f0000003000/0x1000)=nil, 0x7f7884acbfff, 0x14) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$inet6_udp(0xa, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0xcfaa3a18983f92cb) unshare(0x20000) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TIOCSIG(r4, 0x40045436, 0x3) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000faffffff850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x10) connect$pppl2tp(r2, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r3, 0x8, 0x0, 0x1003, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x32) writev(r2, &(0x7f0000000180)=[{&(0x7f0000000080)='v', 0x180204}], 0x1) 22.13771926s ago: executing program 8 (id=5274): openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000300)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000040), 0x0, 0x80000001, 0x80000000) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r4, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003d00000095"], &(0x7f00000000c0)='GPL\x00', 0x1, 0x98, &(0x7f0000000000)=""/152}, 0x80) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000004000000080000000b00000000000000", @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00'], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000001c0)={@map=r6, r5, 0x7}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r6, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r4}, 0x20) r7 = fcntl$dupfd(r4, 0x0, r5) sendmsg$IPCTNL_MSG_EXP_NEW(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)={0x14, 0x0, 0x2, 0x201, 0x0, 0x0, {0x1, 0x0, 0x6}}, 0x14}}, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), r7) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000280)={0xc73, 0x3, 0x9, 0x1}, 0x14) 21.110815244s ago: executing program 8 (id=5275): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000002c0)='./file1\x00', 0x20c010, &(0x7f0000000300), 0xfe, 0x58d, &(0x7f0000000c00)="$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") openat(0xffffffffffffff9c, &(0x7f0000000640)='.\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) socket$nl_route(0x10, 0x3, 0x0) recvmmsg(r1, &(0x7f0000000480), 0x400034f, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000000040000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00'}, 0x94) syz_pidfd_open(0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) 20.525367922s ago: executing program 2 (id=5277): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800714, &(0x7f0000000500), 0xf7, 0x485, &(0x7f0000001040)="$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") r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1900000004000000040000000500000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000080000000000000000000000000000000046000000ace8aec10a00702e761fa11da0d89a54cff9e8172d073bfab25862663e4828987d5dabf0e95a39c120823a696c14dc7aa6559b8f12d9419ea90af3e49d7db3dbb2f6e32ad2bdfb3bda1982dc0f8e87f9de8cbe07273500b5f67c151388634e6707b342345f35c6c561725c63b699b15773dbe0e0e49e79cf48187ec519a96bbc076679a5aefb2160d166ef2127080b306b55b00a11016d40d9b11ca9fd9c9935be34c3c0df"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r1}, &(0x7f0000000800), &(0x7f0000000840)=r2}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)=0x0) timer_settime(r5, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r6) waitid(0x0, r6, 0x0, 0x8, 0xfffffffffffffffd) waitid(0x1, r6, 0x0, 0x4, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3, 0x0, 0xfffffffffffffffd}, 0x18) r7 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000000e40)=@raw={'raw\x00', 0x3c1, 0x3, 0x4c0, 0x300, 0x18c, 0x203, 0x300, 0x19030000, 0x3f0, 0x2e0, 0x2e0, 0x3f0, 0x2e0, 0x7fffffe, 0x0, {[{{@uncond, 0x300, 0x2d8, 0x300, 0x0, {0x1000000}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0xe}, {}, {0x0, 0x0, 0x3}, {0x2}, {}, {0x0, 0x0, 0x0, 0x1}, {}, {}, {0x16}, {}, {}, {0x7}, {}, {0x0, 0x0, 0x0, 0x101}, {}, {}, {}, {}, {}, {}, {0xfffe}, {}, {}, {}, {0x0, 0xfd}, {}, {0x7a04}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x1}, {}, {0xb84, 0x0, 0x0, 0xf00}, {0x0, 0x1, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}]}}]}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x4}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0xb, 'syz1\x00', {0x6c8}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x520) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{}, &(0x7f0000000380), &(0x7f0000000400)=r0}, 0x20) r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) recvfrom(r8, 0x0, 0x0, 0x10002, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000300)='qdisc_dequeue\x00'}, 0x10) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000005, 0x10012, 0xffffffffffffffff, 0x0) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r10 = openat$cgroup_ro(r9, &(0x7f00000000c0)='cgroup.kill\x00', 0x275a, 0x0) write$cgroup_int(r10, &(0x7f00000005c0)=0xb, 0x12) mount_setattr(0xffffffffffffffff, &(0x7f0000000540)='./file0\x00', 0x900, &(0x7f0000001280)={0x2, 0x8, 0x0, {r10}}, 0x20) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x100) 19.879593931s ago: executing program 9 (id=5281): ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000007c0)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r2, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f0000000740)={[{@bsdgroups}, {@nodiscard}, {@noblock_validity}, {@grpjquota}, {@grpjquota}, {@noquota}, {@auto_da_alloc}, {@noload}, {@nodiscard}]}, 0x64, 0x50a, &(0x7f0000000200)="$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") syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_int(r4, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r4, 0x6, 0x16, &(0x7f0000000340)=[@window, @window={0x3, 0x564, 0x1}, @window={0x3, 0x3, 0x4}, @window={0x3, 0x8, 0x6}, @sack_perm, @timestamp, @mss={0x2, 0x1}, @sack_perm], 0x8) write$binfmt_elf64(r4, &(0x7f0000000280)=ANY=[], 0x40) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r4, &(0x7f0000000100)="14", 0x126c, 0x241, 0x0, 0x0) 19.778673143s ago: executing program 8 (id=5283): read$FUSE(0xffffffffffffffff, &(0x7f0000006380)={0x2020}, 0x2020) r0 = fsopen(&(0x7f0000000300)='tracefs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) (async) write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) (async) r1 = openat(0xffffffffffffff9c, 0x0, 0x24c01, 0x0) link(0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1, 0x8, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000002bbcff0000000018120000", @ANYRES32=r2, @ANYRES8], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xe, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000180)='kmem_cache_free\x00', r3}, 0x18) fsetxattr$system_posix_acl(r4, 0x0, 0x0, 0x154e056880fa8408, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='\v\x00'], 0x48) (async) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0x7, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r5}}]}, &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r6}, 0x10) (async) syz_clone3(&(0x7f00000004c0)={0x100000000, 0x0, 0x0, 0x0, {0x3d}, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[0x0], 0x1}, 0x58) (async) unshare(0x64000680) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) (async) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4001c80) (async) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@random='50-\a|c', @dev={'\xaa\xaa\xaa\xaa\xaa', 0xff}, @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @random="a39f074bcd56", @multicast2, @link_local, @empty}}}}, 0x0) (async) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0) (async) timer_create(0x0, &(0x7f0000000180)={0x0, 0x13}, &(0x7f0000000240)=0x0) timer_settime(r7, 0x0, &(0x7f0000000340)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) (async) fremovexattr(r4, &(0x7f0000000080)=@known='security.selinux\x00') (async) pause() 19.593271535s ago: executing program 2 (id=5284): openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000300)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000040), 0x0, 0x80000001, 0x80000000) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r4, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003d00000095"], &(0x7f00000000c0)='GPL\x00', 0x1, 0x98, &(0x7f0000000000)=""/152}, 0x80) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000004000000080000000b00000000000000", @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00'], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000001c0)={@map=r6, r5, 0x7}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r6, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r4}, 0x20) r7 = fcntl$dupfd(r4, 0x0, r5) sendmsg$IPCTNL_MSG_EXP_NEW(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)={0x14, 0x0, 0x2, 0x201, 0x0, 0x0, {0x1, 0x0, 0x6}}, 0x14}}, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), r7) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000280)={0xc73, 0x3, 0x9, 0x1}, 0x14) 19.435957628s ago: executing program 8 (id=5285): ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000007c0)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f0000000740)={[{@bsdgroups}, {@nodiscard}, {@noblock_validity}, {@grpjquota}, {@grpjquota}, {@noquota}, {@auto_da_alloc}, {@noload}, {@nodiscard}]}, 0x64, 0x50a, &(0x7f0000000200)="$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") r5 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r5, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r5, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) write$binfmt_elf64(r5, &(0x7f0000000280)=ANY=[], 0x40) sendto$inet(r5, &(0x7f0000000100)="14", 0x126c, 0x241, 0x0, 0x0) 19.435494097s ago: executing program 44 (id=5285): ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000007c0)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f0000000740)={[{@bsdgroups}, {@nodiscard}, {@noblock_validity}, {@grpjquota}, {@grpjquota}, {@noquota}, {@auto_da_alloc}, {@noload}, {@nodiscard}]}, 0x64, 0x50a, &(0x7f0000000200)="$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") r5 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r5, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r5, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) write$binfmt_elf64(r5, &(0x7f0000000280)=ANY=[], 0x40) sendto$inet(r5, &(0x7f0000000100)="14", 0x126c, 0x241, 0x0, 0x0) 19.435297637s ago: executing program 2 (id=5287): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x1c916, &(0x7f0000000540)={[{@usrjquota}, {@noblock_validity}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x181fffc}}, {@inlinecrypt}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x7}}, {@discard}, {@nobarrier}, {@dioread_nolock}, {@resgid={'resgid', 0x3d, 0xee00}, 0x32}]}, 0x1b, 0x4f1, &(0x7f0000000880)="$eJzs3cFvG1kZAPBvnLg0TUpSwaFUolRtUVJB7aShbcShgITgVAko9xISJ4rixFHstE1UQSq4IyFEQZw4cUHiD0BC/RMQUiW4I0AgtNvuHvawW688tnebxI6TVWJ3nd9Pmvi9mef53mfH43kzI08AJ9aliDgdEa+q1eq1iBhtzM80pvFaZbve7uWLx3O1KYlq9d5bSURSn1drMvHaOofrT0nX+4PvRvw42Ru3vLm1PFssFtYb9XxlZS1f3ty6vrQyu1hYLKxOT0/dmrk9c3Nm8kjyHImIO9/+z69/8Yfv3PnLVx/+8/7/Jn6SNPKP+DiPo1ZPPZu+Fk2DEbF+HMF6ZDDNEACAT4Pmfv7liLgWozGQ7s0BAAAA/aT6jZF4P4moAgAAAH0rk14bm2RyjesARiKTyeXq1/B+Ps5kiqVy5SsLpY3V+fo1tGORzSwsFQuTjWuFxyKb1OpTablZH44bO+rFwnREnIuIX40OpfXcXKk43+uDHwAAAHBCDO8a/787Wh//AwAAAH1mrNcdAAAAAI6d8T8AAAD0P+N/AAAA6Gvfu3u3NlWb97+ef7C5sVx6cH2+UF7OrWzM5SKzvpZbLJUW09/sW+m0vmKptPa1WN14lK8UypV8eXPr/kppY7Vyf2nHLbABAACALjr3pWf/SCJi++tD6VRzqtedArpi8DCN/318/QC6b6DXHQB65lDf/0Bfyfa6A0DPJR2Wt714569H3xcAAOB4jH+h9fn/pOOxge1Ml7oIHBPH/+Dkcv4fTi7n/+HkysZAGMjDyXb85/+r1UN1CAAAOHIj6ZRkchHpcYCRyGRyuYiz6W0BssnCUrEwGRGfjYi/j2Y/U6tPpc9MOo4ZAAAAAAAAAAAAAAAAAAAAAAAAAIC6ajWJKgAAANDXIjL/TRr3/xofvTqy+/jAqeS90fQxIh7+7t7TgahU1qdq89/+aH7lN/eePpqtVNZv9OIIBgAAALBbc5yePk71ujcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA9JuXLx7PNaduxv3/tyJibE/8bMRgnE5bnK5V4sw7SQy+9rwkIgaOIP72k4g43yr/pNatGGv0olX8oR7HHz6C+HCSPattf77Z6vOXiUvpY+vP362IHfVPqs32L43f3P4NtPn8nz1gjAvP/5RvG/9JxIXB1tufZvykTfwrB4z/ox9ubbVbVv19xHjL759kR6x8ZWUtX97cur60MrtYWCysTk9P3Zq5PXNzZjK/sFQsNP62jPHLL/751X75n2kTf6xD/lcPmP8Hzx+9+Fy9mG0Vf+JK6/f/fJv4mcZ335cb5dry8WZ5u15+3cU//u3ifvnPt8m/0/s/ccD8r33/Z/86YFMAoAvKm1vLs8ViYX1X4ebPa3vFES0W9WGh06uxb6G2W9S58W8vvxGZ9qQw9GZ0Y2/hp29GNw5eqP2TdmgzdPg1NwdbOxb1bpsEAAAcj71jYAAAAAAAAAAAAAAAAAAAAKDbuvnrek3bvUkVAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGBfHwYAAP//vt7JFg==") 19.427183968s ago: executing program 45 (id=5287): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x1c916, &(0x7f0000000540)={[{@usrjquota}, {@noblock_validity}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x181fffc}}, {@inlinecrypt}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x7}}, {@discard}, {@nobarrier}, {@dioread_nolock}, {@resgid={'resgid', 0x3d, 0xee00}, 0x32}]}, 0x1b, 0x4f1, &(0x7f0000000880)="$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") 19.090442623s ago: executing program 9 (id=5290): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x0, 0x3, 0xfffffffffffffffe, 0x40, 0x0, 0x7, 0x2000000000044, 0x0, 0x8000000000000, 0x5, 0x0, 0x9, 0x0, 0x1, 0x7, 0x1], 0x6000, 0x3c2a10}) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000340)={0x0, &(0x7f0000000480)=ANY=[@ANYRESHEX=r0], 0x6e}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000000)={0x0, &(0x7f0000000940)=ANY=[@ANYBLOB="010000000000000000000000000000000f20e035000010000f22e066baa00066b8080066ef66440ff23746a80265410f30"], 0x1d6}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="d000000010000104ffffffffffffffff0000ffff", @ANYRES32=0x0, @ANYBLOB="08d10000000000009c00128009000100766c616e000000008c0002800c0002000e0000000c0000000600050088a80000640003800c0001007b4b0000000000000c000100020000f4140000000c000100bf000000000400000c00010002000300ff0100000c00010005000000090000002000010002000000080000000c00010005000000120000000c0001000200000004000000100004800c007f02dd790000a400000014000300766c616e30"], 0xd0}}, 0x0) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r5) ptrace(0x8, r5) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=r4, @ANYBLOB="000000000000000000000000000000007500000059dc9a8e9f2878736349466391c7e7ad6823158fbe89c470bc56f76e44887fdd9b41ad5e7b49da671400c2b5386025faa77af413611f9c6b9d20da74e6515ea4a0ba72702e7804f9389e5707650644bb596b25f20a77109bf9f2b7de1a4ee7f41a4be93d34405bcfdd9470bf9ef4d048a2635f14bcf6205c316dbd7e821ce60e4e2fe2efc74bcf2faafc1c5136f4e58199793853626ce36957fddda7fc646b71720d76f9db7d2d126f5f82f323653f11619986f60299b95b06ec103b8a53c1af084770f691fb87", @ANYBLOB="3794428b3a8d71acf8ccbaf6c5cc82a803a789e93ad4e7b314c3ab9ec045957a", @ANYRES32, @ANYRES32=r5], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000980)=ANY=[@ANYBLOB="18050000000000000000000000000400cb080200000000007b8af848ff000000b6e40d4600b7080000000000007b8a040000000000bfa100000000000007010000f8ffffffbfa4000000fd301c545512212582b7f400000007040000f0ffffffb702000008000000182300001f198602cadfcadfaacb3d38e7bb8817e603dadeb23baca52039f4", @ANYRES32=r6, @ANYBLOB="0000000000000000b70400000800000085000000950000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r7}, 0x10) waitid(0x2, 0x0, 0x0, 0x4, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f00000022c0)=[{{&(0x7f0000002340)=@xdp={0x2c, 0xa, 0x0, 0x3b}, 0x80, &(0x7f0000000f00)=[{&(0x7f0000000e00)="0f96cf8090cf0446ac14e1fe27222d193f5071fbc001ca32338ab2975028876d1368accf65a66f56270a96b0dd3a4cd409894527a372179eea6d34f49c58208c87d4d11dbf1403d2892f2b2c17552574c2a7a0c428d54eea475ff3267f8d47863935049dd6b54982b47bcfc51d29c6a756f78f5d1aea2109d181a326d071fa84ae28e5790a9122d6f7f6ba6e39b841db618e3ac6669ebbe58f0a62bdb0254f3797aa43a7b87f058fd9b5d2346e0c9cf5ba211acbb9786fa7d4050cf420f114f116a65d5130fac0e7633df1040191b6607eb288b4629ac751c689", 0xda}], 0x1}}, {{&(0x7f0000000f40)=@llc={0x1a, 0x30a, 0x5, 0x80, 0x9d, 0xa4, @random="a06c7144f1da"}, 0x80, &(0x7f0000002000)=[{&(0x7f0000000fc0)="afd9b8ae4ec1c3ab932b2f8f780f113b952973af9ec6371d2bf285ce4ddbb1ea4540fa4077644f032b55d3fa5585", 0x2e}, {&(0x7f0000001000)="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", 0x1000}], 0x2, &(0x7f0000002040)=[{0xb0, 0x84, 0x3c0, "b6ea3972c2297b9dbe591bcc6b01b1c6ac94b83bf432cab1fe220c79ac13b5dab5fe4f961549ebe3d246458f3c01d899920a121efd475b7f613bbd05c4231fba14e50ce510310505d22ed3faddf90da60201ed72f4c8cae2e76aa1de9c21cc45c776d01c244432e3c131623b60da6b801a5ef49f54cc27adc325545f1f78f05ce0cb33fd818e576c4d96f6c2911432c54105666085e51c18b3ff"}, {0x38, 0x109, 0x6, "c06d32e9bf4d720a24899a0191ec5a19be6abf236d0ada0223059ed4fecfff45c6d7"}, {0x90, 0x10f, 0x5cb03b51, "3281eb57df06bf485b5f97d9915ca622a42eb443da709f7e2eac081d82738e16d7d011bc22a45b18f211e8381086f435ed4f904ef66e0a66a19b41f59492cf73a16a5d39ea7dfa9699b4cddf538272ad3f81fcc582e9c4a8ee44cc98abe4a116aaa21438785dcd189148af0e3db054b64528ec0dc835b874ef06fb1c"}, {0x100, 0xff, 0x1c3, "0c62e0d0b20bf28829558ca6cda984700a1433ceef3f75dc669522b63a0abc3198d38fd0ff1447e5f52e0e1a0b3654012f41c5ca4c8031b5e7bdf324805508b427ce05b46168a0413a01856d8c1a02c69ade80db2e53ac2e55cc28b3101edb0959bfb3869ee2e82c9d751b8837a08f253315698519d93982d2478cb18460cd52dcbaebd79936d1a62516fa73c562e5d0514b5dae3676ec533445f1f3013f6788a27edfef85103f19c176d7911265961d65b064336e3e8f633f6317d133a4838c59315737950cb965b35dac16f07ae49d13958c91f2b150e0ef0a7633b5a6ec5f2bc261248de8362a68"}], 0x278}}], 0x2, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000b80)=[{{&(0x7f0000000640)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000900)=[{&(0x7f0000000800)="cbfb1e302e90899b7dea6082e037c54fb109aee5b0512c9aca24f3d6d87fad75b774817f6bbcfadd1438218cbbe71e878665eb6f1040d54e811147fd9589930d96c07a918ab0542d64bbeb5c8cad905c4068ce5f36104093d7881bd240a894215c7c0877e8ad1efcfcf143925d2da59a9b162c822ca74f67694b1957dc8605221974b64447dcfebdb182917319d82ae78e1a19ff437d2f5f2e91ab150f2824a9e21b72a44377b1d5fab853953549f3e862055a2e2917420e4bc134690265be427a0075095b8c861c82098b7917693209", 0xd0}, {&(0x7f0000000a40)="05260d3c26f7b2ac66dad8b9a1f56e00a9162309c57df67adeb87c7ee5bacc38a635f5009a2a9f1478e0a44a1d896825e656aba4fa6d1189eee74bd8d83c417df1a1979654a18416eb85357bf75b73", 0x4f}, {&(0x7f0000000ac0)="cfae8421031ecba07f209c9ab0461e70f666e05987611379b5dd22f129ede16742da0b91e2957205a8969901317a99ca2accd217a90055ab605809d9f2a443979c790718ac533b54bc930286c729dc1eca2e79b53445e36b9e8cb34f39559c211cc69cbe4bbbea401807840ac5b509b282b5a219973446dc5b3c871603020474c609091b65eb24e3859603a8c3d83a4c375f9348b6e77b5ea5661c", 0x9b}, {&(0x7f0000000440)="ab3cd0925ed4ff7c2ceaa94bd0ada5bfb91d561e1c0d0fae4b00", 0x1a}], 0x4, &(0x7f0000000980), 0x0, 0x5}}], 0x1, 0x4000010) ioctl$KVM_RUN(r8, 0xae80, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000040)={0x0, 0x12000, 0x1}) ioctl$KVM_RUN(r8, 0xae80, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x13, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000000000008500000086000000bf9129d0bfca029953c3940ebf420000008502000000000000b70000000000000095000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r9}, 0x10) socket$inet6(0xa, 0x6, 0xb4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000bc0)={'batadv_slave_1\x00'}) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000d40)=ANY=[@ANYBLOB="06000000040000000400007d65157a7f3c2394009e2608cdaa671692c549688320a29e69f21a21a4763b8323349a4c83209fbdf7941ce574d66c21d952bfcf416c33bf60a0c0aa45963fa71dabe66bb49f41", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYRES16=r8, @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xfffffffffffffea2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000300)='tlb_flush\x00', r11}, 0x10) 18.853774696s ago: executing program 9 (id=5292): syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000280)='./file1\x00', 0x0, &(0x7f0000000240)=ANY=[], 0x1, 0x1237, &(0x7f00000006c0)="$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") rename(&(0x7f0000000080)='./file0/file0\x00', &(0x7f0000000140)='./file1\x00') r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000dfff75390000000000000000850000007d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='io_uring_register\x00', r0}, 0x10) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = io_uring_setup(0x5be9, &(0x7f0000000040)={0x0, 0x0, 0x2000, 0x0, 0x131, 0x0, r1}) io_uring_register$IORING_REGISTER_FILES_UPDATE(r2, 0x6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[0xffffffffffffffff]}, 0x1) recvmsg$unix(0xffffffffffffffff, 0x0, 0xf0588357b60851c) rmdir(&(0x7f0000000080)='./file0\x00') r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES8=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000800850000008200000095"], &(0x7f0000000640)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10) r5 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000580)=@generic={&(0x7f0000000300)='./file0/file0\x00', 0x0, 0x8}, 0x18) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000005c0)={&(0x7f0000000180)="84f869f4850865179bb6928f19c8ef2bb93e510dc070c1ed3bf702c8bbddf2d4856fa3a757a29e4a376d5728bbc4af9a778e0cf8b5a8e3d50e7a1b172c0a34be", &(0x7f00000003c0)=""/213, &(0x7f00000001c0)="52103ecbd1deebbbbeeef6a26e0684f93160d33217a1ac94a0", &(0x7f00000004c0)="701d81d742a86de34e87a6d3cf614520746c70ac3c55dc69dd0d5fc3817c408dab7757c77452422dddc621634cef50e41ac9443eb9947fabe7983ca19fc1e8756a9c6b5fe6d693f170db33b93b0659bc8ff2ccb820e92974ad2dc670b22a18491d64fc81ea4b75b686c66da9f477087b387a19f568b53bfa1dbb54a4700af8a28cca06fc2e6c739906f85c599000428c3f01fdcc0c810c2843", 0x8, r5}, 0x38) r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) write$cgroup_devices(r6, &(0x7f0000000c00)=ANY=[@ANYRESOCT=r3], 0xffdd) close(r3) 18.112036766s ago: executing program 9 (id=5294): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000002c0)='./file1\x00', 0x20c010, &(0x7f0000000300), 0xfe, 0x58d, &(0x7f0000000c00)="$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") openat(0xffffffffffffff9c, &(0x7f0000000640)='.\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) socket$nl_route(0x10, 0x3, 0x0) recvmmsg(r1, &(0x7f0000000480), 0x400034f, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000000040000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00'}, 0x94) syz_pidfd_open(0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) 16.38259106s ago: executing program 9 (id=5300): syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000840)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1000400, &(0x7f0000000200)={[{@jqfmt_vfsold}, {@journal_checksum}, {@debug}, {@noload}, {@jqfmt_vfsv1}, {@noblock_validity}, {@init_itable_val={'init_itable', 0x3d, 0x601}}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x2}}, {@usrjquota}]}, 0xfe, 0x46c, &(0x7f0000000940)="$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") r0 = inotify_init1(0x80800) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/rt_cache\x00') read$FUSE(r1, &(0x7f0000000d80)={0x2020}, 0x2020) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000002c0)={r1, 0x20, &(0x7f0000000180)={&(0x7f0000000dc0)=""/4096, 0x1000, 0x0, &(0x7f0000000000)=""/52, 0x34}}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) r3 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_opts(r3, 0x0, 0x4, 0x0, 0x0) inotify_add_watch(r0, &(0x7f0000000080)='.\x00', 0x2000434) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000700)={0x2, 0x3, 0x0, 0x3, 0x10, 0x0, 0x0, 0x0, [@sadb_key={0x2, 0x9, 0x8, 0x0, '\n'}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @loopback}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x9, 0xc}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @loopback}}]}, 0x80}, 0x1, 0x7}, 0x0) lremovexattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=@known='system.posix_acl_access\x00') 16.257787932s ago: executing program 4 (id=5303): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c00000010000600"/20, @ANYRES32=0x0, @ANYBLOB="adffa888020002001c0012800b0001006d616373656300000c000280050006008d000000"], 0x3c}}, 0x8000) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) r1 = socket(0x14, 0x3, 0x2) connect$netlink(r1, &(0x7f0000000280)=@proc={0x10, 0x0, 0x1}, 0xc) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000fbff000000000000001d8500000007000000a50000002a00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000c80)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0xff58) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r4, 0x0, 0xfffffffffffffffc}, 0x18) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x17, 0x0, 0x8400, 0x1, 0x0, 0x1}, 0x50) bpf$MAP_DELETE_ELEM(0x15, &(0x7f0000000500)={r5, 0x0, 0x20000000}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x18) socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0x5d, &(0x7f0000000380)=ANY=[@ANYBLOB="ffffffffffffaaaa0000000000000000000000aa00b1eccaf5174b6fd567ded6da6968a1f239c9831e01de4aeb39931e507cd67f363e5a1d577c8096f34121cd6872d5af26cc9b0dd58bc85577bc00"/93], &(0x7f0000000440)={0xe4, 0x1, [0x371, 0x388, 0xe09, 0xfeb]}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="14000000", @ANYRES16=r7, @ANYBLOB="796100000000000000007e000000fe34c6bf8fe10041086c9d49760da87b64920e56599e068ec80af29fc8dc9386a87bef85ffdec55b70eeeb14fbb581f78571840b49aff8c7fe526abcd0bc23c5ae6c7ac7756394b239cd0f00"/103], 0x14}}, 0x4000054) r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r8, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x1000, 0x2}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) dup3(0xffffffffffffffff, r8, 0x0) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000000140)={0x2c, 0x0, &(0x7f0000000100)=[@request_death, @free_buffer, @clear_death={0x400c630f, 0x3}], 0x0, 0x0, 0x0}) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x90) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x52) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_generate\x00', r10}, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wlan0\x00'}) ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, &(0x7f00000004c0)) faccessat2(0xffffffffffffffff, &(0x7f0000000540)='./file0\x00', 0xa0, 0x1000) 16.023799975s ago: executing program 4 (id=5304): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x20, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x73cea2d47785b264, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c0000000014"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000006980)={&(0x7f0000006800)='find_free_extent\x00', r1}, 0x18) getpgrp(0x0) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000280)='sched_switch\x00', r3}, 0x18) recvmmsg(0xffffffffffffffff, &(0x7f00000064c0)=[{{&(0x7f0000000080)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @remote}}}, 0x80, &(0x7f00000006c0)=[{&(0x7f0000000340)=""/237, 0xed}, {&(0x7f0000000100)=""/15, 0xf}, {&(0x7f00000001c0)=""/148, 0x94}, {&(0x7f0000000440)=""/87, 0x57}, {&(0x7f0000000640)=""/97, 0x61}], 0x5}, 0x9}, {{&(0x7f0000000740)=@ieee802154, 0x80, &(0x7f0000001ac0)=[{&(0x7f0000000140)=""/44, 0x2c}, {&(0x7f00000007c0)=""/4096, 0x1000}, {&(0x7f00000017c0)=""/27, 0x1b}, {&(0x7f0000001800)=""/193, 0xc1}, {&(0x7f0000001900)=""/242, 0xf2}, {&(0x7f0000001a00)=""/185, 0xb9}], 0x6, &(0x7f0000001b40)=""/211, 0xd3}, 0x1}, {{&(0x7f0000001c40)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x80, &(0x7f0000002f00)=[{&(0x7f0000001cc0)=""/120, 0x78}, {&(0x7f0000001d40)=""/76, 0x4c}, {&(0x7f0000001dc0)=""/4096, 0x1000}, {&(0x7f0000002dc0)=""/224, 0xe0}, {&(0x7f0000002ec0)=""/15, 0xf}], 0x5, &(0x7f0000002f80)=""/109, 0x6d}, 0x8}, {{&(0x7f0000003000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, 0x80, &(0x7f0000005240)=[{&(0x7f0000003080)=""/4096, 0x1000}, {&(0x7f0000004080)=""/4096, 0x1000}, {&(0x7f0000005080)=""/220, 0xdc}, {&(0x7f0000005180)=""/149, 0x95}], 0x4, &(0x7f0000005280)=""/97, 0x61}, 0x2}, {{&(0x7f0000005300)=@can, 0x80, &(0x7f0000005440)=[{&(0x7f0000005380)=""/183, 0xb7}], 0x1, &(0x7f0000005480)=""/103, 0x67}, 0xdc3}, {{0x0, 0x0, &(0x7f0000005500)}, 0x4}, {{&(0x7f0000005540)=@sco, 0x80, &(0x7f00000057c0)=[{&(0x7f00000055c0)=""/250, 0xfa}, {&(0x7f00000056c0)=""/222, 0xde}], 0x2, &(0x7f0000005800)=""/245, 0xf5}, 0x3}, {{&(0x7f0000005900)=@qipcrtr, 0x80, &(0x7f0000005b80)=[{&(0x7f0000005980)=""/30, 0x1e}, {&(0x7f00000059c0)=""/176, 0xb0}, {&(0x7f0000005a80)=""/92, 0x5c}, {&(0x7f0000005b00)=""/44, 0x2c}, {&(0x7f0000005b40)=""/50, 0x32}], 0x5, &(0x7f0000005c00)=""/110, 0x6e}, 0x400}, {{0x0, 0x0, &(0x7f0000005d80)=[{&(0x7f0000005c80)=""/236, 0xec}], 0x1, &(0x7f0000005dc0)=""/219, 0xdb}, 0x3}, {{&(0x7f0000005ec0)=@ax25={{0x3, @null}, [@netrom, @remote, @remote, @bcast, @null, @bcast, @bcast]}, 0x80, &(0x7f0000006380)=[{&(0x7f0000005f40)=""/138, 0x8a}, {&(0x7f0000006000)=""/78, 0x4e}, {&(0x7f0000006080)=""/241, 0xf1}, {&(0x7f0000006840)=""/53, 0x35}, {&(0x7f00000061c0)=""/229, 0xe5}, {&(0x7f00000062c0)}, {&(0x7f0000006300)=""/89, 0x59}], 0x7, &(0x7f0000006400)=""/132, 0x84}, 0x20008}], 0xa, 0x40010021, &(0x7f0000006740)) creat(&(0x7f0000005500)='./file0\x00', 0x124) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1900000004000000040000000280"], 0x50) io_setup(0x19d944f6, &(0x7f0000000040)) mkdir(&(0x7f0000000000)='./file0\x00', 0x104) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r7, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b00000800395032303030"], 0x15) r8 = dup(r7) write$FUSE_BMAP(r8, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r8, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000062c0), 0x80000, &(0x7f0000006880)=ANY=[@ANYRES64=r5, @ANYRESHEX=r6, @ANYBLOB="2a77112b8fc07104a360666201e3b4a6d13870664636cb80f0b0341c449a2855b567076187fb879e92bd7e753fd2c7b21a01473b7cf264c492f85e7c1585d45f7e5be7f333b230b6e2f19f892b153b00f6e341837e5852094a23e825a8924d24e0d6fb31f7537c6d4ac36dab5737131dcd52816b32d339d8925f5264a70a62504a654b43e122ddb38f97b6e5fb5c30fee4a0a7dbffd12fde6bbc33b190e056f5ffa85835b8d50e28d2035046adcddee467c2668e9116a3d8745f1d137b5985bd423fde0979df69c5311ce4eeb6ee8aa4e83ef0bb862724a2", @ANYRES32=r2]) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100000000001c000000000000ea04850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r9}, 0x10) chdir(&(0x7f0000000100)='./file0\x00') write$FUSE_DIRENTPLUS(0xffffffffffffffff, &(0x7f00000012c0)=ANY=[@ANYBLOB="b0"], 0xb0) getresuid(&(0x7f0000000440), &(0x7f0000000400), &(0x7f00000004c0)=0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB=',privport,access=', @ANYRESDEC=r10]) stat(&(0x7f0000000240)='./bus\x00', &(0x7f0000002380)={0x0, 0x0, 0x0, 0x0, 0x0}) lchown(&(0x7f00000000c0)='./bus\x00', r11, 0x0) mount$9p_fd(0x0, &(0x7f0000006780)='./file0\x00', &(0x7f00000067c0), 0x1150000, &(0x7f0000006a80)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r8, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',cache=fscache,privport,privport,access=', @ANYRESDEC=r10, @ANYBLOB=',posixacl,dfltuid=', @ANYRESHEX=0xee00, @ANYBLOB="2c63616368653d6d6d61702c6e6f6465766d61702c6e6f776e65723c02e3f4eb914e63d69d34b810666132eaba92df1817eb664771f985515e13b51c00eb1eb3ba6c2ada49ec5f4563e670e6499ff0a68d0dcb4de8bd59c33695a7bcd58c08ba8f02df912d8dcdc0e2ddb87beb3595c3b9616ae9", @ANYRESDEC=r11, @ANYBLOB=',\x00']) openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x2d41, 0xd5) 16.023607245s ago: executing program 9 (id=5305): bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x10b501, 0x0) 16.021612555s ago: executing program 46 (id=5305): bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x10b501, 0x0) 16.021411555s ago: executing program 4 (id=5307): sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, 0x0, 0x809d) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f326635004000000f300f20e06635800000000f22e0f30fa6c8", 0x50}], 0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004000}, 0x14) prlimit64(0x0, 0x7, &(0x7f0000000180)={0x2, 0x3}, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x1c, 0x3a, 0xb, 0x0, 0x0, {0x4}, [@nested={0x4}, @nested={0x4, 0x9}]}, 0x1c}}, 0x0) sendmsg$NLBL_MGMT_C_ADDDEF(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000280)={0x28, 0x0, 0x118, 0x70bd27, 0x25dfdbfc, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @ipv4={'\x00', '\xff\xff', @local}}]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x40000) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000140)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x4, 0x4}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4000884}, 0x4) ioctl$KVM_RUN(r3, 0xae80, 0x0) 15.087216249s ago: executing program 4 (id=5309): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000002c0)='./file1\x00', 0x20c010, &(0x7f0000000300), 0xfe, 0x58d, &(0x7f0000000c00)="$eJzs3U1rG0cfAPD/yi+J7TyJAyE87aEYcmhKiBzbfUmhh/RY2tBAe0+FrZhgOQqWHGI30OTQXHopoVBKA6UfoPeeSugX6KdIaQOhBNNScnFZeZUotmRLtmMr0e8Ha8/sjDQz2p3RrEZiA+hZY+mfXMQrEfF1EnGkIa0/ssSxtXwrj25Mp1sSq6uf/JVEku2r50+y/yNZ5P8R8euXEadyG8utLC3PFUql4kIWH6/OXx2vLC2fvjxfmC3OFq9MTk2dfWtq8t13hnatrW9c+Oe7j+99cParEyvf/vTg6J0kzsWhLK2xHZs6sGnqzcbIWIxlr8lAnFuXcaKTir8Akv2uANvSl/XzgUjHgCPRl/V64OX3RUSsdu7xNh4DdJ1kO/0feAnU5wH1a/u2r4NfEg/fX7sA2tj+ZO2zkThYuzYaXkmeuTJKr3dHd6H8tIyf/7x7J92ik88hAHbo5q2IONPf/2T8G14//m3fmTbyrC/D+Ad75146//llKGLD/Cf3ZP4TTeY/I0367nZs3f9zD9YWoZ6PdP73XtP575MiR/uy2P9qc76B5NLlUjEd2w5HxMkYOJDGN1vPObtyf7VVWuP8L93S8utzwaweD/rXrTnNFKqFnbS50cNbEa9uMf9Nmhz/9PW40GYZx4t3X2uVtnX7n6/VHyNeb3r8n65oJZuuT749XjsfxutnxUZ/3z7+W6vy22n/v7vX3A3S4z+8eftHk8b12krnZfxw8HGxVdpYki2adnj+Dyaf1kamwWzf9UK1ujARMZh8VIs/s3/y6WPr8Xr+tP0nTzTv/5ud/0MR8Vmb7b997HbLrPt9/qftn+no+HceuP/h59+3Kr+98e/NWuhktqed8a/dCu7ktQMAAAAAAIBukxuMOBRJLp+t6R+KXC6fX/t+x7EYzpXKleqpS+XFKzNR+63saAzk6ivdIw3fh5jIvg9bj0+ui09FxNGI+KZvqBbPT5dLM/vdeAAAAAAAAAAAAAAAAAAAAOgSI7Hx9//1+1r90bfPlQOeP7f8ht71TP8/0CTDbtzpCehK3v+hd+n/0Lv0f+hdLfv/4N7WA9h73v+hd+n/0Lv0f+hd+j8AAAAAAAAAAAAAAAAAAAAAAAAAAADsqgvnz6fb6sqjG9MRcTCuLS3Ola+dnilW5vLzi9P56fLC1fxsuTxbKuany/NbPV+pXL46MRmL18erxUp1vLK0fHG+vHilevHyfGG2eLE4sDfNAgAAAAAAAAAAAAAAAAAAgBdKZWl5rlAqFRe2Exjc2cP3IfB7d1SjrcDh7qjGVoH+7qiGwEJlKHbxCfd7ZAIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAp/4LAAD//5/QMw4=") openat(0xffffffffffffff9c, &(0x7f0000000640)='.\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) socket$nl_route(0x10, 0x3, 0x0) recvmmsg(r1, &(0x7f0000000480), 0x400034f, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000000040000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="c50a00000000000061139c00000000001800000000000000000000000000000095000000000000005b343f100624b3de7926e22e7edb1497bf3991011242f785f0d596bb538ff72ed469b954afb2361cd3c59f04b57ebf2a29c94ea39c171264f6a088721d3a80495e3ed97583c8bf335cba5f728965fed3d22dd59ee0d06124c3aeb14cb61a877b1382c2489060f66d2018d74d1cd2c729541b0885f7a78a423a83f15537e7ef488da890f5cf403719b04057766ee017e7220e68a7ea43c069da2d0b05dd3567487d73dd363920cd575b2419179af731a6b1bd8c462df0f949c3a16ff977cddb2e84614a492c3d3ec65b1335bc6949473b8eec37c55781b5a83771c146b4027601df36e666908010355216568f8f67a2a136232f96bf7ef1bcb9d42baca52173809ca16d6cbb4760867c6f24fdd803934d5a8fae179929fed9c414cff600d3a673497b71f2fc10d239192e35"], &(0x7f0000000000)='GPL\x00'}, 0x94) syz_pidfd_open(0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) 13.848781906s ago: executing program 4 (id=5316): bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xb, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) syz_open_procfs(0x0, 0x0) pipe(&(0x7f0000000d00)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f0000000100)=0x1, 0x4) connect$inet(r3, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f0000000900)=0xffffffffffffffff, 0x4) write$binfmt_misc(r2, &(0x7f0000000000), 0xfffffecc) splice(r1, 0x0, r3, 0x0, 0x7151, 0x0) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r5, 0xffffffffffffffff, 0x0) r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000780)=@newlink={0x40, 0x10, 0x401, 0x2, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2000, 0x41042}, [@IFLA_BROADCAST={0xa, 0x2, @broadcast}, @IFLA_IFNAME={0x14, 0x3, 'ip_vti0\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x8c5}, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="116d00008994c77fbb482100000000001b00000500000000000000", @ANYRES32, @ANYRES16=r6, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000240)={r9}, 0x57) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'pim6reg1\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r10, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000080)='task_rename\x00', r11}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000740)={r2, 0xe0, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380), ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000400)=[0x0, 0x0], 0x0, 0x89, &(0x7f0000000580)=[{}, {}, {}], 0x18, 0x10, &(0x7f00000005c0), &(0x7f0000000600), 0x8, 0x38, 0x8, 0x8, &(0x7f0000000640)}}, 0x10) r12 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1000000004000000040000000200000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000010000000000000200"/28], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r12, &(0x7f00000006c0), &(0x7f0000000000), 0x2}, 0x20) getresgid(&(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)) 11.132036194s ago: executing program 4 (id=5322): socketpair$unix(0x1, 0x2, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x4c, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000840)=@abs={0x0, 0x0, 0x4e20}, 0x9) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r4}, 0x10) socket$netlink(0x10, 0x3, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f0000000140), 0x1, 0x4fa, &(0x7f0000000ac0)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) 10.901205427s ago: executing program 47 (id=5322): socketpair$unix(0x1, 0x2, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x4c, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000840)=@abs={0x0, 0x0, 0x4e20}, 0x9) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r4}, 0x10) socket$netlink(0x10, 0x3, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f0000000140), 0x1, 0x4fa, &(0x7f0000000ac0)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) 7.768833901s ago: executing program 7 (id=5336): sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d) r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f326635004000000f300f20e06635800000000f22e0f30fa6c8", 0x50}], 0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004000}, 0x14) prlimit64(0x0, 0x7, &(0x7f0000000180)={0x2, 0x3}, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x1c, 0x3a, 0xb, 0x0, 0x0, {0x4}, [@nested={0x4}, @nested={0x4, 0x9}]}, 0x1c}}, 0x0) sendmsg$NLBL_MGMT_C_ADDDEF(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000280)={0x28, 0x0, 0x118, 0x70bd27, 0x25dfdbfc, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @ipv4={'\x00', '\xff\xff', @local}}]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x40000) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000140)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x4, 0x4}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4000884}, 0x4) ioctl$KVM_RUN(r3, 0xae80, 0x0) 7.651731102s ago: executing program 1 (id=5324): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000012c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007010000b8ffffffb702000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='net_dev_xmit\x00', r1}, 0x10) r2 = socket$packet(0x11, 0x3, 0x300) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r3}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000100)='kmem_cache_free\x00', r4}, 0x18) readlink(&(0x7f0000000000)='./file0\x00', &(0x7f0000000140)=""/176, 0xa) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'wg0\x00', 0x0}) sendto$packet(r2, &(0x7f0000000180)="0b03feff4f00020002004788aa96a13bb1000011000088ca1a00", 0x1fffc, 0x0, &(0x7f0000000140)={0x11, 0x0, r5}, 0x14) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r6, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x18) r8 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r8, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0x5}, 0x10) r9 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r9, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r9, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) recvmmsg$unix(r8, &(0x7f0000001cc0)=[{{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000140)=""/36, 0x24}], 0x1}}], 0x1, 0x40010000, 0x0) epoll_create(0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r11, &(0x7f0000000240)={0x0, 0xffffffffffffffb8, &(0x7f0000000080)=[{&(0x7f0000000100)='u', 0x1}], 0x1}, 0x4040001) recvmsg$unix(r10, &(0x7f00000038c0)={0x0, 0x0, 0x0}, 0x100) 7.364026267s ago: executing program 7 (id=5337): mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) r0 = socket$netlink(0x10, 0x3, 0xf) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) timer_gettime(0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) sendmsg$OSF_MSG_REMOVE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="60100000"], 0x1060}}, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f00000003c0)=0x6, 0xdc) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000004480)=@newtaction={0x14, 0x30, 0x1, 0x0, 0x25dfdbff, {0x0, 0x0, 0x1300}}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x0) pipe2$9p(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff"], 0x15) r3 = dup(r2) ioctl$TIOCGSERIAL(r3, 0x541e, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=""/105}) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) read$FUSE(r3, &(0x7f0000000b00)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_BMAP(r3, &(0x7f0000000080)={0x18, 0xffffffffffffffda, r4, {0x8}}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) chdir(&(0x7f0000000000)='./file0\x00') mount$incfs(0x0, &(0x7f0000000300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) 6.938698542s ago: executing program 7 (id=5339): ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000007c0)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f0000000740)={[{@bsdgroups}, {@nodiscard}, {@noblock_validity}, {@grpjquota}, {@grpjquota}, {@noquota}, {@auto_da_alloc}, {@noload}, {@nodiscard}]}, 0x64, 0x50a, &(0x7f0000000200)="$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") r5 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r5, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r5, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) write$binfmt_elf64(r5, &(0x7f0000000280)=ANY=[], 0x40) 5.472527393s ago: executing program 1 (id=5342): mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) r0 = socket$netlink(0x10, 0x3, 0xf) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) timer_gettime(0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) sendmsg$OSF_MSG_REMOVE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="60100000"], 0x1060}}, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f00000003c0)=0x6, 0xdc) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000004480)=@newtaction={0x14, 0x30, 0x1, 0x0, 0x25dfdbff, {0x0, 0x0, 0x1300}}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x0) pipe2$9p(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff"], 0x15) r3 = dup(r2) ioctl$TIOCGSERIAL(r3, 0x541e, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=""/105}) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) read$FUSE(r3, &(0x7f0000000b00)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_BMAP(r3, &(0x7f0000000080)={0x18, 0xffffffffffffffda, r4, {0x8}}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) chdir(&(0x7f0000000000)='./file0\x00') mount$incfs(0x0, &(0x7f0000000300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) 5.346769705s ago: executing program 1 (id=5343): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x18) prctl$PR_SET_MM(0x23, 0x8, &(0x7f0000001000/0x4000)=nil) r1 = syz_open_procfs(0x0, &(0x7f0000002700)='cmdline\x00') socket$can_raw(0x1d, 0x3, 0x1) chdir(0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000040000850000007200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) syz_emit_ethernet(0x3a, &(0x7f0000000940)={@link_local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x1, 0x0, 0x0, 0x11, 0x0, @empty, @broadcast}, {0x0, 0x4e22, 0x18, 0x0, @wg=@data}}}}}, 0x0) read$FUSE(r1, &(0x7f0000000000)={0x2020}, 0xfffffc7a) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff6d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c}, 0x90) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x1000}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='percpu_free_percpu\x00'}, 0x10) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000b00)=@base={0x6, 0x4, 0x70be, 0x5c, 0x0, 0xffffffffffffffff, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x50) 4.920176851s ago: executing program 7 (id=5346): openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000300)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000040), 0x0, 0x80000001, 0x80000000) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r4, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003d00000095"], &(0x7f00000000c0)='GPL\x00', 0x1, 0x98, &(0x7f0000000000)=""/152}, 0x80) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000004000000080000000b00000000000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00'], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000001c0)={@map=r6, r5, 0x7}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r6, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r4}, 0x20) r7 = fcntl$dupfd(r4, 0x0, r5) sendmsg$IPCTNL_MSG_EXP_NEW(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)={0x14, 0x0, 0x2, 0x201, 0x0, 0x0, {0x1, 0x0, 0x6}}, 0x14}}, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), r7) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000280)={0xc73, 0x3, 0x9, 0x1}, 0x14) 4.028839843s ago: executing program 7 (id=5349): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="4c00000010004b0422000000000000007a000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800b00010062726964676500001c0002800800040000000000080015"], 0x4c}, 0x1, 0x0, 0x0, 0x200400a0}, 0x0) write$UHID_CREATE2(0xffffffffffffffff, &(0x7f00000006c0)={0xb, {'syz0\x00', 'syz0\x00', 'syz1\x00', 0xe8, 0xf684, 0x1d8, 0x9, 0xa, 0x6c, "409767d251def6c7004ddd4f0fe36dec47bf4fed2c93b793ecc65005b8846e566c20c3beeec30b8b7661af9ccdd792efb3285f8392f111e7d7812d0a6a1bf0f826f8c4c1d82ecad02a219bf0270f1047b29c1845d87de476ce98dbd8184e5b496daba1afd41eecc115bdd7d5c1505ccccb4e353157f72abae3495e9d5f6be4591a9a881bbe4e4b4b9bcedbf80096bf0c25cf2e60fd15ab7d4ebf143b15d7d270f9b320acac5b488b6e0764224fb598624023de35755eb366db8fd7da328dc4f731dd43bb459d8c53956b3758c609fb4151e62e854549174d19d1fec0de35116bf2b8b2739dba1bdd"}}, 0x200) writev(r2, &(0x7f00000001c0)=[{&(0x7f0000000000)="74ad7d2dcca681c4", 0x8}], 0x1) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000400)={0x0, @multicast2, @remote}, &(0x7f0000000500)=0xc) r4 = fsmount(0xffffffffffffffff, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xf, &(0x7f00000002c0)=@raw=[@exit, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5c4}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}, @exit], &(0x7f0000000200)='GPL\x00', 0xfffffffd, 0x84, &(0x7f0000000340)=""/132, 0x41100, 0x44, '\x00', r3, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000000580)={0x1, 0xc, 0x9a61, 0x5}, 0x10, 0x0, 0x0, 0x4, &(0x7f00000005c0)=[r4], &(0x7f0000000600)=[{0x1, 0x1, 0xc, 0xc}, {0x4, 0x1, 0x0, 0x5}, {0x1, 0x3, 0x3, 0x1}, {0x2, 0x2, 0x8, 0x5}], 0x10, 0xa}, 0x94) 3.919283084s ago: executing program 5 (id=5350): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x18) prctl$PR_SET_MM(0x23, 0x8, &(0x7f0000001000/0x4000)=nil) socket$can_raw(0x1d, 0x3, 0x1) chdir(0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000040000850000007200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='percpu_free_percpu\x00', r2}, 0x10) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000b00)=@base={0x6, 0x4, 0x70be, 0x5c, 0x0, 0xffffffffffffffff, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x50) 3.918642704s ago: executing program 1 (id=5351): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000002c0)='./file1\x00', 0x20c010, &(0x7f0000000300), 0xfe, 0x58d, &(0x7f0000000c00)="$eJzs3U1rG0cfAPD/yi+J7TyJAyE87aEYcmhKiBzbfUmhh/RY2tBAe0+FrZhgOQqWHGI30OTQXHopoVBKA6UfoPeeSugX6KdIaQOhBNNScnFZeZUotmRLtmMr0e8Ha8/sjDQz2p3RrEZiA+hZY+mfXMQrEfF1EnGkIa0/ssSxtXwrj25Mp1sSq6uf/JVEku2r50+y/yNZ5P8R8euXEadyG8utLC3PFUql4kIWH6/OXx2vLC2fvjxfmC3OFq9MTk2dfWtq8t13hnatrW9c+Oe7j+99cParEyvf/vTg6J0kzsWhLK2xHZs6sGnqzcbIWIxlr8lAnFuXcaKTir8Akv2uANvSl/XzgUjHgCPRl/V64OX3RUSsdu7xNh4DdJ1kO/0feAnU5wH1a/u2r4NfEg/fX7sA2tj+ZO2zkThYuzYaXkmeuTJKr3dHd6H8tIyf/7x7J92ik88hAHbo5q2IONPf/2T8G14//m3fmTbyrC/D+Ad75146//llKGLD/Cf3ZP4TTeY/I0367nZs3f9zD9YWoZ6PdP73XtP575MiR/uy2P9qc76B5NLlUjEd2w5HxMkYOJDGN1vPObtyf7VVWuP8L93S8utzwaweD/rXrTnNFKqFnbS50cNbEa9uMf9Nmhz/9PW40GYZx4t3X2uVtnX7n6/VHyNeb3r8n65oJZuuT749XjsfxutnxUZ/3z7+W6vy22n/v7vX3A3S4z+8eftHk8b12krnZfxw8HGxVdpYki2adnj+Dyaf1kamwWzf9UK1ujARMZh8VIs/s3/y6WPr8Xr+tP0nTzTv/5ud/0MR8Vmb7b997HbLrPt9/qftn+no+HceuP/h59+3Kr+98e/NWuhktqed8a/dCu7ktQMAAAAAAIBukxuMOBRJLp+t6R+KXC6fX/t+x7EYzpXKleqpS+XFKzNR+63saAzk6ivdIw3fh5jIvg9bj0+ui09FxNGI+KZvqBbPT5dLM/vdeAAAAAAAAAAAAAAAAAAAAOgSI7Hx9//1+1r90bfPlQOeP7f8ht71TP8/0CTDbtzpCehK3v+hd+n/0Lv0f+hdLfv/4N7WA9h73v+hd+n/0Lv0f+hd+j8AAAAAAAAAAAAAAAAAAAAAAAAAAADsqgvnz6fb6sqjG9MRcTCuLS3Ola+dnilW5vLzi9P56fLC1fxsuTxbKuany/NbPV+pXL46MRmL18erxUp1vLK0fHG+vHilevHyfGG2eLE4sDfNAgAAAAAAAAAAAAAAAAAAgBdKZWl5rlAqFRe2Exjc2cP3IfB7d1SjrcDh7qjGVoH+7qiGwEJlKHbxCfd7ZAIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAp/4LAAD//5/QMw4=") openat(0xffffffffffffff9c, &(0x7f0000000640)='.\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) socket$nl_route(0x10, 0x3, 0x0) recvmmsg(r1, &(0x7f0000000480), 0x400034f, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f00000006c0)='sched_switch\x00'}, 0x18) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="c50a00000000000061139c00000000001800000000000000000000000000000095000000000000005b343f100624b3de7926e22e7edb1497bf3991011242f785f0d596bb538ff72ed469b954afb2361cd3c59f04b57ebf2a29c94ea39c171264f6a088721d3a80495e3ed97583c8bf335cba5f728965fed3d22dd59ee0d06124c3aeb14cb61a877b1382c2489060f66d2018d74d1cd2c729541b0885f7a78a423a83f15537e7ef488da890f5cf403719b04057766ee017e7220e68a7ea43c069da2d0b05dd3567487d73dd363920cd575b2419179af731a6b1bd8c462df0f949c3a16ff977cddb2e84614a492c3d3ec65b1335bc6949473b8eec37c55781b5a83771c146b4027601df36e666908010355216568f8f67a2a136232f96bf7ef1bcb9d42baca52173809ca16d6cbb4760867c6f24fdd803934d5a8fae179929fed9c414cff600d3a673497b71f2fc10d239192e35"], &(0x7f0000000000)='GPL\x00'}, 0x94) syz_pidfd_open(0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) 2.727395941s ago: executing program 7 (id=5352): syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f00000000c0)='./bus\x00', 0x0, &(0x7f00000002c0)={[{@nodiscard}, {@checkpoint_enable}, {@whint_mode_user}, {@alloc_mode_reuse}, {@nobarrier}, {@disable_roll_forward}, {@noinline_xattr}, {@nouser_xattr}, {@inline_dentry}, {@user_xattr}, {@data_flush}, {@resuid}, {@jqfmt_vfsv0}, {@noinline_dentry}]}, 0xff, 0x5505, &(0x7f0000002480)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a999850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) write$selinux_access(r1, &(0x7f0000000440)={'system_u:object_r:tmp_t:s0', 0x20, 'system_u:system_r:kernel_t:s0', 0x20, 0x8}, 0x4e) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fadvise64(r2, 0x1, 0x8, 0x7) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./bus\x00', 0x0) setxattr$trusted_overlay_origin(&(0x7f0000000040)='./file0\x00', &(0x7f0000000380), 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000400), 0x0, &(0x7f0000000300)={[{@workdir={'workdir', 0x3d, './bus'}}, {@index_on}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file1'}}]}) r3 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_control_io$cdc_ncm(r3, 0x0, 0x0) syz_usb_control_io$uac1(r3, &(0x7f0000000100)={0x14, &(0x7f0000000440)={0x0, 0x30, 0xd9, {0xd9, 0x10, "759abe13ce099c343ba43c35b1586428f52ea8569808f978266b4365f8a829e3def6af14722c4133579fd34724fb6d9db0f0f3274054817c02b4abd820055942851638c13a23eae933c3fca08d9230700e23e116607be72b1fc72bcc359daa2ff8b837aec4026a29d748326d2d6759987179dc5a1808274f583dcf8a1f86102c4c19a90e1f30834bf5890ebd2a71495e99899c09427eac457b94ea7ef89305c566f345202dbb5b332bf3882c74a55e31a684d8aa0e32045189238fc5e8be1459adc35acefac3086cbcb01f7aa8e7dc1131cb222c77f4fb"}}, &(0x7f0000000200)={0x0, 0x3, 0x91, @string={0x91, 0x3, "3d46837522cd224cbeefff176cf2c1533410901746cc59c58c1a755e0208d364ec7372b7a80587924f0bf44b02522b90f7c8a44855d5e3c00c8ea5371a782556630cb1755a5fc55deb073995acfaad16a5df5fd0491b9ef5f8e974e5b854068e4cedc3feef473c789fa4e8e2077afb0c168e876f9ead47c7b6fefc595c4d34869e879259ec31884c6eb39fbee08d7c"}}}, &(0x7f0000000700)={0x44, &(0x7f00000003c0)={0x20, 0xe, 0x28, "350718cbf5d7b608607ae7f1194169d439b989dd7fd4624fcc31bbb260f77eaaea52dd41db66725e"}, &(0x7f0000000540)={0x0, 0xa, 0x1, 0x9}, &(0x7f0000000580)={0x0, 0x8, 0x1, 0x6}, &(0x7f00000005c0)={0x20, 0x81, 0x1, "88"}, &(0x7f0000000600)={0x20, 0x82, 0x2, "d6ae"}, &(0x7f0000000640)={0x20, 0x83, 0x1, "f1"}, &(0x7f0000000680)={0x20, 0x84, 0x4, "3b73e7f5"}, &(0x7f00000006c0)={0x20, 0x85, 0x3, "2259b5"}}) r4 = syz_open_dev$vcsa(&(0x7f0000000080), 0x2, 0x801) setns(r4, 0x0) 2.726925061s ago: executing program 5 (id=5353): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) read$FUSE(0xffffffffffffffff, &(0x7f0000000040)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) fstat(0xffffffffffffffff, &(0x7f0000002080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) newfstatat(0xffffffffffffff9c, &(0x7f0000002100)='./file0\x00', &(0x7f0000002140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2000) write$FUSE_ENTRY(r0, &(0x7f00000021c0)={0x90, 0xffffffffffffffda, r1, {0x4, 0x0, 0x4, 0xe372, 0x2, 0x81, {0x3, 0xb4, 0x4, 0x4, 0x4, 0x80000001, 0x82, 0x8, 0x5, 0x2000, 0x1, r4, r6, 0x4, 0x4}}}, 0x90) (async) socket$nl_generic(0x10, 0x3, 0x10) lchown(&(0x7f0000002280)='./file0\x00', r2, r5) pipe2$watch_queue(&(0x7f00000022c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) bind$inet(r7, &(0x7f0000002300)={0x2, 0x4e23, @remote}, 0x10) (async) r8 = syz_open_dev$vcsn(&(0x7f0000002340), 0x7, 0x4000) mount_setattr(r8, &(0x7f0000002380)='./file0\x00', 0x1000, &(0x7f00000023c0)={0x200070, 0x2, 0x20000}, 0x20) r9 = socket$netlink(0x10, 0x3, 0x10) (async) r10 = openat2(0xffffffffffffff9c, &(0x7f0000002400)='./file0\x00', &(0x7f0000002440)={0x40000, 0x1ce, 0x10}, 0x18) setsockopt$inet_buf(r10, 0x0, 0x26, &(0x7f0000002480)="bc1f310aefe3", 0x6) (async) mremap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x4000, 0xe25a8a97c1bd45c0, &(0x7f0000ffb000/0x4000)=nil) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000002580)={&(0x7f00000024c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000002540)={&(0x7f0000002500)=@setneightbl={0x40, 0x43, 0x100, 0x70bd2a, 0x25dfdbff, {0x1c}, [@NDTA_THRESH2={0x8, 0x3, 0x5}, @NDTA_NAME={0xe, 0x1, '/dev/fuse\x00'}, @NDTA_NAME={0x9, 0x1, '{({-\x00'}, @NDTA_THRESH3={0x8, 0x4, 0x7f}]}, 0x40}}, 0x44080) (async) ioctl$sock_bt_hidp_HIDPCONNDEL(r8, 0x400448c9, &(0x7f00000025c0)={@none, 0x8f5}) ioctl$FITHAW(r8, 0xc0045878) (async) close_range(r8, r9, 0x0) listen(r9, 0x0) r12 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r12, 0x89f8, &(0x7f00000026c0)={'syztnl2\x00', &(0x7f0000002600)={'erspan0\x00', 0x0, 0x8, 0x1, 0x7, 0x80, {{0x1d, 0x4, 0x1, 0x6, 0x74, 0x64, 0x0, 0x0, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0x28}, @local, {[@timestamp={0x44, 0x14, 0x45, 0x0, 0x9, [0xfffffffd, 0x1, 0x4, 0x2747]}, @cipso={0x86, 0x49, 0x1, [{0x6, 0xb, "99939406d85ec967f6"}, {0x2, 0xe, "ff235e3bce8c9b9b3a724058"}, {0x5, 0x3, '*'}, {0x5, 0x8, "29d1fe736245"}, {0x2, 0x10, "9ea8ee561d2018e63b713b0fefaf"}, {0x5, 0x2}, {0x0, 0xd, "304edb0517dba01fbfe730"}]}]}}}}}) (async) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000027c0)={0x1, &(0x7f0000002700)="e7c1a0aeff11c147838e6578b70a31bdf655b4c056c57eb941569307f81d303dd1f79b24c9d333d98b7966df2e54024eb883f7965c65a1c68fb29c547498aa821a317746f1c2", &(0x7f0000002780)=""/43}, 0x20) (async) syz_genetlink_get_family_id$ethtool(&(0x7f0000002800), r8) ftruncate(r0, 0x7) (async) sched_setscheduler(r3, 0x6, &(0x7f0000002840)=0x5) (async) sendmsg$nl_route(r10, &(0x7f0000002940)={&(0x7f0000002880)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000002900)={&(0x7f00000028c0)=@setneightbl={0x1c, 0x43, 0x200, 0x70bd2a, 0x25dfdbfd, {0x2}, [@NDTA_THRESH2={0x8, 0x3, 0x2}]}, 0x1c}}, 0x4000004) (async) r13 = dup(r9) setsockopt$TIPC_SRC_DROPPABLE(r13, 0x10f, 0x80, &(0x7f0000002980)=0x9, 0x4) 2.669956362s ago: executing program 1 (id=5355): openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x1b, &(0x7f00000000c0)={@remote={0xfe, 0x80, '\x00', 0xffffffffffffffff}, 0x10e2, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x20) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x2, 0x17, 0x91, 0x9, 0x6, 0x0, 0x70bd2d, 0x25dfdbfc, [@sadb_lifetime={0x4, 0x3, 0x9, 0x5, 0x10001, 0x4}]}, 0x30}}, 0x40045) sendmsg$NL80211_CMD_SET_BEACON(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000000000)=ANY=[@ANYBLOB='\b\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000000e00000017000e001c040100040771070101ffff00031584022e0000"], 0x2c}, 0x1, 0x0, 0x0, 0x840}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x15}, 0x48) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f0000000040)=r5, 0x4) sendmsg$nl_route_sched(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000005e40)=@newtaction={0x18, 0x30, 0xffff, 0x3, 0x0, {}, [{0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x800}, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x7, 0xfff, 0x7}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r7 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r7, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) sendto$packet(r7, &(0x7f0000000180)="0b040700e0ff030002004788aa96a13bb100000000004305400f", 0x10000, 0x0, &(0x7f0000000140)={0x11, 0x0, r9}, 0x14) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000200)='fdb_delete\x00', r10}, 0x10) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000200)='fdb_delete\x00', r11}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x13, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x80000000, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb7"], 0x0, 0x0, 0x0, 0x0, 0x100, 0x30, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r12 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x2041, 0x0) ioctl$TCSETAF(r12, 0x5408, &(0x7f0000000080)={0x49de, 0x0, 0x0, 0xbfff, 0x0, "ec28a144f13d7607"}) write$binfmt_aout(r12, &(0x7f00000000c0)=ANY=[], 0xff2e) ioctl$TCSETS(r12, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x4, 0x0, 0x3, "0062ba7d820000a75e0000000000fcff00"}) 2.640065023s ago: executing program 5 (id=5356): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020700000000000002030207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000100850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sched_switch\x00', r3}, 0x10) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40000) r4 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r4, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) r5 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r5, &(0x7f0000000180)=[{&(0x7f00000001c0)="580000001400add427323b472545b4560a117fffffff81000e220e227f000001925aa80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee000000deff0000000200000000", 0x58}], 0x1) r6 = socket$unix(0x1, 0x1, 0x0) bind$unix(r6, &(0x7f0000000040)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r6, 0x0) 2.500412054s ago: executing program 5 (id=5358): openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000300)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000040), 0x0, 0x80000001, 0x80000000) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003d00000095"], &(0x7f00000000c0)='GPL\x00', 0x1, 0x98, &(0x7f0000000000)=""/152}, 0x80) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYRES32, @ANYBLOB='\x00'/10, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00'], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000001c0)={@map=r5, r4, 0x7}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r5, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r3}, 0x20) r6 = fcntl$dupfd(r3, 0x0, r4) sendmsg$IPCTNL_MSG_EXP_NEW(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)={0x14, 0x0, 0x2, 0x201, 0x0, 0x0, {0x1, 0x0, 0x6}}, 0x14}}, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), r6) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000280)={0xc73, 0x3, 0x9, 0x1}, 0x14) 2.380052806s ago: executing program 1 (id=5361): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000600)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000080)=0x0) fcntl$lock(r1, 0x26, &(0x7f0000000000)={0x0, 0x0, 0x7, 0x0, r2}) r3 = openat(r1, &(0x7f0000000040)='.\x00', 0x40000, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c) listen(r4, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000000)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "040035", 0x18, 0x6, 0x1, @remote, @local, {[], {{0x4e24, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0x0, 0x0, 0x0, {[@window={0x3, 0x3, 0xc}]}}}}}}}}, 0x0) fstatfs(r3, 0x0) ioctl$UI_BEGIN_FF_ERASE(r3, 0xc00c55ca, 0x0) 2.324997877s ago: executing program 48 (id=5361): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000600)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000080)=0x0) fcntl$lock(r1, 0x26, &(0x7f0000000000)={0x0, 0x0, 0x7, 0x0, r2}) r3 = openat(r1, &(0x7f0000000040)='.\x00', 0x40000, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c) listen(r4, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000000)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "040035", 0x18, 0x6, 0x1, @remote, @local, {[], {{0x4e24, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0x0, 0x0, 0x0, {[@window={0x3, 0x3, 0xc}]}}}}}}}}, 0x0) fstatfs(r3, 0x0) ioctl$UI_BEGIN_FF_ERASE(r3, 0xc00c55ca, 0x0) 1.971809242s ago: executing program 6 (id=5367): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @private1, 0x800}, 0x1c) (async) sendto$inet6(r0, 0x0, 0x0, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0x398, @empty}, 0x1c) (async) syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x111, 0x0, 0x0, 0x0, 0x8, 0x56a, 0x84, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0xc, [{{0x9, 0x4, 0x0, 0x3, 0x1, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x6, 0xbe, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0x0, 0x0, 0xff}}}}}]}}]}}, 0x0) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) (async) syz_mount_image$exfat(0x0, &(0x7f0000000100)='./bus\x00', 0x4800, 0x0, 0x3, 0x0, &(0x7f0000000080)) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) (async) syz_mount_image$fuse(0x0, &(0x7f0000000180)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0) (async) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000002c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}, {@nfs_export_on}], [], 0x2c}) (async) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000040)={[{@workdir={'workdir', 0x3d, './bus'}}, {@upperdir={'upperdir', 0x3d, './bus'}}, {@verity_on}]}) syz_mount_image$fuse(&(0x7f0000000000), &(0x7f0000000200)='./bus\x00', 0x100000, &(0x7f0000000200)=ANY=[], 0x1, 0x0, 0x0) (async) mkdir(&(0x7f00000002c0)='./file1/file1\x00', 0x0) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock}, 0x70) (async) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000e40)=ANY=[], 0x10) (async) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000280)={@cgroup=r2, 0x2, 0x0, 0x3ff, &(0x7f0000001440)=[0x0], 0x1, 0x0, 0x0, 0x0, 0x0}, 0x40) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) dup(r5) (async) r6 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000180)={0x0, &(0x7f00000004c0)=[@cpuid={0x2, 0x18, {0x55e7, 0x7ff}}, @cpuid={0x2, 0x18, {0x8, 0xca8f}}, @cpuid={0x2, 0x18, {0x200, 0x1}}, @cpuid={0x2, 0x18, {0x0, 0x6}}, @cpuid={0x2, 0x18, {0x2, 0x9}}, @uexit={0x0, 0x18, 0x7}, @code={0x1, 0x73, {"0f73d1e34e0fc7a50600000048b806000000000000000f23d80f21f835000000600f23f8b9800000c00f3235002000000f30c4a3a15e63f20a6726360f01d10f005e1764420f07c7442400e9000000c7442402d1960000ff1c246766440f38806ae6"}}], 0x103}) ioctl$KVM_SET_MSRS(r6, 0xc008ae88, &(0x7f00000007c0)=ANY=[@ANYBLOB="3b00000000000000790100"]) (async) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000380)='kmem_cache_free\x00', r7}, 0x18) (async) syz_clone(0x48112380, 0x0, 0x41, 0x0, 0x0, 0x0) 1.956138862s ago: executing program 6 (id=5368): syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x2008002, &(0x7f0000000080)={[{@noquota}]}, 0x4, 0x556, &(0x7f0000000980)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) syz_mount_image$fuse(0x0, &(0x7f0000001040)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}, {@metacopy_on}], [], 0x2c}) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x8800, 0x8) syz_mount_image$fuse(0x0, &(0x7f0000000580)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0, 0x0, 0x0, 0x0) renameat2(r0, &(0x7f0000000380)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', r1, &(0x7f0000000040)='./file1\x00', 0x2) 1.763087395s ago: executing program 0 (id=5369): mkdir(&(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="1500000065ffff097b00000800395032303030"], 0x15) r2 = dup(r1) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r4}, 0x10) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000003c0)={{r5, 0xffffffffffffffff}, &(0x7f0000000340), &(0x7f0000000380)='%-010d \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000580)={r6}, 0x4) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70500000800000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000c40)='sys_enter\x00', r7}, 0x10) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000580)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) open$dir(&(0x7f0000000140)='./file0\x00', 0x500, 0x40) 1.680151976s ago: executing program 6 (id=5370): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000480)={0xffffffffffffffff}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000000800000005"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r4, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000280)}, 0x20) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='percpu_free_percpu\x00', r8}, 0x10) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000}, 0x94) r10 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='percpu_free_percpu\x00', r9}, 0x10) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000005c4da121466bced03127458c1953feb493e94c726f2664ad3b9851ca1c46539a5f17dd11a06c6748d737ce6fc10ec0256539d9f50829e617d5c9f58682834f101e6030cb4362718dbf3294162016363c2519103c5a0e", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) read(r11, 0x0, 0x0) r12 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000680)=ANY=[@ANYRES8=r3, @ANYRES8=r3, @ANYRES64=r8, @ANYRESOCT=r6, @ANYRES32=r5, @ANYRES64], &(0x7f00000004c0)='syzkaller\x00', 0x100000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_emit_ethernet(0x36, &(0x7f0000000080)={@random="6d56bf006eb2", @random="e130aeaaba30", @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "6410a6", 0x0, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}, @mcast2}}}}, 0x0) r13 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r12}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r14 = getpid() sched_setscheduler(r14, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r15, &(0x7f0000000740)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r16, &(0x7f0000003a00)=[{{&(0x7f0000000540)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f0000000400)=[{&(0x7f00000005c0)="25e9552386d1760c265b0767d9d57c0829aaeb8c47acdcdd03ad55fbd5949d322b4d7329c2a88ee41fdf6daedf83a74c25b6a60079117bb8acd94b759b7c9007cfb5664e6bd93529e26bb72c0f4f0e34cb4f7d14c59a8e0f0f501d12acf7fff5b2df436d0900f72fb9239bebd8da9d8aa811ddfc75453c93c44db6db0fb0c27f52c6504189eb9f53074135", 0x8b}, {&(0x7f0000000180)="2c7a25d3a3fa51147caf5b82ba208443b28a522e711baba43df8fc", 0x1b}], 0x2, &(0x7f0000000940)=[@cred={{0x1c, 0x1, 0x2, {r1}}}, @rights={{0x2c, 0x1, 0x1, [r3, 0xffffffffffffffff, r5, r12, r9, 0xffffffffffffffff, r13]}}, @rights={{0x1c, 0x1, 0x1, [r16, r12, r7]}}], 0x70, 0x4000000}}, {{&(0x7f0000000a00)=@file={0x1, './bus\x00'}, 0x6e, &(0x7f0000000d00)=[{&(0x7f0000000a80)="895d7b404f2bba68fd412fb2ca6f1850b8e681e6105cddab273b99ed51a38a074d02f7f47d84f1e4db1e4b92b666bdce9d6ff2e250cef295afbe71417e42770b3a33670490689535677582bfcecc1079b764cd4b12b8d9fc310b0c75ef1020d413ef12686dd0", 0x66}, {&(0x7f0000000b00)="4b5f8041d1f89d222486c99ff693a97c3bae204de1899fba87ededf266f2dbf782da14a591eb5d617881b78a6e5a72fb27fb00f3465fac1c552e1a0d7eed4f0707070623db114b626e6b5287169dc87bf608c9449e2939c865b1b911ef1077ce147675f2bb970a6439782ad7b5abecb29961079ffd1e484f375b9171295c", 0x7e}, {&(0x7f0000000b80)="c72149bdd0bab77807336cea987f453b933bbc07d0cb8dc812e8e6baf1c68a72743a9c1d39e5ad5235d7a5776b89e20a4cf6c023141e08f0ce17f235352e63051f7da0b39f7b59d0182bd33237137e35e4d36947523286ac8d2ff40f24516df62cc395f9d385046134b5b2dae41824f6c1388663d2fe12f17cf4d68c2622a056d8dd4ffb64efb9fd53e1fed26a2519a2e39f5ede5abec7e3add1bf3ef35975445059e14e0569e09a7ce54cc2e6a7ff108bb45c0d7486f1988cf3", 0xba}, {&(0x7f0000000700)="b1af2c1633ec54e53ac55779c3428d737c8a", 0x12}, {&(0x7f0000000c40)="d56a406d992c69869a6c513c66735e81c48787cf81b232baf6c8ac08eeab022c0353783268683f5b9b5e096e824a35fe87c50f15c7f9aa16ee4275cba9a04df7e4ce2e71f3ff5d762abdbcac4dc9905990ae846c7f727c32b554113bae4c99f55c82af932695b884196d2ec52399ff7ebd544e298c842a42b0bb464437b836177b", 0x81}], 0x5, &(0x7f0000000e00)=[@rights={{0x30, 0x1, 0x1, [r9, 0xffffffffffffffff, 0xffffffffffffffff, r15, r7, 0xffffffffffffffff, r10, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {r1}}}, @cred={{0x1c, 0x1, 0x2, {r1}}}, @cred={{0x1c, 0x1, 0x2, {r14}}}, @rights={{0x14, 0x1, 0x1, [r8]}}, @cred={{0x1c, 0x1, 0x2, {r14}}}], 0xc8, 0x8000}}, {{&(0x7f0000000f00)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f0000001300)=[{&(0x7f0000000f80)="2b8984b4445dae3c8e3f4ee1da611aff79e87e5b2343edc9a13f6d9236b7c2b5c19165586054553dee21b09476ac1154aceb779c86ea917bb5e072c543fb8261e02a35ff2b119a6c9bf71c3be772128047750cb9b27199f423e10a306e1cccbc76be209c45fa88d56999f4f59bc36989af699113b77e2211b612808acf9db91f98ebebe07e3ec4c971ae12f9017d5d72", 0x90}, {&(0x7f0000001040)="b370c60d44b82506e4db3dc834174560d02af863ff216937688df96cd5f375946e246aeb07cada632f3127fe188b22035cef048c003c9f8ba512cde7cfde6dd3f883afaff7625e96892f837730ebfa796bf6b5f30cc90f166f3226eec124b4946cf8f8b487da6b939cfaa638b14114f50d275f00fba669edf8f4f7e7227c618052fc7da455d31b8a6688308ee1b08f7b614defaa6112ad8b1f9c54c2d0091f98e41e6e72e7e0bada4deedcb0640af689e8ce0aa88a2e98a232f57f7f868afa8b9ee496a57f0c7805e24579d7d13c3cbbce991942ab845a6418e99030af595493", 0xe0}, {&(0x7f0000001140)="3d75a8d12029a638f1bc26c8fcc58815de89caee4b9ffed4b9af052efb264bba", 0x20}, {&(0x7f0000001180)="94211372c020cda9cb08aa98952324d2bcf2476236dd869d6d54fb28d1166bd65d4e8be0e7aedbd5f433ac7543c3ee2fe55af6531d2da014747048853321477ca902e5e47e8daba67e2f38f5166db31ed77fbed4c0736277f293d32bd0692a52195d5eb7c4ff3671a503c75b28c0be72a788ab3c82c0e6", 0x77}, {&(0x7f0000001200)="6a82cb16ee7e5f07bb36133f2dd181c00477c376abcd994e222d18402539f423bb52a7cac18b36bdb912c75ba71f2aba53ceef39bdbe92107c6bfd707d9c952b4c177f52af8ef7f5a71fcf0fab0f0faed0fc93d333be5b59df445f7951b9bb97df1287e3e3ebf2ec9ad0ac45f140beadf3f3e25e2b96586596d5b88d9da79d6583b01a90946a3cb38f9a803599da3a2e2738e527794593d0098585416743b585ba1b318a4705ddec61632ef35345bd099af5b1a78004cb53ea4f49705d446707ea2a97557a00af7029930d3cc68cff54ef874afd93", 0xd5}, {&(0x7f0000001740)="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", 0x1000}], 0x6, 0x0, 0x0, 0x8d0}}, {{0x0, 0x0, &(0x7f00000013c0)=[{&(0x7f0000001380)="24fd915f2497c42668bc666355dabd84de050ed6c59ee90ca55ed39574b787519eae6c2bc323ef43fc0f10720df3a6db0e9b3c6641", 0x35}], 0x1}}, {{0x0, 0x0, &(0x7f0000001680)=[{&(0x7f0000001400)="0018827a307af0513c6c2e6960ef7afa6f357125a05fa7b93fbf65d9109811641e9bd4052af566d4", 0x28}, {&(0x7f0000001440)="81a13a385040d684c02149b479aef264dc7869422f122eac3c732dc6c929fa21181a0b97f0b851f94bf8e9d1f976c3384ee642e3ae5065e4fcf6aa1a2acc4b8fffa6338b8a29e154e8bb3d5a59a6ade68a57b1eed07077ec241d8f9527508481f75dd478317ef768df51f5a592fb1ee02ee3a8f5afbbc281dc5ffae0b5631abf425e16da29c1126ac1b8ed6045b89ac39c5e0e397b6f2cf748bc7f67712200035229ec334c47ae4c8eaaaf3483ad925500fc39ff3e756f444b8e08880daf75f6d8515f8c7963d259f38b64c1febec57643eaa87c87142be7adb191b5cded3633b887482f3a72de55d83c831c343e4aa783ba1c23607b7fdc8c71d0131f", 0xfd}, {&(0x7f0000001540)="716c470f9e20028525254f59a99d51803e20c6202ca4ccdd5d2e5423bb5fa011f11ef0d2654b72ab59baaa0c6f4a52f0b14e87a6de0447d2f2e7ba644c167d9ed697cdc0530ab9c1ee57237b36a69cfb8b84473b87cc85580719891c6dc16b4b7630fc4f1c279617393b908f5a5b978c79d21c0a1e3e6250ddff4dc1ac90215d29b6", 0x82}, {&(0x7f0000001600)="5f5b8738cdb84ae5b92e117e772c6996bbc5b76d2dc32d30f23a5a3ad724e4f28c459a30c47c818c34972feab0c735381c49b3116f015419b3d765412b34e259e396440148705e1dd04fcf2f603a73", 0x4f}, {&(0x7f0000002740)="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", 0x1000}], 0x5, &(0x7f00000038c0)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [r12, r11, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {r14}}}, @cred={{0x1c, 0x1, 0x2, {r14}}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [r2, 0xffffffffffffffff, r8]}}, @rights={{0x18, 0x1, 0x1, [r0, r0]}}], 0x138, 0xc080}}], 0x5, 0x0) recvmmsg(r15, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) setsockopt$sock_int(r15, 0x1, 0x23, &(0x7f00000001c0)=0x1, 0x4) 1.678789646s ago: executing program 5 (id=5371): ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000007c0)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) sched_setscheduler(0x0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r2, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f0000000740)={[{@bsdgroups}, {@nodiscard}, {@noblock_validity}, {@grpjquota}, {@grpjquota}, {@noquota}, {@auto_da_alloc}, {@noload}, {@nodiscard}]}, 0x64, 0x50a, &(0x7f0000000200)="$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") syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_int(r4, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) write$binfmt_elf64(r4, &(0x7f0000000280)=ANY=[], 0x40) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f00000001c0), 0x4) 1.665415676s ago: executing program 0 (id=5372): sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f326635004000000f300f20e06635800000000f22e0f30fa6c8", 0x50}], 0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004000}, 0x14) prlimit64(0x0, 0x7, &(0x7f0000000180)={0x2, 0x3}, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x1c, 0x3a, 0xb, 0x0, 0x0, {0x4}, [@nested={0x4}, @nested={0x4, 0x9}]}, 0x1c}}, 0x0) sendmsg$NLBL_MGMT_C_ADDDEF(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000280)={0x28, 0x0, 0x118, 0x70bd27, 0x25dfdbfc, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @ipv4={'\x00', '\xff\xff', @local}}]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x40000) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000140)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x4, 0x4}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4000884}, 0x4) ioctl$KVM_RUN(r3, 0xae80, 0x0) 1.575822867s ago: executing program 6 (id=5373): syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000840)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1000400, &(0x7f0000000200)={[{@jqfmt_vfsold}, {@journal_checksum}, {@debug}, {@noload}, {@jqfmt_vfsv1}, {@noblock_validity}, {@init_itable_val={'init_itable', 0x3d, 0x601}}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x2}}, {@usrjquota}]}, 0xfe, 0x46c, &(0x7f0000000940)="$eJzs3M1vFOUfAPDvTF94+/FrRXwBQapoJL60tLzIwYtGEw6amOgB46m2hVQWamhNhBCtHvBoSLwb/wvjSS9GvWjiVe+GhBguoF7WzM4MLMtu2aXbLrCfTzLd55l5us/znZln95l5djeAvjWW/Uki/hcRv0fESJ69ucBY/nDtyvmZv6+cn0miWn3rr6RW7uqV8zNl0fL/tuSZarXIb2hS74V3I6YrlbkzRX5i6dQHE4tnz70wf2r6xNyJudNTR44cPLB7+PDUoa7EmcV1defHC7t2HH3n4hszxy6+91OSRh53NMTRLWP53m3q6W5X1mNb69LJYP2WPb/cSDc7E+ilgYjIDtdQrf+PxEBsur5tJF77rKeNA9ZUtVqtrvCqvFwF7mNJ9LoFQG+Ub/TZ9W+5rNPQ465w+eX8AiiL+1qx5FsGI80Te4Yarm+7aSwiji3/81W2xBrdhwAAqPddNv55vtn4L42H88Rw9uf/xRzKaEQ8EBHbIuLBiNgeEQ9F1Mo+EhGPdlh/4wzJreOf9NIdB9eGbPz3UjG3dfP4Ly2LjA4Uua21+IeS4/OVuf3FPtkXQxuOzydzkyvU8f2rv33Ralv9+C9bsvrLsWDRjkuDDTfoZqeXplcTc73Ln0bsHGwWfxLlNE4SETsiYucd1jH/7GDLbbePfwWtn7Zt1a8jnsmP/3I0xF9KWs5PTr54eOrQxMaozO2fKM+KW/3864U3W9W/qvi7IDv+m5ue/9fjH002RiyePXeyNl+72HkdF/74vOU1TYfn/9Gtxfk/nLxdWzFcbPhoemnpzGTEcPL6reunbjxbmS/LZ/Hv29u8/2+LG3visYjYFRG7I+Lx7KKwaPsTEfFkROxdIf4fX3nq/c7jX5+50iz+2dsd/6g//p0nBk7+8O3t498YEa2O/8Faal+xpp3Xv3YbuJp9BwAAAPeK/DPwSTp+PZ2m4+P5Z/i3x+a0srC49NzxhQ9Pz+aflR+NobS80zVSdz90srg3XOanGvIHivvGXw5squXHZxYqs70OHvrclhb9P/PnQK9bB6y5LsyjAfco/R/6l/4P/SnR/6Gv6f/Qv5r1/09alh7/Zk0bA6wr7//Qv9ro/8v5Q+tRAXBv8v4P/Uv/h77U8rvx6aq+8r/uiX+L3zO8W9pz/ycivSuacf8nBtv+MYsOEtWRvP9nazY0LdPrVyYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIDu+C8AAP//F0nluw==") r0 = inotify_init1(0x80800) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000d8ffffffb703000008000000b70400000000925e85000000080000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/rt_cache\x00') read$FUSE(r1, &(0x7f0000000d80)={0x2020}, 0x2020) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000002c0)={r1, 0x20, &(0x7f0000000180)={&(0x7f0000000dc0)=""/4096, 0x1000, 0x0, &(0x7f0000000000)=""/52, 0x34}}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) r3 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_opts(r3, 0x0, 0x4, 0x0, 0x0) inotify_add_watch(r0, &(0x7f0000000080)='.\x00', 0x2000434) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000700)={0x2, 0x3, 0x0, 0x3, 0x10, 0x0, 0x0, 0x0, [@sadb_key={0x2, 0x9, 0x8, 0x0, '\n'}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @loopback}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x9, 0xc}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @loopback}}]}, 0x80}, 0x1, 0x7}, 0x0) lremovexattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=@known='system.posix_acl_access\x00') 1.503988908s ago: executing program 3 (id=5362): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000480)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) mlock(&(0x7f0000c00000/0x400000)=nil, 0x400000) syz_open_procfs(0x0, &(0x7f00000001c0)='mounts\x00') 1.298082341s ago: executing program 0 (id=5374): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x18) prctl$PR_SET_MM(0x23, 0x8, &(0x7f0000001000/0x4000)=nil) socket$can_raw(0x1d, 0x3, 0x1) chdir(0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000040000850000007200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='percpu_free_percpu\x00', r2}, 0x10) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000b00)=@base={0x6, 0x4, 0x70be, 0x5c, 0x0, 0xffffffffffffffff, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x50) 1.026640215s ago: executing program 0 (id=5375): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x11, 0xb, &(0x7f0000000400)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020148100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff"], 0x15) r3 = dup(r2) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18, 0x0, 0x0, {0x4}}, 0x18) write$FUSE_DIRENTPLUS(r3, &(0x7f0000000280)=ANY=[@ANYBLOB="b0"], 0xb0) write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB=',fscache']) chdir(&(0x7f0000000000)='./file0\x00') mount$incfs(0x0, &(0x7f0000000300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0, 0x0) fchownat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0) link(&(0x7f0000000480)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) listxattr(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) (fail_nth: 2) 1.022338845s ago: executing program 6 (id=5376): r0 = fsopen(&(0x7f0000000000)='sysfs\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x1, 0xe, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x43, '\x00', 0x0, @fallback=0x34}, 0x94) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, 0x0, 0x0) (async) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r1) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x2041, 0x0) ioctl$TCSETAF(r2, 0x5408, &(0x7f0000000080)={0x49de, 0x10, 0x0, 0xbfff, 0x0, "d328a144006e041c"}) (async) write$binfmt_aout(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="d58ae4defa6b0f17a7bb"], 0xff2e) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x7, 0x0, 0x3, "0062ba7d820000a75e0000000000fcff00"}) r3 = syz_open_pts(r2, 0x602) r4 = dup3(r3, r2, 0x0) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000000)=0x44) (async) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r0, 0x0, 0x0) renameat2(r5, &(0x7f0000000040)='./bus\x00', r5, &(0x7f0000000380)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x4) 668.12229ms ago: executing program 3 (id=5377): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000240)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0x2008002, &(0x7f0000000140)={[{@noquota}, {@nodelalloc}, {@nobh}]}, 0x4, 0x565, &(0x7f0000001080)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) syz_mount_image$fuse(0x0, &(0x7f0000001040)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000080)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x924924924924c31, 0x3ec0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r2, 0xffffffffffffffff, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}, {@metacopy_on}], [], 0x2c}) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000640)=ANY=[@ANYBLOB="9feb010018000000000000003400000034000000060000000400000000000007000000000000000000000001050000a2800000000000000001000085100000000000000002000000000000ff00000100da"], 0x0, 0x52}, 0x20) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) r4 = accept$inet6(0xffffffffffffffff, &(0x7f00000001c0)={0xa, 0x0, 0x0, @initdev}, &(0x7f0000000340)=0x1c) bind$inet6(r4, &(0x7f0000000480)={0xa, 0x4e22, 0x5, @private0={0xfc, 0x0, '\x00', 0x1}, 0x475}, 0x1c) ioctl$FAT_IOCTL_GET_VOLUME_ID(r2, 0x80047213, &(0x7f00000004c0)) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x8800, 0x8) syz_mount_image$fuse(0x0, &(0x7f0000000580)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0, 0x0, 0x0, 0x0) renameat2(r3, &(0x7f0000000380)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', r5, &(0x7f0000000040)='./file1\x00', 0x2) 616.208791ms ago: executing program 0 (id=5378): sigaltstack(&(0x7f0000001040)={0x0, 0x2}, &(0x7f0000001140)={&(0x7f0000001080)=""/152, 0x0, 0x98}) 555.107852ms ago: executing program 3 (id=5379): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xf, &(0x7f0000000440)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000180)='kmem_cache_free\x00', r1}, 0x10) r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) wait4(r2, 0x0, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x2, &(0x7f0000000400)=[{0x200000000006, 0x9, 0x0, 0x7ffc1ffb}, {0x7d62, 0xb7, 0x60, 0x5}]}) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kmem_cache_free\x00', r5}, 0x10) getuid() write$P9_RVERSION(r4, &(0x7f0000000180)=ANY=[@ANYBLOB="1500000065ffff097b00000800395032303030"], 0x15) r6 = dup(r4) write$FUSE_BMAP(r6, &(0x7f0000000100)={0x18}, 0x18) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x1, 0x4, 0x7fe2, 0x1}, 0x48) r8 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r8, 0x29, 0x6, &(0x7f0000000140)={0x7d, {{0x29, 0x0, 0x2000000, @rand_addr=' \x01\x00', 0x104}}}, 0x88) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r7, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000180)}, 0x20) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0xfffffe00}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r9}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffe}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000040)='kmem_cache_free\x00', r10}, 0x10) write$FUSE_NOTIFY_RETRIEVE(r6, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r6]) open$dir(&(0x7f0000000140)='./file0\x00', 0x500, 0x40) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008f00850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r11}, 0x10) add_key$user(0x0, 0x0, &(0x7f00000007c0)="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", 0x155, 0xfffffffffffffffe) r12 = socket$vsock_stream(0x28, 0x1, 0x0) r13 = socket$nl_sock_diag(0x10, 0x3, 0x4) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x4, 0x4000010, r12, 0xe0347000) sendmsg$SOCK_DIAG_BY_FAMILY(r13, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000900)=ANY=[@ANYBLOB="2800000014001901000000000000000228"], 0x28}}, 0x0) 541.633302ms ago: executing program 0 (id=5380): openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000300)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000040), 0x0, 0x80000001, 0x80000000) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003d00000095"], &(0x7f00000000c0)='GPL\x00', 0x1, 0x98, &(0x7f0000000000)=""/152}, 0x80) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB='\x00'/10, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00'], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000001c0)={@map=r5, r4, 0x7}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r5, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r3}, 0x20) r6 = fcntl$dupfd(r3, 0x0, r4) sendmsg$IPCTNL_MSG_EXP_NEW(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)={0x14, 0x0, 0x2, 0x201, 0x0, 0x0, {0x1, 0x0, 0x6}}, 0x14}}, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), r6) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000280)={0xc73, 0x3, 0x9, 0x1}, 0x14) 375.967654ms ago: executing program 6 (id=5381): openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0xc004743e, 0x110e22fff6) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0xffffffff, 0x1, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r0}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x19, &(0x7f0000000540)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x42, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='task_newtask\x00', r1}, 0x10) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x3ff, &(0x7f0000000500)=0x0) io_submit(r4, 0xf000, &(0x7f0000000300)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x0, r2, 0x0}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f00000001c0)='m', 0xfffffdfc}]) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='task_newtask\x00', r5}, 0x10) syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0) 244.901776ms ago: executing program 3 (id=5382): gettid() r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008"], 0x48) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080), 0x2000, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x28, 0x0, 0x1, 0x101, 0x0, 0x0, {0x3, 0x0, 0x2}, [@CTA_LABELS={0x14, 0x16, 0x1, 0x0, [0x0, 0x80000001, 0x7ff, 0x6bc]}]}, 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x24000040) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00', r2}, 0x10) waitid(0x0, 0x0, 0x0, 0x8, 0x0) shutdown(0xffffffffffffffff, 0x1) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x1c916, &(0x7f0000000540)={[{@usrjquota}, {@noblock_validity}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x181fffc}}, {@inlinecrypt}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x7}}, {@discard}, {@nobarrier}, {@dioread_nolock}, {@resgid={'resgid', 0x3d, 0xee00}, 0x32}]}, 0x1b, 0x4f1, &(0x7f0000000880)="$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") 82.482228ms ago: executing program 5 (id=5383): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="06000000040000400300000005000000000000005fdbd0a31d7bde10d4aa203daece4a03a20c6aebfdaf09221b0c3b89976ee0a982b94bf8a3d31cee340f684dec33", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x16, 0x0, 0x4, 0x1}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r5}, 0x18) unshare(0x40020480) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='writeback_bdi_register\x00', r3}, 0x10) r6 = dup(r2) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[], [], 0x6b}}) 0s ago: executing program 3 (id=5384): sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f326635004000000f300f20e06635800000000f22e0f30fa6c8", 0x50}], 0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004000}, 0x14) prlimit64(0x0, 0x7, &(0x7f0000000180)={0x2, 0x3}, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x1c, 0x3a, 0xb, 0x0, 0x0, {0x4}, [@nested={0x4}, @nested={0x4, 0x9}]}, 0x1c}}, 0x0) sendmsg$NLBL_MGMT_C_ADDDEF(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000280)={0x28, 0x0, 0x118, 0x70bd27, 0x25dfdbfc, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @ipv4={'\x00', '\xff\xff', @local}}]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x40000) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000140)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x4, 0x4}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4000884}, 0x4) ioctl$KVM_RUN(r3, 0xae80, 0x0) kernel console output (not intermixed with test programs): e=0x7ffc0000 [ 1748.552459][T19247] EXT4-fs (loop7): orphan cleanup on readonly fs [ 1748.559108][ T30] audit: type=1326 audit(2000000258.171:1733): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19248 comm="syz.6.5112" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1cd8ab9929 code=0x7ffc0000 [ 1748.559702][T19247] EXT4-fs error (device loop7): ext4_validate_block_bitmap:438: comm syz.7.5119: bg 0: block 248: padding at end of block bitmap is not set [ 1748.583618][T19252] FAULT_INJECTION: forcing a failure. [ 1748.583618][T19252] name failslab, interval 1, probability 0, space 0, times 0 [ 1748.597895][T19247] Quota error (device loop7): write_blk: dquota write failed [ 1748.610058][T19252] CPU: 1 PID: 19252 Comm: syz.6.5112 Tainted: G W 5.15.185-syzkaller-00032-g0d918fa8e88d #0 [ 1748.616972][T19247] EXT4-fs error (device loop7): ext4_acquire_dquot:6195: comm syz.7.5119: Failed to acquire dquot type 1 [ 1748.628243][T19252] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1748.628254][T19252] Call Trace: [ 1748.628259][T19252] [ 1748.628265][T19252] __dump_stack+0x21/0x30 [ 1748.640472][T19247] EXT4-fs (loop7): 1 truncate cleaned up [ 1748.649464][T19252] dump_stack_lvl+0xee/0x150 [ 1748.649487][T19252] ? show_regs_print_info+0x20/0x20 [ 1748.649504][T19252] dump_stack+0x15/0x20 [ 1748.679411][T19252] should_fail+0x3c1/0x510 [ 1748.683813][T19252] __should_failslab+0xa4/0xe0 [ 1748.688567][T19252] should_failslab+0x9/0x20 [ 1748.693045][T19252] slab_pre_alloc_hook+0x3b/0xe0 [ 1748.697967][T19252] ? audit_log_start+0x3a4/0x8b0 [ 1748.702879][T19252] kmem_cache_alloc+0x44/0x260 [ 1748.707621][T19252] audit_log_start+0x3a4/0x8b0 [ 1748.712358][T19252] ? ____kasan_slab_free+0x130/0x160 [ 1748.717619][T19252] ? audit_serial+0x30/0x30 [ 1748.722102][T19252] ? migrate_enable+0x192/0x260 [ 1748.726935][T19252] ? migrate_disable+0x180/0x180 [ 1748.731855][T19252] audit_seccomp+0x62/0x160 [ 1748.736335][T19252] ? migrate_disable+0xd6/0x180 [ 1748.741164][T19252] __seccomp_filter+0xb06/0x1900 [ 1748.746086][T19252] ? file_end_write+0x1b0/0x1b0 [ 1748.750923][T19252] ? __secure_computing+0x290/0x290 [ 1748.756104][T19252] ? __kasan_check_write+0x14/0x20 [ 1748.761192][T19252] ? mutex_unlock+0x89/0x220 [ 1748.765766][T19252] ? __mutex_lock_slowpath+0x10/0x10 [ 1748.771033][T19252] ? fput+0x1a/0x20 [ 1748.774816][T19252] ? ksys_write+0x1eb/0x240 [ 1748.779293][T19252] ? __ia32_sys_read+0x90/0x90 [ 1748.784032][T19252] __secure_computing+0xea/0x290 [ 1748.788951][T19252] syscall_trace_enter+0xcf/0x180 [ 1748.793954][T19252] syscall_enter_from_user_mode+0x1f/0x30 [ 1748.799651][T19252] do_syscall_64+0x24/0xa0 [ 1748.804043][T19252] ? clear_bhb_loop+0x50/0xa0 [ 1748.808700][T19252] ? clear_bhb_loop+0x50/0xa0 [ 1748.813351][T19252] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1748.819219][T19252] RIP: 0033:0x7f1cd8ab9929 [ 1748.823612][T19252] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1748.843283][T19252] RSP: 002b:00007f1cd7122038 EFLAGS: 00000246 ORIG_RAX: 0000000000000006 [ 1748.851674][T19252] RAX: ffffffffffffffda RBX: 00007f1cd8ce0fa0 RCX: 00007f1cd8ab9929 [ 1748.859625][T19252] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 00002000000000c0 [ 1748.867575][T19252] RBP: 00007f1cd7122090 R08: 0000000000000000 R09: 0000000000000000 [ 1748.875524][T19252] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1748.883471][T19252] R13: 0000000000000000 R14: 00007f1cd8ce0fa0 R15: 00007ffdcf726f48 [ 1748.891426][T19252] [ 1748.901300][T19247] EXT4-fs (loop7): mounted filesystem without journal. Opts: bsdgroups,nodiscard,noblock_validity,grpjquota=,grpjquota=,noquota,auto_da_alloc,noload,nodiscard,,errors=continue. Quota mode: writeback. [ 1748.930982][T19254] loop2: detected capacity change from 0 to 512 [ 1748.968509][T19262] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=19262 comm=syz.5.5122 [ 1748.988916][T19254] EXT4-fs (loop2): Mount option "journal_checksum" incompatible with ext3 [ 1749.538602][T19260] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 1749.551216][T19260] syz.9.5109[19260] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1749.551372][T19260] syz.9.5109[19260] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1750.320354][T19270] loop5: detected capacity change from 0 to 512 [ 1750.435870][T19270] EXT4-fs (loop5): orphan cleanup on readonly fs [ 1750.444834][T19270] EXT4-fs error (device loop5): ext4_validate_block_bitmap:438: comm syz.5.5123: bg 0: block 248: padding at end of block bitmap is not set [ 1750.461568][T19270] EXT4-fs error (device loop5): ext4_acquire_dquot:6195: comm syz.5.5123: Failed to acquire dquot type 1 [ 1750.475662][T19270] EXT4-fs (loop5): 1 truncate cleaned up [ 1750.482124][T19270] EXT4-fs (loop5): mounted filesystem without journal. Opts: bsdgroups,nodiscard,noblock_validity,grpjquota=,grpjquota=,noquota,auto_da_alloc,noload,nodiscard,,errors=continue. Quota mode: writeback. [ 1750.703449][T19280] xt_TCPMSS: Only works on TCP SYN packets [ 1751.150490][T19294] FAULT_INJECTION: forcing a failure. [ 1751.150490][T19294] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1751.201487][T19294] CPU: 0 PID: 19294 Comm: syz.5.5133 Tainted: G W 5.15.185-syzkaller-00032-g0d918fa8e88d #0 [ 1751.212973][T19294] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1751.223028][T19294] Call Trace: [ 1751.226388][T19294] [ 1751.229318][T19294] __dump_stack+0x21/0x30 [ 1751.233643][T19294] dump_stack_lvl+0xee/0x150 [ 1751.238239][T19294] ? show_regs_print_info+0x20/0x20 [ 1751.243435][T19294] dump_stack+0x15/0x20 [ 1751.247579][T19294] should_fail+0x3c1/0x510 [ 1751.251989][T19294] should_fail_usercopy+0x1a/0x20 [ 1751.257008][T19294] _copy_from_user+0x20/0xd0 [ 1751.261596][T19294] get_timespec64+0x8b/0x1a0 [ 1751.266254][T19294] ? timespec64_add_safe+0x1d0/0x1d0 [ 1751.271541][T19294] ? mutex_unlock+0x89/0x220 [ 1751.276138][T19294] ? __mutex_lock_slowpath+0x10/0x10 [ 1751.281427][T19294] __se_sys_io_pgetevents+0xcd/0x420 [ 1751.286712][T19294] ? __x64_sys_io_pgetevents+0x100/0x100 [ 1751.292336][T19294] ? ksys_write+0x1eb/0x240 [ 1751.296829][T19294] ? __ia32_sys_read+0x90/0x90 [ 1751.301740][T19294] __x64_sys_io_pgetevents+0xe5/0x100 [ 1751.307117][T19294] x64_sys_call+0x5d8/0x9a0 [ 1751.311616][T19294] do_syscall_64+0x4c/0xa0 [ 1751.316028][T19294] ? clear_bhb_loop+0x50/0xa0 [ 1751.320698][T19294] ? clear_bhb_loop+0x50/0xa0 [ 1751.325367][T19294] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1751.331255][T19294] RIP: 0033:0x7f2d3b321929 [ 1751.335662][T19294] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1751.355355][T19294] RSP: 002b:00007f2d3998a038 EFLAGS: 00000246 ORIG_RAX: 000000000000014d [ 1751.363772][T19294] RAX: ffffffffffffffda RBX: 00007f2d3b548fa0 RCX: 00007f2d3b321929 [ 1751.371742][T19294] RDX: 0000000000000004 RSI: 0000000000000004 RDI: 00007f2d39959000 [ 1751.379711][T19294] RBP: 00007f2d3998a090 R08: 0000200000000080 R09: 0000000000000000 [ 1751.387675][T19294] R10: 0000200000000240 R11: 0000000000000246 R12: 0000000000000001 [ 1751.395637][T19294] R13: 0000000000000000 R14: 00007f2d3b548fa0 R15: 00007ffc84169be8 [ 1751.403609][T19294] [ 1751.453782][T19300] loop2: detected capacity change from 0 to 512 [ 1751.697422][T19301] loop9: detected capacity change from 0 to 512 [ 1752.226992][T19300] EXT4-fs (loop2): orphan cleanup on readonly fs [ 1752.236528][T19300] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.5131: bg 0: block 248: padding at end of block bitmap is not set [ 1752.254121][T19300] EXT4-fs error (device loop2): ext4_acquire_dquot:6195: comm syz.2.5131: Failed to acquire dquot type 1 [ 1752.267687][T19300] EXT4-fs (loop2): 1 truncate cleaned up [ 1752.274937][T19300] EXT4-fs (loop2): mounted filesystem without journal. Opts: bsdgroups,nodiscard,noblock_validity,grpjquota=,grpjquota=,noquota,auto_da_alloc,noload,nodiscard,,errors=continue. Quota mode: writeback. [ 1752.369103][T19301] EXT4-fs (loop9): orphan cleanup on readonly fs [ 1752.378814][T19301] EXT4-fs error (device loop9): ext4_validate_block_bitmap:438: comm syz.9.5134: bg 0: block 248: padding at end of block bitmap is not set [ 1752.395718][T19301] EXT4-fs error (device loop9): ext4_acquire_dquot:6195: comm syz.9.5134: Failed to acquire dquot type 1 [ 1752.409858][T19301] EXT4-fs (loop9): 1 truncate cleaned up [ 1752.416402][T19301] EXT4-fs (loop9): mounted filesystem without journal. Opts: bsdgroups,nodiscard,noblock_validity,grpjquota=,grpjquota=,noquota,auto_da_alloc,noload,nodiscard,,errors=continue. Quota mode: writeback. [ 1752.860622][T19308] loop2: detected capacity change from 0 to 512 [ 1752.893199][T19311] loop7: detected capacity change from 0 to 512 [ 1752.900496][T19308] EXT4-fs (loop2): orphan cleanup on readonly fs [ 1752.907788][T19308] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.5135: bg 0: block 248: padding at end of block bitmap is not set [ 1752.922684][T19308] __quota_error: 18 callbacks suppressed [ 1752.922700][T19308] Quota error (device loop2): write_blk: dquota write failed [ 1752.936488][T19308] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 1752.946425][T19308] EXT4-fs error (device loop2): ext4_acquire_dquot:6195: comm syz.2.5135: Failed to acquire dquot type 1 [ 1752.964248][T19308] EXT4-fs (loop2): 1 truncate cleaned up [ 1752.970412][T19308] EXT4-fs (loop2): mounted filesystem without journal. Opts: bsdgroups,nodiscard,noblock_validity,grpjquota=,grpjquota=,noquota,auto_da_alloc,noload,nodiscard,,errors=continue. Quota mode: writeback. [ 1753.015831][T19311] EXT4-fs (loop7): Mount option "journal_checksum" incompatible with ext3 [ 1753.051731][T19322] loop5: detected capacity change from 0 to 128 [ 1753.204585][T19326] loop9: detected capacity change from 0 to 512 [ 1753.342113][T19326] EXT4-fs (loop9): orphan cleanup on readonly fs [ 1753.351704][T19326] EXT4-fs error (device loop9): ext4_validate_block_bitmap:438: comm syz.9.5140: bg 0: block 248: padding at end of block bitmap is not set [ 1753.367469][T19326] Quota error (device loop9): write_blk: dquota write failed [ 1753.375081][T19326] Quota error (device loop9): qtree_write_dquot: Error -117 occurred while creating quota [ 1753.385096][T19326] EXT4-fs error (device loop9): ext4_acquire_dquot:6195: comm syz.9.5140: Failed to acquire dquot type 1 [ 1753.399508][T19326] EXT4-fs (loop9): 1 truncate cleaned up [ 1753.405982][T19326] EXT4-fs (loop9): mounted filesystem without journal. Opts: bsdgroups,nodiscard,noblock_validity,grpjquota=,grpjquota=,noquota,auto_da_alloc,noload,nodiscard,,errors=continue. Quota mode: writeback. [ 1753.456415][T19322] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 1753.481767][T19332] netlink: 20 bytes leftover after parsing attributes in process `syz.7.5143'. [ 1753.492313][T19322] ext4 filesystem being mounted at /46/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1754.028710][T19343] loop7: detected capacity change from 0 to 512 [ 1754.144612][T19343] EXT4-fs (loop7): orphan cleanup on readonly fs [ 1754.154397][T19343] EXT4-fs error (device loop7): ext4_validate_block_bitmap:438: comm syz.7.5146: bg 0: block 248: padding at end of block bitmap is not set [ 1754.169746][T19343] Quota error (device loop7): write_blk: dquota write failed [ 1754.177451][T19343] Quota error (device loop7): qtree_write_dquot: Error -117 occurred while creating quota [ 1754.187455][T19343] EXT4-fs error (device loop7): ext4_acquire_dquot:6195: comm syz.7.5146: Failed to acquire dquot type 1 [ 1754.203205][T19343] EXT4-fs (loop7): 1 truncate cleaned up [ 1754.213731][T19343] EXT4-fs (loop7): mounted filesystem without journal. Opts: bsdgroups,nodiscard,noblock_validity,grpjquota=,grpjquota=,noquota,auto_da_alloc,noload,nodiscard,,errors=continue. Quota mode: writeback. [ 1754.332846][ T30] audit: type=1400 audit(2000000264.362:1743): avc: denied { append } for pid=19340 comm="syz.6.5147" name="binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 1754.375557][ T30] audit: type=1400 audit(2000000264.394:1744): avc: denied { call } for pid=19340 comm="syz.6.5147" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 1755.954618][T19361] loop2: detected capacity change from 0 to 512 [ 1756.228745][T19362] loop9: detected capacity change from 0 to 512 [ 1756.366885][T19361] EXT4-fs (loop2): orphan cleanup on readonly fs [ 1756.376460][T19361] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.5145: bg 0: block 248: padding at end of block bitmap is not set [ 1756.392688][T19361] Quota error (device loop2): write_blk: dquota write failed [ 1756.400276][T19361] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 1756.410301][T19361] EXT4-fs error (device loop2): ext4_acquire_dquot:6195: comm syz.2.5145: Failed to acquire dquot type 1 [ 1756.424651][T19361] EXT4-fs (loop2): 1 truncate cleaned up [ 1756.432355][T19361] EXT4-fs (loop2): mounted filesystem without journal. Opts: bsdgroups,nodiscard,noblock_validity,grpjquota=,grpjquota=,noquota,auto_da_alloc,noload,nodiscard,,errors=continue. Quota mode: writeback. [ 1756.541434][T19362] EXT4-fs (loop9): orphan cleanup on readonly fs [ 1756.551080][T19362] EXT4-fs error (device loop9): ext4_validate_block_bitmap:438: comm syz.9.5148: bg 0: block 248: padding at end of block bitmap is not set [ 1756.566867][T19362] EXT4-fs error (device loop9): ext4_acquire_dquot:6195: comm syz.9.5148: Failed to acquire dquot type 1 [ 1756.580250][T19362] EXT4-fs (loop9): 1 truncate cleaned up [ 1756.586525][T19362] EXT4-fs (loop9): mounted filesystem without journal. Opts: bsdgroups,nodiscard,noblock_validity,grpjquota=,grpjquota=,noquota,auto_da_alloc,noload,nodiscard,,errors=continue. Quota mode: writeback. [ 1756.960790][T19373] loop5: detected capacity change from 0 to 512 [ 1757.008817][T19366] FAULT_INJECTION: forcing a failure. [ 1757.008817][T19366] name failslab, interval 1, probability 0, space 0, times 0 [ 1757.022234][T19366] CPU: 0 PID: 19366 Comm: syz.6.5153 Tainted: G W 5.15.185-syzkaller-00032-g0d918fa8e88d #0 [ 1757.033611][T19366] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1757.043654][T19366] Call Trace: [ 1757.046912][T19366] [ 1757.049824][T19366] __dump_stack+0x21/0x30 [ 1757.054130][T19366] dump_stack_lvl+0xee/0x150 [ 1757.058691][T19366] ? show_regs_print_info+0x20/0x20 [ 1757.063862][T19366] dump_stack+0x15/0x20 [ 1757.067988][T19366] should_fail+0x3c1/0x510 [ 1757.072378][T19366] __should_failslab+0xa4/0xe0 [ 1757.077151][T19366] should_failslab+0x9/0x20 [ 1757.081627][T19366] slab_pre_alloc_hook+0x3b/0xe0 [ 1757.086542][T19366] ? __alloc_skb+0xe0/0x740 [ 1757.091017][T19366] kmem_cache_alloc+0x44/0x260 [ 1757.095757][T19366] __alloc_skb+0xe0/0x740 [ 1757.100062][T19366] ppp_write+0xb6/0x3b0 [ 1757.104190][T19366] ? security_file_permission+0x83/0xa0 [ 1757.109714][T19366] ? ppp_read+0x6f0/0x6f0 [ 1757.114017][T19366] vfs_write+0x3ee/0xf70 [ 1757.118233][T19366] ? file_end_write+0x1b0/0x1b0 [ 1757.123057][T19366] ? __fget_files+0x2c4/0x320 [ 1757.127716][T19366] ? __fdget_pos+0x1f7/0x380 [ 1757.132284][T19366] ? ksys_write+0x71/0x240 [ 1757.136673][T19366] ksys_write+0x140/0x240 [ 1757.140979][T19366] ? __ia32_sys_read+0x90/0x90 [ 1757.145719][T19366] ? sched_clock_cpu+0x18/0x3c0 [ 1757.150544][T19366] ? debug_smp_processor_id+0x17/0x20 [ 1757.155892][T19366] __x64_sys_write+0x7b/0x90 [ 1757.160464][T19366] x64_sys_call+0x8ef/0x9a0 [ 1757.164946][T19366] do_syscall_64+0x4c/0xa0 [ 1757.169339][T19366] ? clear_bhb_loop+0x50/0xa0 [ 1757.173992][T19366] ? clear_bhb_loop+0x50/0xa0 [ 1757.178654][T19366] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1757.184523][T19366] RIP: 0033:0x7f1cd8ab9929 [ 1757.188916][T19366] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1757.208501][T19366] RSP: 002b:00007f1cd7122038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1757.216895][T19366] RAX: ffffffffffffffda RBX: 00007f1cd8ce0fa0 RCX: 00007f1cd8ab9929 [ 1757.224931][T19366] RDX: 0000000000000012 RSI: 00002000000002c0 RDI: 0000000000000009 [ 1757.232888][T19366] RBP: 00007f1cd7122090 R08: 0000000000000000 R09: 0000000000000000 [ 1757.240858][T19366] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1757.248932][T19366] R13: 0000000000000000 R14: 00007f1cd8ce0fa0 R15: 00007ffdcf726f48 [ 1757.256902][T19366] [ 1757.266342][T19373] EXT4-fs (loop5): orphan cleanup on readonly fs [ 1757.273617][T19373] EXT4-fs error (device loop5): ext4_validate_block_bitmap:438: comm syz.5.5155: bg 0: block 248: padding at end of block bitmap is not set [ 1757.288478][T19373] EXT4-fs error (device loop5): ext4_acquire_dquot:6195: comm syz.5.5155: Failed to acquire dquot type 1 [ 1757.302483][T19373] EXT4-fs (loop5): 1 truncate cleaned up [ 1757.308325][T19373] EXT4-fs (loop5): mounted filesystem without journal. Opts: bsdgroups,nodiscard,noblock_validity,grpjquota=,grpjquota=,noquota,auto_da_alloc,noload,nodiscard,,errors=continue. Quota mode: writeback. [ 1757.312950][T19377] loop9: detected capacity change from 0 to 128 [ 1757.350778][T19380] loop2: detected capacity change from 0 to 512 [ 1757.367898][T19377] FAT-fs (loop9): Invalid FSINFO signature: 0x41615252, 0x6160b372 (sector = 1) [ 1757.387880][T19380] EXT4-fs (loop2): Mount option "journal_checksum" incompatible with ext3 [ 1757.470954][T19384] loop6: detected capacity change from 0 to 512 [ 1757.631028][T19384] EXT4-fs (loop6): orphan cleanup on readonly fs [ 1757.640866][T19384] EXT4-fs error (device loop6): ext4_validate_block_bitmap:438: comm syz.6.5158: bg 0: block 248: padding at end of block bitmap is not set [ 1757.656557][T19384] __quota_error: 4 callbacks suppressed [ 1757.656593][T19384] Quota error (device loop6): write_blk: dquota write failed [ 1757.669698][T19384] Quota error (device loop6): qtree_write_dquot: Error -117 occurred while creating quota [ 1757.679681][T19384] EXT4-fs error (device loop6): ext4_acquire_dquot:6195: comm syz.6.5158: Failed to acquire dquot type 1 [ 1757.724506][T19384] EXT4-fs (loop6): 1 truncate cleaned up [ 1757.730855][T19384] EXT4-fs (loop6): mounted filesystem without journal. Opts: bsdgroups,nodiscard,noblock_validity,grpjquota=,grpjquota=,noquota,auto_da_alloc,noload,nodiscard,,errors=continue. Quota mode: writeback. [ 1758.201957][T19378] loop7: detected capacity change from 0 to 40427 [ 1758.219090][ T30] audit: type=1326 audit(2000000268.536:1745): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19392 comm="syz.2.5162" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f947bcb9929 code=0x7ffc0000 [ 1758.256308][T19393] loop2: detected capacity change from 0 to 512 [ 1758.265245][ T30] audit: type=1326 audit(2000000268.557:1746): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19392 comm="syz.2.5162" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f947bcb9929 code=0x7ffc0000 [ 1758.289303][ T30] audit: type=1326 audit(2000000268.557:1747): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19392 comm="syz.2.5162" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f947bcb9929 code=0x7ffc0000 [ 1758.315162][T19378] F2FS-fs (loop7): Invalid log_blocksize (268), supports only 12 [ 1758.323130][T19393] EXT4-fs (loop2): Test dummy encryption mode enabled [ 1758.330063][ T30] audit: type=1326 audit(2000000268.557:1748): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19392 comm="syz.2.5162" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f947bcb9929 code=0x7ffc0000 [ 1758.364071][T19378] F2FS-fs (loop7): Can't find valid F2FS filesystem in 1th superblock [ 1758.374376][T19393] EXT4-fs error (device loop2): ext4_get_branch:178: inode #11: block 4294967295: comm syz.2.5162: invalid block [ 1758.384536][ T30] audit: type=1326 audit(2000000268.568:1749): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19392 comm="syz.2.5162" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f947bcb9929 code=0x7ffc0000 [ 1758.393071][T19378] F2FS-fs (loop7): invalid crc value [ 1758.415337][T19393] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.5162: invalid indirect mapped block 4294967295 (level 1) [ 1758.416147][ T30] audit: type=1326 audit(2000000268.579:1750): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19392 comm="syz.2.5162" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f947bcb9929 code=0x7ffc0000 [ 1758.452827][ T30] audit: type=1326 audit(2000000268.579:1751): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19392 comm="syz.2.5162" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f947bcb9929 code=0x7ffc0000 [ 1758.467548][T19393] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.5162: invalid indirect mapped block 4294967295 (level 1) [ 1758.490393][ T30] audit: type=1326 audit(2000000268.579:1752): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19392 comm="syz.2.5162" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f947bcb83df code=0x7ffc0000 [ 1758.512296][T19393] EXT4-fs (loop2): 2 truncates cleaned up [ 1758.515433][T19378] F2FS-fs (loop7): Found nat_bits in checkpoint [ 1758.526142][T19393] EXT4-fs (loop2): mounted filesystem without journal. Opts: noauto_da_alloc,init_itable=0x0000000000004004,test_dummy_encryption=v1,,errors=continue. Quota mode: writeback. [ 1758.546133][T19397] loop9: detected capacity change from 0 to 512 [ 1758.563220][T19378] F2FS-fs (loop7): Try to recover 1th superblock, ret: 0 [ 1758.570512][T19378] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5 [ 1758.593078][T19397] EXT4-fs (loop9): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 1758.604469][T19397] ext4 filesystem being mounted at /79/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1758.617394][T19397] EXT4-fs error (device loop9): ext4_validate_block_bitmap:438: comm syz.9.5163: bg 0: block 128: padding at end of block bitmap is not set [ 1760.399168][T19419] loop6: detected capacity change from 0 to 512 [ 1760.399182][T19420] loop5: detected capacity change from 0 to 512 [ 1760.596286][T19421] loop2: detected capacity change from 0 to 512 [ 1761.388665][T19420] EXT4-fs (loop5): orphan cleanup on readonly fs [ 1761.425890][T19420] EXT4-fs error (device loop5): ext4_validate_block_bitmap:438: comm syz.5.5166: bg 0: block 248: padding at end of block bitmap is not set [ 1761.442074][T19420] EXT4-fs error (device loop5): ext4_acquire_dquot:6195: comm syz.5.5166: Failed to acquire dquot type 1 [ 1761.456625][T19420] EXT4-fs (loop5): 1 truncate cleaned up [ 1761.463090][T19420] EXT4-fs (loop5): mounted filesystem without journal. Opts: bsdgroups,nodiscard,noblock_validity,grpjquota=,grpjquota=,noquota,auto_da_alloc,noload,nodiscard,,errors=continue. Quota mode: writeback. [ 1761.581880][T19419] EXT4-fs (loop6): orphan cleanup on readonly fs [ 1761.592171][T19419] EXT4-fs error (device loop6): ext4_validate_block_bitmap:438: comm syz.6.5164: bg 0: block 248: padding at end of block bitmap is not set [ 1761.608303][T19419] EXT4-fs error (device loop6): ext4_acquire_dquot:6195: comm syz.6.5164: Failed to acquire dquot type 1 [ 1761.623063][T19419] EXT4-fs (loop6): 1 truncate cleaned up [ 1761.629811][T19419] EXT4-fs (loop6): mounted filesystem without journal. Opts: bsdgroups,nodiscard,noblock_validity,grpjquota=,grpjquota=,noquota,auto_da_alloc,noload,nodiscard,,errors=continue. Quota mode: writeback. [ 1762.127097][T19421] EXT4-fs (loop2): orphan cleanup on readonly fs [ 1762.134245][T19421] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.5165: bg 0: block 248: padding at end of block bitmap is not set [ 1762.149120][T19421] EXT4-fs error (device loop2): ext4_acquire_dquot:6195: comm syz.2.5165: Failed to acquire dquot type 1 [ 1762.161454][T19421] EXT4-fs (loop2): 1 truncate cleaned up [ 1762.167577][T19421] EXT4-fs (loop2): mounted filesystem without journal. Opts: bsdgroups,nodiscard,noblock_validity,grpjquota=,grpjquota=,noquota,auto_da_alloc,noload,nodiscard,,errors=continue. Quota mode: writeback. [ 1762.342331][T19430] loop9: detected capacity change from 0 to 512 [ 1762.409048][T19437] syz.2.5171[19437] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1762.409111][T19437] syz.2.5171[19437] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1762.422051][T19430] EXT4-fs (loop9): Mount option "journal_checksum" incompatible with ext3 [ 1762.443976][ T30] kauditd_printk_skb: 23 callbacks suppressed [ 1762.443989][ T30] audit: type=1326 audit(2000000273.074:1770): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19436 comm="syz.2.5171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f947bcb9929 code=0x7ffc0000 [ 1762.794487][ T30] audit: type=1326 audit(2000000273.106:1771): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19436 comm="syz.2.5171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f947bcb9929 code=0x7ffc0000 [ 1762.830269][ T30] audit: type=1326 audit(2000000273.471:1772): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19436 comm="syz.2.5171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f947bcb9929 code=0x7ffc0000 [ 1762.969271][ T30] audit: type=1326 audit(2000000273.471:1773): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19436 comm="syz.2.5171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f947bcb9929 code=0x7ffc0000 [ 1762.995110][ T30] audit: type=1326 audit(2000000273.471:1774): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19436 comm="syz.2.5171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f947bcb9929 code=0x7ffc0000 [ 1763.020826][ T30] audit: type=1326 audit(2000000273.471:1775): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19436 comm="syz.2.5171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f947bcb9929 code=0x7ffc0000 [ 1763.052519][ T424] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 1763.052681][ T30] audit: type=1326 audit(2000000273.471:1776): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19436 comm="syz.2.5171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f947bcb9929 code=0x7ffc0000 [ 1763.250609][ T30] audit: type=1326 audit(2000000273.471:1777): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19436 comm="syz.2.5171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f947bcb9929 code=0x7ffc0000 [ 1763.819814][T19452] loop6: detected capacity change from 0 to 512 [ 1763.854845][ T30] audit: type=1400 audit(2000000274.018:1778): avc: denied { create } for pid=19449 comm="syz.9.5176" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1763.890358][T19452] EXT4-fs (loop6): orphan cleanup on readonly fs [ 1763.900143][T19452] EXT4-fs error (device loop6): ext4_validate_block_bitmap:438: comm syz.6.5174: bg 0: block 248: padding at end of block bitmap is not set [ 1763.916439][T19452] Quota error (device loop6): write_blk: dquota write failed [ 1763.924052][T19452] EXT4-fs error (device loop6): ext4_acquire_dquot:6195: comm syz.6.5174: Failed to acquire dquot type 1 [ 1763.937774][T19452] EXT4-fs (loop6): 1 truncate cleaned up [ 1763.944545][T19452] EXT4-fs (loop6): mounted filesystem without journal. Opts: bsdgroups,nodiscard,noblock_validity,grpjquota=,grpjquota=,noquota,auto_da_alloc,noload,nodiscard,,errors=continue. Quota mode: writeback. [ 1764.552777][T19460] loop7: detected capacity change from 0 to 512 [ 1764.610808][T19458] loop9: detected capacity change from 0 to 1024 [ 1764.638617][T19460] EXT4-fs (loop7): orphan cleanup on readonly fs [ 1764.648791][T19460] EXT4-fs error (device loop7): ext4_validate_block_bitmap:438: comm syz.7.5178: bg 0: block 248: padding at end of block bitmap is not set [ 1764.664503][T19460] EXT4-fs error (device loop7): ext4_acquire_dquot:6195: comm syz.7.5178: Failed to acquire dquot type 1 [ 1764.678010][T19460] EXT4-fs (loop7): 1 truncate cleaned up [ 1764.684455][T19460] EXT4-fs (loop7): mounted filesystem without journal. Opts: bsdgroups,nodiscard,noblock_validity,grpjquota=,grpjquota=,noquota,auto_da_alloc,noload,nodiscard,,errors=continue. Quota mode: writeback. [ 1764.738371][T19458] EXT4-fs (loop9): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 1765.852739][T19482] loop2: detected capacity change from 0 to 512 [ 1765.961495][T19490] loop7: detected capacity change from 0 to 512 [ 1766.183428][T19482] EXT4-fs (loop2): Mount option "journal_checksum" incompatible with ext3 [ 1766.211360][T19490] EXT4-fs (loop7): orphan cleanup on readonly fs [ 1766.220299][T19490] EXT4-fs error (device loop7): ext4_validate_block_bitmap:438: comm syz.7.5181: bg 0: block 248: padding at end of block bitmap is not set [ 1766.236686][T19490] EXT4-fs error (device loop7): ext4_acquire_dquot:6195: comm syz.7.5181: Failed to acquire dquot type 1 [ 1766.250502][T19490] EXT4-fs (loop7): 1 truncate cleaned up [ 1766.257456][T19490] EXT4-fs (loop7): mounted filesystem without journal. Opts: bsdgroups,nodiscard,noblock_validity,grpjquota=,grpjquota=,noquota,auto_da_alloc,noload,nodiscard,,errors=continue. Quota mode: writeback. [ 1766.376835][ T424] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1766.561168][ T424] usb 6-1: New USB device found, idVendor=056a, idProduct=00d4, bcdDevice= 0.00 [ 1766.572340][ T424] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1766.702766][ T424] usb 6-1: config 0 descriptor?? [ 1766.876278][ T424] usb 6-1: can't set config #0, error -71 [ 1767.582748][ T424] usb 6-1: USB disconnect, device number 6 [ 1767.746875][T19513] loop5: detected capacity change from 0 to 1024 [ 1767.802210][T19513] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 1767.886656][T19520] loop7: detected capacity change from 0 to 512 [ 1768.022225][T19520] EXT4-fs (loop7): orphan cleanup on readonly fs [ 1768.031753][T19520] EXT4-fs error (device loop7): ext4_validate_block_bitmap:438: comm syz.7.5193: bg 0: block 248: padding at end of block bitmap is not set [ 1768.047189][T19520] __quota_error: 6 callbacks suppressed [ 1768.047210][T19520] Quota error (device loop7): write_blk: dquota write failed [ 1768.060375][T19520] Quota error (device loop7): qtree_write_dquot: Error -117 occurred while creating quota [ 1768.070361][T19520] EXT4-fs error (device loop7): ext4_acquire_dquot:6195: comm syz.7.5193: Failed to acquire dquot type 1 [ 1768.241848][T19520] EXT4-fs (loop7): 1 truncate cleaned up [ 1768.285428][T19520] EXT4-fs (loop7): mounted filesystem without journal. Opts: bsdgroups,nodiscard,noblock_validity,grpjquota=,grpjquota=,noquota,auto_da_alloc,noload,nodiscard,,errors=continue. Quota mode: writeback. [ 1769.703713][T19466] EXT4-fs error (device loop5): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 440: padding at end of block bitmap is not set [ 1769.719019][T18564] EXT4-fs error (device loop5): ext4_readdir:263: inode #2: block 16: comm syz-executor: path /52/file1: bad entry in directory: inode out of bounds - offset=0, inode=1538, rec_len=12, size=1024 fake=1 [ 1770.042989][T19527] loop6: detected capacity change from 0 to 512 [ 1770.091602][T19527] EXT4-fs (loop6): orphan cleanup on readonly fs [ 1770.100633][T19527] EXT4-fs error (device loop6): ext4_validate_block_bitmap:438: comm syz.6.5196: bg 0: block 248: padding at end of block bitmap is not set [ 1770.116023][T19527] Quota error (device loop6): write_blk: dquota write failed [ 1770.123578][T19527] Quota error (device loop6): qtree_write_dquot: Error -117 occurred while creating quota [ 1770.133614][T19527] EXT4-fs error (device loop6): ext4_acquire_dquot:6195: comm syz.6.5196: Failed to acquire dquot type 1 [ 1770.147332][T19527] EXT4-fs (loop6): 1 truncate cleaned up [ 1770.153841][T19527] EXT4-fs (loop6): mounted filesystem without journal. Opts: bsdgroups,nodiscard,noblock_validity,grpjquota=,grpjquota=,noquota,auto_da_alloc,noload,nodiscard,,errors=continue. Quota mode: writeback. [ 1770.634320][T19530] loop2: detected capacity change from 0 to 512 [ 1770.687167][T19530] EXT4-fs (loop2): Mount option "journal_checksum" incompatible with ext3 [ 1771.622101][ T369] device bridge_slave_1 left promiscuous mode [ 1771.628396][ T369] bridge0: port 2(bridge_slave_1) entered disabled state [ 1771.636062][ T369] device bridge_slave_0 left promiscuous mode [ 1771.642475][ T369] bridge0: port 1(bridge_slave_0) entered disabled state [ 1771.650772][ T369] device veth1_macvtap left promiscuous mode [ 1771.656856][ T369] device veth0_vlan left promiscuous mode [ 1771.710391][T10712] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 1771.782626][T19557] loop6: detected capacity change from 0 to 1024 [ 1771.820979][T19549] bridge0: port 1(bridge_slave_0) entered blocking state [ 1771.828267][T19549] bridge0: port 1(bridge_slave_0) entered disabled state [ 1771.836082][T19549] device bridge_slave_0 entered promiscuous mode [ 1771.845184][T19549] bridge0: port 2(bridge_slave_1) entered blocking state [ 1771.851860][T19557] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 1771.852619][T19549] bridge0: port 2(bridge_slave_1) entered disabled state [ 1772.256802][T19561] EXT4-fs error (device loop6): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 440: padding at end of block bitmap is not set [ 1772.261667][T19549] device bridge_slave_1 entered promiscuous mode [ 1772.410724][T10712] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1772.482518][T10712] usb 3-1: New USB device found, idVendor=056a, idProduct=00d4, bcdDevice= 0.00 [ 1772.942194][T19568] loop7: detected capacity change from 0 to 512 [ 1772.953296][T12261] EXT4-fs error (device loop6): ext4_readdir:263: inode #2: block 16: comm syz-executor: path /412/file1: bad entry in directory: inode out of bounds - offset=0, inode=1538, rec_len=12, size=1024 fake=1 [ 1773.007392][T19568] EXT4-fs (loop7): orphan cleanup on readonly fs [ 1773.016725][T19568] EXT4-fs error (device loop7): ext4_validate_block_bitmap:438: comm syz.7.5207: bg 0: block 248: padding at end of block bitmap is not set [ 1773.032491][T19568] Quota error (device loop7): write_blk: dquota write failed [ 1773.040164][T19568] Quota error (device loop7): qtree_write_dquot: Error -117 occurred while creating quota [ 1773.050451][T19568] EXT4-fs error (device loop7): ext4_acquire_dquot:6195: comm syz.7.5207: Failed to acquire dquot type 1 [ 1773.064226][T19568] EXT4-fs (loop7): 1 truncate cleaned up [ 1773.070764][T19568] EXT4-fs (loop7): mounted filesystem without journal. Opts: bsdgroups,nodiscard,noblock_validity,grpjquota=,grpjquota=,noquota,auto_da_alloc,noload,nodiscard,,errors=continue. Quota mode: writeback. [ 1773.161974][ T369] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1773.177285][ T369] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1773.255228][ T369] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1773.314984][ T369] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1773.356312][ T369] bridge0: port 1(bridge_slave_0) entered blocking state [ 1773.363402][ T369] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1773.473764][ T369] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1773.492571][ T369] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1773.513346][ T369] bridge0: port 2(bridge_slave_1) entered blocking state [ 1773.520778][ T369] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1773.531321][T10712] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1773.599397][ T369] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1773.622152][T19549] device veth0_vlan entered promiscuous mode [ 1773.635884][T19549] device veth1_macvtap entered promiscuous mode [ 1773.894151][ T369] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1773.902660][T10712] usb 3-1: config 0 descriptor?? [ 1773.903941][ T369] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1773.915774][ T369] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1773.924114][ T369] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1773.932285][ T369] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1773.941616][ T369] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1773.951194][ T369] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1773.959435][ T369] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1773.967707][ T369] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1773.976639][ T369] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1773.985183][ T369] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1773.993283][ T369] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1774.003242][ T369] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1774.012858][ T369] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1774.020548][ T369] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1774.057348][ T369] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1774.067608][ T369] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1774.121684][T10712] usbhid 3-1:0.0: can't add hid device: -71 [ 1774.175418][T19585] loop2: detected capacity change from 0 to 512 [ 1774.242375][T10712] usbhid: probe of 3-1:0.0 failed with error -71 [ 1774.261964][T19585] EXT4-fs (loop2): orphan cleanup on readonly fs [ 1774.271064][T19585] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.5211: bg 0: block 248: padding at end of block bitmap is not set [ 1774.286772][T19585] Quota error (device loop2): write_blk: dquota write failed [ 1774.294346][T19585] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 1774.304352][T19585] EXT4-fs error (device loop2): ext4_acquire_dquot:6195: comm syz.2.5211: Failed to acquire dquot type 1 [ 1774.356142][T19585] EXT4-fs (loop2): 1 truncate cleaned up [ 1774.362849][T19585] EXT4-fs (loop2): mounted filesystem without journal. Opts: bsdgroups,nodiscard,noblock_validity,grpjquota=,grpjquota=,noquota,auto_da_alloc,noload,nodiscard,,errors=continue. Quota mode: writeback. [ 1774.984350][T19597] loop9: detected capacity change from 0 to 1024 [ 1775.060442][T19597] EXT4-fs (loop9): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 1775.084839][T10712] usb 3-1: USB disconnect, device number 14 [ 1775.163465][T19598] bridge0: port 1(bridge_slave_0) entered blocking state [ 1775.170619][T19598] bridge0: port 1(bridge_slave_0) entered disabled state [ 1775.178113][T19598] device bridge_slave_0 entered promiscuous mode [ 1776.030205][T19614] loop1: detected capacity change from 0 to 512 [ 1776.744747][T19601] EXT4-fs error (device loop9): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 440: padding at end of block bitmap is not set [ 1776.785174][T19594] loop7: detected capacity change from 0 to 512 [ 1776.797840][T19598] bridge0: port 2(bridge_slave_1) entered blocking state [ 1776.809517][T19614] EXT4-fs (loop1): orphan cleanup on readonly fs [ 1776.818832][T19614] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.5218: bg 0: block 248: padding at end of block bitmap is not set [ 1776.835014][T19614] Quota error (device loop1): write_blk: dquota write failed [ 1776.842694][T19614] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 1776.853079][T19614] EXT4-fs error (device loop1): ext4_acquire_dquot:6195: comm syz.1.5218: Failed to acquire dquot type 1 [ 1776.866534][T19614] EXT4-fs (loop1): 1 truncate cleaned up [ 1776.873045][T19614] EXT4-fs (loop1): mounted filesystem without journal. Opts: bsdgroups,nodiscard,noblock_validity,grpjquota=,grpjquota=,noquota,auto_da_alloc,noload,nodiscard,,errors=continue. Quota mode: writeback. [ 1776.993186][T19598] bridge0: port 2(bridge_slave_1) entered disabled state [ 1777.070356][T19598] device bridge_slave_1 entered promiscuous mode [ 1778.904356][ T3515] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1778.912827][ T3515] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1779.033519][T19633] loop7: detected capacity change from 0 to 512 [ 1779.146623][T19634] loop9: detected capacity change from 0 to 512 [ 1779.389930][T19633] EXT4-fs (loop7): orphan cleanup on readonly fs [ 1779.404341][T19633] EXT4-fs error (device loop7): ext4_validate_block_bitmap:438: comm syz.7.5223: bg 0: block 248: padding at end of block bitmap is not set [ 1779.420532][T19633] Quota error (device loop7): write_blk: dquota write failed [ 1779.428377][T19633] Quota error (device loop7): qtree_write_dquot: Error -117 occurred while creating quota [ 1779.438714][T19633] EXT4-fs error (device loop7): ext4_acquire_dquot:6195: comm syz.7.5223: Failed to acquire dquot type 1 [ 1779.456382][T19633] EXT4-fs (loop7): 1 truncate cleaned up [ 1779.463588][T19633] EXT4-fs (loop7): mounted filesystem without journal. Opts: bsdgroups,nodiscard,noblock_validity,grpjquota=,grpjquota=,noquota,auto_da_alloc,noload,nodiscard,,errors=continue. Quota mode: writeback. [ 1779.633515][T19634] EXT4-fs (loop9): orphan cleanup on readonly fs [ 1779.659998][T19634] EXT4-fs error (device loop9): ext4_validate_block_bitmap:438: comm syz.9.5220: bg 0: block 248: padding at end of block bitmap is not set [ 1779.718270][T19634] Quota error (device loop9): write_blk: dquota write failed [ 1779.726084][T19634] Quota error (device loop9): qtree_write_dquot: Error -117 occurred while creating quota [ 1779.736827][T19634] EXT4-fs error (device loop9): ext4_acquire_dquot:6195: comm syz.9.5220: Failed to acquire dquot type 1 [ 1779.756493][T19634] EXT4-fs (loop9): 1 truncate cleaned up [ 1779.773432][T19634] EXT4-fs (loop9): mounted filesystem without journal. Opts: bsdgroups,nodiscard,noblock_validity,grpjquota=,grpjquota=,noquota,auto_da_alloc,noload,nodiscard,,errors=continue. Quota mode: writeback. [ 1780.270705][ T3515] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1781.174737][ T3515] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1781.184605][ T3515] bridge0: port 1(bridge_slave_0) entered blocking state [ 1781.191666][ T3515] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1781.200999][ T3515] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1781.209837][ T3515] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1781.233189][T19645] loop1: detected capacity change from 0 to 1024 [ 1781.239964][ T3515] bridge0: port 2(bridge_slave_1) entered blocking state [ 1781.247020][ T3515] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1781.255359][ T3515] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1781.265618][ T3515] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1781.285877][ T3515] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1781.294396][ T3515] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1781.302872][ T3515] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1781.313671][ T3515] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1781.336295][ T3515] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1781.346754][ T3515] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1781.371261][T19653] loop9: detected capacity change from 0 to 512 [ 1781.386231][T19598] device veth0_vlan entered promiscuous mode [ 1781.394004][ T3515] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1781.404353][ T3515] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1781.466407][ T3515] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1781.485698][T19653] EXT4-fs (loop9): orphan cleanup on readonly fs [ 1781.495083][T19653] EXT4-fs error (device loop9): ext4_validate_block_bitmap:438: comm syz.9.5228: bg 0: block 248: padding at end of block bitmap is not set [ 1781.511205][T19653] Quota error (device loop9): write_blk: dquota write failed [ 1781.518797][T19653] Quota error (device loop9): qtree_write_dquot: Error -117 occurred while creating quota [ 1781.528908][T19653] EXT4-fs error (device loop9): ext4_acquire_dquot:6195: comm syz.9.5228: Failed to acquire dquot type 1 [ 1781.542643][T19653] EXT4-fs (loop9): 1 truncate cleaned up [ 1781.549275][T19653] EXT4-fs (loop9): mounted filesystem without journal. Opts: bsdgroups,nodiscard,noblock_validity,grpjquota=,grpjquota=,noquota,auto_da_alloc,noload,nodiscard,,errors=continue. Quota mode: writeback. [ 1781.653045][ T3515] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1781.669741][T19645] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 1781.717169][T19598] device veth1_macvtap entered promiscuous mode [ 1785.327413][T19656] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 440: padding at end of block bitmap is not set [ 1785.417988][T19549] EXT4-fs error (device loop1): ext4_readdir:263: inode #2: block 16: comm syz-executor: path /5/file1: bad entry in directory: inode out of bounds - offset=0, inode=1538, rec_len=12, size=1024 fake=1 [ 1785.455170][ T3515] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1785.467836][ T3515] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1785.489575][ T3515] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1785.502484][ T3515] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1785.516641][ T3515] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1786.119862][T19676] loop2: detected capacity change from 0 to 512 [ 1786.173211][T19679] loop7: detected capacity change from 0 to 512 [ 1786.224656][T19676] EXT4-fs (loop2): orphan cleanup on readonly fs [ 1786.298850][T19676] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.5235: bg 0: block 248: padding at end of block bitmap is not set [ 1786.317343][T19676] Quota error (device loop2): write_blk: dquota write failed [ 1786.324943][T19676] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 1786.334968][T19676] EXT4-fs error (device loop2): ext4_acquire_dquot:6195: comm syz.2.5235: Failed to acquire dquot type 1 [ 1786.362952][T19676] EXT4-fs (loop2): 1 truncate cleaned up [ 1786.383371][T19676] EXT4-fs (loop2): mounted filesystem without journal. Opts: bsdgroups,nodiscard,noblock_validity,grpjquota=,grpjquota=,noquota,auto_da_alloc,noload,nodiscard,,errors=continue. Quota mode: writeback. [ 1786.489677][T19679] EXT4-fs (loop7): orphan cleanup on readonly fs [ 1786.498879][T19679] EXT4-fs error (device loop7): ext4_validate_block_bitmap:438: comm syz.7.5236: bg 0: block 248: padding at end of block bitmap is not set [ 1786.514996][T19679] Quota error (device loop7): write_blk: dquota write failed [ 1786.522581][T19679] Quota error (device loop7): qtree_write_dquot: Error -117 occurred while creating quota [ 1786.532693][T19679] EXT4-fs error (device loop7): ext4_acquire_dquot:6195: comm syz.7.5236: Failed to acquire dquot type 1 [ 1786.579115][T19679] EXT4-fs (loop7): 1 truncate cleaned up [ 1786.589591][T19679] EXT4-fs (loop7): mounted filesystem without journal. Opts: bsdgroups,nodiscard,noblock_validity,grpjquota=,grpjquota=,noquota,auto_da_alloc,noload,nodiscard,,errors=continue. Quota mode: writeback. [ 1788.220935][T19689] loop9: detected capacity change from 0 to 512 [ 1788.837133][T19689] EXT4-fs (loop9): orphan cleanup on readonly fs [ 1788.844263][T19689] EXT4-fs error (device loop9): ext4_validate_block_bitmap:438: comm syz.9.5238: bg 0: block 248: padding at end of block bitmap is not set [ 1788.859056][T19689] Quota error (device loop9): write_blk: dquota write failed [ 1788.866914][T19689] Quota error (device loop9): qtree_write_dquot: Error -117 occurred while creating quota [ 1788.877480][T19689] EXT4-fs error (device loop9): ext4_acquire_dquot:6195: comm syz.9.5238: Failed to acquire dquot type 1 [ 1788.896182][T19689] EXT4-fs (loop9): 1 truncate cleaned up [ 1788.902148][T19689] EXT4-fs (loop9): mounted filesystem without journal. Opts: bsdgroups,nodiscard,noblock_validity,grpjquota=,grpjquota=,noquota,auto_da_alloc,noload,nodiscard,,errors=continue. Quota mode: writeback. [ 1788.983250][T19693] loop2: detected capacity change from 0 to 1024 [ 1789.013331][T19699] bridge0: port 1(bridge_slave_0) entered blocking state [ 1789.993289][T19705] loop8: detected capacity change from 0 to 512 [ 1790.095821][T19706] loop7: detected capacity change from 0 to 512 [ 1790.349902][T19699] bridge0: port 1(bridge_slave_0) entered disabled state [ 1790.363857][T19693] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 1790.376740][T19699] device bridge_slave_0 entered promiscuous mode [ 1790.400187][T19693] ext4 filesystem being mounted at /26/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1790.416257][T19706] EXT4-fs (loop7): orphan cleanup on readonly fs [ 1790.425351][T19706] EXT4-fs error (device loop7): ext4_validate_block_bitmap:438: comm syz.7.5242: bg 0: block 248: padding at end of block bitmap is not set [ 1790.441543][T19706] Quota error (device loop7): write_blk: dquota write failed [ 1790.449096][T19706] Quota error (device loop7): qtree_write_dquot: Error -117 occurred while creating quota [ 1790.459113][T19706] EXT4-fs error (device loop7): ext4_acquire_dquot:6195: comm syz.7.5242: Failed to acquire dquot type 1 [ 1790.473110][T19706] EXT4-fs (loop7): 1 truncate cleaned up [ 1790.480204][T19706] EXT4-fs (loop7): mounted filesystem without journal. Opts: bsdgroups,nodiscard,noblock_validity,grpjquota=,grpjquota=,noquota,auto_da_alloc,noload,nodiscard,,errors=continue. Quota mode: writeback. [ 1790.525401][T19705] EXT4-fs (loop8): orphan cleanup on readonly fs [ 1790.534898][T19705] EXT4-fs error (device loop8): ext4_validate_block_bitmap:438: comm syz.8.5243: bg 0: block 248: padding at end of block bitmap is not set [ 1790.550974][T19705] Quota error (device loop8): write_blk: dquota write failed [ 1790.558891][T19705] Quota error (device loop8): qtree_write_dquot: Error -117 occurred while creating quota [ 1790.568993][T19705] EXT4-fs error (device loop8): ext4_acquire_dquot:6195: comm syz.8.5243: Failed to acquire dquot type 1 [ 1790.590656][T19705] EXT4-fs (loop8): 1 truncate cleaned up [ 1790.598963][T19705] EXT4-fs (loop8): mounted filesystem without journal. Opts: bsdgroups,nodiscard,noblock_validity,grpjquota=,grpjquota=,noquota,auto_da_alloc,noload,nodiscard,,errors=continue. Quota mode: writeback. [ 1790.744300][T19699] bridge0: port 2(bridge_slave_1) entered blocking state [ 1790.755111][T19699] bridge0: port 2(bridge_slave_1) entered disabled state [ 1790.763799][T19693] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.5240: bg 0: block 393: padding at end of block bitmap is not set [ 1790.778801][T19699] device bridge_slave_1 entered promiscuous mode [ 1790.790444][T19693] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 2050 with max blocks 1 with error 117 [ 1790.818281][T19693] EXT4-fs (loop2): This should not happen!! Data will be lost [ 1790.818281][T19693] [ 1790.926147][ T1776] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1790.934444][ T1776] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1790.949922][ T3656] device bridge_slave_1 left promiscuous mode [ 1790.956049][ T3656] bridge0: port 2(bridge_slave_1) entered disabled state [ 1790.964933][ T3656] device bridge_slave_0 left promiscuous mode [ 1790.971577][ T3656] bridge0: port 1(bridge_slave_0) entered disabled state [ 1790.980406][ T3656] device veth1_macvtap left promiscuous mode [ 1790.986413][ T3656] device veth0_vlan left promiscuous mode [ 1791.052199][ T1776] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1791.066304][ T1776] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1791.074924][T18047] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 1791.094235][ T1776] bridge0: port 1(bridge_slave_0) entered blocking state [ 1791.101301][ T1776] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1791.110968][ T1776] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1791.119681][ T1776] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1791.127919][ T1776] bridge0: port 2(bridge_slave_1) entered blocking state [ 1791.134949][ T1776] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1791.142589][ T1776] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1791.157389][ T1776] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1791.254985][T19726] loop8: detected capacity change from 0 to 512 [ 1791.542907][ T1776] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1791.733600][T18047] usb 3-1: config index 0 descriptor too short (expected 3133, got 61) [ 1792.057480][T19726] EXT4-fs (loop8): orphan cleanup on readonly fs [ 1792.066565][T19726] EXT4-fs error (device loop8): ext4_validate_block_bitmap:438: comm syz.8.5247: bg 0: block 248: padding at end of block bitmap is not set [ 1792.083344][T19726] Quota error (device loop8): write_blk: dquota write failed [ 1792.090921][T19726] Quota error (device loop8): qtree_write_dquot: Error -117 occurred while creating quota [ 1792.100939][T19726] EXT4-fs error (device loop8): ext4_acquire_dquot:6195: comm syz.8.5247: Failed to acquire dquot type 1 [ 1792.142573][T19726] EXT4-fs (loop8): 1 truncate cleaned up [ 1792.157705][T18047] usb 3-1: config 0 has an invalid interface number: 156 but max is 1 [ 1792.207020][T18047] usb 3-1: config 0 has an invalid descriptor of length 108, skipping remainder of the config [ 1792.218544][T18047] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1792.228423][T18047] usb 3-1: config 0 has no interface number 0 [ 1792.234572][T18047] usb 3-1: config 0 interface 156 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 1792.245388][T18047] usb 3-1: config 0 interface 156 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 1792.273976][T19735] loop7: detected capacity change from 0 to 512 [ 1792.282089][T18047] usb 3-1: config 0 interface 156 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1792.292848][T18047] usb 3-1: config 0 interface 156 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1792.311369][T18047] usb 3-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9 [ 1792.324266][T19735] EXT4-fs (loop7): orphan cleanup on readonly fs [ 1792.333399][T19735] EXT4-fs error (device loop7): ext4_validate_block_bitmap:438: comm syz.7.5250: bg 0: block 248: padding at end of block bitmap is not set [ 1792.349453][T19735] Quota error (device loop7): write_blk: dquota write failed [ 1792.357024][T19735] Quota error (device loop7): qtree_write_dquot: Error -117 occurred while creating quota [ 1792.367030][T19735] EXT4-fs error (device loop7): ext4_acquire_dquot:6195: comm syz.7.5250: Failed to acquire dquot type 1 [ 1792.380649][T19735] EXT4-fs (loop7): 1 truncate cleaned up [ 1792.387929][T18047] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1792.399367][T18047] usb 3-1: config 0 descriptor?? [ 1792.408413][T19726] EXT4-fs (loop8): mounted filesystem without journal. Opts: bsdgroups,nodiscard,noblock_validity,grpjquota=,grpjquota=,noquota,auto_da_alloc,noload,nodiscard,,errors=continue. Quota mode: writeback. [ 1792.506357][T19735] EXT4-fs (loop7): mounted filesystem without journal. Opts: bsdgroups,nodiscard,noblock_validity,grpjquota=,grpjquota=,noquota,auto_da_alloc,noload,nodiscard,,errors=continue. Quota mode: writeback. [ 1792.577407][T18047] usb 3-1: can't set config #0, error -71 [ 1792.762291][T14879] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1792.771453][T14879] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1792.772419][T18047] usb 3-1: USB disconnect, device number 15 [ 1792.782394][T19699] device veth0_vlan entered promiscuous mode [ 1792.792164][T14879] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1792.800284][T14879] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1792.811282][T14879] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1792.820926][T14879] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1793.982485][T19747] loop2: detected capacity change from 0 to 512 [ 1794.687207][T19748] loop8: detected capacity change from 0 to 512 [ 1794.795833][T19747] EXT4-fs (loop2): orphan cleanup on readonly fs [ 1794.805186][T19747] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.5251: bg 0: block 248: padding at end of block bitmap is not set [ 1794.821638][T19747] Quota error (device loop2): write_blk: dquota write failed [ 1794.829351][T19747] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 1794.839407][T19747] EXT4-fs error (device loop2): ext4_acquire_dquot:6195: comm syz.2.5251: Failed to acquire dquot type 1 [ 1794.853235][T19747] EXT4-fs (loop2): 1 truncate cleaned up [ 1794.859614][T19747] EXT4-fs (loop2): mounted filesystem without journal. Opts: bsdgroups,nodiscard,noblock_validity,grpjquota=,grpjquota=,noquota,auto_da_alloc,noload,nodiscard,,errors=continue. Quota mode: writeback. [ 1794.963210][T19699] device veth1_macvtap entered promiscuous mode [ 1794.973193][T19748] EXT4-fs (loop8): orphan cleanup on readonly fs [ 1794.982858][T19748] EXT4-fs error (device loop8): ext4_validate_block_bitmap:438: comm syz.8.5253: bg 0: block 248: padding at end of block bitmap is not set [ 1794.998557][T19748] Quota error (device loop8): write_blk: dquota write failed [ 1795.006123][T19748] Quota error (device loop8): qtree_write_dquot: Error -117 occurred while creating quota [ 1795.016142][T19748] EXT4-fs error (device loop8): ext4_acquire_dquot:6195: comm syz.8.5253: Failed to acquire dquot type 1 [ 1795.030053][T19748] EXT4-fs (loop8): 1 truncate cleaned up [ 1795.036747][T19748] EXT4-fs (loop8): mounted filesystem without journal. Opts: bsdgroups,nodiscard,noblock_validity,grpjquota=,grpjquota=,noquota,auto_da_alloc,noload,nodiscard,,errors=continue. Quota mode: writeback. [ 1795.640661][T15871] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1795.672480][T15871] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1795.676708][T19757] loop7: detected capacity change from 0 to 512 [ 1795.681295][T15871] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1795.694891][T15871] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1795.703935][T15871] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1795.712764][T15871] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1795.721276][T15871] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1795.730240][T19757] EXT4-fs (loop7): can't mount with journal_async_commit, fs mounted w/o journal [ 1795.755761][T19763] loop3: detected capacity change from 0 to 1024 [ 1795.932519][T19766] loop2: detected capacity change from 0 to 512 [ 1796.900011][T19767] loop8: detected capacity change from 0 to 512 [ 1797.221389][T19766] EXT4-fs (loop2): orphan cleanup on readonly fs [ 1797.230754][T19766] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.5256: bg 0: block 248: padding at end of block bitmap is not set [ 1797.246956][T19766] Quota error (device loop2): write_blk: dquota write failed [ 1797.254544][T19766] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 1797.264568][T19766] EXT4-fs error (device loop2): ext4_acquire_dquot:6195: comm syz.2.5256: Failed to acquire dquot type 1 [ 1797.279053][T19766] EXT4-fs (loop2): 1 truncate cleaned up [ 1797.285234][T19766] EXT4-fs (loop2): mounted filesystem without journal. Opts: bsdgroups,nodiscard,noblock_validity,grpjquota=,grpjquota=,noquota,auto_da_alloc,noload,nodiscard,,errors=continue. Quota mode: writeback. [ 1797.382807][T19767] EXT4-fs (loop8): orphan cleanup on readonly fs [ 1797.393100][T19767] EXT4-fs error (device loop8): ext4_validate_block_bitmap:438: comm syz.8.5257: bg 0: block 248: padding at end of block bitmap is not set [ 1797.409288][T19767] Quota error (device loop8): write_blk: dquota write failed [ 1797.416857][T19767] Quota error (device loop8): qtree_write_dquot: Error -117 occurred while creating quota [ 1797.426894][T19767] EXT4-fs error (device loop8): ext4_acquire_dquot:6195: comm syz.8.5257: Failed to acquire dquot type 1 [ 1797.443147][T19767] EXT4-fs (loop8): 1 truncate cleaned up [ 1797.454686][T19767] EXT4-fs (loop8): mounted filesystem without journal. Opts: bsdgroups,nodiscard,noblock_validity,grpjquota=,grpjquota=,noquota,auto_da_alloc,noload,nodiscard,,errors=continue. Quota mode: writeback. [ 1798.440712][T19763] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 1799.344712][T19798] loop9: detected capacity change from 0 to 512 [ 1799.480606][T19699] EXT4-fs error (device loop3): ext4_readdir:263: inode #2: block 16: comm syz-executor: path /0/file1: bad entry in directory: inode out of bounds - offset=0, inode=1538, rec_len=12, size=1024 fake=1 [ 1799.510463][T19798] EXT4-fs (loop9): orphan cleanup on readonly fs [ 1799.517967][T19798] EXT4-fs error (device loop9): ext4_validate_block_bitmap:438: comm syz.9.5264: bg 0: block 248: padding at end of block bitmap is not set [ 1799.532605][T19798] Quota error (device loop9): write_blk: dquota write failed [ 1799.540551][T19798] Quota error (device loop9): qtree_write_dquot: Error -117 occurred while creating quota [ 1799.550508][T19798] EXT4-fs error (device loop9): ext4_acquire_dquot:6195: comm syz.9.5264: Failed to acquire dquot type 1 [ 1799.562337][T19798] EXT4-fs (loop9): 1 truncate cleaned up [ 1799.568537][T19798] EXT4-fs (loop9): mounted filesystem without journal. Opts: bsdgroups,nodiscard,noblock_validity,grpjquota=,grpjquota=,noquota,auto_da_alloc,noload,nodiscard,,errors=continue. Quota mode: writeback. [ 1799.593071][T19800] loop2: detected capacity change from 0 to 512 [ 1799.655720][ T30] audit: type=1400 audit(2000000312.997:1780): avc: denied { setcurrent } for pid=19793 comm="syz.8.5262" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 1799.681859][T19800] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 1799.685997][ T30] audit: type=1401 audit(2000000313.018:1781): op=security_bounded_transition seresult=denied oldcontext=root:sysadm_r:sysadm_t newcontext=system_u:object_r:hugetlbfs_t [ 1799.709889][T19800] ext4 filesystem being mounted at /31/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1799.739444][T19800] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.5263: bg 0: block 128: padding at end of block bitmap is not set [ 1799.824791][T19806] bridge0: port 1(bridge_slave_0) entered blocking state [ 1799.832010][T19806] bridge0: port 1(bridge_slave_0) entered disabled state [ 1799.839538][T19806] device bridge_slave_0 entered promiscuous mode [ 1799.847039][T19806] bridge0: port 2(bridge_slave_1) entered blocking state [ 1799.854260][T19806] bridge0: port 2(bridge_slave_1) entered disabled state [ 1799.861981][T19806] device bridge_slave_1 entered promiscuous mode [ 1799.891359][T19812] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5268'. [ 1799.997773][T19806] bridge0: port 2(bridge_slave_1) entered blocking state [ 1800.004862][T19806] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1800.012158][T19806] bridge0: port 1(bridge_slave_0) entered blocking state [ 1800.019197][T19806] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1801.201556][T14561] bridge0: port 1(bridge_slave_0) entered disabled state [ 1801.262305][T14561] bridge0: port 2(bridge_slave_1) entered disabled state [ 1801.285367][T14561] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1801.293179][T14561] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1801.303630][T14561] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1801.399957][T19831] loop9: detected capacity change from 0 to 512 [ 1801.410873][T14561] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1801.420494][T14561] bridge0: port 1(bridge_slave_0) entered blocking state [ 1801.427554][T14561] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1801.436366][T14561] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1801.446438][T14561] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1801.853934][ T424] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 1802.298570][T14561] bridge0: port 2(bridge_slave_1) entered blocking state [ 1802.305678][T14561] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1802.317384][T19831] EXT4-fs (loop9): orphan cleanup on readonly fs [ 1802.380256][ T1776] device bridge_slave_1 left promiscuous mode [ 1802.392770][T19831] EXT4-fs error (device loop9): ext4_validate_block_bitmap:438: comm syz.9.5272: bg 0: block 248: padding at end of block bitmap is not set [ 1802.408740][T19831] Quota error (device loop9): write_blk: dquota write failed [ 1802.416332][T19831] Quota error (device loop9): qtree_write_dquot: Error -117 occurred while creating quota [ 1802.426411][T19831] EXT4-fs error (device loop9): ext4_acquire_dquot:6195: comm syz.9.5272: Failed to acquire dquot type 1 [ 1802.442664][T19831] EXT4-fs (loop9): 1 truncate cleaned up [ 1802.449196][T19831] EXT4-fs (loop9): mounted filesystem without journal. Opts: bsdgroups,nodiscard,noblock_validity,grpjquota=,grpjquota=,noquota,auto_da_alloc,noload,nodiscard,,errors=continue. Quota mode: writeback. [ 1802.537901][ T1776] bridge0: port 2(bridge_slave_1) entered disabled state [ 1802.588623][ T1776] device bridge_slave_0 left promiscuous mode [ 1802.660532][T19836] loop8: detected capacity change from 0 to 1024 [ 1802.685129][ T1776] bridge0: port 1(bridge_slave_0) entered disabled state [ 1802.703576][ T1776] device veth1_macvtap left promiscuous mode [ 1802.709607][ T1776] device veth0_vlan left promiscuous mode [ 1802.764890][T19836] EXT4-fs (loop8): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 1802.893216][T19844] loop2: detected capacity change from 0 to 512 [ 1803.108702][T19844] EXT4-fs error (device loop2): ext4_orphan_get:1401: inode #15: comm syz.2.5277: casefold flag without casefold feature [ 1803.204340][T19844] EXT4-fs error (device loop2): ext4_orphan_get:1406: comm syz.2.5277: couldn't read orphan inode 15 (err -117) [ 1803.265243][T19806] device veth0_vlan entered promiscuous mode [ 1803.405247][ T424] usb 3-1: device not accepting address 16, error -71 [ 1803.429946][T19844] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 1803.451103][T19806] device veth1_macvtap entered promiscuous mode [ 1803.616311][T19855] loop7: detected capacity change from 0 to 512 [ 1803.626207][T19863] loop9: detected capacity change from 0 to 512 [ 1803.633058][T19598] EXT4-fs error (device loop8): ext4_readdir:263: inode #2: block 16: comm syz-executor: path /11/file1: bad entry in directory: inode out of bounds - offset=0, inode=1538, rec_len=12, size=1024 fake=1 [ 1803.633984][T14561] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1803.662249][T14561] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1803.671076][T14561] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1803.679423][T14561] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1803.688561][T14561] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1803.697203][T14561] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1803.705806][T14561] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1803.713916][T14561] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1803.722737][T14561] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1803.731476][T14561] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1803.739960][T14561] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1803.748201][T14561] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1803.757092][T19863] EXT4-fs (loop9): orphan cleanup on readonly fs [ 1803.757247][T14561] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1803.772324][T19863] EXT4-fs error (device loop9): ext4_validate_block_bitmap:438: comm syz.9.5281: bg 0: block 248: padding at end of block bitmap is not set [ 1803.772388][T14561] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1803.787143][T19863] Quota error (device loop9): write_blk: dquota write failed [ 1803.795345][T14561] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1803.802229][T19863] Quota error (device loop9): qtree_write_dquot: Error -117 occurred while creating quota [ 1803.810963][T14561] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1803.827286][T19863] EXT4-fs error (device loop9): ext4_acquire_dquot:6195: comm syz.9.5281: Failed to acquire dquot type 1 [ 1803.828002][T14561] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1803.846432][T19863] EXT4-fs (loop9): 1 truncate cleaned up [ 1803.858460][T19863] EXT4-fs (loop9): mounted filesystem without journal. Opts: bsdgroups,nodiscard,noblock_validity,grpjquota=,grpjquota=,noquota,auto_da_alloc,noload,nodiscard,,errors=continue. Quota mode: writeback. [ 1803.883920][T19855] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 1803.895509][T19855] ext4 filesystem being mounted at /172/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1803.908918][T19855] EXT4-fs error (device loop7): ext4_validate_block_bitmap:438: comm syz.7.5279: bg 0: block 128: padding at end of block bitmap is not set [ 1804.090898][T19872] bridge0: port 1(bridge_slave_0) entered blocking state [ 1804.099718][T19872] bridge0: port 1(bridge_slave_0) entered disabled state [ 1804.107230][T19872] device bridge_slave_0 entered promiscuous mode [ 1804.116117][T19872] bridge0: port 2(bridge_slave_1) entered blocking state [ 1804.123274][T19872] bridge0: port 2(bridge_slave_1) entered disabled state [ 1804.130834][T19872] device bridge_slave_1 entered promiscuous mode [ 1804.357954][T19875] bridge0: port 1(bridge_slave_0) entered blocking state [ 1804.366440][T19875] bridge0: port 1(bridge_slave_0) entered disabled state [ 1804.373989][T19875] device bridge_slave_0 entered promiscuous mode [ 1804.395121][T19872] bridge0: port 2(bridge_slave_1) entered blocking state [ 1804.402192][T19872] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1804.409617][T19872] bridge0: port 1(bridge_slave_0) entered blocking state [ 1804.416793][T19872] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1804.426111][T19875] bridge0: port 2(bridge_slave_1) entered blocking state [ 1804.475334][T19875] bridge0: port 2(bridge_slave_1) entered disabled state [ 1804.483873][T19875] device bridge_slave_1 entered promiscuous mode [ 1804.495009][T19885] device vlan0 entered promiscuous mode [ 1804.563230][ T1776] device bridge_slave_1 left promiscuous mode [ 1804.570951][ T1776] bridge0: port 2(bridge_slave_1) entered disabled state [ 1804.602550][ T1776] device bridge_slave_0 left promiscuous mode [ 1804.609418][T19893] loop9: detected capacity change from 0 to 8192 [ 1804.622698][ T1776] bridge0: port 1(bridge_slave_0) entered disabled state [ 1804.695466][T19893] FAT-fs (loop9): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1804.706030][ T1776] device bridge_slave_1 left promiscuous mode [ 1804.712250][ T1776] bridge0: port 2(bridge_slave_1) entered disabled state [ 1804.723930][ T1776] device bridge_slave_0 left promiscuous mode [ 1804.730356][ T1776] bridge0: port 1(bridge_slave_0) entered disabled state [ 1804.738994][ T1776] device veth1_macvtap left promiscuous mode [ 1804.748069][ T1776] device veth0_vlan left promiscuous mode [ 1804.754568][ T1776] device veth1_macvtap left promiscuous mode [ 1804.760645][ T1776] device veth0_vlan left promiscuous mode [ 1805.181983][T15871] bridge0: port 1(bridge_slave_0) entered disabled state [ 1805.189820][T15871] bridge0: port 2(bridge_slave_1) entered disabled state [ 1805.226151][T15871] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1805.233735][T15871] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1805.242583][T15871] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1805.252086][T15871] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1805.260590][T15871] bridge0: port 1(bridge_slave_0) entered blocking state [ 1805.267642][T15871] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1805.283865][T15871] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1805.292328][T15871] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1805.300790][T15871] bridge0: port 2(bridge_slave_1) entered blocking state [ 1805.307844][T15871] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1805.335765][T15871] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1805.337335][T19900] loop9: detected capacity change from 0 to 1024 [ 1805.344330][T15871] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1805.364180][T15871] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1805.372696][T15871] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1805.436391][T19900] EXT4-fs (loop9): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 1805.445824][T19872] device veth0_vlan entered promiscuous mode [ 1805.455414][ T3656] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1805.467536][T19904] input: syz1 as /devices/virtual/input/input8 [ 1805.471913][ T3656] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1805.533790][ T3656] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1805.542175][ T3656] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1805.567981][T19872] device veth1_macvtap entered promiscuous mode [ 1805.581470][ T3656] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1805.659105][ T3656] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1805.668726][ T3656] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1805.678768][ T3656] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1805.689456][ T3656] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1806.816365][ T3656] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1806.830256][ T3656] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1806.847936][ T3656] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1806.856325][ T3656] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1806.916520][T19921] loop0: detected capacity change from 0 to 512 [ 1806.949909][T19921] EXT4-fs (loop0): orphan cleanup on readonly fs [ 1806.957240][T19921] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.5298: bg 0: block 248: padding at end of block bitmap is not set [ 1806.973301][T19921] Quota error (device loop0): write_blk: dquota write failed [ 1806.981535][T19921] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 1806.992098][T19921] EXT4-fs error (device loop0): ext4_acquire_dquot:6195: comm syz.0.5298: Failed to acquire dquot type 1 [ 1807.004478][T19921] EXT4-fs (loop0): 1 truncate cleaned up [ 1807.010419][T19921] EXT4-fs (loop0): mounted filesystem without journal. Opts: bsdgroups,nodiscard,noblock_validity,grpjquota=,grpjquota=,noquota,auto_da_alloc,noload,nodiscard,,errors=continue. Quota mode: writeback. [ 1807.017654][T19875] device veth0_vlan entered promiscuous mode [ 1807.036530][T17894] EXT4-fs error (device loop9): ext4_readdir:263: inode #2: block 16: comm syz-executor: path /108/file1: bad entry in directory: inode out of bounds - offset=0, inode=1538, rec_len=12, size=1024 fake=1 [ 1807.057876][ T3656] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1807.067197][ T3656] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1807.075677][ T3656] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1807.084558][ T3656] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1807.093617][ T3656] bridge0: port 1(bridge_slave_0) entered blocking state [ 1807.100670][ T3656] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1807.108599][ T3656] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1807.116746][ T30] audit: type=1400 audit(2000000320.990:1782): avc: denied { ioctl } for pid=19925 comm="syz.4.5301" path="/dev/usbmon7" dev="devtmpfs" ino=176 ioctlcmd=0x9207 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 1807.129968][ T3656] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1807.150655][ T3656] bridge0: port 2(bridge_slave_1) entered blocking state [ 1807.157723][ T3656] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1807.165476][ T3656] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1807.173655][ T3656] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1807.181986][ T3656] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1807.189900][ T30] audit: type=1400 audit(2000000321.076:1783): avc: denied { create } for pid=19933 comm="syz.4.5303" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmsvc_socket permissive=1 [ 1807.210399][ T3656] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1807.218690][ T3656] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1807.221669][T19928] loop7: detected capacity change from 0 to 512 [ 1807.227564][ T3656] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1807.242017][ T3656] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1807.250055][ T3656] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1807.258316][ T3656] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1807.266164][ T3656] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1807.274601][ T3656] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1807.286831][T19875] device veth1_macvtap entered promiscuous mode [ 1807.295344][T19928] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 1807.306894][T19928] ext4 filesystem being mounted at /175/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1807.318500][ T3656] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1807.327475][T19928] EXT4-fs error (device loop7): ext4_validate_block_bitmap:438: comm syz.7.5299: bg 0: block 128: padding at end of block bitmap is not set [ 1807.342345][ T3656] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1807.351797][ T3656] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1807.379217][ T3656] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1807.388458][T19939] 9pnet: Insufficient options for proto=fd [ 1807.404908][ T3656] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1807.417884][ T3656] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1807.428138][ T3656] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1807.506801][T19944] bridge0: port 1(bridge_slave_0) entered blocking state [ 1807.514183][T19944] bridge0: port 1(bridge_slave_0) entered disabled state [ 1807.521833][T19944] device bridge_slave_0 entered promiscuous mode [ 1807.529334][T19944] bridge0: port 2(bridge_slave_1) entered blocking state [ 1807.629495][T19952] loop5: detected capacity change from 0 to 512 [ 1807.641088][T19944] bridge0: port 2(bridge_slave_1) entered disabled state [ 1807.654033][T19944] device bridge_slave_1 entered promiscuous mode [ 1807.696202][T19952] EXT4-fs (loop5): orphan cleanup on readonly fs [ 1807.706014][T19952] EXT4-fs error (device loop5): ext4_validate_block_bitmap:438: comm syz.5.5288: bg 0: block 248: padding at end of block bitmap is not set [ 1807.723580][T19952] Quota error (device loop5): write_blk: dquota write failed [ 1807.731150][T19952] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota [ 1807.741148][T19952] EXT4-fs error (device loop5): ext4_acquire_dquot:6195: comm syz.5.5288: Failed to acquire dquot type 1 [ 1807.754969][T19952] EXT4-fs (loop5): 1 truncate cleaned up [ 1807.765054][T19952] EXT4-fs (loop5): mounted filesystem without journal. Opts: bsdgroups,nodiscard,noblock_validity,grpjquota=,grpjquota=,noquota,auto_da_alloc,noload,nodiscard,,errors=continue. Quota mode: writeback. [ 1807.857844][T19942] kvm [19941]: vcpu0, guest rIP: 0x1be disabled perfctr wrmsr: 0xc2 data 0xf6ff [ 1808.031563][T19942] kvm [19941]: vcpu0, guest rIP: 0x1be disabled perfctr wrmsr: 0xc2 data 0xbc3f [ 1808.392716][T19955] loop4: detected capacity change from 0 to 1024 [ 1808.418257][T19944] device veth0_vlan entered promiscuous mode [ 1808.432138][T19944] device veth1_macvtap entered promiscuous mode [ 1808.466339][T19955] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 1808.477953][ T30] audit: type=1400 audit(2000000322.460:1784): avc: denied { map } for pid=19957 comm="syz.6.5306" path="/dev/ashmem" dev="devtmpfs" ino=265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1808.513399][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1808.533542][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1808.542732][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1808.557150][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1808.565583][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1808.574333][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1808.582822][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1808.591685][ T30] audit: type=1400 audit(2000000322.481:1785): avc: denied { execute } for pid=19957 comm="syz.6.5306" path="/dev/ashmem" dev="devtmpfs" ino=265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1808.605805][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1808.618987][T19966] loop5: detected capacity change from 0 to 512 [ 1808.623399][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1808.640449][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1808.658844][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1808.708828][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1808.739214][T19966] EXT4-fs (loop5): Mount option "journal_checksum" incompatible with ext3 [ 1809.240289][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1809.240500][ T302] bridge0: port 1(bridge_slave_0) entered blocking state [ 1809.240515][ T302] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1809.240655][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1809.240886][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1809.241112][ T302] bridge0: port 2(bridge_slave_1) entered blocking state [ 1809.241125][ T302] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1809.246555][ T302] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1809.496752][ C1] ------------[ cut here ]------------ [ 1809.502382][ C1] refcount_t: addition on 0; use-after-free. [ 1809.508496][ C1] WARNING: CPU: 1 PID: 19963 at lib/refcount.c:25 refcount_warn_saturate+0x104/0x1a0 [ 1809.517997][ C1] Modules linked in: [ 1809.521895][ C1] CPU: 1 PID: 19963 Comm: syz.6.5311 Tainted: G W 5.15.185-syzkaller-00032-g0d918fa8e88d #0 [ 1809.533282][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1809.543354][ C1] RIP: 0010:refcount_warn_saturate+0x104/0x1a0 [ 1809.544821][T19872] EXT4-fs error (device loop4): ext4_readdir:263: inode #2: block 16: comm syz-executor: path /6/file1: bad entry in directory: inode out of bounds - offset=0, inode=1538, rec_len=12, size=1024 fake=1 [ 1809.549511][ C1] Code: 04 01 48 c7 c7 a0 f2 62 85 e8 58 ae 50 02 0f 0b eb df e8 ff c8 1c ff c6 05 0a f0 99 04 01 48 c7 c7 e0 f1 62 85 e8 3c ae 50 02 <0f> 0b eb c3 e8 e3 c8 1c ff c6 05 ef ef 99 04 01 48 c7 c7 40 f2 62 [ 1809.549530][ C1] RSP: 0018:ffffc900001d09e0 EFLAGS: 00010246 [ 1809.594762][ C1] RAX: 494b6b7b1f474d00 RBX: 0000000000000002 RCX: ffff88811df393c0 [ 1809.602766][ C1] RDX: 0000000000000100 RSI: 0000000000000101 RDI: 0000000000000000 [ 1809.610757][ C1] RBP: ffffc900001d09f0 R08: dffffc0000000000 R09: fffff5200003a089 [ 1809.618759][ C1] R10: fffff5200003a089 R11: 1ffff9200003a088 R12: ffff88811cbd1e08 [ 1809.626740][ C1] R13: dffffc0000000000 R14: 0000000000000002 R15: ffffc900001d0ba0 [ 1809.634739][ C1] FS: 00007f1e1ec146c0(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 1809.643688][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1809.650275][ C1] CR2: 00007ffcb89300b8 CR3: 0000000123d1d000 CR4: 00000000003506a0 [ 1809.658269][ C1] DR0: 0000000000000000 DR1: 0000000000002f99 DR2: 0000000000000000 [ 1809.666261][ C1] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 1809.674237][ C1] Call Trace: [ 1809.677604][ C1] [ 1809.680448][ C1] tipc_crypto_xmit+0x1938/0x2400 [ 1809.682078][T19986] loop0: detected capacity change from 0 to 128 [ 1809.685517][ C1] ? tipc_crypto_do_cmd+0xcf0/0xcf0 [ 1809.685547][ C1] ? __copy_skb_header+0x437/0x600 [ 1809.685566][ C1] tipc_bearer_xmit_skb+0x226/0x360 [ 1809.707237][ C1] ? __skb_clone+0x47a/0x790 [ 1809.711838][ C1] ? tipc_bearer_mtu+0x160/0x160 [ 1809.716777][ C1] ? skb_clone+0x202/0x360 [ 1809.721206][ C1] tipc_disc_timeout+0x6a2/0x830 [ 1809.726142][ C1] ? tipc_disc_init_msg+0x600/0x600 [ 1809.731344][ C1] ? __kasan_check_write+0x14/0x20 [ 1809.736451][ C1] ? _raw_spin_lock_irqsave+0x110/0x110 [ 1809.742007][ C1] ? tipc_disc_init_msg+0x600/0x600 [ 1809.747208][ C1] call_timer_fn+0x38/0x290 [ 1809.751722][ C1] ? tipc_disc_init_msg+0x600/0x600 [ 1809.756919][ C1] __run_timers+0x639/0x9a0 [ 1809.761474][ C1] ? calc_index+0x200/0x200 [ 1809.765980][ C1] ? sched_clock_cpu+0x18/0x3c0 [ 1809.770838][ C1] run_timer_softirq+0x6a/0xf0 [ 1809.775631][ C1] handle_softirqs+0x250/0x560 [ 1809.780452][ C1] __irq_exit_rcu+0x52/0xf0 [ 1809.784955][ C1] irq_exit_rcu+0x9/0x10 [ 1809.789205][ C1] sysvec_apic_timer_interrupt+0xa9/0xc0 [ 1809.794838][ C1] [ 1809.797808][ C1] [ 1809.800734][ C1] asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 1809.806727][ C1] RIP: 0010:_raw_spin_unlock_irqrestore+0x56/0x80 [ 1809.813143][ C1] Code: 39 6d 86 e8 4c 5a 01 fd 4c 89 f7 48 83 3d a9 75 c7 01 00 74 31 e8 ce 58 a9 fc 66 90 f7 c3 00 02 00 00 74 01 fb bf 01 00 00 00 75 3f a1 fc 65 8b 05 56 a9 5c 7b 85 c0 74 05 5b 41 5e 5d c3 e8 [ 1809.832794][ C1] RSP: 0018:ffffc90000c17ae8 EFLAGS: 00000206 [ 1809.838861][ C1] RAX: 0000000000000001 RBX: 0000000000000a06 RCX: dffffc0000000000 [ 1809.847029][ C1] RDX: ffffc90001a2a000 RSI: 0000000000000a06 RDI: 0000000000000001 [ 1809.855023][ C1] RBP: ffffc90000c17af8 R08: 0000000000000000 R09: 0000000000000000 [ 1809.863018][ C1] R10: fffff52000164c1a R11: 1ffff92000164c19 R12: 0000000000000002 [ 1809.871607][ C1] R13: dffffc0000000000 R14: 00000000000819b8 R15: 1ffff110250954ec [ 1809.879615][ C1] ? _raw_spin_unlock_irqrestore+0x46/0x80 [ 1809.885441][ C1] pcpu_alloc+0xb2b/0x1660 [ 1809.889912][ C1] __alloc_percpu_gfp+0x25/0x30 [ 1809.894773][ C1] bpf_map_alloc_percpu+0xc5/0x150 [ 1809.899905][ C1] htab_map_alloc+0xc1b/0x14f0 [ 1809.904757][ C1] map_create+0x455/0x21b0 [ 1809.909270][ C1] __sys_bpf+0x2cf/0x730 [ 1809.913508][ C1] ? bpf_link_show_fdinfo+0x310/0x310 [ 1809.918895][ C1] ? __kasan_check_write+0x14/0x20 [ 1809.924006][ C1] ? switch_fpu_return+0x15d/0x2c0 [ 1809.929125][ C1] __x64_sys_bpf+0x7c/0x90 [ 1809.933533][ C1] x64_sys_call+0x4b9/0x9a0 [ 1809.938044][ C1] do_syscall_64+0x4c/0xa0 [ 1809.942453][ C1] ? clear_bhb_loop+0x50/0xa0 [ 1809.947134][ C1] ? clear_bhb_loop+0x50/0xa0 [ 1809.951805][ C1] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1809.957723][ C1] RIP: 0033:0x7f1e205ab929 [ 1809.962134][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1809.981747][ C1] RSP: 002b:00007f1e1ec14038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1809.990159][ C1] RAX: ffffffffffffffda RBX: 00007f1e207d2fa0 RCX: 00007f1e205ab929 [ 1809.998142][ C1] RDX: 0000000000000050 RSI: 0000200000001340 RDI: 0000000000000000 [ 1810.006142][ C1] RBP: 00007f1e2062db39 R08: 0000000000000000 R09: 0000000000000000 [ 1810.014157][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1810.022144][ C1] R13: 0000000000000000 R14: 00007f1e207d2fa0 R15: 00007ffeb746b148 [ 1810.030138][ C1] [ 1810.033151][ C1] ---[ end trace f1e465d3fdd8dc68 ]--- [ 1810.038620][ C1] ------------[ cut here ]------------ [ 1810.044071][ C1] refcount_t: underflow; use-after-free. [ 1810.049810][ C1] WARNING: CPU: 1 PID: 19963 at lib/refcount.c:28 refcount_warn_saturate+0x120/0x1a0 [ 1810.059291][ C1] Modules linked in: [ 1810.063165][ C1] CPU: 1 PID: 19963 Comm: syz.6.5311 Tainted: G W 5.15.185-syzkaller-00032-g0d918fa8e88d #0 [ 1810.074529][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1810.084615][ C1] RIP: 0010:refcount_warn_saturate+0x120/0x1a0 [ 1810.090775][ C1] Code: 04 01 48 c7 c7 e0 f1 62 85 e8 3c ae 50 02 0f 0b eb c3 e8 e3 c8 1c ff c6 05 ef ef 99 04 01 48 c7 c7 40 f2 62 85 e8 20 ae 50 02 <0f> 0b eb a7 e8 c7 c8 1c ff c6 05 d0 ef 99 04 01 48 c7 c7 80 f1 62 [ 1810.110388][ C1] RSP: 0018:ffffc900001d09e0 EFLAGS: 00010246 [ 1810.116476][ C1] RAX: 494b6b7b1f474d00 RBX: 0000000000000003 RCX: ffff88811df393c0 [ 1810.124476][ C1] RDX: 0000000000000100 RSI: 0000000000000101 RDI: 0000000000000000 [ 1810.132498][ C1] RBP: ffffc900001d09f0 R08: dffffc0000000000 R09: fffff5200003a089 [ 1810.140549][ C1] R10: fffff5200003a089 R11: 1ffff9200003a088 R12: ffff88811cbd1e08 [ 1810.148516][ C1] R13: dffffc0000000000 R14: 0000000000000003 R15: 00000000c0000000 [ 1810.156500][ C1] FS: 00007f1e1ec146c0(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 1810.165450][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1810.172050][ C1] CR2: 00007ffcb89300b8 CR3: 0000000123d1d000 CR4: 00000000003506a0 [ 1810.180044][ C1] DR0: 0000000000000000 DR1: 0000000000002f99 DR2: 0000000000000000 [ 1810.188034][ C1] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 1810.196006][ C1] Call Trace: [ 1810.199302][ C1] [ 1810.202136][ C1] tipc_crypto_xmit+0x1a82/0x2400 [ 1810.207171][ C1] ? tipc_crypto_do_cmd+0xcf0/0xcf0 [ 1810.212365][ C1] ? __copy_skb_header+0x437/0x600 [ 1810.217511][ C1] tipc_bearer_xmit_skb+0x226/0x360 [ 1810.222724][ C1] ? __skb_clone+0x47a/0x790 [ 1810.227316][ C1] ? tipc_bearer_mtu+0x160/0x160 [ 1810.232249][ C1] ? skb_clone+0x202/0x360 [ 1810.236668][ C1] tipc_disc_timeout+0x6a2/0x830 [ 1810.241709][ C1] ? tipc_disc_init_msg+0x600/0x600 [ 1810.247018][ C1] ? __kasan_check_write+0x14/0x20 [ 1810.252154][ C1] ? _raw_spin_lock_irqsave+0x110/0x110 [ 1810.257707][ C1] ? tipc_disc_init_msg+0x600/0x600 [ 1810.262916][ C1] call_timer_fn+0x38/0x290 [ 1810.267419][ C1] ? tipc_disc_init_msg+0x600/0x600 [ 1810.272630][ C1] __run_timers+0x639/0x9a0 [ 1810.277136][ C1] ? calc_index+0x200/0x200 [ 1810.281639][ C1] ? sched_clock_cpu+0x18/0x3c0 [ 1810.286580][ C1] run_timer_softirq+0x6a/0xf0 [ 1810.291357][ C1] handle_softirqs+0x250/0x560 [ 1810.296118][ C1] __irq_exit_rcu+0x52/0xf0 [ 1810.300621][ C1] irq_exit_rcu+0x9/0x10 [ 1810.304865][ C1] sysvec_apic_timer_interrupt+0xa9/0xc0 [ 1810.310577][ C1] [ 1810.313528][ C1] [ 1810.316442][ C1] asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 1810.322435][ C1] RIP: 0010:_raw_spin_unlock_irqrestore+0x56/0x80 [ 1810.328890][ C1] Code: 39 6d 86 e8 4c 5a 01 fd 4c 89 f7 48 83 3d a9 75 c7 01 00 74 31 e8 ce 58 a9 fc 66 90 f7 c3 00 02 00 00 74 01 fb bf 01 00 00 00 75 3f a1 fc 65 8b 05 56 a9 5c 7b 85 c0 74 05 5b 41 5e 5d c3 e8 [ 1810.348516][ C1] RSP: 0018:ffffc90000c17ae8 EFLAGS: 00000206 [ 1810.354609][ C1] RAX: 0000000000000001 RBX: 0000000000000a06 RCX: dffffc0000000000 [ 1810.362575][ C1] RDX: ffffc90001a2a000 RSI: 0000000000000a06 RDI: 0000000000000001 [ 1810.370678][ C1] RBP: ffffc90000c17af8 R08: 0000000000000000 R09: 0000000000000000 [ 1810.378690][ C1] R10: fffff52000164c1a R11: 1ffff92000164c19 R12: 0000000000000002 [ 1810.386705][ C1] R13: dffffc0000000000 R14: 00000000000819b8 R15: 1ffff110250954ec [ 1810.394711][ C1] ? _raw_spin_unlock_irqrestore+0x46/0x80 [ 1810.400515][ C1] pcpu_alloc+0xb2b/0x1660 [ 1810.404947][ C1] __alloc_percpu_gfp+0x25/0x30 [ 1810.409801][ C1] bpf_map_alloc_percpu+0xc5/0x150 [ 1810.414926][ C1] htab_map_alloc+0xc1b/0x14f0 [ 1810.419716][ C1] map_create+0x455/0x21b0 [ 1810.424697][ C1] __sys_bpf+0x2cf/0x730 [ 1810.428921][ C1] ? bpf_link_show_fdinfo+0x310/0x310 [ 1810.434677][ C1] ? __kasan_check_write+0x14/0x20 [ 1810.439822][ C1] ? switch_fpu_return+0x15d/0x2c0 [ 1810.445113][ C1] __x64_sys_bpf+0x7c/0x90 [ 1810.449551][ C1] x64_sys_call+0x4b9/0x9a0 [ 1810.454066][ C1] do_syscall_64+0x4c/0xa0 [ 1810.458493][ C1] ? clear_bhb_loop+0x50/0xa0 [ 1810.463165][ C1] ? clear_bhb_loop+0x50/0xa0 [ 1810.467853][ C1] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1810.473752][ C1] RIP: 0033:0x7f1e205ab929 [ 1810.478175][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1810.497916][ C1] RSP: 002b:00007f1e1ec14038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1810.506450][ C1] RAX: ffffffffffffffda RBX: 00007f1e207d2fa0 RCX: 00007f1e205ab929 [ 1810.514443][ C1] RDX: 0000000000000050 RSI: 0000200000001340 RDI: 0000000000000000 [ 1810.522410][ C1] RBP: 00007f1e2062db39 R08: 0000000000000000 R09: 0000000000000000 [ 1810.530533][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1810.538505][ C1] R13: 0000000000000000 R14: 00007f1e207d2fa0 R15: 00007ffeb746b148 [ 1810.546504][ C1] [ 1810.549533][ C1] ---[ end trace f1e465d3fdd8dc69 ]--- [ 1810.555593][ C1] ------------[ cut here ]------------ [ 1810.561062][ C1] refcount_t: saturated; leaking memory. [ 1810.566734][ C1] WARNING: CPU: 1 PID: 19963 at lib/refcount.c:22 refcount_warn_saturate+0x158/0x1a0 [ 1810.576194][ C1] Modules linked in: [ 1810.580106][ C1] CPU: 1 PID: 19963 Comm: syz.6.5311 Tainted: G W 5.15.185-syzkaller-00032-g0d918fa8e88d #0 [ 1810.591479][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1810.601557][ C1] RIP: 0010:refcount_warn_saturate+0x158/0x1a0 [ 1810.607730][ C1] Code: 04 01 48 c7 c7 80 f1 62 85 e8 04 ae 50 02 0f 0b eb 8b e8 ab c8 1c ff c6 05 b5 ef 99 04 01 48 c7 c7 80 f1 62 85 e8 e8 ad 50 02 <0f> 0b e9 6c ff ff ff e8 8c c8 1c ff c6 05 9a ef 99 04 01 48 c7 c7 [ 1810.627349][ C1] RSP: 0018:ffffc900001d09e0 EFLAGS: 00010246 [ 1810.633409][ C1] RAX: 494b6b7b1f474d00 RBX: 0000000000000001 RCX: ffff88811df393c0 [ 1810.641386][ C1] RDX: 0000000000000100 RSI: 0000000000000101 RDI: 0000000000000000 [ 1810.649392][ C1] RBP: ffffc900001d09f0 R08: dffffc0000000000 R09: ffffed103ee24e93 [ 1810.657383][ C1] R10: ffffed103ee24e93 R11: 1ffff1103ee24e92 R12: ffff88811cbd1e08 [ 1810.665381][ C1] R13: dffffc0000000000 R14: 0000000000000001 R15: ffffc900001d0ba0 [ 1810.673369][ C1] FS: 00007f1e1ec146c0(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 1810.682324][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1810.688901][ C1] CR2: 00007ffcb89300b8 CR3: 0000000123d1d000 CR4: 00000000003506a0 [ 1810.696896][ C1] DR0: 0000000000000000 DR1: 0000000000002f99 DR2: 0000000000000000 [ 1810.704888][ C1] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 1810.712871][ C1] Call Trace: [ 1810.716143][ C1] [ 1810.718986][ C1] tipc_crypto_xmit+0x1938/0x2400 [ 1810.724338][ C1] ? tipc_crypto_do_cmd+0xcf0/0xcf0 [ 1810.729551][ C1] ? __copy_skb_header+0x437/0x600 [ 1810.734667][ C1] tipc_bearer_xmit_skb+0x226/0x360 [ 1810.739877][ C1] ? __skb_clone+0x47a/0x790 [ 1810.744564][ C1] ? tipc_bearer_mtu+0x160/0x160 [ 1810.749548][ C1] ? skb_clone+0x202/0x360 [ 1810.753963][ C1] tipc_disc_timeout+0x6a2/0x830 [ 1810.758908][ C1] ? __kasan_check_write+0x14/0x20 [ 1810.764019][ C1] ? tipc_disc_init_msg+0x600/0x600 [ 1810.769226][ C1] ? _find_next_bit+0x106/0x200 [ 1810.774113][ C1] ? tipc_disc_init_msg+0x600/0x600 [ 1810.779315][ C1] call_timer_fn+0x38/0x290 [ 1810.783836][ C1] ? tipc_disc_init_msg+0x600/0x600 [ 1810.789030][ C1] __run_timers+0x639/0x9a0 [ 1810.793543][ C1] ? calc_index+0x200/0x200 [ 1810.798040][ C1] ? sched_clock_cpu+0x18/0x3c0 [ 1810.802903][ C1] run_timer_softirq+0x6a/0xf0 [ 1810.807665][ C1] handle_softirqs+0x250/0x560 [ 1810.812437][ C1] __irq_exit_rcu+0x52/0xf0 [ 1810.816937][ C1] irq_exit_rcu+0x9/0x10 [ 1810.821181][ C1] sysvec_apic_timer_interrupt+0xa9/0xc0 [ 1810.827155][ C1] [ 1810.830096][ C1] [ 1810.833014][ C1] asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 1810.838970][ C1] RIP: 0010:_raw_spin_unlock_irqrestore+0x56/0x80 [ 1810.845389][ C1] Code: 39 6d 86 e8 4c 5a 01 fd 4c 89 f7 48 83 3d a9 75 c7 01 00 74 31 e8 ce 58 a9 fc 66 90 f7 c3 00 02 00 00 74 01 fb bf 01 00 00 00 75 3f a1 fc 65 8b 05 56 a9 5c 7b 85 c0 74 05 5b 41 5e 5d c3 e8 [ 1810.865021][ C1] RSP: 0018:ffffc90000c17ae8 EFLAGS: 00000206 [ 1810.871106][ C1] RAX: 0000000000000001 RBX: 0000000000000a06 RCX: dffffc0000000000 [ 1810.879105][ C1] RDX: ffffc90001a2a000 RSI: 0000000000000a06 RDI: 0000000000000001 [ 1810.887142][ C1] RBP: ffffc90000c17af8 R08: 0000000000000000 R09: 0000000000000000 [ 1810.895130][ C1] R10: fffff52000164c1a R11: 1ffff92000164c19 R12: 0000000000000002 [ 1810.903109][ C1] R13: dffffc0000000000 R14: 00000000000819b8 R15: 1ffff110250954ec [ 1810.911377][ C1] ? _raw_spin_unlock_irqrestore+0x46/0x80 [ 1810.917212][ C1] pcpu_alloc+0xb2b/0x1660 [ 1810.921634][ C1] __alloc_percpu_gfp+0x25/0x30 [ 1810.926548][ C1] bpf_map_alloc_percpu+0xc5/0x150 [ 1810.931666][ C1] htab_map_alloc+0xc1b/0x14f0 [ 1810.936462][ C1] map_create+0x455/0x21b0 [ 1810.940876][ C1] __sys_bpf+0x2cf/0x730 [ 1810.945262][ C1] ? bpf_link_show_fdinfo+0x310/0x310 [ 1810.950637][ C1] ? __kasan_check_write+0x14/0x20 [ 1810.955765][ C1] ? switch_fpu_return+0x15d/0x2c0 [ 1810.960899][ C1] __x64_sys_bpf+0x7c/0x90 [ 1810.965312][ C1] x64_sys_call+0x4b9/0x9a0 [ 1810.969794][ C1] do_syscall_64+0x4c/0xa0 [ 1810.974208][ C1] ? clear_bhb_loop+0x50/0xa0 [ 1810.978878][ C1] ? clear_bhb_loop+0x50/0xa0 [ 1810.983559][ C1] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1810.989476][ C1] RIP: 0033:0x7f1e205ab929 [ 1810.993896][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1811.013573][ C1] RSP: 002b:00007f1e1ec14038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1811.022053][ C1] RAX: ffffffffffffffda RBX: 00007f1e207d2fa0 RCX: 00007f1e205ab929 [ 1811.030046][ C1] RDX: 0000000000000050 RSI: 0000200000001340 RDI: 0000000000000000 [ 1811.038037][ C1] RBP: 00007f1e2062db39 R08: 0000000000000000 R09: 0000000000000000 [ 1811.046025][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1811.054004][ C1] R13: 0000000000000000 R14: 00007f1e207d2fa0 R15: 00007ffeb746b148 [ 1811.061975][ C1] [ 1811.065001][ C1] ---[ end trace f1e465d3fdd8dc6a ]--- [ 1811.162703][T19998] loop7: detected capacity change from 0 to 512 [ 1811.419771][T20001] loop6: detected capacity change from 0 to 512 [ 1811.998561][T20001] EXT4-fs (loop6): orphan cleanup on readonly fs [ 1812.007785][T20001] EXT4-fs error (device loop6): ext4_validate_block_bitmap:438: comm syz.6.5320: bg 0: block 248: padding at end of block bitmap is not set [ 1812.026176][T19998] EXT4-fs (loop7): orphan cleanup on readonly fs [ 1812.035436][T19998] EXT4-fs error (device loop7): ext4_validate_block_bitmap:438: comm syz.7.5317: bg 0: block 248: padding at end of block bitmap is not set [ 1812.051926][T20001] Quota error (device loop6): write_blk: dquota write failed [ 1812.059492][T20001] Quota error (device loop6): qtree_write_dquot: Error -117 occurred while creating quota [ 1812.069528][T20001] EXT4-fs error (device loop6): ext4_acquire_dquot:6195: comm syz.6.5320: Failed to acquire dquot type 1 [ 1812.083485][T19998] Quota error (device loop7): write_blk: dquota write failed [ 1812.091216][T19998] Quota error (device loop7): qtree_write_dquot: Error -117 occurred while creating quota [ 1812.101236][T19998] EXT4-fs error (device loop7): ext4_acquire_dquot:6195: comm syz.7.5317: Failed to acquire dquot type 1 [ 1812.116253][T20001] EXT4-fs (loop6): 1 truncate cleaned up [ 1812.128639][T19998] EXT4-fs (loop7): 1 truncate cleaned up [ 1812.142639][T20001] EXT4-fs (loop6): mounted filesystem without journal. Opts: bsdgroups,nodiscard,noblock_validity,grpjquota=,grpjquota=,noquota,auto_da_alloc,noload,nodiscard,,errors=continue. Quota mode: writeback. [ 1812.164023][T19998] EXT4-fs (loop7): mounted filesystem without journal. Opts: bsdgroups,nodiscard,noblock_validity,grpjquota=,grpjquota=,noquota,auto_da_alloc,noload,nodiscard,,errors=continue. Quota mode: writeback. [ 1813.294254][ T1776] device bridge_slave_1 left promiscuous mode [ 1813.309541][ T1776] bridge0: port 2(bridge_slave_1) entered disabled state [ 1813.332833][ T1776] device bridge_slave_0 left promiscuous mode [ 1813.358783][ T1776] bridge0: port 1(bridge_slave_0) entered disabled state [ 1813.412459][T20019] loop7: detected capacity change from 0 to 512 [ 1813.467478][T20019] EXT4-fs (loop7): orphan cleanup on readonly fs [ 1813.477598][T20019] EXT4-fs error (device loop7): ext4_validate_block_bitmap:438: comm syz.7.5323: bg 0: block 248: padding at end of block bitmap is not set [ 1813.492894][T20019] Quota error (device loop7): write_blk: dquota write failed [ 1813.500473][T20019] Quota error (device loop7): qtree_write_dquot: Error -117 occurred while creating quota [ 1813.510595][T20019] EXT4-fs error (device loop7): ext4_acquire_dquot:6195: comm syz.7.5323: Failed to acquire dquot type 1 [ 1813.523937][T20019] EXT4-fs (loop7): 1 truncate cleaned up [ 1813.531746][T20019] EXT4-fs (loop7): mounted filesystem without journal. Opts: bsdgroups,nodiscard,noblock_validity,grpjquota=,grpjquota=,noquota,auto_da_alloc,noload,nodiscard,,errors=continue. Quota mode: writeback. [ 1813.696754][ T1776] device veth1_macvtap left promiscuous mode [ 1814.064543][T20020] loop6: detected capacity change from 0 to 1024 [ 1814.130502][T20020] EXT4-fs (loop6): Ignoring removed orlov option [ 1814.158727][T20020] EXT4-fs (loop6): mounted filesystem without journal. Opts: jqfmt=vfsv1,bsddf,quota,noauto_da_alloc,debug_want_extra_isize=0x0000000000000080,lazytime,noauto_da_alloc,stripe=0x0000000000000005,orlov,,errors=continue. Quota mode: writeback. [ 1814.408643][T11323] usb 6-1: new full-speed USB device number 7 using dummy_hcd [ 1814.452765][T20026] bridge0: port 1(bridge_slave_0) entered blocking state [ 1814.459922][T20026] bridge0: port 1(bridge_slave_0) entered disabled state [ 1814.475437][T20026] device bridge_slave_0 entered promiscuous mode [ 1814.521321][T20026] bridge0: port 2(bridge_slave_1) entered blocking state [ 1814.528462][T20026] bridge0: port 2(bridge_slave_1) entered disabled state [ 1814.536195][T20026] device bridge_slave_1 entered promiscuous mode [ 1814.741548][T20026] bridge0: port 2(bridge_slave_1) entered blocking state [ 1814.748641][T20026] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1814.755955][T20026] bridge0: port 1(bridge_slave_0) entered blocking state [ 1814.762974][T20026] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1814.836465][T14879] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1814.844604][T14879] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1814.853079][T14879] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1814.863934][T14879] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1814.872419][T14879] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1814.902730][T14879] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1814.920253][T20026] device veth0_vlan entered promiscuous mode [ 1814.926616][T14879] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1814.934771][T14879] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1814.942656][T14879] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1814.956667][T14561] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1815.008938][T20026] device veth1_macvtap entered promiscuous mode [ 1815.067189][T14879] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1815.092977][T14879] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1815.343271][T20061] loop0: detected capacity change from 0 to 512 [ 1815.454890][T11323] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1815.465622][ T1776] tipc: Disabling bearer [ 1815.471454][ T1776] tipc: Left network mode [ 1815.535545][T20061] EXT4-fs (loop0): orphan cleanup on readonly fs [ 1815.553919][T20061] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.5334: bg 0: block 248: padding at end of block bitmap is not set [ 1815.571612][T20061] Quota error (device loop0): write_blk: dquota write failed [ 1815.579516][T20061] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 1815.590296][T20061] EXT4-fs error (device loop0): ext4_acquire_dquot:6195: comm syz.0.5334: Failed to acquire dquot type 1 [ 1815.606802][T20061] EXT4-fs (loop0): 1 truncate cleaned up [ 1815.696695][T20061] EXT4-fs (loop0): mounted filesystem without journal. Opts: bsdgroups,nodiscard,noblock_validity,grpjquota=,grpjquota=,noquota,auto_da_alloc,noload,nodiscard,,errors=continue. Quota mode: writeback. [ 1815.746853][ T1776] ------------[ cut here ]------------ [ 1815.766555][ T1776] refcount_t: saturated; leaking memory. [ 1815.824121][ T1776] WARNING: CPU: 0 PID: 1776 at lib/refcount.c:19 refcount_warn_saturate+0x13c/0x1a0 [ 1815.901807][T20066] loop6: detected capacity change from 0 to 1024 [ 1815.919501][T11323] usb 6-1: New USB device found, idVendor=4752, idProduct=0011, bcdDevice=32.4f [ 1815.934976][T11323] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1815.949215][ T30] audit: type=1326 audit(2000000330.474:1786): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20068 comm="syz.1.5324" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7842cb4929 code=0x7ffc0000 [ 1816.015052][ T1776] Modules linked in: [ 1816.039509][T11323] usb 6-1: Product: syz [ 1816.044081][ T1776] CPU: 0 PID: 1776 Comm: kworker/u4:9 Tainted: G W 5.15.185-syzkaller-00032-g0d918fa8e88d #0 [ 1816.056219][T20066] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 1816.071592][T11323] usb 6-1: Manufacturer: syz [ 1816.078694][T11323] usb 6-1: SerialNumber: syz [ 1816.087048][ T30] audit: type=1326 audit(2000000330.496:1787): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20068 comm="syz.1.5324" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7842cb4929 code=0x7ffc0000 [ 1816.096908][ T1776] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1816.130728][ T1776] Workqueue: netns cleanup_net [ 1816.136386][ T1776] RIP: 0010:refcount_warn_saturate+0x13c/0x1a0 [ 1816.142638][ T1776] Code: 04 01 48 c7 c7 40 f2 62 85 e8 20 ae 50 02 0f 0b eb a7 e8 c7 c8 1c ff c6 05 d0 ef 99 04 01 48 c7 c7 80 f1 62 85 e8 04 ae 50 02 <0f> 0b eb 8b e8 ab c8 1c ff c6 05 b5 ef 99 04 01 48 c7 c7 80 f1 62 [ 1816.162470][ T1776] RSP: 0018:ffffc90000c077c0 EFLAGS: 00010246 [ 1816.168542][ T1776] RAX: 8c2089c10966c500 RBX: 0000000000000000 RCX: ffff88811b5013c0 [ 1816.201671][T11323] usb 6-1: config 0 descriptor?? [ 1816.242218][ T1776] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1816.260187][ T1776] RBP: ffffc90000c077d0 R08: dffffc0000000000 R09: ffffed103ee065e8 [ 1816.266753][T11323] hub 6-1:0.0: bad descriptor, ignoring hub [ 1816.286765][T11323] hub: probe of 6-1:0.0 failed with error -5 [ 1816.293285][T11323] snd-usb-audio: probe of 6-1:0.0 failed with error -2 [ 1816.300223][ T1776] R10: ffffed103ee065e8 R11: 1ffff1103ee065e7 R12: 1ffff92000180f04 [ 1816.320926][ T1776] R13: ffff88812047808c R14: 0000000000000000 R15: 0000000000000cc0 [ 1816.328980][ T1776] FS: 0000000000000000(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 1816.502989][ T1776] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1816.517312][ T1776] CR2: 0000200000005038 CR3: 000000011cc0f000 CR4: 00000000003506b0 [ 1816.531882][ T1776] DR0: 0000000000000000 DR1: 0000000000002f99 DR2: 0000000000000000 [ 1816.549366][ T1776] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 1816.587982][ T1776] Call Trace: [ 1816.591391][ T1776] [ 1816.594323][ T1776] nf_nat_masq_schedule+0x439/0x4c0 [ 1816.604405][ T1776] ? nf_nat_masq_schedule+0x4c0/0x4c0 [ 1816.609900][ T1776] ? masq_device_event+0xd0/0xd0 [ 1816.614865][ T1776] ? nfqnl_rcv_dev_event+0x441/0x470 [ 1816.620188][ T1776] ? __kasan_check_read+0x11/0x20 [ 1816.625260][ T1776] masq_device_event+0x9b/0xd0 [ 1816.909558][T20088] loop7: detected capacity change from 0 to 512 [ 1816.934694][ T30] kauditd_printk_skb: 30 callbacks suppressed [ 1816.934736][ T30] audit: type=1326 audit(2000000331.515:1818): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20068 comm="syz.1.5324" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7842cb4929 code=0x7ffc0000 [ 1816.976976][ T1776] raw_notifier_call_chain+0x90/0x100 [ 1816.986109][ T1776] dev_close_many+0x32d/0x4d0 [ 1816.991267][ T1776] ? __dev_open+0x4c0/0x4c0 [ 1816.996037][ T1776] ? __kasan_check_read+0x11/0x20 [ 1817.028914][ T1776] unregister_netdevice_many+0x44c/0x1990 [ 1817.042754][ T30] audit: type=1326 audit(2000000331.526:1819): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20068 comm="syz.1.5324" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7842cb4929 code=0x7ffc0000 [ 1817.101037][T20090] loop0: detected capacity change from 0 to 512 [ 1817.108309][ T1776] ? __cond_resched+0xb0/0xb0 [ 1817.113637][ T1776] ? alloc_netdev_mqs+0xc90/0xc90 [ 1817.119017][ T1776] ? irqentry_exit+0x37/0x40 [ 1817.124623][ T1776] ? sysvec_reschedule_ipi+0x78/0x80 [ 1817.130136][ T1776] ? asm_sysvec_reschedule_ipi+0x1b/0x20 [ 1817.136262][ T1776] ip6gre_exit_batch_net+0x5a5/0x5f0 [ 1817.142452][ T1776] ? ip6gre_init_net+0x340/0x340 [ 1817.147471][ T1776] ? ip6gre_init_net+0x340/0x340 [ 1817.153151][ T1776] cleanup_net+0x602/0xad0 [ 1817.157637][ T1776] ? ops_init+0x4a0/0x4a0 [ 1817.162765][ T1776] ? pwq_dec_nr_in_flight+0x18c/0x3c0 [ 1817.168611][ T1776] process_one_work+0x6be/0xba0 [ 1817.173700][ T1776] worker_thread+0xa59/0x1200 [ 1817.179183][ T1776] kthread+0x411/0x500 [ 1817.183498][ T1776] ? worker_clr_flags+0x190/0x190 [ 1817.189069][ T1776] ? kthread_blkcg+0xd0/0xd0 [ 1817.193888][ T1776] ret_from_fork+0x1f/0x30 [ 1817.198985][ T1776] [ 1817.202070][ T1776] ---[ end trace f1e465d3fdd8dc6b ]--- [ 1817.981076][T20090] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 1817.982946][T20088] EXT4-fs (loop7): orphan cleanup on readonly fs [ 1817.997406][T20088] EXT4-fs error (device loop7): ext4_validate_block_bitmap:438: comm syz.7.5339: bg 0: block 248: padding at end of block bitmap is not set [ 1818.012544][T20088] Quota error (device loop7): write_blk: dquota write failed [ 1818.019991][T20088] Quota error (device loop7): qtree_write_dquot: Error -117 occurred while creating quota [ 1818.022813][T20090] EXT4-fs (loop0): inodes count not valid: 32 vs 64 [ 1818.030113][T20088] EXT4-fs error (device loop7): ext4_acquire_dquot:6195: comm syz.7.5339: Failed to acquire dquot type 1 [ 1818.049042][T20088] EXT4-fs (loop7): 1 truncate cleaned up [ 1818.055056][T20088] EXT4-fs (loop7): mounted filesystem without journal. Opts: bsdgroups,nodiscard,noblock_validity,grpjquota=,grpjquota=,noquota,auto_da_alloc,noload,nodiscard,,errors=continue. Quota mode: writeback. [ 1818.106082][T20101] loop5: detected capacity change from 0 to 512 [ 1818.117360][T20102] loop6: detected capacity change from 0 to 512 [ 1818.128468][T20101] EXT4-fs (loop5): Ignoring removed mblk_io_submit option [ 1818.145772][T20101] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 1818.204324][T20101] EXT4-fs (loop5): 1 truncate cleaned up [ 1818.212108][T20101] EXT4-fs (loop5): mounted filesystem without journal. Opts: i_version,mblk_io_submit,debug_want_extra_isize=0x0000000000000068,lazytime,block_validity,data_err=abort,,errors=continue. Quota mode: none. [ 1818.226325][ T2442] usb 6-1: USB disconnect, device number 7 [ 1818.241410][T20102] EXT4-fs (loop6): orphan cleanup on readonly fs [ 1818.271491][T20102] EXT4-fs error (device loop6): ext4_validate_block_bitmap:438: comm syz.6.5340: bg 0: block 248: padding at end of block bitmap is not set [ 1818.575860][T20102] Quota error (device loop6): write_blk: dquota write failed [ 1818.598121][T20102] Quota error (device loop6): qtree_write_dquot: Error -117 occurred while creating quota [ 1818.630020][T20102] EXT4-fs error (device loop6): ext4_acquire_dquot:6195: comm syz.6.5340: Failed to acquire dquot type 1 [ 1818.716903][T20102] EXT4-fs (loop6): 1 truncate cleaned up [ 1818.722940][T20102] EXT4-fs (loop6): mounted filesystem without journal. Opts: bsdgroups,nodiscard,noblock_validity,grpjquota=,grpjquota=,noquota,auto_da_alloc,noload,nodiscard,,errors=continue. Quota mode: writeback. [ 1819.434230][ T1776] device bridge_slave_1 left promiscuous mode [ 1819.448734][ T1776] bridge0: port 2(bridge_slave_1) entered disabled state [ 1819.489475][ T1776] device bridge_slave_0 left promiscuous mode [ 1819.495637][ T1776] bridge0: port 1(bridge_slave_0) entered disabled state [ 1819.518991][ T1776] device bridge_slave_1 left promiscuous mode [ 1819.525284][ T1776] bridge0: port 2(bridge_slave_1) entered disabled state [ 1819.543003][ T1776] device bridge_slave_0 left promiscuous mode [ 1819.544794][T20130] loop1: detected capacity change from 0 to 1024 [ 1819.551361][ T1776] bridge0: port 1(bridge_slave_0) entered disabled state [ 1819.564148][ T1776] device veth1_macvtap left promiscuous mode [ 1819.570273][ T1776] device veth0_vlan left promiscuous mode [ 1819.576484][ T1776] device veth1_macvtap left promiscuous mode [ 1819.626569][T20130] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 1820.293480][T20123] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5349'. [ 1820.744147][ T30] audit: type=1400 audit(2000000335.613:1820): avc: denied { listen } for pid=20137 comm="syz.5.5353" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1820.766166][T20026] EXT4-fs error (device loop1): ext4_readdir:263: inode #2: block 16: comm syz-executor: path /3/file1: bad entry in directory: inode out of bounds - offset=0, inode=1538, rec_len=12, size=1024 fake=1 [ 1820.901700][T20149] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1820.988277][T20154] loop0: detected capacity change from 0 to 512 [ 1821.005855][T20139] loop7: detected capacity change from 0 to 40427 [ 1821.026893][T20154] EXT4-fs (loop0): Mount option "journal_checksum" incompatible with ext3 [ 1821.181774][T20139] F2FS-fs (loop7): invalid crc value [ 1821.259992][T20139] F2FS-fs (loop7): Found nat_bits in checkpoint [ 1821.305880][T20139] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5 [ 1821.343300][T20139] overlayfs: failed to resolve './file1': -2 [ 1821.363107][T20168] loop0: detected capacity change from 0 to 512 [ 1821.393752][T20171] 9pnet: Insufficient options for proto=fd [ 1821.413837][T20168] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.5364: bg 0: block 393: padding at end of block bitmap is not set [ 1821.428571][T20177] device wg2 entered promiscuous mode [ 1821.430101][T20168] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6183: Corrupt filesystem [ 1821.443626][T20166] bridge0: port 1(bridge_slave_0) entered blocking state [ 1821.443958][T20168] EXT4-fs (loop0): 2 truncates cleaned up [ 1821.455940][T20166] bridge0: port 1(bridge_slave_0) entered disabled state [ 1821.460629][T20168] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 1821.466138][T20166] device bridge_slave_0 entered promiscuous mode [ 1821.484610][T20166] bridge0: port 2(bridge_slave_1) entered blocking state [ 1821.494215][T20185] loop6: detected capacity change from 0 to 512 [ 1821.495046][T20166] bridge0: port 2(bridge_slave_1) entered disabled state [ 1821.508025][T20166] device bridge_slave_1 entered promiscuous mode [ 1821.517869][T20168] EXT4-fs error (device loop0): ext4_find_dest_de:2115: inode #12: block 7: comm syz.0.5364: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=4278190093, rec_len=255, size=56 fake=0 [ 1821.537063][T20168] incfs: Can't find or create .index dir in ./file0 [ 1821.543808][T20168] incfs: mount failed -117 [ 1821.550573][ T30] audit: type=1400 audit(2000000336.482:1821): avc: denied { ioctl } for pid=20165 comm="syz.0.5364" path="socket:[79819]" dev="sockfs" ino=79819 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1821.575632][ T30] audit: type=1400 audit(2000000336.482:1822): avc: denied { write } for pid=20165 comm="syz.0.5364" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1821.582675][T20185] Quota error (device loop6): v2_read_file_info: Can't read info structure [ 1821.605077][T20185] EXT4-fs warning (device loop6): ext4_enable_quotas:6447: Failed to enable quota tracking (type=0, err=-5, ino=3). Please run e2fsck to fix. [ 1821.620382][T20185] EXT4-fs (loop6): mount failed [ 1821.660202][T20166] bridge0: port 2(bridge_slave_1) entered blocking state [ 1821.667271][T20166] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1821.672127][ T30] audit: type=1400 audit(2000000336.611:1823): avc: denied { rename } for pid=20184 comm="syz.6.5368" name="file1" dev="incremental-fs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1821.674594][T20166] bridge0: port 1(bridge_slave_0) entered blocking state [ 1821.674610][T20166] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1821.725960][T14879] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1821.733980][T14879] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1821.742701][T14879] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1821.763427][T14879] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1821.774765][T14879] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1821.785856][T14879] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1821.794816][T14879] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1821.803321][T14879] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1821.811175][T14879] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1821.823641][T20166] device veth0_vlan entered promiscuous mode [ 1821.842124][T20197] loop6: detected capacity change from 0 to 512 [ 1821.851754][T14879] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1821.866481][T20166] device veth1_macvtap entered promiscuous mode [ 1821.883940][T14879] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1821.884614][T20197] EXT4-fs (loop6): Mount option "journal_checksum" incompatible with ext3 [ 1821.904567][T20201] loop5: detected capacity change from 0 to 512 [ 1821.911619][T14879] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1821.965245][T20201] EXT4-fs (loop5): orphan cleanup on readonly fs [ 1821.981098][T20201] EXT4-fs error (device loop5): ext4_validate_block_bitmap:438: comm syz.5.5371: bg 0: block 248: padding at end of block bitmap is not set [ 1821.996005][T20201] Quota error (device loop5): write_blk: dquota write failed [ 1822.003536][T20201] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota [ 1822.158764][T20201] EXT4-fs error (device loop5): ext4_acquire_dquot:6195: comm syz.5.5371: Failed to acquire dquot type 1 [ 1822.246296][T20201] EXT4-fs (loop5): 1 truncate cleaned up [ 1822.281538][T20201] EXT4-fs (loop5): mounted filesystem without journal. Opts: bsdgroups,nodiscard,noblock_validity,grpjquota=,grpjquota=,noquota,auto_da_alloc,noload,nodiscard,,errors=continue. Quota mode: writeback. [ 1822.453058][ T1776] device bridge_slave_1 left promiscuous mode [ 1822.461353][ T1776] bridge0: port 2(bridge_slave_1) entered disabled state [ 1822.476989][T20213] FAULT_INJECTION: forcing a failure. [ 1822.476989][T20213] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1822.491719][ T30] audit: type=1400 audit(2000000337.491:1824): avc: denied { mount } for pid=20210 comm="syz.6.5376" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 1822.524776][ T1776] device bridge_slave_0 left promiscuous mode [ 1822.543532][ T1776] bridge0: port 1(bridge_slave_0) entered disabled state [ 1822.554886][T20213] CPU: 1 PID: 20213 Comm: syz.0.5375 Tainted: G W 5.15.185-syzkaller-00032-g0d918fa8e88d #0 [ 1822.566268][T20213] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1822.576318][T20213] Call Trace: [ 1822.579597][T20213] [ 1822.582519][T20213] __dump_stack+0x21/0x30 [ 1822.586851][T20213] dump_stack_lvl+0xee/0x150 [ 1822.591437][T20213] ? show_regs_print_info+0x20/0x20 [ 1822.596634][T20213] dump_stack+0x15/0x20 [ 1822.600791][T20213] should_fail+0x3c1/0x510 [ 1822.605211][T20213] should_fail_usercopy+0x1a/0x20 [ 1822.610235][T20213] strncpy_from_user+0x24/0x2e0 [ 1822.615081][T20213] ? kmem_cache_alloc+0xf7/0x260 [ 1822.620016][T20213] getname_flags+0xf4/0x500 [ 1822.624511][T20213] user_path_at_empty+0x30/0x1c0 [ 1822.629442][T20213] path_listxattr+0x9f/0x1b0 [ 1822.634022][T20213] ? getxattr+0x370/0x370 [ 1822.638345][T20213] ? debug_smp_processor_id+0x17/0x20 [ 1822.643707][T20213] __x64_sys_listxattr+0x80/0x90 [ 1822.648641][T20213] x64_sys_call+0xd7/0x9a0 [ 1822.653047][T20213] do_syscall_64+0x4c/0xa0 [ 1822.657460][T20213] ? clear_bhb_loop+0x50/0xa0 [ 1822.662123][T20213] ? clear_bhb_loop+0x50/0xa0 [ 1822.666795][T20213] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1822.672683][T20213] RIP: 0033:0x7f54d5aa1929 [ 1822.677097][T20213] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1822.696696][T20213] RSP: 002b:00007f54d410a038 EFLAGS: 00000246 ORIG_RAX: 00000000000000c2 [ 1822.705115][T20213] RAX: ffffffffffffffda RBX: 00007f54d5cc8fa0 RCX: 00007f54d5aa1929 [ 1822.713079][T20213] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000100 [ 1822.721042][T20213] RBP: 00007f54d410a090 R08: 0000000000000000 R09: 0000000000000000 [ 1822.729004][T20213] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1822.736976][T20213] R13: 0000000000000000 R14: 00007f54d5cc8fa0 R15: 00007ffcb892fe38 [ 1822.744946][T20213] [ 1822.757169][ T1776] device veth1_macvtap left promiscuous mode [ 1822.778514][ T1776] device veth0_vlan left promiscuous mode [ 1822.807075][T20216] loop3: detected capacity change from 0 to 512 [ 1822.972302][ T30] audit: type=1400 audit(2000000338.006:1825): avc: denied { map } for pid=20219 comm="syz.3.5379" path="socket:[80995]" dev="sockfs" ino=80995 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1823.026415][ T30] audit: type=1400 audit(2000000338.006:1826): avc: denied { read } for pid=20219 comm="syz.3.5379" path="socket:[80995]" dev="sockfs" ino=80995 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1823.252907][T20230] loop3: detected capacity change from 0 to 512 [ 1823.274766][T20230] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 1823.293695][T20230] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 18 vs 41 free clusters [ 1823.308572][T20230] Quota error (device loop3): write_blk: dquota write failed [ 1823.316092][T20230] Quota error (device loop3): find_free_dqentry: Can't write quota data block 5 [ 1823.325569][T20230] Quota error (device loop3): write_blk: dquota write failed [ 1823.333745][T20230] Quota error (device loop3): qtree_write_dquot: Error -28 occurred while creating quota [ 1823.343844][T20230] EXT4-fs error (device loop3): ext4_acquire_dquot:6195: comm syz.3.5382: Failed to acquire dquot type 1 [ 1823.355624][T20230] EXT4-fs (loop3): 1 truncate cleaned up [ 1823.361770][T20230] EXT4-fs (loop3): mounted filesystem without journal. Opts: usrjquota=,noblock_validity,max_dir_size_kb=0x000000000181fffc,inlinecrypt,journal_ioprio=0x0000000000000007,discard,nobarrier,dioread_nolock,resgid=0x000000000000ee002,errors=continue. Quota mode: writeback. [ 1823.431497][ T1776] ================================================================== [ 1823.439593][ T1776] BUG: KASAN: use-after-free in tcp_metrics_flush_all+0xd3/0x210 [ 1823.447309][ T1776] Read of size 4 at addr ffff88812047808c by task kworker/u4:9/1776 [ 1823.455278][ T1776] [ 1823.457596][ T1776] CPU: 0 PID: 1776 Comm: kworker/u4:9 Tainted: G W 5.15.185-syzkaller-00032-g0d918fa8e88d #0 [ 1823.469023][ T1776] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1823.479057][ T1776] Workqueue: netns cleanup_net [ 1823.483893][ T1776] Call Trace: [ 1823.487148][ T1776] [ 1823.490072][ T1776] __dump_stack+0x21/0x30 [ 1823.494381][ T1776] dump_stack_lvl+0xee/0x150 [ 1823.498954][ T1776] ? show_regs_print_info+0x20/0x20 [ 1823.504128][ T1776] ? load_image+0x3a0/0x3a0 [ 1823.508678][ T1776] ? _raw_spin_lock_bh+0x81/0xe0 [ 1823.513591][ T1776] print_address_description+0x7f/0x2c0 [ 1823.519114][ T1776] ? tcp_metrics_flush_all+0xd3/0x210 [ 1823.524464][ T1776] kasan_report+0xf1/0x140 [ 1823.528858][ T1776] ? _raw_spin_lock_bh+0x8e/0xe0 [ 1823.533775][ T1776] ? tcp_metrics_flush_all+0xd3/0x210 [ 1823.539128][ T1776] kasan_check_range+0x280/0x290 [ 1823.544044][ T1776] __kasan_check_read+0x11/0x20 [ 1823.548872][ T1776] tcp_metrics_flush_all+0xd3/0x210 [ 1823.554049][ T1776] ? tcp_net_metrics_init+0x150/0x150 [ 1823.559406][ T1776] tcp_net_metrics_exit_batch+0x10/0x20 [ 1823.564928][ T1776] cleanup_net+0x602/0xad0 [ 1823.569320][ T1776] ? ops_init+0x4a0/0x4a0 [ 1823.573626][ T1776] ? pwq_dec_nr_in_flight+0x18c/0x3c0 [ 1823.578978][ T1776] process_one_work+0x6be/0xba0 [ 1823.583810][ T1776] worker_thread+0xa59/0x1200 [ 1823.588471][ T1776] kthread+0x411/0x500 [ 1823.592525][ T1776] ? worker_clr_flags+0x190/0x190 [ 1823.597529][ T1776] ? kthread_blkcg+0xd0/0xd0 [ 1823.602097][ T1776] ret_from_fork+0x1f/0x30 [ 1823.606506][ T1776] [ 1823.609503][ T1776] [ 1823.611804][ T1776] Allocated by task 11120: [ 1823.616190][ T1776] __kasan_slab_alloc+0xbd/0xf0 [ 1823.621021][ T1776] slab_post_alloc_hook+0x4f/0x2b0 [ 1823.626109][ T1776] kmem_cache_alloc+0xf7/0x260 [ 1823.630846][ T1776] copy_net_ns+0x145/0x5c0 [ 1823.635241][ T1776] create_new_namespaces+0x3a2/0x660 [ 1823.640501][ T1776] unshare_nsproxy_namespaces+0x120/0x170 [ 1823.646195][ T1776] ksys_unshare+0x4ac/0x7b0 [ 1823.650676][ T1776] __x64_sys_unshare+0x38/0x40 [ 1823.655421][ T1776] x64_sys_call+0x442/0x9a0 [ 1823.659898][ T1776] do_syscall_64+0x4c/0xa0 [ 1823.664292][ T1776] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1823.670159][ T1776] [ 1823.672460][ T1776] Freed by task 1776: [ 1823.676663][ T1776] kasan_set_track+0x4a/0x70 [ 1823.681262][ T1776] kasan_set_free_info+0x23/0x40 [ 1823.686174][ T1776] ____kasan_slab_free+0x125/0x160 [ 1823.691260][ T1776] __kasan_slab_free+0x11/0x20 [ 1823.695999][ T1776] slab_free_freelist_hook+0xc2/0x190 [ 1823.701347][ T1776] kmem_cache_free+0x100/0x320 [ 1823.706088][ T1776] cleanup_net+0xa2d/0xad0 [ 1823.710493][ T1776] process_one_work+0x6be/0xba0 [ 1823.715324][ T1776] worker_thread+0xa59/0x1200 [ 1823.719976][ T1776] kthread+0x411/0x500 [ 1823.724018][ T1776] ret_from_fork+0x1f/0x30 [ 1823.728412][ T1776] [ 1823.730712][ T1776] The buggy address belongs to the object at ffff888120478000 [ 1823.730712][ T1776] which belongs to the cache net_namespace of size 3968 [ 1823.744997][ T1776] The buggy address is located 140 bytes inside of [ 1823.744997][ T1776] 3968-byte region [ffff888120478000, ffff888120478f80) [ 1823.758333][ T1776] The buggy address belongs to the page: [ 1823.763943][ T1776] page:ffffea0004811e00 refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff88812047b000 pfn:0x120478 [ 1823.775474][ T1776] head:ffffea0004811e00 order:3 compound_mapcount:0 compound_pincount:0 [ 1823.783770][ T1776] flags: 0x4000000000010200(slab|head|zone=1) [ 1823.789825][ T1776] raw: 4000000000010200 0000000000000000 0000000100000001 ffff8881001c5980 [ 1823.798386][ T1776] raw: ffff88812047b000 0000000080080006 00000001ffffffff 0000000000000000 [ 1823.806937][ T1776] page dumped because: kasan: bad access detected [ 1823.813324][ T1776] page_owner tracks the page as allocated [ 1823.819010][ T1776] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 281, ts 22184190659, free_ts 22130168871 [ 1823.837994][ T1776] post_alloc_hook+0x192/0x1b0 [ 1823.842737][ T1776] prep_new_page+0x1c/0x110 [ 1823.847215][ T1776] get_page_from_freelist+0x2cc5/0x2d50 [ 1823.852736][ T1776] __alloc_pages+0x18f/0x440 [ 1823.857302][ T1776] new_slab+0xa1/0x4d0 [ 1823.861351][ T1776] ___slab_alloc+0x381/0x810 [ 1823.865918][ T1776] __slab_alloc+0x49/0x90 [ 1823.870225][ T1776] kmem_cache_alloc+0x138/0x260 [ 1823.875056][ T1776] copy_net_ns+0x145/0x5c0 [ 1823.879453][ T1776] create_new_namespaces+0x3a2/0x660 [ 1823.884722][ T1776] unshare_nsproxy_namespaces+0x120/0x170 [ 1823.890421][ T1776] ksys_unshare+0x4ac/0x7b0 [ 1823.894903][ T1776] __x64_sys_unshare+0x38/0x40 [ 1823.899645][ T1776] x64_sys_call+0x442/0x9a0 [ 1823.904124][ T1776] do_syscall_64+0x4c/0xa0 [ 1823.908517][ T1776] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1823.914394][ T1776] page last free stack trace: [ 1823.919041][ T1776] free_unref_page_prepare+0x542/0x550 [ 1823.924484][ T1776] free_unref_page+0xa2/0x550 [ 1823.929139][ T1776] free_compound_page+0x78/0xa0 [ 1823.933966][ T1776] __put_compound_page+0x77/0xb0 [ 1823.938882][ T1776] __put_page+0xbc/0xe0 [ 1823.943010][ T1776] skb_release_data+0x3d3/0xa10 [ 1823.947837][ T1776] __kfree_skb+0x50/0x70 [ 1823.952054][ T1776] tcp_recvmsg_locked+0x14ac/0x2640 [ 1823.957229][ T1776] tcp_recvmsg+0x21b/0x720 [ 1823.961620][ T1776] inet_recvmsg+0x134/0x470 [ 1823.966100][ T1776] sock_read_iter+0x2a2/0x340 [ 1823.970753][ T1776] vfs_read+0x68b/0xbe0 [ 1823.974897][ T1776] ksys_read+0x140/0x240 [ 1823.979117][ T1776] __x64_sys_read+0x7b/0x90 [ 1823.983596][ T1776] x64_sys_call+0x96d/0x9a0 [ 1823.988077][ T1776] do_syscall_64+0x4c/0xa0 [ 1823.992474][ T1776] [ 1823.994775][ T1776] Memory state around the buggy address: [ 1824.000380][ T1776] ffff888120477f80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1824.008415][ T1776] ffff888120478000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1824.016455][ T1776] >ffff888120478080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1824.024491][ T1776] ^ [ 1824.028795][ T1776] ffff888120478100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1824.036828][ T1776] ffff888120478180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1824.044860][ T1776] ================================================================== [ 1824.052891][ T1776] Disabling lock debugging due to kernel taint [ 1824.097593][T16348] attempt to access beyond end of device [ 1824.097593][T16348] loop7: rw=2049, want=45104, limit=40427