last executing test programs: 5m11.525506366s ago: executing program 32 (id=965): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) lchown(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) creat(&(0x7f00000000c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) r2 = dup(r1) write$P9_RLERRORu(r2, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) 5m10.294660707s ago: executing program 33 (id=987): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) lchown(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) creat(&(0x7f00000000c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) r2 = dup(r1) write$P9_RLERRORu(r2, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) 5m8.577120336s ago: executing program 34 (id=1019): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) lchown(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) creat(&(0x7f00000000c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) r2 = dup(r1) write$P9_RLERRORu(r2, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) 3m8.349378422s ago: executing program 35 (id=3505): pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_io_uring_setup(0x88f, &(0x7f0000000300)={0x0, 0xe96b, 0x0, 0x2, 0xbfdffffc}, &(0x7f0000000180)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r3, 0x47f6, 0x0, 0x0, 0x0, 0x0) splice(r2, 0x0, r0, 0x0, 0x18c6, 0x0) write$binfmt_elf64(r1, 0x0, 0x18c6) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000d00)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$packet(0x11, 0x2, 0x300) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b702000014000000b7030000000000188500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r9}, 0x18) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="580000000206010100000000000000000000000005000100070000000900020073797a31000000000c00078008001240fffffffc11000300686173683a69702c6d61726b00000000050005000a000000050004"], 0x58}}, 0x0) sendmsg$TIPC_NL_MEDIA_SET(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="ac020000", @ANYRES16=r7, @ANYBLOB="bf4400000000000000000c000000800005"], 0x2ac}}, 0x0) socket$packet(0x11, 0x3, 0x300) lsm_get_self_attr(0x64, &(0x7f0000000040), &(0x7f0000000000)=0x101, 0x0) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000300)={'ip6_vti0\x00'}) r12 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x200, 0x0) ioctl$TUNSETIFF(r12, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r13 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000540)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r13}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x10, &(0x7f0000000600)=@framed={{}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r13}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) lsetxattr$security_selinux(&(0x7f00000001c0)='./cgroup.cpu/cgroup.procs\x00', &(0x7f0000000200), &(0x7f0000000240)='system_u:object_r:net_conf_t:s0\x00', 0x20, 0x1) 2m54.421406558s ago: executing program 5 (id=3815): socket(0x1d, 0x2, 0x6) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x21885e, &(0x7f0000001340)={[{@grpquota}, {@user_xattr}, {@dioread_lock}]}, 0x5, 0x504, &(0x7f0000001480)="$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") openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r0 = syz_clone(0x40200, 0x0, 0x49, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x9f, 0x0, 0x0, 0x0, 0xfffffffc, 0xfffe, 0x0, 0x0, 0x0, 0xffff}, r0, 0x0, 0xffffffffffffffff, 0x0) open$dir(&(0x7f0000000000)='./file0\x00', 0x40440, 0xe3) r1 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r1, 0x7, 0x0, 0x0, 0x0) 2m54.235450546s ago: executing program 5 (id=3817): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kfree\x00'}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000005c0)=ANY=[@ANYBLOB="14000000100001ff00000000000000000000000a2c000000050a01020000000000000000020000000900030073797a32000000000900010073797a300000000014000000020a031747d21400000000000000000014000000110001"], 0x68}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000006900000000000001000000940000000fad413e8500000007000000"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000040)='sched_switch\x00', r3, 0x0, 0x100000000}, 0x18) syz_clone(0x630c1100, 0x0, 0x0, 0x0, 0x0, 0x0) 2m51.541519787s ago: executing program 36 (id=3714): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) execve(0x0, 0x0, &(0x7f0000000400)={[&(0x7f0000000600)='`:\xba\xb7D7\xednyW\x7f\xe0\xca\xc6C\aq5\x8e\xa6l.\xdfv\x8b\\V\xafl0\x15\xaa\xa0\xe9\r5\x01\x98\x11\xec\x93\x7f0?>j\xb4+\xa9R\xfd\xd7\x01\xbd\x00\x00\x00\x8d\x0e\x192$\rk\xee\x8eT\x00\x00\x80\x00\x97\xe9\x11n^\xf0lZ\x05\xcf\xb3\x95\x81\xd0\xdc\x12\x00'/99, &(0x7f0000000440)='3\x8eu\xa4\xcaT\x01\x00\x00\x00\x01z\a\x00\x00\x00']}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580), 0x46}, 0x4040001) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = io_uring_setup(0x4f01, &(0x7f0000000180)) r4 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r4, &(0x7f000047b000)={0xa, 0x404e20, 0x0, @empty, 0xfffffffe}, 0x1c) listen(r4, 0x400000001ffffffd) socket$inet6(0xa, 0x6, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x1, 0x2, 0x5, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000f2ffffff00000000ff000000850000002a0000008500000050"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) setitimer(0x0, 0x0, &(0x7f0000000080)={{}, {0x0, 0x0}}) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x0, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, @void, @value}, 0x94) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40000000}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYRES16=r5], 0x64}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=ANY=[@ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000a00"], 0x48}}, 0x0) r7 = accept4(r4, 0x0, 0x0, 0x0) close_range(r3, r7, 0x0) 2m39.90168557s ago: executing program 37 (id=3805): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000001801", @ANYRES32, @ANYBLOB="000000000087fb00b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000004c0)='sys_enter\x00', r0, 0x0, 0x1}, 0x18) futex(0x0, 0x3, 0x0, &(0x7f0000fd7ff0)={0x77359400}, 0x0, 0xfffffffd) 2m38.374663728s ago: executing program 38 (id=3817): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kfree\x00'}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000005c0)=ANY=[@ANYBLOB="14000000100001ff00000000000000000000000a2c000000050a01020000000000000000020000000900030073797a32000000000900010073797a300000000014000000020a031747d21400000000000000000014000000110001"], 0x68}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000006900000000000001000000940000000fad413e8500000007000000"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000040)='sched_switch\x00', r3, 0x0, 0x100000000}, 0x18) syz_clone(0x630c1100, 0x0, 0x0, 0x0, 0x0, 0x0) 2m37.401005252s ago: executing program 39 (id=3824): r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000080)={'vxcan1\x00'}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendfile(r2, r1, 0x0, 0x80) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) 2m32.863825615s ago: executing program 40 (id=3835): r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) r1 = epoll_create1(0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_wireguard(r3, 0x8933, &(0x7f0000001880)={'wg1\x00', 0x0}) r5 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000fc0), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r2, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000280)={0x40, r5, 0xa29, 0x0, 0x0, {}, [@WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e22}, @WGDEVICE_A_PRIVATE_KEY={0x24}]}, 0x40}}, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x18, 0x5, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000700000095"], &(0x7f0000000580)='syzkaller\x00', 0x6, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000340)='mm_page_alloc\x00', r6}, 0x18) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000900)=ANY=[@ANYBLOB="440000001000090600"/20, @ANYRES32=0x0, @ANYBLOB="adffa888000000001c00128009000100626f6e64000000000c0002800500010006"], 0x44}}, 0x0) sendmsg$WG_CMD_SET_DEVICE(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000000100000024000300a05ca84f6c9c8e3853e2fd7a70ae0fb20fa152600cb00845174f08076f8d784308000100", @ANYRES32=r4], 0x40}}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000080)={0x40002000}) syz_io_uring_setup(0x4e1, &(0x7f0000000380)={0x0, 0x33f8, 0x10100}, 0x0, 0x0) openat$ptp0(0xffffff9c, &(0x7f0000000000), 0x500, 0x0) unshare(0x22020400) pselect6(0x0, 0x0, &(0x7f0000000000)={0x18, 0x0, 0x0, 0x2, 0x0, 0x0, 0x400}, 0x0, 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x80044940, &(0x7f0000001480)) 2m26.432829224s ago: executing program 41 (id=3854): r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000080)={'vxcan1\x00', 0x0}) bind$can_raw(r0, &(0x7f00000005c0)={0x1d, r1}, 0x10) recvmmsg(r0, &(0x7f00000007c0)=[{{0x0, 0x0, 0x0}, 0x8}, {{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000300)=""/32, 0x20}], 0x1}, 0x2}], 0x2, 0x600100a3, 0x0) setsockopt$CAN_RAW_RECV_OWN_MSGS(r0, 0x65, 0x4, &(0x7f0000000580)=0x1, 0x4) sendmsg$can_raw(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000140)=@can={{0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, "5b7ba3698f28aaf0"}, 0x10}}, 0x0) 2m5.034154175s ago: executing program 1 (id=4209): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x18, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0, 0x0, 0xffffffffffffffff}, 0x13) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) unshare(0x8040600) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000001c0), 0x4000, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)) chdir(&(0x7f0000000540)='./cgroup\x00') r2 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000040), 0x8) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="9feb0100180000000000000034000000340000000b000000100000000000000604000000060000000000000c01000000060000000000000700000000080000000000000e0400000002000000005f30000000003000000024880995bc79b363153c1140230d21f80acd3606a6c3b1bd483b5c70658031dcb8d6a87bb5b5e828ac193d7dc991a4821791287fe0c3aaebe8641f91752c0ccb94d690451bab79db53fe51fe259c5d4003464eae85322c6e5ebe9b73da4039f09be327de6261c0"], &(0x7f00000001c0)=""/48, 0x57, 0x30, 0x1, 0xfffffff9, 0x10000, @value=r2}, 0x28) unshare(0x100) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) setxattr$security_capability(0x0, &(0x7f0000000280), 0x0, 0x0, 0x0) lgetxattr(0x0, &(0x7f0000000280)=ANY=[], 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="380000003d0007010000000000000000047c000008000880040003000c0001"], 0x38}}, 0xc000) 2m5.004455897s ago: executing program 1 (id=4210): prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, 0x0, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x600000, 0x80) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000013c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000880), 0xfffffffffffffddd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r5, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) 2m4.831830594s ago: executing program 42 (id=4214): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x5, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r1}, 0x10) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) 2m3.639970938s ago: executing program 1 (id=4223): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r1}, 0x10) r2 = getpid() process_vm_readv(r2, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) 2m3.317799282s ago: executing program 1 (id=4225): r0 = syz_open_dev$usbmon(&(0x7f0000000240), 0x4, 0x400) poll(&(0x7f00000002c0)=[{r0, 0x2}], 0x1, 0x7f) 2m3.157255749s ago: executing program 1 (id=4227): socket(0x1d, 0x2, 0x6) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x21885e, &(0x7f0000001340)={[{@grpquota}, {@user_xattr}, {@dioread_lock}]}, 0x5, 0x504, &(0x7f0000001480)="$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") openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r0 = syz_clone(0x40200, 0x0, 0x49, 0x0, 0x0, 0x0) perf_event_open(0x0, r0, 0x0, 0xffffffffffffffff, 0x0) open$dir(0x0, 0x40440, 0xe3) r1 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r1, 0x7, 0x0, 0x0, 0x0) 2m2.90876119s ago: executing program 1 (id=4230): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000002900000005"], 0x48) symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = syz_io_uring_setup(0x3558, &(0x7f00000000c0)={0x0, 0xdbfe, 0x0, 0x3, 0x4e}, &(0x7f0000000180)=0x0, &(0x7f0000000280)=0x0) io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000300)=[0xffffffffffffffff], 0x1) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000000)=[0xffffffffffffffff], 0x1}) bpf$MAP_DELETE_BATCH(0x18, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x5}, 0x38) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) io_uring_enter(r1, 0x47f6, 0x1000000, 0x0, 0x0, 0x0) 1m59.659800787s ago: executing program 6 (id=4261): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$BTRFS_IOC_QGROUP_CREATE(r0, 0x4010942a, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x3, [@decl_tag={0x1, 0x0, 0x0, 0x11, 0x1, 0x9}]}, {0x0, [0x30]}}, 0x0, 0x2b, 0x0, 0x1, 0xffff, 0x0, @void, @value}, 0x28) r3 = socket$xdp(0x2c, 0x3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x40fd) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f0000000100)={0x0, 0x204000, 0x1000}, 0x20) r4 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_EVENTS(r4, 0x84, 0xb, &(0x7f0000000200)={0x2f, 0x7, 0xe1, 0xf7, 0x9, 0x7, 0x0, 0x5, 0x9, 0x3, 0x2, 0x7, 0x4, 0x5}, 0xe) r5 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x4, 0x0, 0x0, 0x5, 0x18, @local, @loopback, 0x0, 0x0, 0x5, 0x8}}) 1m59.622762698s ago: executing program 6 (id=4262): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kfree\x00'}, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000b40)={0x0, 0x0, 0x0}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000040)='sched_switch\x00', r3, 0x0, 0x100000000}, 0x18) syz_clone(0x630c1100, 0x0, 0x0, 0x0, 0x0, 0x0) 1m58.725238578s ago: executing program 6 (id=4269): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x20c006, &(0x7f0000000200)={[{@i_version}, {@mblk_io_submit}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@usrquota}, {@discard}, {@data_err_abort}], [{@seclabel}]}, 0x1, 0x43d, &(0x7f0000000900)="$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") r0 = creat(&(0x7f0000000280)='./bus\x00', 0x2) pwritev2(r0, &(0x7f0000000040)=[{&(0x7f0000000980)="ca", 0x1}], 0x1, 0x5, 0xffffffff, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000e80)={{{@in=@local, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private0}, 0x0, @in6=@initdev}}, &(0x7f0000001040)=0xe8) r3 = getegid() getgroups(0x3, &(0x7f0000000080)=[0x0, 0x0, r3]) syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000240)='./file0\x00', 0x444, &(0x7f0000002f40)=ANY=[@ANYBLOB="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"], 0xfe, 0x683, &(0x7f0000002880)="$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") r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000f80)=ANY=[@ANYRES32, @ANYRESHEX=r4, @ANYRES16, @ANYRESOCT=r1, @ANYRESDEC, @ANYBLOB="478aeeb0bc91d5515ef6b2f4ee4ccfa37ee1f9961da63b45565d8aad98d3c95a9ccec054b7e28c2984938cf7e173d3ab5b", @ANYRES64=r5, @ANYRESOCT=0x0, @ANYRES8], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000340)={r6, &(0x7f0000000080), &(0x7f0000000600)=""/157}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {r2}}, './file0\x00'}) r7 = open(&(0x7f0000000540)='./bus\x00', 0x4000, 0x0) preadv2(r7, &(0x7f00000000c0)=[{&(0x7f0000001200)=""/4096, 0x1000}], 0x2, 0x0, 0x0, 0x0) 1m58.313124977s ago: executing program 6 (id=4272): r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000080)={'vxcan1\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendfile(r3, r2, 0x0, 0x80) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r4}, &(0x7f0000000380), &(0x7f00000003c0)=r5}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = syz_open_dev$usbfs(&(0x7f0000000080), 0x74, 0x101301) ioctl$USBDEVFS_IOCTL(r6, 0xc0105512, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f00000004c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x38, 0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1, 0x1, {0x2}}) bind$can_raw(r0, &(0x7f00000005c0)={0x1d, r1}, 0x10) recvmmsg(r0, &(0x7f00000007c0)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000300)=""/32, 0x20}], 0x1}, 0x2}], 0x1, 0x600100a3, 0x0) setsockopt$CAN_RAW_RECV_OWN_MSGS(r0, 0x65, 0x4, &(0x7f0000000580)=0x1, 0x4) sendmsg$can_raw(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000140)=@can={{0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, "5b7ba3698f28aaf0"}, 0x10}}, 0x0) 1m57.533106022s ago: executing program 6 (id=4279): socket(0x1d, 0x2, 0x6) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x21885e, &(0x7f0000001340)={[{@grpquota}, {@user_xattr}, {@dioread_lock}]}, 0x5, 0x504, &(0x7f0000001480)="$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") openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r0 = syz_clone(0x40200, 0x0, 0x49, 0x0, 0x0, 0x0) perf_event_open(0x0, r0, 0x0, 0xffffffffffffffff, 0x0) open$dir(0x0, 0x40440, 0xe3) fsconfig$FSCONFIG_CMD_RECONFIGURE(0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0) 1m57.211840136s ago: executing program 6 (id=4282): bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) syz_emit_ethernet(0x66, &(0x7f0000000b00)={@broadcast, @random="6487a2bed3d6", @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x58, 0x300, 0x0, 0xfd, 0x6c, 0x0, @private}, {{}, {}, {}, {}, {0x8, 0x22eb, 0x0, {{0x0, 0x2, 0x8, 0x0, 0x0, 0x0, 0x3}}}}}}}}, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x3000046, &(0x7f0000000380)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@dioread_lock}, {@data_err_ignore}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4007b1}}, {@data_err_ignore}, {@grpquota}, {@nobh}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x562, &(0x7f0000000580)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r1, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x107842, 0x1e) sendfile(r2, r2, 0x0, 0x80000000) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b00"/11], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000240)='kmem_cache_free\x00', 0xffffffffffffffff, 0x0, 0x8000000000000000}, 0x18) r4 = getuid() syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYRES64=r4, @ANYRESDEC, @ANYRESHEX=r4], 0x1, 0x522, &(0x7f0000000a80)="$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") r5 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'macvlan1\x00', 0x0}) bind$packet(r5, &(0x7f00000000c0)={0x11, 0x6, r6, 0x1, 0x0, 0x6, @broadcast}, 0x14) bind$packet(r5, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000000)={'ip_vti0\x00', &(0x7f00000002c0)={'syztnl2\x00', r6, 0x700, 0x700, 0x6, 0x6, {{0x1f, 0x4, 0x2, 0x14, 0x7c, 0xfff, 0x0, 0x2, 0x29, 0x0, @private=0xa010101, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@rr={0x7, 0xf, 0x87, [@remote, @multicast2, @dev={0xac, 0x14, 0x14, 0x2a}]}, @timestamp_prespec={0x44, 0x2c, 0xc5, 0x3, 0x6, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0xc50dfe64}, {@multicast2, 0x1}, {@empty, 0x3}, {@multicast2, 0x1}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x2}]}, @timestamp_prespec={0x44, 0x14, 0x6, 0x3, 0x4, [{@local, 0x10}, {@private=0xa010100}]}, @lsrr={0x83, 0x3, 0x6d}, @ssrr={0x89, 0xf, 0x36, [@private=0xa010102, @dev={0xac, 0x14, 0x14, 0x1e}, @empty]}, @generic={0x86, 0x5, "343286"}]}}}}}) r7 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000002c0), 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x18, 0xe, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000c00000000000000300000018110000", @ANYRES32=r3, @ANYRES32, @ANYBLOB="0000000000000000b702000000000000850000008600000085000000250000003f720800322d1123e2609cc6f7fc4685f0ffffff6c000000"], &(0x7f00000000c0)='syzkaller\x00', 0x1000, 0x0, 0x0, 0x41100, 0x48, '\x00', r6, 0x0, r7, 0x8, &(0x7f0000000300)={0x7, 0x1}, 0x8, 0x10, &(0x7f0000000340)={0x2, 0xa, 0x66a6, 0x5a}, 0x10, 0x0, 0x0, 0x4, &(0x7f0000000380)=[r3, r3], &(0x7f00000003c0)=[{0x3, 0x5, 0xb, 0x5}, {0x3, 0x4, 0xb, 0x7}, {0x1, 0x3, 0x4, 0x7}, {0x4, 0x4, 0xa, 0x9}], 0x10, 0x7fff, @void, @value}, 0x94) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, 0xffffffffffffffff, 0x0) socket(0x10, 0x803, 0x0) bpf$ITER_CREATE(0x21, &(0x7f00000000c0), 0x8) 1m56.510923538s ago: executing program 7 (id=4286): perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x68, 0x0, 0xfc, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x1, 0xffffffffffffff3a}, 0x0, 0x0, 0x800000, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kfree\x00', r0}, 0x18) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000006c0)=@newtaction={0xf8, 0x30, 0xffff, 0xfffffffe, 0x0, {}, [{0xe4, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x5, 0x0, 0x0, 0x0, {}, {0x0, 0x0, 0x2}}}]]}, {0x4}, {0xc}, {0xc}}}, @m_gact={0x48, 0x2, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}, @m_bpf={0x2c, 0x3, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0xf8}}, 0x0) fchdir(0xffffffffffffffff) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000040)="3900000013000318680907070000000f0000ff3f04000000170a001700000000040037000d00030001332564aa58b9a64411f6bbf44dc48f57", 0x39}], 0x1) 1m56.054061528s ago: executing program 7 (id=4288): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x18, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0, 0x0, 0xffffffffffffffff}, 0x13) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) unshare(0x8040600) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000001c0), 0x4000, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)) chdir(&(0x7f0000000540)='./cgroup\x00') r2 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000040), 0x8) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="9feb0100180000000000000034000000340000000b000000100000000000000604000000060000000000000c01000000060000000000000700000000080000000000000e0400000002000000005f30000000003000000024880995bc79b363153c1140230d21f80acd3606a6c3b1bd483b5c70658031dcb8d6a87bb5b5e828ac193d7dc991a4821791287fe0c3aaebe8641f91752c0ccb94d690451bab79db53fe51fe259c5d4003464eae85322c6e5ebe9b73da4039f09be327de6261c0"], &(0x7f00000001c0)=""/48, 0x57, 0x30, 0x1, 0xfffffff9, 0x10000, @value=r2}, 0x28) unshare(0x100) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) setxattr$security_capability(0x0, &(0x7f0000000280), 0x0, 0x0, 0x0) lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000280)=ANY=[], 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0xc000) 1m55.946650824s ago: executing program 7 (id=4290): r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000080)={'vxcan1\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendfile(r3, r2, 0x0, 0x80) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r4}, &(0x7f0000000380), &(0x7f00000003c0)=r5}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = syz_open_dev$usbfs(&(0x7f0000000080), 0x74, 0x101301) ioctl$USBDEVFS_IOCTL(r6, 0xc0105512, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f00000004c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x38, 0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1, 0x1, {0x2}}) bind$can_raw(r0, &(0x7f00000005c0)={0x1d, r1}, 0x10) recvmmsg(r0, &(0x7f00000007c0)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000300)=""/32, 0x20}], 0x1}, 0x2}], 0x1, 0x600100a3, 0x0) setsockopt$CAN_RAW_RECV_OWN_MSGS(r0, 0x65, 0x4, &(0x7f0000000580)=0x1, 0x4) sendmsg$can_raw(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000140)=@can={{0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, "5b7ba3698f28aaf0"}, 0x10}}, 0x0) 1m55.066088393s ago: executing program 7 (id=4294): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$BTRFS_IOC_QGROUP_CREATE(r0, 0x4010942a, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x3, [@decl_tag={0x1, 0x0, 0x0, 0x11, 0x1, 0x9}]}, {0x0, [0x30]}}, 0x0, 0x2b, 0x0, 0x1, 0xffff, 0x0, @void, @value}, 0x28) 1m55.003614006s ago: executing program 7 (id=4297): socket(0x1d, 0x2, 0x6) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x21885e, &(0x7f0000001340)={[{@grpquota}, {@user_xattr}, {@dioread_lock}]}, 0x5, 0x504, &(0x7f0000001480)="$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") openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r0 = syz_clone(0x40200, 0x0, 0x49, 0x0, 0x0, 0x0) perf_event_open(0x0, r0, 0x0, 0xffffffffffffffff, 0x0) open$dir(0x0, 0x40440, 0xe3) fsconfig$FSCONFIG_CMD_RECONFIGURE(0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0) 1m54.392004183s ago: executing program 7 (id=4299): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) lsm_set_self_attr(0x64, 0x0, 0xe3, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000580)={[{@nolazytime}]}, 0xfe, 0x507, &(0x7f0000000f40)="$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") 1m47.872684936s ago: executing program 43 (id=4230): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000002900000005"], 0x48) symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = syz_io_uring_setup(0x3558, &(0x7f00000000c0)={0x0, 0xdbfe, 0x0, 0x3, 0x4e}, &(0x7f0000000180)=0x0, &(0x7f0000000280)=0x0) io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000300)=[0xffffffffffffffff], 0x1) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000000)=[0xffffffffffffffff], 0x1}) bpf$MAP_DELETE_BATCH(0x18, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x5}, 0x38) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) io_uring_enter(r1, 0x47f6, 0x1000000, 0x0, 0x0, 0x0) 1m44.645915211s ago: executing program 5 (id=4330): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x18, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0, 0x0, 0xffffffffffffffff}, 0x13) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) unshare(0x8040600) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000001c0), 0x4000, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)) chdir(&(0x7f0000000540)='./cgroup\x00') r2 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000040), 0x8) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="9feb0100180000000000000034000000340000000b000000100000000000000604000000060000000000000c01000000060000000000000700000000080000000000000e0400000002000000005f30000000003000000024880995bc79b363153c1140230d21f80acd3606a6c3b1bd483b5c70658031dcb8d6a87bb5b5e828ac193d7dc991a4821791287fe0c3aaebe8641f91752c0ccb94d690451bab79db53fe51fe259c5d4003464eae85322c6e5ebe9b73da4039f09be327de6261c0"], &(0x7f00000001c0)=""/48, 0x57, 0x30, 0x1, 0xfffffff9, 0x10000, @value=r2}, 0x28) unshare(0x100) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) setxattr$security_capability(0x0, &(0x7f0000000280), 0x0, 0x0, 0x0) lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000280)=ANY=[], 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB], 0x38}}, 0xc000) 1m44.578877424s ago: executing program 5 (id=4339): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x18, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0, 0x0, 0xffffffffffffffff}, 0x13) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) unshare(0x8040600) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000001c0), 0x4000, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)) chdir(&(0x7f0000000540)='./cgroup\x00') r2 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000040), 0x8) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="9feb0100180000000000000034000000340000000b000000100000000000000604000000060000000000000c01000000060000000000000700000000080000000000000e0400000002000000005f30000000003000000024880995bc79b363"], &(0x7f00000001c0)=""/48, 0x57, 0x30, 0x1, 0xfffffff9, 0x10000, @value=r2}, 0x28) unshare(0x100) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) setxattr$security_capability(0x0, &(0x7f0000000280), 0x0, 0x0, 0x0) lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000280)=ANY=[], 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="380000003d0007010000000000000000047c000008000880040003000c0001"], 0x38}}, 0xc000) 1m44.469369929s ago: executing program 5 (id=4340): socket(0x1d, 0x2, 0x6) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x21885e, &(0x7f0000001340)={[{@grpquota}, {@user_xattr}, {@dioread_lock}]}, 0x5, 0x504, &(0x7f0000001480)="$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") openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) syz_clone(0x40200, 0x0, 0x49, 0x0, 0x0, 0x0) open$dir(0x0, 0x40440, 0xe3) r0 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0) 1m44.223994379s ago: executing program 5 (id=4343): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000010000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x64, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$packet(0x11, 0x0, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) unshare(0x68040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xfffff000) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_ADD_COUNTERS(r5, 0x0, 0x41, &(0x7f0000000000)={'mangle\x00', 0x2, [{}, {}]}, 0x48) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x14, 0x2, [@TCA_HHF_ADMIT_BYTES={0x8}, @TCA_HHF_RESET_TIMEOUT={0x8}]}}]}, 0x40}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x70bd2a, 0x8000000, {0x0, 0x0, 0x0, r3, {0xf, 0x3}, {0xa}}}, 0x24}, 0x1, 0x0, 0x0, 0x20008040}, 0x24044004) 1m41.919015824s ago: executing program 44 (id=4282): bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) syz_emit_ethernet(0x66, &(0x7f0000000b00)={@broadcast, @random="6487a2bed3d6", @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x58, 0x300, 0x0, 0xfd, 0x6c, 0x0, @private}, {{}, {}, {}, {}, {0x8, 0x22eb, 0x0, {{0x0, 0x2, 0x8, 0x0, 0x0, 0x0, 0x3}}}}}}}}, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x3000046, &(0x7f0000000380)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@dioread_lock}, {@data_err_ignore}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4007b1}}, {@data_err_ignore}, {@grpquota}, {@nobh}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x562, &(0x7f0000000580)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r1, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x107842, 0x1e) sendfile(r2, r2, 0x0, 0x80000000) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b00"/11], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000240)='kmem_cache_free\x00', 0xffffffffffffffff, 0x0, 0x8000000000000000}, 0x18) r4 = getuid() syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYRES64=r4, @ANYRESDEC, @ANYRESHEX=r4], 0x1, 0x522, &(0x7f0000000a80)="$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") r5 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'macvlan1\x00', 0x0}) bind$packet(r5, &(0x7f00000000c0)={0x11, 0x6, r6, 0x1, 0x0, 0x6, @broadcast}, 0x14) bind$packet(r5, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000000)={'ip_vti0\x00', &(0x7f00000002c0)={'syztnl2\x00', r6, 0x700, 0x700, 0x6, 0x6, {{0x1f, 0x4, 0x2, 0x14, 0x7c, 0xfff, 0x0, 0x2, 0x29, 0x0, @private=0xa010101, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@rr={0x7, 0xf, 0x87, [@remote, @multicast2, @dev={0xac, 0x14, 0x14, 0x2a}]}, @timestamp_prespec={0x44, 0x2c, 0xc5, 0x3, 0x6, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0xc50dfe64}, {@multicast2, 0x1}, {@empty, 0x3}, {@multicast2, 0x1}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x2}]}, @timestamp_prespec={0x44, 0x14, 0x6, 0x3, 0x4, [{@local, 0x10}, {@private=0xa010100}]}, @lsrr={0x83, 0x3, 0x6d}, @ssrr={0x89, 0xf, 0x36, [@private=0xa010102, @dev={0xac, 0x14, 0x14, 0x1e}, @empty]}, @generic={0x86, 0x5, "343286"}]}}}}}) r7 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000002c0), 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x18, 0xe, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000c00000000000000300000018110000", @ANYRES32=r3, @ANYRES32, @ANYBLOB="0000000000000000b702000000000000850000008600000085000000250000003f720800322d1123e2609cc6f7fc4685f0ffffff6c000000"], &(0x7f00000000c0)='syzkaller\x00', 0x1000, 0x0, 0x0, 0x41100, 0x48, '\x00', r6, 0x0, r7, 0x8, &(0x7f0000000300)={0x7, 0x1}, 0x8, 0x10, &(0x7f0000000340)={0x2, 0xa, 0x66a6, 0x5a}, 0x10, 0x0, 0x0, 0x4, &(0x7f0000000380)=[r3, r3], &(0x7f00000003c0)=[{0x3, 0x5, 0xb, 0x5}, {0x3, 0x4, 0xb, 0x7}, {0x1, 0x3, 0x4, 0x7}, {0x4, 0x4, 0xa, 0x9}], 0x10, 0x7fff, @void, @value}, 0x94) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, 0xffffffffffffffff, 0x0) socket(0x10, 0x803, 0x0) bpf$ITER_CREATE(0x21, &(0x7f00000000c0), 0x8) 1m39.31820979s ago: executing program 45 (id=4299): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) lsm_set_self_attr(0x64, 0x0, 0xe3, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000580)={[{@nolazytime}]}, 0xfe, 0x507, &(0x7f0000000f40)="$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") 1m32.890264799s ago: executing program 2 (id=4422): ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="480000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002800128008000100687372001c000280050007000100000008000200", @ANYRES32=r0, @ANYBLOB="08000100", @ANYRES32=r2], 0x48}}, 0x0) 1m32.713798856s ago: executing program 2 (id=4424): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000002900000005"], 0x48) symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0a000000020000000900000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = syz_io_uring_setup(0x3558, &(0x7f00000000c0)={0x0, 0xdbfe, 0x0, 0x3, 0x4e}, &(0x7f0000000180)=0x0, &(0x7f0000000280)=0x0) io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000300)=[0xffffffffffffffff], 0x1) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000000)=[0xffffffffffffffff], 0x1}) bpf$MAP_DELETE_BATCH(0x18, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x5}, 0x38) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) io_uring_enter(r1, 0x47f6, 0x1000000, 0x0, 0x0, 0x0) 1m32.033561827s ago: executing program 2 (id=4432): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000040)='./file0\x00', 0x10, &(0x7f0000001200)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x6}}]}, 0xee, 0x4b6, &(0x7f00000004c0)="$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") 1m31.859591005s ago: executing program 2 (id=4434): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) write$UHID_INPUT(r1, &(0x7f0000002080)={0x8, {"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", 0x1000}}, 0x1006) 1m31.578334488s ago: executing program 2 (id=4441): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x21885e, &(0x7f0000001340)={[{@grpquota}, {@user_xattr}, {@dioread_lock}]}, 0x5, 0x504, &(0x7f0000001480)="$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") openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) syz_clone(0x40200, 0x0, 0x49, 0x0, 0x0, 0x0) open$dir(0x0, 0x40440, 0xe3) r0 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0) 1m31.432593504s ago: executing program 2 (id=4453): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x21885e, &(0x7f0000001340)={[{@grpquota}, {@user_xattr}, {@dioread_lock}]}, 0x5, 0x504, &(0x7f0000001480)="$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") openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) syz_clone(0x40200, 0x0, 0x49, 0x0, 0x0, 0x0) open$dir(0x0, 0x40440, 0xe3) r0 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0) 1m29.136699957s ago: executing program 46 (id=4343): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000010000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x64, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$packet(0x11, 0x0, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) unshare(0x68040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xfffff000) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_ADD_COUNTERS(r5, 0x0, 0x41, &(0x7f0000000000)={'mangle\x00', 0x2, [{}, {}]}, 0x48) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x14, 0x2, [@TCA_HHF_ADMIT_BYTES={0x8}, @TCA_HHF_RESET_TIMEOUT={0x8}]}}]}, 0x40}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x70bd2a, 0x8000000, {0x0, 0x0, 0x0, r3, {0xf, 0x3}, {0xa}}}, 0x24}, 0x1, 0x0, 0x0, 0x20008040}, 0x24044004) 1m16.412587309s ago: executing program 47 (id=4453): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x21885e, &(0x7f0000001340)={[{@grpquota}, {@user_xattr}, {@dioread_lock}]}, 0x5, 0x504, &(0x7f0000001480)="$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") openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) syz_clone(0x40200, 0x0, 0x49, 0x0, 0x0, 0x0) open$dir(0x0, 0x40440, 0xe3) r0 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0) 2.767886685s ago: executing program 8 (id=6432): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x1, 0x4, 0x7fe2, 0x2, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) syz_mount_image$vfat(&(0x7f0000000280), &(0x7f0000000240)='./file0\x00', 0x1018000, &(0x7f00000003c0)=ANY=[@ANYRES8=0x0, @ANYRES16, @ANYRES16=0x0, @ANYRESOCT, @ANYRES32, @ANYRESDEC], 0x1, 0x2ee, &(0x7f00000006c0)="$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") r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040), 0x208e24b) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x5, 0x2, 0x1, 0xb, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x10, 0x2, &(0x7f0000000100)=@raw=[@ldst={0x1, 0x2, 0x4, 0x0, 0x1, 0x15}, @jmp={0x5, 0x0, 0x9, 0x0, 0x0, 0xfffffffffffffe88}], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c003d000000000000000000850000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000006900000000000001000000940000000fad413e85000000070000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x22a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0xc00000}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002f00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r3 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) syz_emit_ethernet(0x6a, &(0x7f0000000000)={@random="b6776eb1167d", @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0xd, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0xfffd, 0x4e20, 0x48, 0x0, @wg=@cookie={0x3, 0x0, "6d4dfdeb8cf7bbfe143803bec2ce783e04cd32308cdd8dde", "c71cb8adfce542a4bc5a026c20b0d0c45787e4aa3863ec3c5c95083c1728364c"}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 1.968340082s ago: executing program 9 (id=6453): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000005000000020000000010"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) creat(&(0x7f00000000c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) r3 = dup(r2) write$P9_RLERRORu(r3, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="1b0000000000000000000000eb40"], 0x50) write$RDMA_USER_CM_CMD_SET_OPTION(r3, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) write$binfmt_elf64(r3, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) chmod(&(0x7f0000000200)='./file0\x00', 0x144) 1.957084112s ago: executing program 9 (id=6454): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fcntl$notify(r1, 0x402, 0x4) r2 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r2, 0x402, 0x8000003d) r3 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) close_range(r2, r3, 0x0) 1.856816206s ago: executing program 9 (id=6459): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000080000000600"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0x2}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000003020000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[], 0xa0}, 0x1, 0x0, 0x0, 0x2005c013}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800019f040000000000000002000000000000000800010001000000040004"], 0x24}, 0x1, 0x0, 0x0, 0x20008801}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000000000), 0x4000000000001f2, 0x0) 1.831360238s ago: executing program 0 (id=6460): prctl$PR_GET_FP_MODE(0x2e) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x0, &(0x7f0000010140)={[{@user_xattr}, {@noquota}, {@dioread_nolock}, {@jqfmt_vfsv1}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x70}}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x7b1}}, {@stripe={'stripe', 0x3d, 0x20}}, {@bsdgroups}, {@max_batch_time={'max_batch_time', 0x3d, 0x3fe}}, {@user_xattr}, {@bsdgroups}]}, 0x1, 0x562, &(0x7f0000001080)="$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") signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x80800) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="4c00000002060108000034e40000000000000000050001000600000005000400000000000900020073797a3100000080050005000200"], 0x4c}}, 0x2) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x54, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x29}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e21}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) bpf$PROG_LOAD(0x5, 0x0, 0xfffffffffffffe3c) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000400)={0x1c, 0x3, 0x6, 0x201, 0x0, 0x0, {0x5}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) 1.831133008s ago: executing program 9 (id=6461): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000100)={'veth0_vlan\x00', &(0x7f0000000540)=@ethtool_drvinfo={0x3, "2ad6881d0dfb0a8a0300", "e6ffc9eb41a08eaf8eb620547e918b8c5f8a8520f8668d4216662be69e4ebd95", "1452eb0eb2c12e0c3abf7ee684743c5685526baadfdc11ced87c0da3cafc04b8", "029a4a080000000000eaff6575635fbd62e1b77e9aa2c80000001000", "03af2a1a0e7dfa98104a27544f00cb2231718ca40000daffffffffffffffff7f", "0600a4a14005d8028b3fff62", 0x10000008, 0x3, 0xc, 0x8cb, 0x6}}) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001cc0)=ANY=[@ANYBLOB="620af8ffa1dc0021bfa100000000000007010000f8ffffffb702000007000000bd120000000000008500000010000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24561f1b2607995daa56f151905ea23c22624c9f87f9793f3bbb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64b751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07372c29184ff7f4a7c0000070000006056feb4cc664c0af9360a1f7a5e6b607130c89f18c0c1089d8b8588d72ec29c48b45e0000000000000401d01aa27ae8b09e00e79ab20b0b8ed8fb7a68000000000000000000006fa03c6468978089b302d7ff6023cdcedb5e0125ebbcebdde510cb2364149215108337719acd97cfa107d40224edc5465a932b77a74e802a0dc6bf25d8a242bc6099ad2300000480006ef6c1ff0900ff0000000010c63a949e8b7955394ffaff03000000000000ab87b1bfeda7be586602d985430cea080000000000000026abfb0767192361448279b05d96a703a660581eecdbf5bcd3de227a167ca17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9b081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80af740b5b7632d5933a1c1fa5605bd7603f2ba2a790d62d6faec2fed44da4928b30142ba1fde5c5d50b83bae616b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0cb97fca585ec6bf58351d578be00d952aab9c71764b0a8a7583c90b3433b809bdb9fbd48bc877505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223d8d9e86c5ea06d108d8f80a0eb4fa39f6b5c02e6d6d90756ff578f57000000009700cf0b4b8bc229413300000000000000000003000000000000000000000000001000000000559711e6e8fcffffffffffffffb2d02edc3e01dd271c896249ed85b980680b09000000000f0000169cdcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffffd897ef3b7cda42f93d53046da21b40216e14ba2d6af8656b01e17addaedab25b30002abbba7fa725f38400be7c1f001b2cd3170400000085be9e48dccf1f9f3282830689da6b53b263339863297771d74732d400003341bf4a00fc9fec2271ff01589646efd1cf870cd7bb2366fde4a594290c405ff870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d30a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78249788f11f761038b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe760e717a04becff0f719197724f4fce1093b62d7e8c7123d890cec55bf404e4e1f74b7eed82571be54c72d978cf906df08f11f1c4042e36acd37d7f9e109f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2acd1fe582786105c70600000000000000b7561301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c542c9062ece84c99a061887a20639b41c8c12ee86c50804042b3eac1f871b136345cf67ca3fb5aac518a75f9e7d7101da841735e186c489b3a06fb99e0347f23a054de2f4d92d6bd72ee2c9f0390a6f01e3e483b4ad05573af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f91e358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df90400000000000000d6b2c5eaff07000000000000b99c9cc0ad1857216f000000009191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e669261192899d4562db0e22d564ae09bb6d163118e401e024fd452277c3887d6116c6cc9d8046c216c1f895778cb26e22a2a798de44aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99a3594191e104d417e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250df98674152f94e32409e2a3bce109b6000000000000a1fec9000000d694210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137ab79a404abde7750898b59270b939b81367ac91bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f00fb8191bbab2dc591dda61f0868afc4294859323e7a45319f18101288a0268893373750d1a8fe64680b0a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7d58c08acaf30065b928a31d2eca55f74a23641f61f2d5b308cf01cfaed9ef0ce21d69993e9960ff5f76015e6009756237badf4e7965bbe2777e808fcba821a00e8c5c39609ff854356cb490000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546bb2e51935ab9067ec3ad2a182068e1e3a0e2505bc7f41019645466ac96e0d0b3bc19faa5449209b085f3c334b47f067bbab40743b2a428f1da1f626602111b40e761fd21081920382f14d12ca3c471c7868e7da7eaa69eb7f7f80572fdd11bb1d070080fbc22bf73468788df51710eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331ff5e20fa26b8471d9e1cc9eb3d541e407cc2dae5e690cd628ab84875f2c50ba830d3f474b079b407000000deff000040430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df902aeec50e71b967ce7daac4be290159f6bcd75f0dda9de5532e66ae9e48b0ed1254a81faae79b6af6fbb869604d51de44c4e0973171ad47d6c00ebc7603093f000000fdec743af930cd6db49a47613808bad959719c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f15d6533f78a1f4e2df4ca23d867693fd42de9b49a1b36d48a44ba6a4530e59bec53e876dc660dd6d89f80a4377b1b1292a893a516dab183ee65744fb8fc4f9ce2242e0f000000000100000000d77480e0345effff6413258d1f6eb190aa28cbb4bafe3436b176c7ed4b132fb805d5edd9d188daf28d89c014c3ecca10ae55704544673e1fb03b84f63e022fe755f4007a4a899eaf52c4f491f1e97c862e29e4570600000091c691faee1e0c8fe056a07474e6e5490a7d3c3402000000b60600d837c6befc63ddf2f594ad7cbc56a1e44d218c956a5392a995f1fae8e9f206efbb33854dc70104d74dc07748f9745cb796da2dfb714a0500000000000000faed94fc39acfb3fd25dfa8116a154cd1226e1bb72b59fed817072a0da60160761fd3dffda0f7c592eabd8ab68334d2a1693cb187539049e331272bf5135044df8161400211b8012b6eb1ed5656e83f65509bb4b323c5bd61bff949d3bade2f6ffda1360c2786e16937ab61d6dcafed319c7167d0885f9c6d1f442954c167dd9b4acd9468ce3674c82bbb2e31389179b025dbe063b7f906217b2cf8410c7023aa3e5cc3ba1000000000000000000000000000000006ae6301a2da44394275c582a6516bb92ea1980a0a659f2f1811c8b281c209647c4241f292b20508b215dde27bb2487a6e2b5e4a8ccfab90c23827ef06cbe364073005f8a6d1456aaeb85ffb7858f24eced67a67ab825e863928ed64c83f62ffdaa997657335b63c6b4163aff094059e626766845fd779c9e6cdbbd64c2499ce3ffe2fef03f7cdd0d90f3a7579579a142c0f7b318264d5c13c31cf475829528267ead38523cab7e1664e8426cfce471fef821c8a02a7e7d954d05b68a9c28f79429b09e2bb3681ae2b831e27c735123361c193d66ed4d71f19b199d371ec6bfada7cd370e3fdd3cd980fa1e145fd3f3e96b1feb53c865e1ada08f5d16ed652ee0c7f45352222692fbd679212c225d097aa90f7e1fb1f983415f43e75a19ecf7fd21bfa150ef563aa72ba3c43c5f3d9be128ec26b691f31f9cab931631606a81622f120675c962be2d3b5e95f74f0b209e42e6bdd76e6e725295b1d78d928f6f63e4581d5cc41cbde2ba66adc1168070c8c6e18a6a234f5f9311ef0f78924b68dbb4712efdb6974667bdb54f16fd2061b9ba93638dd177227e94e4ebd0ec1d437db948062bf41742000000000000000000305f70dd02fa0c61d5fe6d8ff35389246037e18d34c1375ae04f44f0c2543c772c5ccb137be7dc1874c514b37c668554d77d4ea5ed144a648257f4a0301067bbcd9b91072659d872f26b796e2b81025edb5f45f785e2c2602b248ecdd80f019ca659be7e8ae953325a27564f33c9d458a60be3dab38baab7eb1a66ab1ffd6308f7fd51beb356fe75eb985b7581bb5584c53984ba9c3340f97e8d3825681c53de5f554e595b00000000000000006a8fa9f05d64c4be42f981f00051a39938613067dbd1427e01bfec016e51844cefa8a855bf23ac887b4a88eed6d9443857242f28e31a41d20105fbf3394ff910e734b4d9101265ff729c426e01c1ab13dda8c388b909006f19eecb87e39175e85e17000000000000000000009431807e43886903526074e6b40244c938a4c68a38c25ddd7c143b3f1400010000ec66815cf8d1f56aa1424bc9b5d58790298e5b310969e50c222563b54e60854e1b0100448aca8c5ccbf5546ce4c3cd5a733fec25fb94e1e0f966bcbd28a4d8fe4f556eaa1104a793006619700798354c6ae05025040965e3083562bfa20968c04007d21dc02c9fd1f75e1ff40f439bdde4e784012e52049b483d02f81b88f5f57816b3fecec79cfca8d37203e769759d6b6a56b7605ced8ee18475a77ff0963a565fb6021d216c01b1098e40550a1cfd80e918d685a7b099a4f8ed654cd76ca61fe5ad8a31ec558fdbfa706d5e738bceae81fe777c307d5bc72183a4c2d35732ab916a781b9912160a3fd2a2e74dd690c57bdfdc1f069f949170ef8cb9c13c12138116bca7a8c59363799be7005c51bc25a8bbe2cf5ddf6aa161693782b0e7feb8a768f391b49d4c978c96dbb52f21c122eba9f17c8bed10591958cf06321a248b5f76ceedfe0d080d6aeadc11b237b3326dd04b86ac37c0d131544888db9e128d059761ad9a393e96c3b41c13c5a381bff187a75de560ba6eb3faa5ff8d2bb3c88f8de5efc2fb2200cfda6d07ceae22577064334fbf76a23e62e6059211d995b879f6b7d3f7fcf03652b81e6b7cdeff947ad185d3c6269ca247b429c3b872a8f1ef60407d29a874f4ec31c9effed55543a65a6b4d778cebcd43b7905f3960140bd783540a7353014bda8e9c7a34a5f428fd1f8eb11e837dd9d586487fdebcb1ecd3a003ff0fda4be617fecf1ff0ef2c74664d60a4b9423f3297bc8eb91b4ee1d73272abbef3e7a828a7d7ab055a8eb58fe379de85338304e26e3620941b463e9049fd105c74c91cc4d71b0f76e2c2e4825106aa7ce2a3adbbc7a0443ece58e752b47e6f677eff7c5c568a89d6e36b165c39132a0f27080ece2a94c320b002c77f82662675a7713c7067081cac15994698c41ff4754268ae1676384ff799783f55d7e5a1a0920300000000000000d98440c355927629f2bcf9dc405a18ca0264400abf38e90000000000000000008faf2cddffbfa69bf32eb718e88ec75603ed7c7a8825ce0f27a114bd7a4ab74d0c7b8d90ccc1c3ca6620def782e24d75aed70eb676437f62677a69e0994cd82d72e95493c830fe9515329f40b7025326dec33a527c5d999298eaa3690fd0d38a02fc6e0bc16dbe19f353027edc014411e1138087221492f5d5e5cc9d0a1acd3f581eda9a807aa0e609f935f626d96351e0ff116686cbeb8939feecd5dac8cf45101942cc7cec21b7f337df5431bcf7e504b7c427f70a10e1cb8993a661306a0576b638a0171e6800b5b35589d676eb30ed1a72e8f7b057eb281c4504195635b6b285ebaba019913a2520e43ed790231f047f7d3789c10ae7d724929f77aec1d33d9587580268ee14396f71e7ef588cb2560d6bd0795a9b97281229eb16de086553469fad7214ffc3e416f8b8e442dce1d37f9b1c88a5d8a8d9f2fe45bd8df213ecb4194c8554aea13cadcd502e51f6fec80418e772b5bd8d0228949058038b185909ee542848680f9ad43f4057d676d5e21ae3d7e0e4a28c04f112a94707f032b35915e42993ff148291b8babe026646ee41905992db217561b90811c4702a14f312fe5d2ae7257db6be1034cc1c346b76a853ce274bf0435e18f7e86c660c18c80f30505dd4cf2ae2a1893b83c62d61bfeadc1f913e4cab2b897e096dd3fe3525090410cb23bab36cdf200a36014032cf6e5121803c5a0c4a273a19f340163fc6265425d513a1294b8439276394945d94a589708e32a1cb30f1fa4b2f08e01dc5e8c6732e6dc59b5c8cb400000000000000592c9b68f09c8f5ddb20b4ae08b4d9df548e5ed6cd47b91a4bea8b6aa52edf64576aef1e43f2958437fdc20fbbd0d4e13d8cce1193b2f9b4f107e25af178d056e1b1e40bd75b013f7484fae0bc447b1ffaf34819fe3ad1a634c94345e26e1e68dec08723a37b05d1594a66a4718a51d4d67fc880c9d640f4eacc509873f1a103c87f69", @ANYRES32=r0, @ANYRES64=r0, @ANYRESOCT=r0, @ANYRESOCT=r0, @ANYRESOCT=r0, @ANYRES8=r0], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) (async) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYRES16=r3], 0x50) (async) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="0313bfd0c71b51afa04972a57e8c92b8148ad91b6eaf167d75ae034bd2f7bf01582e28f881d9d04da575bfaa", @ANYRESDEC=r2, @ANYRES64=r1], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r5}, 0x10) (async) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYRESDEC, @ANYRES32, @ANYBLOB="000032a76383ef2beaa800"/20, @ANYRES32=0x0, @ANYRES32=r3, @ANYBLOB="00000000fdff"], 0x48) (async) prctl$PR_SET_NAME(0xf, &(0x7f0000000280)='+}[@\x00\xda\xa3_\xdf\xdc\xe7\xc4\xe7\xde\xf6\xd2\xc6\xbd=\xd5O\xe22;T\xe2\x97D\x91\xb0\xf9R\b\xd8\xfe\b\xe1%\r\x99\x7fi\xa8\xbbd\xac\x97!\x12\x87\x8e[\x8d Q{\xe0\xa4@v\xf8E\x8c\x16\"$a\x12#\x90?\x99}\x15\x83\x89p\x8c\xf0c\\t\xe6\xde\xa2p\'\x91\xf1\xc1\xc8\xed\x86\x19\xcc\xe8<\xd80\xe6wh\x90\x81\x9dTU\xc7KOlS\x97\xd0\xd8T') r6 = syz_io_uring_setup(0xd2, &(0x7f0000000380)={0x0, 0x629b, 0x80, 0x0, 0x334}, &(0x7f0000000300)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) (async) sendmsg$IEEE802154_LLSEC_ADD_DEV(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x4, 0x700000000000000, 0x0, 0x1}, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x58}}, 0x0) (async) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000000c0)={0x1, &(0x7f0000000200)=[{0x30, 0x0, 0x0, 0x4}]}, 0x10) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) syz_io_uring_submit(r7, r8, &(0x7f0000000200)=@IORING_OP_MADVISE={0x19, 0x7b, 0x0, 0x0, 0x0, &(0x7f0000011000/0x4000)=nil, 0x4000, 0xc}) io_uring_enter(r6, 0x47bc, 0x0, 0x0, 0x0, 0x0) (async) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r0, 0xf504, 0x0) (async) write$binfmt_script(r0, &(0x7f0000000000), 0xfea7) (async) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) (async) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000fc850000000400"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) (async) socket(0x1a, 0x6, 0xc700) syz_open_dev$usbfs(&(0x7f0000000000), 0x20000007d, 0x0) (async) r9 = dup3(r4, 0xffffffffffffffff, 0x0) ioctl$MON_IOCG_STATS(r9, 0xc0109207, &(0x7f00000001c0)) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x0) r10 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r10, 0x8946, &(0x7f0000000100)={'veth0_vlan\x00', 0x0}) 1.758186681s ago: executing program 9 (id=6462): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x1, 0x4, 0x7fe2, 0x2, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) syz_mount_image$vfat(&(0x7f0000000280), &(0x7f0000000240)='./file0\x00', 0x1018000, &(0x7f00000003c0)=ANY=[@ANYRES8=0x0, @ANYRES16, @ANYRES16=0x0, @ANYRESOCT, @ANYRES32, @ANYRESDEC], 0x1, 0x2ee, &(0x7f00000006c0)="$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") r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040), 0x208e24b) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x5, 0x2, 0x1, 0xb, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x10, 0x2, &(0x7f0000000100)=@raw=[@ldst={0x1, 0x2, 0x4, 0x0, 0x1, 0x15}, @jmp={0x5, 0x0, 0x9, 0x0, 0x0, 0xfffffffffffffe88}], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c003d000000000000000000850000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x22a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0xc00000}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) bpf$MAP_CREATE(0x0, &(0x7f0000000780)=@base={0xf, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002f00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r3 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) syz_emit_ethernet(0x6a, &(0x7f0000000000)={@random="b6776eb1167d", @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0xd, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0xfffd, 0x4e20, 0x48, 0x0, @wg=@cookie={0x3, 0x0, "6d4dfdeb8cf7bbfe143803bec2ce783e04cd32308cdd8dde", "c71cb8adfce542a4bc5a026c20b0d0c45787e4aa3863ec3c5c95083c1728364c"}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 1.757471681s ago: executing program 8 (id=6463): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f0000000040)={0xb}, 0x1) sendto$inet6(r0, &(0x7f0000000100), 0x0, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) 1.746312691s ago: executing program 0 (id=6464): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x1, 0x4, 0x7fe2, 0x2, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) syz_mount_image$vfat(&(0x7f0000000280), &(0x7f0000000240)='./file0\x00', 0x1018000, &(0x7f00000003c0)=ANY=[@ANYRES8=0x0, @ANYRES16, @ANYRES16=0x0, @ANYRESOCT, @ANYRES32, @ANYRESDEC], 0x1, 0x2ee, &(0x7f00000006c0)="$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") r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040), 0x208e24b) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x5, 0x2, 0x1, 0xb, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x10, 0x2, &(0x7f0000000100)=@raw=[@ldst={0x1, 0x2, 0x4, 0x0, 0x1, 0x15}, @jmp={0x5, 0x0, 0x9, 0x0, 0x0, 0xfffffffffffffe88}], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c003d000000000000000000850000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000006900000000000001000000940000000fad413e85000000070000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x22a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0xc00000}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002f00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) syz_emit_ethernet(0x6a, &(0x7f0000000000)={@random="b6776eb1167d", @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0xd, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0xfffd, 0x4e20, 0x48, 0x0, @wg=@cookie={0x3, 0x0, "6d4dfdeb8cf7bbfe143803bec2ce783e04cd32308cdd8dde", "c71cb8adfce542a4bc5a026c20b0d0c45787e4aa3863ec3c5c95083c1728364c"}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 1.641352616s ago: executing program 8 (id=6468): getpid() mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x1) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0xd4) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r2, 0x0, 0x36b}, 0x18) r3 = dup2(r0, r0) ioctl$BLKTRACESETUP(r3, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x200000a, 0x1, 0x8}) ioctl$BLKTRACESETUP(r3, 0x1276, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000ac0e00"/20, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x9, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000580)='kmem_cache_free\x00'}, 0x10) syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="0380c2000000bbbbbbbbbbbb0800450000300000000000019078ac1eac1414aa030490781200183f250000000068000000013c93055800017f0008010000"], 0x0) 1.5530217s ago: executing program 3 (id=6470): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000005000000020000000010"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) creat(&(0x7f00000000c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r3, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) r4 = dup(r3) write$RDMA_USER_CM_CMD_SET_OPTION(r4, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) write$binfmt_elf64(r4, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r4]) creat(&(0x7f0000000380)='./file0\x00', 0x80) 1.33662139s ago: executing program 3 (id=6471): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={0x0, 0xe8}}, 0x0) 1.3278659s ago: executing program 8 (id=6472): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000180)={@private1={0xfc, 0x1, '\x00', 0x1}, 0x8000000, 0x0, 0x2, 0x1, 0xfffc, 0x2000}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000b8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000100)={0x0, 0x3, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000005000100070000000900020073797a31000000001400078005001500070000000800124000000000050005000200000005000400000000000d000300686173683a6e6574"], 0x5c}}, 0x0) sendmsg$IPSET_CMD_DESTROY(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c00000070201e5c0306010000000000000000000000000005000100"], 0x1c}}, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r3, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r3, 0x84, 0x15, &(0x7f0000000040)={0xb}, 0x1) sendto$inet6(r3, &(0x7f0000000100)="b8", 0xffe0, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) r4 = socket$netlink(0x10, 0x3, 0x400000000000004) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000020000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4a, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) socket$netlink(0x10, 0x3, 0x10) symlink(&(0x7f0000001780)='./file0/../file0\x00', &(0x7f00000017c0)='./file0\x00') bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r5}, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @dev}, 0x2}}, 0x2e) mknod$loop(&(0x7f00000000c0)='./file0/../file0\x00', 0x6001, 0x1) r6 = open$dir(&(0x7f0000000000)='./file0\x00', 0x200, 0x0) faccessat(r6, &(0x7f0000000040)='./file0/../file0\x00', 0x20) writev(r4, &(0x7f0000019440)=[{&(0x7f0000000200)="480000001400190d7ebdeb75fd0d8c562c84d8c033ed7a80ffe0090f000060000000a2bc5603ca00000f7f89000000200000004a2471083ec6991778581acb6c0101ff0000000309", 0x48}], 0x1) r7 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x1a3cc2, 0x42) sendfile(r7, r7, 0x0, 0x80000000) 1.320807301s ago: executing program 3 (id=6473): pipe2$watch_queue(0x0, 0x80) (async) syz_emit_ethernet(0x3e, &(0x7f0000000100)={@local, @local, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "6410a6", 0x8, 0x0, 0x1, @private2, @local, {[@routing={0x89, 0x0, 0x1, 0x4}]}}}}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000070000000010"], 0x48) (async) r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x0, 0xb, 0x0, 0x0, 0x7995}, 0xfcb5, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="362d97444edf90536f2f70fe56ed2714c110095404bed261f29eb90b819240a99fae804e99ee65c195cb1de5ff690658027e858769ccfcb3f838077c4544bda24260b1cc0b3f10ec3900f197ca77e3a91d9f56f7e5a41c6b4d1b5cb85d4177de0946f7d725239c5347695da12fd056162a8540325a7b2a4afa6027a9d3e6f0665d763aafa09d3dac65d3045ea1230330a34c71f29d13dd015c5ca71b3374711f646f93d249333fa4a92d6e65bf584f1be350f71a5ae2bca79099d5d4db97dabc7f830c6492d79fbba16496ceaf13c36340b610f54880ba576e85e3a2afbeea98a9bdb657956c197807fc354aac", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) (async) syz_io_uring_setup(0x16a1, 0x0, 0x0, 0x0) (async) request_key(&(0x7f0000000540)='dns_resolver\x00', &(0x7f0000001ffb)={'syz', 0x0}, &(0x7f0000000000)='*\x00\x84d\'\fnv\xdf\x00\x00\x00\x00\x000\x00\xa5^^\x96n\x00\xe3\xa3\x89\x90&)\bT\x91\x14\xba\x190\xe3\x01\x00:\xb2\xbe\x1d\x00', 0xfffffffffffffffe) 1.307592691s ago: executing program 8 (id=6474): prctl$PR_GET_FP_MODE(0x2e) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x0, &(0x7f0000010140)={[{@user_xattr}, {@noquota}, {@dioread_nolock}, {@jqfmt_vfsv1}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x70}}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x7b1}}, {@stripe={'stripe', 0x3d, 0x20}}, {@bsdgroups}, {@max_batch_time={'max_batch_time', 0x3d, 0x3fe}}, {@user_xattr}, {@bsdgroups}]}, 0x1, 0x562, &(0x7f0000001080)="$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") signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x80800) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="4c00000002060108000034e40000000000000000050001000600000005000400000000000900020073797a3100000080050005000200000011000300686173"], 0x4c}}, 0x2) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x54, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x29}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e21}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) bpf$PROG_LOAD(0x5, 0x0, 0xfffffffffffffe3c) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000400)={0x1c, 0x3, 0x6, 0x201, 0x0, 0x0, {0x5}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) 1.251120944s ago: executing program 3 (id=6475): r0 = socket(0x11, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000fc850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000005c0)={'gre0\x00', 0x0}) bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @dev}, 0x14) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000240)=0x4e6f, 0x4) sendmsg$netlink(r0, 0x0, 0x1) 1.250920334s ago: executing program 3 (id=6476): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) iopl(0x3) r0 = gettid() timer_create(0x0, &(0x7f0000000000)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, &(0x7f0000000600)={0x7, 0x9, 0x0, 0x40, 0x5, 0x0, [{0x9, 0x4, 0x5, '\x00', 0x350e}, {0x4, 0x7, 0x0, '\x00', 0x485}, {0xffffffffffffffff, 0x9, 0x5, '\x00', 0x2}, {0x1, 0x6, 0x0, '\x00', 0x980}, {0xe3, 0x7, 0x1, '\x00', 0x8a12fd676f27645a}]}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xfffff000) openat$sndseq(0xffffffffffffff9c, 0x0, 0x800) 1.075882871s ago: executing program 8 (id=6477): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) iopl(0x3) r1 = gettid() timer_create(0x0, &(0x7f0000000000)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, &(0x7f0000000600)={0x7, 0x9, 0x0, 0x40, 0x5, 0x0, [{0x9, 0x4, 0x5, '\x00', 0x350e}, {0x4, 0x7, 0x0, '\x00', 0x485}, {0xffffffffffffffff, 0x9, 0x5, '\x00', 0x2}, {0x1, 0x6, 0x0, '\x00', 0x980}, {0xe3, 0x7, 0x1, '\x00', 0x8a12fd676f27645a}]}) futex(&(0x7f000000cffc)=0x1, 0x6, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xfffff000) dup(0xffffffffffffffff) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000001100)='./file0\x00', 0x3000490, &(0x7f0000000280)={[{@lazytime}, {@usrjquota}, {@errors_remount}, {@bsdgroups}, {@auto_da_alloc}, {@jqfmt_vfsv1}, {@nouid32}, {@journal_dev={'journal_dev', 0x3d, 0x7}}, {@debug}, {}]}, 0x45, 0x7b1, &(0x7f00000004c0)="$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") r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040), 0x208e24b) fadvise64(r2, 0x100e2, 0x8, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000c80)='kfree\x00', r0}, 0x18) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) 910.785239ms ago: executing program 9 (id=6478): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x1, 0x4, 0x7fe2, 0x2, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) syz_mount_image$vfat(&(0x7f0000000280), &(0x7f0000000240)='./file0\x00', 0x1018000, &(0x7f00000003c0)=ANY=[@ANYRES8=0x0, @ANYRES16, @ANYRES16=0x0, @ANYRESOCT, @ANYRES32, @ANYRESDEC], 0x1, 0x2ee, &(0x7f00000006c0)="$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") r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040), 0x208e24b) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x5, 0x2, 0x1, 0xb, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c003d000000000000000000850000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x22a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0xc00000}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) syz_emit_ethernet(0x6a, &(0x7f0000000000)={@random="b6776eb1167d", @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0xd, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0xfffd, 0x4e20, 0x48, 0x0, @wg=@cookie={0x3, 0x0, "6d4dfdeb8cf7bbfe143803bec2ce783e04cd32308cdd8dde", "c71cb8adfce542a4bc5a026c20b0d0c45787e4aa3863ec3c5c95083c1728364c"}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 812.789633ms ago: executing program 3 (id=6479): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) iopl(0x3) r1 = gettid() timer_create(0x0, &(0x7f0000000000)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, &(0x7f0000000600)={0x7, 0x9, 0x0, 0x40, 0x5, 0x0, [{0x9, 0x4, 0x5, '\x00', 0x350e}, {0x4, 0x7, 0x0, '\x00', 0x485}, {0xffffffffffffffff, 0x9, 0x5, '\x00', 0x2}, {0x1, 0x6, 0x0, '\x00', 0x980}, {0xe3, 0x7, 0x1, '\x00', 0x8a12fd676f27645a}]}) futex(&(0x7f000000cffc)=0x1, 0x6, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xfffff000) dup(0xffffffffffffffff) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000001100)='./file0\x00', 0x3000490, &(0x7f0000000280)={[{@lazytime}, {@usrjquota}, {@errors_remount}, {@bsdgroups}, {@auto_da_alloc}, {@jqfmt_vfsv1}, {@nouid32}, {@journal_dev={'journal_dev', 0x3d, 0x7}}, {@debug}, {}]}, 0x45, 0x7b1, &(0x7f00000004c0)="$eJzs3c9rHNcdAPDvrFY/7VYqFFr3JCi0BuNV5ap2C4Wq9FAKNRjaUw+1xWotHK20RrsylhCJTQjkEkhCbsnF5/y8hFzz45BL8n8EGyeRTRxyCAqzP6SVtCvvOtKuHX8+MNZ7M2/2ve+82TfPmtFuAE+tyfSfTMSJiHg5iRivr08iYrCaykbM1so92NzIp0sSW1v/+Sqplrm/uZGPpn1Sx+qZX0fExy9EnMrsr7e8tr44VywWVur5qcrS1any2vrpK0tzC4WFwvLZ6ZmZM+f+dO7s4cX6zefrx++88s/fvzP73fO/evelT5KYjeP1bc1xHJbJmKwfk8H0EO7yj8OurG/ef7aDQk1nQPYoG0OX0o4ZqPfKiRiPgYP6Z7SXLQMAjspzEbHVzkDbLQDAEy2pXf//1u92AAC90vg9wP3NjXxj6e9vJHrr7t8jYqQWf+P+Zm1Ltn7PbqR6H3TsfrLrzkgSEROHUP9kRLzxwf/fSpc4ovuQAK3cuBkRlyYm94//yb5nFrr1h9arF5ozk3s2Gv+gdz5M5z9/bjX/y2zPf6LF/Ge4xXv3UTz8/Z+5fQjVtJXO//7a9Gzbg6b46yYG6rmfVed8g8nlK8VCOrb9PCJOxuBwmp8+oI6T976/125b8/zv61efeTOtP/25UyJzOzu8e5/5ucrcj4m52d2bEb/Jtoo/Hf+Hq/2ftJn/Xuiwjn/95cXX221L40/jbSz74z9aW7ciftey/5PtMsmBzydOVU+HqcZJ0cJ7szHWrv7J7E7/p0taf+P/Ar2Q9v/YwfFPJM3Pa5Y7funtp8U+uzX+UbtCzed/6/hbn/9DyX+r6aH6uutzlcrKdMRQ8u/968/s7NvIN8qn8Z/8bev3f2P8a3H+/y99/UsdHojsnS/ffvT4j1Ya/3xX/d91IkYeLA60q7+z/p/ZtU8n41+nDXzU4wYAAAAAAAAAAAAAAAAAAAAAAAAA3chExPFIMrntdCaTy9W+w/uXMZYplsqVU5dLq8vzUf2u7IkYzDQ+6nK86fNQp+ufh9/In9mT/2NE/CIiXhsereZz+VJxvt/BAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEDdsTbf/5/6YnhP4YF+tBAAOBIjLuwA8LRJstl+NwEA6LWRrkqPHlk7AIDe6e76DwD8FLj+A8DT5yHX/71/BgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADdunD+fLpsfbu5kU/z89fWVhdL107PF8qLuaXVfC5fWrmaWyiVFoqFXL601PaFbtR+FEulqzOxvHp9qlIoV6bKa+sXl0qry5WLV5bmFgoXC4M9iwwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOldeW1+cKxYLKxJ9SSx+WuuHx6U9Et0l4kat/x6X9hxeIoZ2RonR/gxOAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAE+AHwIAAP//4VQjgA==") r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040), 0x208e24b) fadvise64(r2, 0x100e2, 0x8, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000c80)='kfree\x00', r0}, 0x18) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) 812.259813ms ago: executing program 0 (id=6480): socket$kcm(0x29, 0x0, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x300000c, 0x50032, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f00000005c0)='./bus\x00', 0x66842, 0x19) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c0000000014"], 0x48) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000b40)='neigh_create\x00'}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) pwritev2(r1, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0xffffffe4}], 0x1, 0x1400, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) 520.752017ms ago: executing program 4 (id=6483): openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x1) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0xd4) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r2, 0x0, 0x36b}, 0x18) r3 = dup2(r0, r0) ioctl$BLKTRACESETUP(r3, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x200000a, 0x1, 0x8}) ioctl$BLKTRACESETUP(r3, 0x1276, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000ac0e00"/20, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x9, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000580)='kmem_cache_free\x00'}, 0x10) syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="0380c2000000bbbbbbbbbbbb0800450000300000000000019078ac1eac1414aa030490781200183f250000000068000000013c93055800017f0008010000"], 0x0) 452.3004ms ago: executing program 4 (id=6484): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000646c6c25000000000020209b7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000900)='netlink_extack\x00', r0}, 0x10) r1 = openat(0xffffffffffffffff, &(0x7f0000000180)='./bus\x00', 0x105400, 0x56) r2 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0) write(0xffffffffffffffff, 0x0, 0x0) sendfile(r2, r1, 0x0, 0x3ffff) sendfile(r2, r1, 0x0, 0x7ffff000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r3, 0xc0a85320, &(0x7f0000001400)={{0x80}, 'port1\x00', 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r3, 0x40505330, &(0x7f00000000c0)={0x800000, 0x0, 0x2, 0x0, 0x0, 0x6}) r4 = socket(0x10, 0x3, 0x0) write(r4, &(0x7f0000000040)="1400000052004f030e789e7e27286d000a4149f3", 0x14) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000400)='kfree\x00', r5, 0x0, 0x4}, 0x18) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r6, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r6, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r6, 0x11a, 0x1, &(0x7f00000001c0)=@gcm_256={{0x304}, "6ae04425ace3f60c", "acba84f0a6731f234db1cc7f3f382ad796bd667cb12ea99509873931d2873103", "0f9dafb4", "ec3fff9afd96e6c0"}, 0x38) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r6, 0x6, 0x14, &(0x7f00000003c0)=0x3, 0x4) ioctl$int_in(r6, 0x5421, &(0x7f0000000140)=0x1) writev(r6, &(0x7f0000000080)=[{&(0x7f00000002c0)="ec", 0xfdef}], 0x1) close(r6) recvmmsg(r4, &(0x7f0000005c80)=[{{0x0, 0x0, 0x0}}], 0x344, 0x10122, 0x0) r7 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0xe2981) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r7, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) getpgid(0xffffffffffffffff) r8 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000200)={'veth1_to_bridge\x00'}) 372.285973ms ago: executing program 0 (id=6485): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb70300000800"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x3, [@decl_tag={0x1, 0x0, 0x0, 0x11, 0x1, 0x9}]}, {0x0, [0x30]}}, 0x0, 0x2b, 0x0, 0x1, 0xffff, 0x0, @void, @value}, 0x28) 267.938967ms ago: executing program 4 (id=6486): r0 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000080), 0x682800, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x4b0}}, 0x0) fchdir(r0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) mount(&(0x7f0000000340)=@filename='./cgroup\x00', &(0x7f0000000040)='./cgroup\x00', 0x0, 0x9001, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xb, 0x9d, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0xfffffffd, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000200)='mm_page_alloc\x00', r5}, 0x10) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r4, &(0x7f0000000080), &(0x7f0000001540)=""/155}, 0x20) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000080000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000a3850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r6}, 0x10) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r7) sendmsg$IEEE802154_ADD_IFACE(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="01000000ecffffffffff2000000005002000000000000c001f0070687930"], 0x28}}, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000080)={r4, &(0x7f0000000080), 0x0}, 0x20) mount$nfs4(0x0, &(0x7f00000001c0)='./cgroup\x00', 0x0, 0x4071, 0x0) 205.1538ms ago: executing program 4 (id=6487): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000005000000020000000010"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) creat(&(0x7f00000000c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) r3 = dup(r2) write$P9_RLERRORu(r3, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="1b0000000000000000000000eb40"], 0x50) write$RDMA_USER_CM_CMD_SET_OPTION(r3, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) write$binfmt_elf64(r3, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) chmod(&(0x7f0000000200)='./file0\x00', 0x144) 158.338393ms ago: executing program 4 (id=6488): creat(&(0x7f00000000c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) r2 = dup(r1) write$P9_RLERRORu(r2, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) write$binfmt_elf64(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) chmod(&(0x7f0000000200)='./file0\x00', 0x144) 96.987885ms ago: executing program 0 (id=6489): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000002900000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000680)=ANY=[@ANYBLOB="180000006006000000000000000000001811", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000fdffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002000000850000000300000095"], &(0x7f0000000040)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000180)='kfree\x00', r1}, 0x18) r2 = io_uring_setup(0x36ba, &(0x7f0000000080)={0x0, 0x0, 0x80, 0x0, 0x2dc}) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f0000000780)=[{0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f00000006c0)=""/141, 0x8d}], 0x5) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r2, 0x10, &(0x7f0000000380)={0x4, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)=""/245, 0xf5}], 0x0, 0x1}, 0x20) 63.192157ms ago: executing program 4 (id=6490): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) iopl(0x3) r0 = gettid() timer_create(0x0, &(0x7f0000000000)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex(&(0x7f000000cffc)=0x1, 0x6, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xfffff000) openat$sndseq(0xffffffffffffff9c, 0x0, 0x800) 0s ago: executing program 0 (id=6491): r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r0, 0x4b72, &(0x7f0000000000)={0x0, 0x0, 0xb, 0x3, 0xed, &(0x7f0000000480)="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"}) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000180)='sys_enter\x00', r1}, 0x10) r2 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x100) pipe2$watch_queue(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@bloom_filter={0x1e, 0x9, 0x100, 0xfffff001, 0x2, r2, 0x282, '\x00', 0x0, r2, 0x4, 0x1, 0x2, 0x7, @void, @value, @void, @value}, 0x50) syz_emit_ethernet(0x6e, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb86dd6000000000382b00fc0200000000000000001b0000000000fe8000000000000000579600000000aa670000000000000021000000ff9890780d87aedaaa7fc9a56dc2d42b221003a116fd256378cee186d69b1c57326a7371394d0c6bae77d286"], 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x11, 0x9, &(0x7f0000000240)=ANY=[@ANYBLOB="18110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b708000009000000738af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082000000"], &(0x7f0000000080)='syzkaller\x00', 0x1ff, 0x0, 0x0, 0x41100, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000002c0)={0x4, 0xe, 0x3, 0x1000}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000000380)=[0x1, r4, r2, r2, r2, r2], &(0x7f00000003c0)=[{0x3, 0x4, 0x9, 0x3}, {0x4, 0x3, 0x8, 0x7}, {0x1, 0x3, 0x6, 0x3}], 0x10, 0x0, @void, @value}, 0x94) socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="540000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800e0001006970366772657461700000001800028014000700fc00000000000000000000000000000008000a00", @ANYRES32=r8], 0x54}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="200000001000250800170000000000000a000000", @ANYRES32=r9, @ANYBLOB="0174dfdb"], 0x20}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000400)) kernel console output (not intermixed with test programs): ng (device loop3): ext4_enable_quotas:7145: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 356.473987][T19958] EXT4-fs (loop3): Cannot turn on quotas: error -117 [ 356.481117][T19958] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.5250: bg 0: block 40: padding at end of block bitmap is not set [ 356.498523][T19958] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 356.507521][T19958] EXT4-fs (loop3): 1 truncate cleaned up [ 356.517580][T19968] loop8: detected capacity change from 0 to 764 [ 356.617399][T19978] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 356.631580][T19978] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 356.645995][T19976] loop3: detected capacity change from 0 to 512 [ 356.654046][T19976] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 356.681970][T19976] EXT4-fs (loop3): 1 truncate cleaned up [ 356.937761][T19979] Set syz1 is full, maxelem 65536 reached [ 356.956717][T20001] SELinux: security_context_str_to_sid (ÿ) failed with errno=-22 [ 356.971800][T20001] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 357.001361][T20003] loop9: detected capacity change from 0 to 512 [ 357.015136][T20003] EXT4-fs (loop9): revision level too high, forcing read-only mode [ 357.026017][T20003] EXT4-fs (loop9): orphan cleanup on readonly fs [ 357.026849][T20001] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 357.032674][T20003] EXT4-fs warning (device loop9): ext4_enable_quotas:7145: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 357.057565][T20003] EXT4-fs (loop9): Cannot turn on quotas: error -117 [ 357.066489][T20003] EXT4-fs error (device loop9): ext4_validate_block_bitmap:441: comm syz.9.5266: bg 0: block 40: padding at end of block bitmap is not set [ 357.080911][T20003] EXT4-fs error (device loop9) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 357.087968][T20010] loop8: detected capacity change from 0 to 764 [ 357.090043][T20003] EXT4-fs (loop9): 1 truncate cleaned up [ 357.102384][T20001] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 357.127067][T20012] loop9: detected capacity change from 0 to 512 [ 357.134061][T20012] ext4: Bad value for 'debug_want_extra_isize' [ 357.139382][T20014] xt_hashlimit: max too large, truncated to 1048576 [ 357.152305][T20001] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 357.176855][T20016] xt_hashlimit: max too large, truncated to 1048576 [ 357.205714][T20001] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 357.218692][T20001] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 357.239978][T20001] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 357.248655][T20023] loop0: detected capacity change from 0 to 1024 [ 357.255537][T20023] EXT4-fs: Ignoring removed nobh option [ 357.261116][T20023] EXT4-fs: Ignoring removed bh option [ 357.261661][T20026] loop8: detected capacity change from 0 to 512 [ 357.271947][T20001] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 357.274855][T20026] EXT4-fs (loop8): mounting ext3 file system using the ext4 subsystem [ 357.289287][T20026] EXT4-fs (loop8): bad geometry: first data block is 0 with a 1k block and cluster size [ 357.316653][T20023] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4115: comm syz.0.5274: Allocating blocks 497-513 which overlap fs metadata [ 357.338836][T20031] netlink: 28 bytes leftover after parsing attributes in process `syz.8.5276'. [ 357.339646][T20023] EXT4-fs (loop0): pa ffff8881065b0a80: logic 256, phys. 385, len 8 [ 357.355843][T20023] EXT4-fs error (device loop0): ext4_mb_release_inode_pa:5366: group 0, free 0, pa_free 1 [ 357.366491][T20031] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5276'. [ 357.484496][T20041] loop8: detected capacity change from 0 to 764 [ 357.537420][T20047] xt_hashlimit: max too large, truncated to 1048576 [ 357.572472][T20049] loop8: detected capacity change from 0 to 1024 [ 357.594956][T20049] EXT4-fs: Ignoring removed nobh option [ 357.600609][T20049] EXT4-fs: Ignoring removed bh option [ 357.629444][T20057] xt_hashlimit: max too large, truncated to 1048576 [ 357.661394][T20049] EXT4-fs error (device loop8): ext4_mb_mark_diskspace_used:4115: comm syz.8.5283: Allocating blocks 497-513 which overlap fs metadata [ 357.686005][T20049] EXT4-fs (loop8): pa ffff8881065b0a10: logic 256, phys. 385, len 8 [ 357.694176][T20049] EXT4-fs error (device loop8): ext4_mb_release_inode_pa:5366: group 0, free 0, pa_free 1 [ 357.746012][T20075] loop0: detected capacity change from 0 to 764 [ 357.791684][T20079] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5291'. [ 357.817877][T20082] loop8: detected capacity change from 0 to 1024 [ 357.833522][T20082] EXT4-fs: Ignoring removed nobh option [ 357.839157][T20082] EXT4-fs: Ignoring removed bh option [ 357.874474][T20089] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5291'. [ 357.913760][T20094] xt_hashlimit: max too large, truncated to 1048576 [ 357.938025][T20082] EXT4-fs error (device loop8): ext4_mb_mark_diskspace_used:4115: comm syz.8.5294: Allocating blocks 497-513 which overlap fs metadata [ 357.954293][T20092] loop3: detected capacity change from 0 to 1024 [ 358.004932][T20082] EXT4-fs (loop8): pa ffff888106506b60: logic 256, phys. 385, len 8 [ 358.012967][T20082] EXT4-fs error (device loop8): ext4_mb_release_inode_pa:5366: group 0, free 0, pa_free 1 [ 358.232979][T20078] Set syz1 is full, maxelem 65536 reached [ 358.330920][T20107] loop4: detected capacity change from 0 to 128 [ 358.349293][T20105] loop8: detected capacity change from 0 to 1024 [ 358.356296][T20105] EXT4-fs: Ignoring removed nobh option [ 358.361916][T20105] EXT4-fs: Ignoring removed bh option [ 358.408109][T20120] xt_hashlimit: max too large, truncated to 1048576 [ 358.458323][T20105] EXT4-fs error (device loop8): ext4_mb_mark_diskspace_used:4115: comm syz.8.5302: Allocating blocks 497-513 which overlap fs metadata [ 358.473751][T20105] EXT4-fs (loop8): pa ffff888106506b60: logic 256, phys. 385, len 8 [ 358.481812][T20105] EXT4-fs error (device loop8): ext4_mb_release_inode_pa:5366: group 0, free 0, pa_free 1 [ 358.485801][T20124] xt_hashlimit: max too large, truncated to 1048576 [ 358.515509][T20131] netlink: 28 bytes leftover after parsing attributes in process `syz.9.5310'. [ 358.527981][T20132] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5308'. [ 358.533333][T20131] loop9: detected capacity change from 0 to 1024 [ 358.549052][T20131] EXT4-fs (loop9): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 358.562222][T20131] EXT4-fs (loop9): revision level too high, forcing read-only mode [ 358.570452][T20131] EXT4-fs (loop9): too many log groups per flexible block group [ 358.578250][T20131] EXT4-fs (loop9): failed to initialize mballoc (-12) [ 358.585311][T20131] EXT4-fs (loop9): mount failed [ 358.610805][T20137] loop0: detected capacity change from 0 to 764 [ 358.699778][T20146] loop0: detected capacity change from 0 to 1024 [ 358.707667][T20146] EXT4-fs: Ignoring removed nobh option [ 358.713256][T20146] EXT4-fs: Ignoring removed bh option [ 358.749311][T20152] loop8: detected capacity change from 0 to 1024 [ 358.756212][T20152] EXT4-fs: Ignoring removed nobh option [ 358.761805][T20152] EXT4-fs: Ignoring removed bh option [ 358.816347][T20146] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4115: comm syz.0.5315: Allocating blocks 497-513 which overlap fs metadata [ 358.867768][T20146] EXT4-fs (loop0): pa ffff888106506930: logic 256, phys. 385, len 8 [ 358.875913][T20146] EXT4-fs error (device loop0): ext4_mb_release_inode_pa:5366: group 0, free 0, pa_free 1 [ 358.890097][T20152] EXT4-fs error (device loop8): ext4_mb_mark_diskspace_used:4115: comm syz.8.5316: Allocating blocks 497-513 which overlap fs metadata [ 358.950968][T20141] Set syz1 is full, maxelem 65536 reached [ 358.992971][T20152] EXT4-fs (loop8): pa ffff888106506c40: logic 256, phys. 385, len 8 [ 359.001116][T20152] EXT4-fs error (device loop8): ext4_mb_release_inode_pa:5366: group 0, free 0, pa_free 1 [ 359.059913][T20171] loop4: detected capacity change from 0 to 764 [ 359.191105][T20185] loop3: detected capacity change from 0 to 512 [ 359.200218][T20185] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 359.217418][T20185] EXT4-fs (loop3): 1 truncate cleaned up [ 359.232759][T20193] xt_hashlimit: max too large, truncated to 1048576 [ 359.274376][T20199] FAULT_INJECTION: forcing a failure. [ 359.274376][T20199] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 359.287605][T20199] CPU: 1 UID: 0 PID: 20199 Comm: syz.8.5333 Not tainted 6.14.0-rc3-syzkaller-00079-g87a132e73910 #0 [ 359.287698][T20199] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 359.287712][T20199] Call Trace: [ 359.287718][T20199] [ 359.287725][T20199] dump_stack_lvl+0xf2/0x150 [ 359.287784][T20199] dump_stack+0x15/0x1a [ 359.287802][T20199] should_fail_ex+0x24a/0x260 [ 359.287840][T20199] should_fail+0xb/0x10 [ 359.287863][T20199] should_fail_usercopy+0x1a/0x20 [ 359.287905][T20199] _copy_to_user+0x20/0xa0 [ 359.287938][T20199] simple_read_from_buffer+0xa0/0x110 [ 359.287996][T20199] proc_fail_nth_read+0xf9/0x140 [ 359.288027][T20199] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 359.288050][T20199] vfs_read+0x19b/0x6f0 [ 359.288103][T20199] ? __rcu_read_unlock+0x4e/0x70 [ 359.288124][T20199] ? __fget_files+0x17c/0x1c0 [ 359.288179][T20199] ksys_read+0xe8/0x1b0 [ 359.288204][T20199] __x64_sys_read+0x42/0x50 [ 359.288304][T20199] x64_sys_call+0x2874/0x2dc0 [ 359.288332][T20199] do_syscall_64+0xc9/0x1c0 [ 359.288360][T20199] ? clear_bhb_loop+0x55/0xb0 [ 359.288422][T20199] ? clear_bhb_loop+0x55/0xb0 [ 359.288444][T20199] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 359.288471][T20199] RIP: 0033:0x7fcd9fcdb7fc [ 359.288486][T20199] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 359.288511][T20199] RSP: 002b:00007fcd9e347030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 359.288559][T20199] RAX: ffffffffffffffda RBX: 00007fcd9fef5fa0 RCX: 00007fcd9fcdb7fc [ 359.288569][T20199] RDX: 000000000000000f RSI: 00007fcd9e3470a0 RDI: 0000000000000003 [ 359.288580][T20199] RBP: 00007fcd9e347090 R08: 0000000000000000 R09: 0000000000000000 [ 359.288654][T20199] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 359.288663][T20199] R13: 0000000000000000 R14: 00007fcd9fef5fa0 R15: 00007fff16f80f78 [ 359.288679][T20199] [ 359.488608][T20200] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5331'. [ 359.498106][T20202] loop9: detected capacity change from 0 to 1024 [ 359.507106][T20202] EXT4-fs: Ignoring removed nobh option [ 359.512744][T20202] EXT4-fs: Ignoring removed bh option [ 359.521598][T20204] loop0: detected capacity change from 0 to 1024 [ 359.544929][T20202] EXT4-fs error (device loop9): ext4_mb_mark_diskspace_used:4115: comm syz.9.5334: Allocating blocks 497-513 which overlap fs metadata [ 359.551679][T20210] loop8: detected capacity change from 0 to 1024 [ 359.559968][T20202] EXT4-fs (loop9): pa ffff8881065b0a10: logic 256, phys. 385, len 8 [ 359.565797][T20210] EXT4-fs: Ignoring removed nobh option [ 359.573254][T20202] EXT4-fs error (device loop9): ext4_mb_release_inode_pa:5366: group 0, [ 359.578772][T20210] EXT4-fs: Ignoring removed bh option [ 359.579551][T20204] EXT4-fs: Ignoring removed nobh option [ 359.587247][T20202] free 0, pa_free 1 [ 359.592612][T20204] EXT4-fs: Ignoring removed bh option [ 359.652179][T20204] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4115: comm syz.0.5335: Allocating blocks 497-513 which overlap fs metadata [ 359.682737][T20210] EXT4-fs error (device loop8): ext4_mb_mark_diskspace_used:4115: comm syz.8.5337: Allocating blocks 497-513 which overlap fs metadata [ 359.693824][T20204] EXT4-fs (loop0): pa ffff8881065b09a0: logic 256, phys. 385, len 8 [ 359.704663][T20204] EXT4-fs error (device loop0): ext4_mb_release_inode_pa:5366: group 0, free 0, pa_free 1 [ 359.706604][T20210] EXT4-fs (loop8): pa ffff888106506bd0: logic 256, phys. 385, len 8 [ 359.722667][T20210] EXT4-fs error (device loop8): ext4_mb_release_inode_pa:5366: group 0, free 0, pa_free 1 [ 359.821292][T20236] xt_hashlimit: max too large, truncated to 1048576 [ 359.829768][T20232] loop9: detected capacity change from 0 to 512 [ 359.847266][T20232] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 359.876301][T20232] EXT4-fs (loop9): 1 truncate cleaned up [ 359.899713][T20250] loop0: detected capacity change from 0 to 1024 [ 359.909274][T20248] bond1: entered promiscuous mode [ 359.914386][T20248] bond1: entered allmulticast mode [ 359.921760][T20248] 8021q: adding VLAN 0 to HW filter on device bond1 [ 359.936739][T20248] bond1 (unregistering): Released all slaves [ 360.041985][T20272] xt_hashlimit: max too large, truncated to 1048576 [ 360.123353][T20288] loop8: detected capacity change from 0 to 1024 [ 360.136209][T20283] loop0: detected capacity change from 0 to 512 [ 360.143033][T20283] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 360.150104][T20291] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5363'. [ 360.155412][T20283] EXT4-fs (loop0): 1 truncate cleaned up [ 360.180646][T20291] loop4: detected capacity change from 0 to 1024 [ 360.242678][T20299] loop0: detected capacity change from 0 to 1024 [ 360.251996][T20302] netlink: 28 bytes leftover after parsing attributes in process `syz.9.5367'. [ 360.269909][T20302] loop9: detected capacity change from 0 to 1024 [ 360.283363][T20302] EXT4-fs (loop9): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 360.284325][T20308] xt_hashlimit: max too large, truncated to 1048576 [ 360.302299][T20302] EXT4-fs (loop9): revision level too high, forcing read-only mode [ 360.329857][T20311] loop3: detected capacity change from 0 to 512 [ 360.336684][ T29] kauditd_printk_skb: 140 callbacks suppressed [ 360.336774][ T29] audit: type=1326 audit(1740030600.390:14463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20310 comm="syz.3.5369" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4db8eccde9 code=0x7ffc0000 [ 360.366577][ T29] audit: type=1326 audit(1740030600.390:14464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20310 comm="syz.3.5369" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4db8eccde9 code=0x7ffc0000 [ 360.367092][T20302] EXT4-fs (loop9): too many log groups per flexible block group [ 360.390328][ T29] audit: type=1326 audit(1740030600.390:14465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20310 comm="syz.3.5369" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4db8eccde9 code=0x7ffc0000 [ 360.390363][ T29] audit: type=1326 audit(1740030600.390:14466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20310 comm="syz.3.5369" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4db8eccde9 code=0x7ffc0000 [ 360.398037][T20302] EXT4-fs (loop9): failed to initialize mballoc (-12) [ 360.421511][ T29] audit: type=1326 audit(1740030600.390:14467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20310 comm="syz.3.5369" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4db8eccde9 code=0x7ffc0000 [ 360.421540][ T29] audit: type=1326 audit(1740030600.390:14468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20310 comm="syz.3.5369" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4db8eccde9 code=0x7ffc0000 [ 360.445348][T20302] EXT4-fs (loop9): mount failed [ 360.451850][ T29] audit: type=1326 audit(1740030600.390:14469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20310 comm="syz.3.5369" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4db8eccde9 code=0x7ffc0000 [ 360.451876][ T29] audit: type=1326 audit(1740030600.390:14470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20310 comm="syz.3.5369" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4db8eccde9 code=0x7ffc0000 [ 360.551169][ T29] audit: type=1326 audit(1740030600.390:14471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20310 comm="syz.3.5369" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4db8eccde9 code=0x7ffc0000 [ 360.574895][ T29] audit: type=1326 audit(1740030600.390:14472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20310 comm="syz.3.5369" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4db8eccde9 code=0x7ffc0000 [ 360.600859][T20311] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 360.609489][T20311] EXT4-fs (loop3): orphan cleanup on readonly fs [ 360.624374][T20311] EXT4-fs warning (device loop3): ext4_enable_quotas:7145: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 360.665437][T20311] EXT4-fs (loop3): Cannot turn on quotas: error -117 [ 360.672545][T20311] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.5369: bg 0: block 40: padding at end of block bitmap is not set [ 360.687994][T20311] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 360.696915][T20311] EXT4-fs (loop3): 1 truncate cleaned up [ 360.737944][T20329] loop4: detected capacity change from 0 to 1024 [ 360.750460][T20329] EXT4-fs: Ignoring removed nobh option [ 360.756129][T20329] EXT4-fs: Ignoring removed bh option [ 360.768459][T20334] loop3: detected capacity change from 0 to 1024 [ 360.771684][T20329] loop4: detected capacity change from 0 to 2048 [ 360.785455][T20334] EXT4-fs: Ignoring removed nobh option [ 360.791082][T20334] EXT4-fs: Ignoring removed bh option [ 360.820455][T20337] xt_hashlimit: max too large, truncated to 1048576 [ 360.837319][T20342] loop0: detected capacity change from 0 to 512 [ 360.847454][T20342] ext4: Bad value for 'debug_want_extra_isize' [ 360.871258][T20334] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4115: comm syz.3.5378: Allocating blocks 497-513 which overlap fs metadata [ 360.916804][T20334] EXT4-fs (loop3): pa ffff888106506d20: logic 256, phys. 385, len 8 [ 360.924900][T20334] EXT4-fs error (device loop3): ext4_mb_release_inode_pa:5366: group 0, free 0, pa_free 1 [ 361.032811][T20351] loop9: detected capacity change from 0 to 512 [ 361.078422][T20351] EXT4-fs (loop9): revision level too high, forcing read-only mode [ 361.087926][T20351] EXT4-fs (loop9): orphan cleanup on readonly fs [ 361.098139][T20351] EXT4-fs warning (device loop9): ext4_enable_quotas:7145: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 361.132951][T20351] EXT4-fs (loop9): Cannot turn on quotas: error -117 [ 361.160965][T20361] loop3: detected capacity change from 0 to 512 [ 361.169008][T20361] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 361.177271][T20361] EXT4-fs (loop3): bad geometry: first data block is 0 with a 1k block and cluster size [ 361.194929][T20351] EXT4-fs error (device loop9): ext4_validate_block_bitmap:441: comm syz.9.5385: bg 0: block 40: padding at end of block bitmap is not set [ 361.212905][T20351] EXT4-fs error (device loop9) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 361.226114][T20351] EXT4-fs (loop9): 1 truncate cleaned up [ 361.238208][T20363] loop8: detected capacity change from 0 to 512 [ 361.279372][T20367] loop3: detected capacity change from 0 to 1024 [ 361.286205][T20367] EXT4-fs: Ignoring removed nobh option [ 361.291801][T20367] EXT4-fs: Ignoring removed bh option [ 361.315886][T20363] EXT4-fs (loop8): revision level too high, forcing read-only mode [ 361.324037][T20363] EXT4-fs (loop8): orphan cleanup on readonly fs [ 361.330951][T20363] EXT4-fs warning (device loop8): ext4_enable_quotas:7145: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 361.346771][T20363] EXT4-fs (loop8): Cannot turn on quotas: error -117 [ 361.354512][T20363] EXT4-fs error (device loop8): ext4_validate_block_bitmap:441: comm syz.8.5389: bg 0: block 40: padding at end of block bitmap is not set [ 361.369043][T20363] EXT4-fs error (device loop8) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 361.384425][T20363] EXT4-fs (loop8): 1 truncate cleaned up [ 361.395649][T20367] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4115: comm syz.3.5391: Allocating blocks 497-513 which overlap fs metadata [ 361.430076][T20367] EXT4-fs (loop3): pa ffff888106506d90: logic 256, phys. 385, len 8 [ 361.438110][T20367] EXT4-fs error (device loop3): ext4_mb_release_inode_pa:5366: group 0, free 0, pa_free 1 [ 361.722884][T20385] FAULT_INJECTION: forcing a failure. [ 361.722884][T20385] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 361.736029][T20385] CPU: 1 UID: 0 PID: 20385 Comm: syz.0.5397 Not tainted 6.14.0-rc3-syzkaller-00079-g87a132e73910 #0 [ 361.736055][T20385] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 361.736068][T20385] Call Trace: [ 361.736075][T20385] [ 361.736082][T20385] dump_stack_lvl+0xf2/0x150 [ 361.736112][T20385] dump_stack+0x15/0x1a [ 361.736145][T20385] should_fail_ex+0x24a/0x260 [ 361.736174][T20385] should_fail+0xb/0x10 [ 361.736200][T20385] should_fail_usercopy+0x1a/0x20 [ 361.736233][T20385] _copy_from_user+0x1c/0xa0 [ 361.736306][T20385] xsk_setsockopt+0x288/0x520 [ 361.736336][T20385] ? __pfx_xsk_setsockopt+0x10/0x10 [ 361.736364][T20385] __sys_setsockopt+0x187/0x200 [ 361.736466][T20385] __x64_sys_setsockopt+0x66/0x80 [ 361.736491][T20385] x64_sys_call+0x282e/0x2dc0 [ 361.736553][T20385] do_syscall_64+0xc9/0x1c0 [ 361.736587][T20385] ? clear_bhb_loop+0x55/0xb0 [ 361.736616][T20385] ? clear_bhb_loop+0x55/0xb0 [ 361.736716][T20385] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 361.736804][T20385] RIP: 0033:0x7fd42b92cde9 [ 361.736857][T20385] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 361.736873][T20385] RSP: 002b:00007fd429f91038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 361.736890][T20385] RAX: ffffffffffffffda RBX: 00007fd42bb45fa0 RCX: 00007fd42b92cde9 [ 361.736903][T20385] RDX: 0000000000000004 RSI: 000000000000011b RDI: 0000000000000005 [ 361.736916][T20385] RBP: 00007fd429f91090 R08: 0000000000000020 R09: 0000000000000000 [ 361.736929][T20385] R10: 00004000000000c0 R11: 0000000000000246 R12: 0000000000000001 [ 361.736941][T20385] R13: 0000000000000000 R14: 00007fd42bb45fa0 R15: 00007ffc4ece3a68 [ 361.736960][T20385] [ 361.953989][T20389] loop0: detected capacity change from 0 to 512 [ 361.992033][T20394] loop3: detected capacity change from 0 to 1024 [ 361.998754][T20394] EXT4-fs: Ignoring removed nobh option [ 362.004375][T20394] EXT4-fs: Ignoring removed bh option [ 362.004763][T20389] ext4 filesystem being mounted at /143/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 362.068785][T20394] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4115: comm syz.3.5398: Allocating blocks 497-513 which overlap fs metadata [ 362.083311][T20394] EXT4-fs (loop3): pa ffff8881065b0770: logic 256, phys. 385, len 8 [ 362.091386][T20394] EXT4-fs error (device loop3): ext4_mb_release_inode_pa:5366: group 0, free 0, pa_free 1 [ 362.150357][T20403] FAULT_INJECTION: forcing a failure. [ 362.150357][T20403] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 362.163583][T20403] CPU: 0 UID: 0 PID: 20403 Comm: syz.9.5401 Not tainted 6.14.0-rc3-syzkaller-00079-g87a132e73910 #0 [ 362.163606][T20403] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 362.163619][T20403] Call Trace: [ 362.163626][T20403] [ 362.163634][T20403] dump_stack_lvl+0xf2/0x150 [ 362.163720][T20403] dump_stack+0x15/0x1a [ 362.163739][T20403] should_fail_ex+0x24a/0x260 [ 362.163812][T20403] should_fail+0xb/0x10 [ 362.163838][T20403] should_fail_usercopy+0x1a/0x20 [ 362.163872][T20403] _copy_from_user+0x1c/0xa0 [ 362.163915][T20403] memdup_user+0x64/0xc0 [ 362.163997][T20403] strndup_user+0x68/0xa0 [ 362.164032][T20403] bpf_uprobe_multi_link_attach+0x1bf/0x850 [ 362.164062][T20403] ? __rcu_read_unlock+0x4e/0x70 [ 362.164091][T20403] ? __fget_files+0x17c/0x1c0 [ 362.164196][T20403] link_create+0x627/0x660 [ 362.164232][T20403] __sys_bpf+0x430/0x7a0 [ 362.164274][T20403] __x64_sys_bpf+0x43/0x50 [ 362.164385][T20403] x64_sys_call+0x2914/0x2dc0 [ 362.164419][T20403] do_syscall_64+0xc9/0x1c0 [ 362.164455][T20403] ? clear_bhb_loop+0x55/0xb0 [ 362.164490][T20403] ? clear_bhb_loop+0x55/0xb0 [ 362.164569][T20403] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 362.164670][T20403] RIP: 0033:0x7fc2e75ccde9 [ 362.164695][T20403] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 362.164715][T20403] RSP: 002b:00007fc2e5c37038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 362.164738][T20403] RAX: ffffffffffffffda RBX: 00007fc2e77e5fa0 RCX: 00007fc2e75ccde9 [ 362.164754][T20403] RDX: 0000000000000040 RSI: 00004000000005c0 RDI: 000000000000001c [ 362.164767][T20403] RBP: 00007fc2e5c37090 R08: 0000000000000000 R09: 0000000000000000 [ 362.164781][T20403] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 362.164802][T20403] R13: 0000000000000000 R14: 00007fc2e77e5fa0 R15: 00007fff641cab58 [ 362.164825][T20403] [ 362.382695][T20423] loop8: detected capacity change from 0 to 512 [ 362.453087][T20423] EXT4-fs (loop8): revision level too high, forcing read-only mode [ 362.462078][T20423] EXT4-fs (loop8): orphan cleanup on readonly fs [ 362.479536][T20437] loop9: detected capacity change from 0 to 512 [ 362.486373][T20437] ext4: Bad value for 'debug_want_extra_isize' [ 362.488850][T20423] EXT4-fs warning (device loop8): ext4_enable_quotas:7145: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 362.512677][T20423] EXT4-fs (loop8): Cannot turn on quotas: error -117 [ 362.533669][T20441] netem: incorrect ge model size [ 362.538670][T20441] netem: change failed [ 362.542369][T20423] EXT4-fs error (device loop8): ext4_validate_block_bitmap:441: comm syz.8.5409: bg 0: block 40: padding at end of block bitmap is not set [ 362.567318][T20423] EXT4-fs error (device loop8) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 362.582902][T20423] EXT4-fs (loop8): 1 truncate cleaned up [ 362.600901][T20450] hashlimit_mt_check_common: 2 callbacks suppressed [ 362.600916][T20450] xt_hashlimit: max too large, truncated to 1048576 [ 362.649147][T20457] loop8: detected capacity change from 0 to 512 [ 362.659887][T20457] EXT4-fs (loop8): mounting ext3 file system using the ext4 subsystem [ 362.668144][T20457] EXT4-fs (loop8): bad geometry: first data block is 0 with a 1k block and cluster size [ 362.816362][T20481] netlink: 28 bytes leftover after parsing attributes in process `syz.8.5433'. [ 362.853294][T20483] xt_hashlimit: max too large, truncated to 1048576 [ 362.877011][T20485] netlink: 28 bytes leftover after parsing attributes in process `syz.8.5433'. [ 362.908603][T20488] loop8: detected capacity change from 0 to 512 [ 362.915610][T20488] EXT4-fs error (device loop8): ext4_get_journal_inode:5798: comm syz.8.5436: inode #1: comm syz.8.5436: iget: illegal inode # [ 362.950493][T20488] EXT4-fs (loop8): Remounting filesystem read-only [ 362.957094][T20488] EXT4-fs (loop8): no journal found [ 362.962312][T20488] EXT4-fs (loop8): can't get journal size [ 362.976236][T20488] EXT4-fs (loop8): warning: mounting fs with errors, running e2fsck is recommended [ 362.987289][T20488] EXT4-fs (loop8): failed to initialize system zone (-22) [ 362.994612][T20488] EXT4-fs (loop8): mount failed [ 363.019420][T20488] loop8: detected capacity change from 0 to 512 [ 363.027572][T20488] EXT4-fs (loop8): filesystem is read-only [ 363.039274][T20488] EXT4-fs (loop8): filesystem is read-only [ 363.045170][T20488] EXT4-fs (loop8): orphan cleanup on readonly fs [ 363.105945][T20488] EXT4-fs (loop8): 1 truncate cleaned up [ 363.283345][T20501] loop0: detected capacity change from 0 to 512 [ 363.290443][T20501] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 363.347856][T20501] EXT4-fs (loop0): 1 truncate cleaned up [ 363.384689][T20519] xt_hashlimit: max too large, truncated to 1048576 [ 363.621507][T20539] 9pnet_fd: Insufficient options for proto=fd [ 363.632940][T20541] loop0: detected capacity change from 0 to 512 [ 363.642777][T20541] ext4: Bad value for 'debug_want_extra_isize' [ 363.662191][T20543] loop9: detected capacity change from 0 to 128 [ 363.676365][T20543] loop9: detected capacity change from 0 to 1024 [ 363.683004][T20543] ext4: Unknown parameter 'fsname' [ 363.811750][T20548] xt_hashlimit: max too large, truncated to 1048576 [ 363.820584][T20550] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5459'. [ 363.832097][T20550] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5459'. [ 363.852569][T20552] FAULT_INJECTION: forcing a failure. [ 363.852569][T20552] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 363.865688][T20552] CPU: 1 UID: 0 PID: 20552 Comm: syz.4.5460 Not tainted 6.14.0-rc3-syzkaller-00079-g87a132e73910 #0 [ 363.865711][T20552] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 363.865721][T20552] Call Trace: [ 363.865727][T20552] [ 363.865790][T20552] dump_stack_lvl+0xf2/0x150 [ 363.865856][T20552] dump_stack+0x15/0x1a [ 363.865874][T20552] should_fail_ex+0x24a/0x260 [ 363.865899][T20552] should_fail+0xb/0x10 [ 363.865942][T20552] should_fail_usercopy+0x1a/0x20 [ 363.865972][T20552] _copy_from_user+0x1c/0xa0 [ 363.866007][T20552] do_ipv6_setsockopt+0x1ef/0x2250 [ 363.866083][T20552] ? kstrtoull+0x110/0x140 [ 363.866102][T20552] ? __rcu_read_unlock+0x4e/0x70 [ 363.866122][T20552] ? calipso_sock_getattr+0x26a/0x380 [ 363.866173][T20552] ? __rcu_read_unlock+0x4e/0x70 [ 363.866253][T20552] ? __pfx_ip6_datagram_release_cb+0x10/0x10 [ 363.866278][T20552] ? ip6_datagram_release_cb+0x103/0x170 [ 363.866301][T20552] ? _raw_spin_unlock_bh+0x36/0x40 [ 363.866345][T20552] ? release_sock+0x117/0x150 [ 363.866380][T20552] ? selinux_netlbl_socket_setsockopt+0x253/0x2d0 [ 363.866434][T20552] ipv6_setsockopt+0x57/0x130 [ 363.866465][T20552] udpv6_setsockopt+0x95/0xb0 [ 363.866490][T20552] sock_common_setsockopt+0x64/0x80 [ 363.866589][T20552] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 363.866622][T20552] __sys_setsockopt+0x187/0x200 [ 363.866647][T20552] __x64_sys_setsockopt+0x66/0x80 [ 363.866739][T20552] x64_sys_call+0x282e/0x2dc0 [ 363.866769][T20552] do_syscall_64+0xc9/0x1c0 [ 363.866793][T20552] ? clear_bhb_loop+0x55/0xb0 [ 363.866836][T20552] ? clear_bhb_loop+0x55/0xb0 [ 363.866860][T20552] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 363.866888][T20552] RIP: 0033:0x7f3c15c1cde9 [ 363.866901][T20552] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 363.866916][T20552] RSP: 002b:00007f3c14281038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 363.867038][T20552] RAX: ffffffffffffffda RBX: 00007f3c15e35fa0 RCX: 00007f3c15c1cde9 [ 363.867050][T20552] RDX: 0000000000000036 RSI: 0000000000000029 RDI: 0000000000000006 [ 363.867061][T20552] RBP: 00007f3c14281090 R08: 00000000000000c0 R09: 0000000000000000 [ 363.867070][T20552] R10: 0000400000001440 R11: 0000000000000246 R12: 0000000000000001 [ 363.867080][T20552] R13: 0000000000000000 R14: 00007f3c15e35fa0 R15: 00007fff8505cdd8 [ 363.867096][T20552] [ 364.308297][T20572] loop8: detected capacity change from 0 to 128 [ 364.321346][T20572] loop8: detected capacity change from 0 to 1024 [ 364.330263][T20572] ext4: Unknown parameter 'fsname' [ 364.403880][T20579] xt_hashlimit: max too large, truncated to 1048576 [ 364.426971][T20581] netem: incorrect ge model size [ 364.431967][T20581] netem: change failed [ 364.500342][T20590] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5476'. [ 364.547607][T20590] loop0: detected capacity change from 0 to 1024 [ 364.555024][T20590] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 364.566913][T20590] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 364.575065][T20590] EXT4-fs (loop0): too many log groups per flexible block group [ 364.582799][T20590] EXT4-fs (loop0): failed to initialize mballoc (-12) [ 364.589864][T20590] EXT4-fs (loop0): mount failed [ 364.648301][T20595] 9pnet_fd: Insufficient options for proto=fd [ 364.706083][T20600] loop4: detected capacity change from 0 to 128 [ 364.735659][T20600] loop4: detected capacity change from 0 to 1024 [ 364.752263][T20600] ext4: Unknown parameter 'fsname' [ 364.760547][T20613] loop0: detected capacity change from 0 to 512 [ 364.767198][T20613] ext4: Bad value for 'debug_want_extra_isize' [ 364.982900][T20620] netlink: 28 bytes leftover after parsing attributes in process `syz.8.5488'. [ 364.992461][T20620] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5488'. [ 365.135091][T20634] netlink: 8 bytes leftover after parsing attributes in process `syz.9.5494'. [ 365.218738][T20634] loop9: detected capacity change from 0 to 1024 [ 365.227190][T20634] EXT4-fs (loop9): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 365.243577][T20634] EXT4-fs (loop9): revision level too high, forcing read-only mode [ 365.262105][T20634] EXT4-fs (loop9): too many log groups per flexible block group [ 365.269899][T20634] EXT4-fs (loop9): failed to initialize mballoc (-12) [ 365.279797][T20634] EXT4-fs (loop9): mount failed [ 365.302775][T20654] 9pnet_fd: Insufficient options for proto=fd [ 365.444206][T20665] loop4: detected capacity change from 0 to 128 [ 365.674408][T20674] FAULT_INJECTION: forcing a failure. [ 365.674408][T20674] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 365.687575][T20674] CPU: 1 UID: 0 PID: 20674 Comm: syz.3.5509 Not tainted 6.14.0-rc3-syzkaller-00079-g87a132e73910 #0 [ 365.687601][T20674] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 365.687660][T20674] Call Trace: [ 365.687667][T20674] [ 365.687674][T20674] dump_stack_lvl+0xf2/0x150 [ 365.687770][T20674] dump_stack+0x15/0x1a [ 365.687794][T20674] should_fail_ex+0x24a/0x260 [ 365.687825][T20674] should_fail+0xb/0x10 [ 365.687853][T20674] should_fail_usercopy+0x1a/0x20 [ 365.687909][T20674] _copy_to_user+0x20/0xa0 [ 365.687938][T20674] simple_read_from_buffer+0xa0/0x110 [ 365.688027][T20674] proc_fail_nth_read+0xf9/0x140 [ 365.688094][T20674] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 365.688162][T20674] vfs_read+0x19b/0x6f0 [ 365.688202][T20674] ? __rcu_read_unlock+0x4e/0x70 [ 365.688276][T20674] ? __fget_files+0x17c/0x1c0 [ 365.688311][T20674] ksys_read+0xe8/0x1b0 [ 365.688336][T20674] __x64_sys_read+0x42/0x50 [ 365.688363][T20674] x64_sys_call+0x2874/0x2dc0 [ 365.688411][T20674] do_syscall_64+0xc9/0x1c0 [ 365.688498][T20674] ? clear_bhb_loop+0x55/0xb0 [ 365.688531][T20674] ? clear_bhb_loop+0x55/0xb0 [ 365.688618][T20674] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 365.688644][T20674] RIP: 0033:0x7f4db8ecb7fc [ 365.688657][T20674] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 365.688672][T20674] RSP: 002b:00007f4db7510030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 365.688759][T20674] RAX: ffffffffffffffda RBX: 00007f4db90e6080 RCX: 00007f4db8ecb7fc [ 365.688816][T20674] RDX: 000000000000000f RSI: 00007f4db75100a0 RDI: 0000000000000006 [ 365.688847][T20674] RBP: 00007f4db7510090 R08: 0000000000000000 R09: 0000000000000000 [ 365.688860][T20674] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 365.688873][T20674] R13: 0000000000000001 R14: 00007f4db90e6080 R15: 00007ffe4f688748 [ 365.688892][T20674] [ 365.935347][T20682] 9pnet_fd: Insufficient options for proto=fd [ 365.971110][ T29] kauditd_printk_skb: 153 callbacks suppressed [ 365.971125][ T29] audit: type=1326 audit(1740030606.030:14622): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20685 comm="syz.3.5516" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4db8eccde9 code=0x7ffc0000 [ 365.976530][T20686] loop3: detected capacity change from 0 to 512 [ 365.977380][ T29] audit: type=1326 audit(1740030606.030:14623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20685 comm="syz.3.5516" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4db8eccde9 code=0x7ffc0000 [ 366.048618][ T29] audit: type=1326 audit(1740030606.030:14624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20685 comm="syz.3.5516" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4db8eccde9 code=0x7ffc0000 [ 366.072212][ T29] audit: type=1326 audit(1740030606.030:14625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20685 comm="syz.3.5516" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4db8eccde9 code=0x7ffc0000 [ 366.095886][ T29] audit: type=1326 audit(1740030606.030:14626): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20685 comm="syz.3.5516" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4db8eccde9 code=0x7ffc0000 [ 366.119555][ T29] audit: type=1326 audit(1740030606.030:14627): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20685 comm="syz.3.5516" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4db8eccde9 code=0x7ffc0000 [ 366.143249][ T29] audit: type=1326 audit(1740030606.030:14628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20685 comm="syz.3.5516" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4db8eccde9 code=0x7ffc0000 [ 366.166840][ T29] audit: type=1326 audit(1740030606.030:14629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20685 comm="syz.3.5516" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4db8eccde9 code=0x7ffc0000 [ 366.190450][ T29] audit: type=1326 audit(1740030606.030:14630): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20685 comm="syz.3.5516" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4db8eccde9 code=0x7ffc0000 [ 366.214031][ T29] audit: type=1326 audit(1740030606.030:14631): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20685 comm="syz.3.5516" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4db8eccde9 code=0x7ffc0000 [ 366.245782][T20686] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 366.261472][T20686] EXT4-fs (loop3): orphan cleanup on readonly fs [ 366.278679][T20686] EXT4-fs warning (device loop3): ext4_enable_quotas:7145: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 366.319432][T20686] EXT4-fs (loop3): Cannot turn on quotas: error -117 [ 366.337348][T20686] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.5516: bg 0: block 40: padding at end of block bitmap is not set [ 366.383008][T20686] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 366.418044][T20686] EXT4-fs (loop3): 1 truncate cleaned up [ 366.645598][T20703] loop3: detected capacity change from 0 to 1024 [ 366.830530][T20707] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=16384 sclass=netlink_route_socket pid=20707 comm=syz.0.5520 [ 367.121630][T20714] netlink: 16 bytes leftover after parsing attributes in process `syz.8.5523'. [ 367.167215][T20714] loop8: detected capacity change from 0 to 1024 [ 367.176139][T20714] EXT4-fs (loop8): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 367.189035][T20714] EXT4-fs (loop8): revision level too high, forcing read-only mode [ 367.198052][T20714] EXT4-fs (loop8): too many log groups per flexible block group [ 367.205745][T20714] EXT4-fs (loop8): failed to initialize mballoc (-12) [ 367.256101][T20714] EXT4-fs (loop8): mount failed [ 367.277643][T20721] loop4: detected capacity change from 0 to 1024 [ 367.297628][T20721] EXT4-fs: Ignoring removed nobh option [ 367.303209][T20721] EXT4-fs: Ignoring removed bh option [ 367.335137][T20724] loop0: detected capacity change from 0 to 512 [ 367.353023][T20721] loop4: detected capacity change from 0 to 2048 [ 367.405584][T20701] Set syz1 is full, maxelem 65536 reached [ 367.412385][T20724] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 367.421676][T20726] loop9: detected capacity change from 0 to 512 [ 367.429705][T20724] EXT4-fs (loop0): orphan cleanup on readonly fs [ 367.438372][T20724] EXT4-fs warning (device loop0): ext4_enable_quotas:7145: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 367.449803][T20726] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 367.454674][T20724] EXT4-fs (loop0): Cannot turn on quotas: error -117 [ 367.470845][T20724] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.5526: bg 0: block 40: padding at end of block bitmap is not set [ 367.503179][T20724] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 367.519827][T20724] EXT4-fs (loop0): 1 truncate cleaned up [ 367.566715][ T3375] IPVS: starting estimator thread 0... [ 367.572843][T20726] EXT4-fs (loop9): 1 truncate cleaned up [ 367.653451][T20748] IPVS: using max 2448 ests per chain, 122400 per kthread [ 367.870146][T20774] xt_hashlimit: max too large, truncated to 1048576 [ 367.910325][T20783] xt_hashlimit: max too large, truncated to 1048576 [ 367.929880][T20781] loop4: detected capacity change from 0 to 512 [ 367.983360][T20791] loop3: detected capacity change from 0 to 764 [ 368.070522][T20809] 9pnet_fd: Insufficient options for proto=fd [ 368.102526][T20811] xt_hashlimit: max too large, truncated to 1048576 [ 368.213089][T20820] loop0: detected capacity change from 0 to 512 [ 368.220293][T20820] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 368.238547][T20820] EXT4-fs (loop0): 1 truncate cleaned up [ 368.259628][T20823] loop3: detected capacity change from 0 to 764 [ 368.347232][T20840] xt_hashlimit: max too large, truncated to 1048576 [ 368.401245][T20845] loop0: detected capacity change from 0 to 128 [ 368.418797][T20845] loop0: detected capacity change from 0 to 1024 [ 368.425990][T20845] ext4: Unknown parameter 'fsname' [ 368.560740][T20862] 9pnet: Could not find request transport: fd0xffffffffffffffff [ 368.611824][T20873] 9pnet_fd: Insufficient options for proto=fd [ 368.670159][T20880] 9pnet_fd: Insufficient options for proto=fd [ 368.729032][T20882] IPVS: persistence engine module ip_vs_pe_@ not found [ 368.844745][T20898] 9pnet_fd: Insufficient options for proto=fd [ 368.860724][T20894] loop4: detected capacity change from 0 to 512 [ 368.944920][T20912] 9pnet_fd: Insufficient options for proto=fd [ 368.961994][T20913] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5604'. [ 369.041922][T20928] 9pnet_fd: Insufficient options for proto=fd [ 369.184892][T20940] loop4: detected capacity change from 0 to 128 [ 369.197176][T20940] loop4: detected capacity change from 0 to 1024 [ 369.203873][T20940] ext4: Unknown parameter 'fsname' [ 369.273302][T20945] 9pnet_fd: Insufficient options for proto=fd [ 369.393590][T20955] bridge: RTM_NEWNEIGH with invalid ether address [ 369.406662][T20955] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5621'. [ 369.427246][T20956] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5620'. [ 369.543644][T20930] Set syz1 is full, maxelem 65536 reached [ 369.594150][T20968] loop3: detected capacity change from 0 to 1024 [ 369.602070][T20961] loop0: detected capacity change from 0 to 512 [ 369.611165][T20961] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 369.629581][T20961] EXT4-fs (loop0): 1 truncate cleaned up [ 369.686908][T20977] 9pnet_fd: Insufficient options for proto=fd [ 369.698172][T20980] loop3: detected capacity change from 0 to 512 [ 369.705248][T20980] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 369.713526][T20980] EXT4-fs (loop3): bad geometry: first data block is 0 with a 1k block and cluster size [ 369.846768][T20990] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5633'. [ 369.951597][T21006] loop4: detected capacity change from 0 to 1024 [ 370.091779][T21015] loop8: detected capacity change from 0 to 512 [ 370.170828][T21015] ext4 filesystem being mounted at /201/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 370.383740][T20993] Set syz1 is full, maxelem 65536 reached [ 370.429643][T21031] loop9: detected capacity change from 0 to 512 [ 370.441445][T21031] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 370.468408][T21048] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5656'. [ 370.480150][T21031] EXT4-fs (loop9): 1 truncate cleaned up [ 370.507080][T21048] loop0: detected capacity change from 0 to 1024 [ 370.514287][T21048] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 370.529652][T21048] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 370.537959][T21048] EXT4-fs (loop0): too many log groups per flexible block group [ 370.545886][T21048] EXT4-fs (loop0): failed to initialize mballoc (-12) [ 370.554238][T21048] EXT4-fs (loop0): mount failed [ 370.574579][T21057] FAULT_INJECTION: forcing a failure. [ 370.574579][T21057] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 370.587647][T21057] CPU: 1 UID: 0 PID: 21057 Comm: syz.3.5659 Not tainted 6.14.0-rc3-syzkaller-00079-g87a132e73910 #0 [ 370.587675][T21057] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 370.587764][T21057] Call Trace: [ 370.587772][T21057] [ 370.587779][T21057] dump_stack_lvl+0xf2/0x150 [ 370.587808][T21057] dump_stack+0x15/0x1a [ 370.587830][T21057] should_fail_ex+0x24a/0x260 [ 370.587861][T21057] should_fail+0xb/0x10 [ 370.587931][T21057] should_fail_usercopy+0x1a/0x20 [ 370.587963][T21057] _copy_to_user+0x20/0xa0 [ 370.588006][T21057] simple_read_from_buffer+0xa0/0x110 [ 370.588040][T21057] proc_fail_nth_read+0xf9/0x140 [ 370.588077][T21057] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 370.588159][T21057] vfs_read+0x19b/0x6f0 [ 370.588184][T21057] ? __rcu_read_unlock+0x4e/0x70 [ 370.588206][T21057] ? __fget_files+0x17c/0x1c0 [ 370.588241][T21057] ksys_read+0xe8/0x1b0 [ 370.588270][T21057] __x64_sys_read+0x42/0x50 [ 370.588296][T21057] x64_sys_call+0x2874/0x2dc0 [ 370.588323][T21057] do_syscall_64+0xc9/0x1c0 [ 370.588401][T21057] ? clear_bhb_loop+0x55/0xb0 [ 370.588432][T21057] ? clear_bhb_loop+0x55/0xb0 [ 370.588521][T21057] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 370.588610][T21057] RIP: 0033:0x7f4db8ecb7fc [ 370.588624][T21057] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 370.588640][T21057] RSP: 002b:00007f4db7531030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 370.588667][T21057] RAX: ffffffffffffffda RBX: 00007f4db90e5fa0 RCX: 00007f4db8ecb7fc [ 370.588678][T21057] RDX: 000000000000000f RSI: 00007f4db75310a0 RDI: 0000000000000007 [ 370.588702][T21057] RBP: 00007f4db7531090 R08: 0000000000000000 R09: 0000000000000000 [ 370.588714][T21057] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 370.588767][T21057] R13: 0000000000000000 R14: 00007f4db90e5fa0 R15: 00007ffe4f688748 [ 370.588784][T21057] [ 370.589950][T21056] loop8: detected capacity change from 0 to 512 [ 370.693219][T21062] loop3: detected capacity change from 0 to 1024 [ 370.714345][T21056] EXT4-fs (loop8): revision level too high, forcing read-only mode [ 370.748602][T21062] EXT4-fs: Ignoring removed nobh option [ 370.772283][T21056] EXT4-fs (loop8): orphan cleanup on readonly fs [ 370.780062][T21062] EXT4-fs: Ignoring removed bh option [ 370.824470][T21056] EXT4-fs warning (device loop8): ext4_enable_quotas:7145: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 370.840831][T21056] EXT4-fs (loop8): Cannot turn on quotas: error -117 [ 370.848586][T21056] EXT4-fs error (device loop8): ext4_validate_block_bitmap:441: comm syz.8.5660: bg 0: block 40: padding at end of block bitmap is not set [ 370.865308][T21056] EXT4-fs error (device loop8) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 370.880583][T21076] netlink: 28 bytes leftover after parsing attributes in process `syz.9.5667'. [ 370.892573][T21056] EXT4-fs (loop8): 1 truncate cleaned up [ 370.925219][T21080] xt_hashlimit: max too large, truncated to 1048576 [ 370.981326][T21091] netem: incorrect ge model size [ 370.986492][T21091] netem: change failed [ 371.003442][ T29] kauditd_printk_skb: 90 callbacks suppressed [ 371.003488][ T29] audit: type=1326 audit(1740030611.060:14719): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21092 comm="syz.0.5674" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd42b92cde9 code=0x7ffc0000 [ 371.060134][ T29] audit: type=1326 audit(1740030611.100:14720): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21092 comm="syz.0.5674" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd42b92cde9 code=0x7ffc0000 [ 371.083864][ T29] audit: type=1326 audit(1740030611.100:14721): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21092 comm="syz.0.5674" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd42b92cde9 code=0x7ffc0000 [ 371.107578][ T29] audit: type=1326 audit(1740030611.100:14722): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21092 comm="syz.0.5674" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd42b92cde9 code=0x7ffc0000 [ 371.131150][ T29] audit: type=1326 audit(1740030611.100:14723): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21092 comm="syz.0.5674" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd42b92cde9 code=0x7ffc0000 [ 371.154754][ T29] audit: type=1326 audit(1740030611.100:14724): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21092 comm="syz.0.5674" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd42b92cde9 code=0x7ffc0000 [ 371.178424][ T29] audit: type=1326 audit(1740030611.100:14725): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21092 comm="syz.0.5674" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd42b92cde9 code=0x7ffc0000 [ 371.202055][ T29] audit: type=1326 audit(1740030611.100:14726): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21092 comm="syz.0.5674" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd42b92cde9 code=0x7ffc0000 [ 371.225638][ T29] audit: type=1326 audit(1740030611.100:14727): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21092 comm="syz.0.5674" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd42b92cde9 code=0x7ffc0000 [ 371.249320][ T29] audit: type=1326 audit(1740030611.110:14728): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21092 comm="syz.0.5674" exe="/root/syz-executor" sig=0 arch=c000003e syscall=105 compat=0 ip=0x7fd42b92cde9 code=0x7ffc0000 [ 371.341409][T21109] xt_hashlimit: max too large, truncated to 1048576 [ 371.358217][T21113] xt_hashlimit: max too large, truncated to 1048576 [ 371.406820][T21118] loop4: detected capacity change from 0 to 512 [ 371.451270][T21124] loop4: detected capacity change from 0 to 1024 [ 371.477234][T21122] IPv6: NLM_F_CREATE should be specified when creating new route [ 371.569430][T21128] loop0: detected capacity change from 0 to 128 [ 371.587132][T21128] loop0: detected capacity change from 0 to 1024 [ 371.613134][T21128] ext4: Unknown parameter 'fsname' [ 371.630320][T21133] loop3: detected capacity change from 0 to 128 [ 371.671974][T21133] loop3: detected capacity change from 0 to 1024 [ 371.696079][T21133] ext4: Unknown parameter 'fsname' [ 371.738533][T21124] Set syz1 is full, maxelem 65536 reached [ 371.920933][T21148] loop9: detected capacity change from 0 to 512 [ 371.974564][T21148] EXT4-fs (loop9): revision level too high, forcing read-only mode [ 371.982566][T21148] EXT4-fs (loop9): orphan cleanup on readonly fs [ 371.996760][T21148] EXT4-fs warning (device loop9): ext4_enable_quotas:7145: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 372.052510][T21148] EXT4-fs (loop9): Cannot turn on quotas: error -117 [ 372.088932][T21163] loop8: detected capacity change from 0 to 1024 [ 372.103931][T21165] loop4: detected capacity change from 0 to 764 [ 372.113355][T21160] loop3: detected capacity change from 0 to 512 [ 372.119815][T21148] EXT4-fs error (device loop9): ext4_validate_block_bitmap:441: comm syz.9.5697: bg 0: block 40: padding at end of block bitmap is not set [ 372.123578][T21163] EXT4-fs: Ignoring removed nobh option [ 372.139605][T21163] EXT4-fs: Ignoring removed bh option [ 372.145903][T21160] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 372.151046][T21148] EXT4-fs error (device loop9) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 372.166881][T21148] EXT4-fs (loop9): 1 truncate cleaned up [ 372.175977][T21160] EXT4-fs (loop3): 1 truncate cleaned up [ 372.229301][T21175] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5707'. [ 372.370786][T21194] loop8: detected capacity change from 0 to 1024 [ 372.388216][T21194] EXT4-fs (loop8): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 372.416953][T21194] EXT4-fs (loop8): revision level too high, forcing read-only mode [ 372.425075][T21194] EXT4-fs (loop8): too many log groups per flexible block group [ 372.432740][T21194] EXT4-fs (loop8): failed to initialize mballoc (-12) [ 372.439611][T21194] EXT4-fs (loop8): mount failed [ 372.444575][T21203] loop9: detected capacity change from 0 to 128 [ 372.552141][T21205] loop3: detected capacity change from 0 to 512 [ 372.662708][T21205] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 372.691433][T21205] EXT4-fs (loop3): 1 truncate cleaned up [ 372.697555][T21205] EXT4-fs mount: 97 callbacks suppressed [ 372.697569][T21205] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 372.756087][T17425] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 372.810311][T21213] xt_hashlimit: max too large, truncated to 1048576 [ 372.936487][T21219] xt_hashlimit: max too large, truncated to 1048576 [ 372.945958][T21218] infiniband syz1: set active [ 372.950656][T21218] infiniband syz1: added team_slave_0 [ 372.964968][T21223] netlink: 5 bytes leftover after parsing attributes in process `syz.0.5724'. [ 372.979867][T21218] RDS/IB: syz1: added [ 372.986995][T21218] smc: adding ib device syz1 with port count 1 [ 373.000514][T21218] smc: ib device syz1 port 1 has pnetid [ 373.279096][T21241] xt_hashlimit: max too large, truncated to 1048576 [ 373.456768][ T40] bio_check_eod: 14 callbacks suppressed [ 373.456785][ T40] kworker/u8:2: attempt to access beyond end of device [ 373.456785][ T40] loop9: rw=1, sector=145, nr_sectors = 896 limit=128 [ 373.463870][T21245] loop4: detected capacity change from 0 to 2048 [ 373.738412][T21266] xt_hashlimit: max too large, truncated to 1048576 [ 373.748645][T21264] netem: incorrect ge model size [ 373.753638][T21264] netem: change failed [ 373.888327][T21268] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5745'. [ 373.933676][T21258] Set syz1 is full, maxelem 65536 reached [ 373.955558][T21272] loop8: detected capacity change from 0 to 1024 [ 373.966796][T21272] EXT4-fs: Ignoring removed nobh option [ 373.967074][T21274] loop4: detected capacity change from 0 to 1024 [ 373.972462][T21272] EXT4-fs: Ignoring removed bh option [ 374.015692][T21282] loop3: detected capacity change from 0 to 512 [ 374.022683][T21282] ext4: Bad value for 'debug_want_extra_isize' [ 374.023955][T21272] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 374.070629][T21286] loop0: detected capacity change from 0 to 1024 [ 374.087849][T21286] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 374.117527][T17799] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 374.127239][T21286] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 374.128978][T21289] loop4: detected capacity change from 0 to 512 [ 374.136720][T21286] EXT4-fs (loop0): too many log groups per flexible block group [ 374.149288][T21286] EXT4-fs (loop0): failed to initialize mballoc (-12) [ 374.156385][T21286] EXT4-fs (loop0): mount failed [ 374.188214][T21299] xt_hashlimit: max too large, truncated to 1048576 [ 374.294456][T21305] loop0: detected capacity change from 0 to 1024 [ 374.315347][T21305] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 374.380130][T18283] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 374.401640][T21317] loop4: detected capacity change from 0 to 1024 [ 374.587801][T21327] loop4: detected capacity change from 0 to 512 [ 374.620644][T21330] loop4: detected capacity change from 0 to 1024 [ 374.627129][T21331] loop8: detected capacity change from 0 to 1024 [ 374.633771][T21331] ext4: Unknown parameter 'fsname' [ 375.041687][T21353] loop9: detected capacity change from 0 to 1024 [ 375.081630][T21353] EXT4-fs: Ignoring removed nobh option [ 375.087292][T21353] EXT4-fs: Ignoring removed bh option [ 375.194408][T21353] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 375.250222][T21341] Set syz1 is full, maxelem 65536 reached [ 375.272771][T21353] EXT4-fs error (device loop9): ext4_mb_mark_diskspace_used:4115: comm syz.9.5778: Allocating blocks 497-513 which overlap fs metadata [ 375.309592][T21360] loop0: detected capacity change from 0 to 128 [ 375.338946][T21353] EXT4-fs (loop9): pa ffff888106506d90: logic 256, phys. 385, len 8 [ 375.347019][T21353] EXT4-fs error (device loop9): ext4_mb_release_inode_pa:5366: group 0, free 0, pa_free 1 [ 375.535709][T17481] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 375.561843][T21366] loop8: detected capacity change from 0 to 1024 [ 375.576423][T21366] EXT4-fs (loop8): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 375.603641][T21366] EXT4-fs (loop8): revision level too high, forcing read-only mode [ 375.623585][T21366] EXT4-fs (loop8): too many log groups per flexible block group [ 375.631322][T21366] EXT4-fs (loop8): failed to initialize mballoc (-12) [ 375.638144][T21366] EXT4-fs (loop8): mount failed [ 375.657383][T21379] loop4: detected capacity change from 0 to 512 [ 375.664702][T21377] xt_hashlimit: max too large, truncated to 1048576 [ 375.681433][T21378] FAULT_INJECTION: forcing a failure. [ 375.681433][T21378] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 375.694746][T21378] CPU: 1 UID: 0 PID: 21378 Comm: syz.0.5786 Not tainted 6.14.0-rc3-syzkaller-00079-g87a132e73910 #0 [ 375.694777][T21378] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 375.694791][T21378] Call Trace: [ 375.694798][T21378] [ 375.694806][T21378] dump_stack_lvl+0xf2/0x150 [ 375.694840][T21378] dump_stack+0x15/0x1a [ 375.694931][T21378] should_fail_ex+0x24a/0x260 [ 375.694964][T21378] should_fail+0xb/0x10 [ 375.695006][T21378] should_fail_usercopy+0x1a/0x20 [ 375.695049][T21378] _copy_from_iter+0xd5/0xd00 [ 375.695095][T21378] ? alloc_pages_mpol+0x208/0x260 [ 375.695121][T21378] copy_page_from_iter+0x14f/0x280 [ 375.695151][T21378] tun_get_user+0x68b/0x25c0 [ 375.695173][T21378] ? _parse_integer+0x27/0x30 [ 375.695201][T21378] ? ref_tracker_alloc+0x1f5/0x2f0 [ 375.695265][T21378] tun_chr_write_iter+0x188/0x240 [ 375.695287][T21378] vfs_write+0x77b/0x920 [ 375.695314][T21378] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 375.695341][T21378] ksys_write+0xe8/0x1b0 [ 375.695406][T21378] __x64_sys_write+0x42/0x50 [ 375.695490][T21378] x64_sys_call+0x287e/0x2dc0 [ 375.695518][T21378] do_syscall_64+0xc9/0x1c0 [ 375.695548][T21378] ? clear_bhb_loop+0x55/0xb0 [ 375.695577][T21378] ? clear_bhb_loop+0x55/0xb0 [ 375.695670][T21378] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 375.695698][T21378] RIP: 0033:0x7fd42b92b89f [ 375.695710][T21378] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 375.695735][T21378] RSP: 002b:00007fd429f91000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 375.695815][T21378] RAX: ffffffffffffffda RBX: 00007fd42bb45fa0 RCX: 00007fd42b92b89f [ 375.695828][T21378] RDX: 0000000000000083 RSI: 0000400000000040 RDI: 00000000000000c8 [ 375.695841][T21378] RBP: 00007fd429f91090 R08: 0000000000000000 R09: 0000000000000000 [ 375.695873][T21378] R10: 0000000000000083 R11: 0000000000000293 R12: 0000000000000001 [ 375.695885][T21378] R13: 0000000000000000 R14: 00007fd42bb45fa0 R15: 00007ffc4ece3a68 [ 375.695948][T21378] [ 376.112622][ T29] kauditd_printk_skb: 154 callbacks suppressed [ 376.112637][ T29] audit: type=1326 audit(1740030616.170:14882): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21388 comm="syz.8.5791" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd9fcdcde9 code=0x7ffc0000 [ 376.142535][ T29] audit: type=1326 audit(1740030616.170:14883): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21388 comm="syz.8.5791" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd9fcdcde9 code=0x7ffc0000 [ 376.166305][ T29] audit: type=1326 audit(1740030616.170:14884): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21388 comm="syz.8.5791" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcd9fcdcde9 code=0x7ffc0000 [ 376.189903][ T29] audit: type=1326 audit(1740030616.170:14885): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21388 comm="syz.8.5791" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd9fcdcde9 code=0x7ffc0000 [ 376.213553][ T29] audit: type=1326 audit(1740030616.170:14886): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21388 comm="syz.8.5791" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcd9fcdcde9 code=0x7ffc0000 [ 376.237295][ T29] audit: type=1326 audit(1740030616.170:14887): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21388 comm="syz.8.5791" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd9fcdcde9 code=0x7ffc0000 [ 376.261043][ T29] audit: type=1326 audit(1740030616.170:14888): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21388 comm="syz.8.5791" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcd9fcdcde9 code=0x7ffc0000 [ 376.467415][T21396] loop9: detected capacity change from 0 to 1024 [ 376.502635][T21396] EXT4-fs: Ignoring removed nobh option [ 376.508325][T21396] EXT4-fs: Ignoring removed bh option [ 376.552507][T21404] loop3: detected capacity change from 0 to 512 [ 376.622004][T21396] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 376.665556][ T29] audit: type=1326 audit(1740030616.170:14889): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21388 comm="syz.8.5791" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd9fcdcde9 code=0x7ffc0000 [ 376.674526][T21404] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 376.689122][ T29] audit: type=1326 audit(1740030616.170:14890): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21388 comm="syz.8.5791" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcd9fcdcde9 code=0x7ffc0000 [ 376.689175][ T29] audit: type=1326 audit(1740030616.170:14891): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21388 comm="syz.8.5791" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd9fcdcde9 code=0x7ffc0000 [ 376.713848][T21396] EXT4-fs error (device loop9): ext4_mb_mark_diskspace_used:4115: comm syz.9.5793: Allocating blocks 497-513 which overlap fs metadata [ 376.761075][T21396] EXT4-fs (loop9): pa ffff888106506d90: logic 256, phys. 385, len 8 [ 376.769119][T21396] EXT4-fs error (device loop9): ext4_mb_release_inode_pa:5366: group 0, free 0, pa_free 1 [ 376.787423][T21415] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5800'. [ 376.800450][T21404] EXT4-fs (loop3): orphan cleanup on readonly fs [ 376.817103][T21404] EXT4-fs warning (device loop3): ext4_enable_quotas:7145: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 376.876965][T21404] EXT4-fs (loop3): Cannot turn on quotas: error -117 [ 376.884083][T21404] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.5796: bg 0: block 40: padding at end of block bitmap is not set [ 376.899555][T21404] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 376.908816][T21404] EXT4-fs (loop3): 1 truncate cleaned up [ 376.916148][T21404] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 376.957661][T17425] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 376.990220][T17481] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 377.035342][T21431] loop8: detected capacity change from 0 to 128 [ 377.050031][T21432] loop4: detected capacity change from 0 to 2048 [ 377.453734][T21455] loop8: detected capacity change from 0 to 764 [ 377.908666][T21483] loop8: detected capacity change from 0 to 764 [ 377.982673][T21491] loop9: detected capacity change from 0 to 128 [ 377.997158][T21491] loop9: detected capacity change from 0 to 1024 [ 378.000113][T21493] netlink: 40 bytes leftover after parsing attributes in process `syz.4.5834'. [ 378.027498][T21491] ext4: Unknown parameter 'fsname' [ 378.035853][T21489] loop0: detected capacity change from 0 to 512 [ 378.042261][T21493] loop4: detected capacity change from 0 to 1024 [ 378.047452][T21489] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 378.078191][T21489] EXT4-fs (loop0): 1 truncate cleaned up [ 378.084213][T21489] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 378.110730][T18283] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 378.233315][T21509] bond0: entered promiscuous mode [ 378.238421][T21509] bond0: entered allmulticast mode [ 378.251082][T21509] 8021q: adding VLAN 0 to HW filter on device bond0 [ 378.288813][T21514] loop9: detected capacity change from 0 to 764 [ 378.306950][T21497] Set syz1 is full, maxelem 65536 reached [ 378.314343][T21509] bond0 (unregistering): Released all slaves [ 378.439918][T21524] xt_hashlimit: max too large, truncated to 1048576 [ 378.555930][T21536] loop4: detected capacity change from 0 to 128 [ 378.567512][T21536] loop4: detected capacity change from 0 to 1024 [ 378.575423][T21536] ext4: Unknown parameter 'fsname' [ 378.635121][T21544] loop9: detected capacity change from 0 to 1024 [ 378.641598][T21542] loop4: detected capacity change from 0 to 764 [ 378.641873][T21544] EXT4-fs: Ignoring removed nobh option [ 378.653609][T21544] EXT4-fs: Ignoring removed bh option [ 378.695296][T21546] loop3: detected capacity change from 0 to 4096 [ 378.702486][T21548] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5857'. [ 378.702632][T21546] ext4: Unknown parameter 'fsname' [ 378.717172][T21544] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 378.759790][T17481] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 378.793153][T21557] xt_hashlimit: max too large, truncated to 1048576 [ 378.847649][T21561] loop9: detected capacity change from 0 to 128 [ 378.865750][T21567] loop0: detected capacity change from 0 to 128 [ 378.885537][T21561] loop9: detected capacity change from 0 to 1024 [ 378.891980][T21561] ext4: Unknown parameter 'fsname' [ 378.920243][ T28] kworker/u8:1: attempt to access beyond end of device [ 378.920243][ T28] loop0: rw=1, sector=145, nr_sectors = 896 limit=128 [ 378.951439][T21577] loop0: detected capacity change from 0 to 764 [ 378.994438][T21582] loop9: detected capacity change from 0 to 1024 [ 379.003316][T21585] xt_hashlimit: max too large, truncated to 1048576 [ 379.015180][T21582] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 379.053327][T17481] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 379.109833][T21599] loop0: detected capacity change from 0 to 512 [ 379.121982][T21599] EXT4-fs: inline encryption not supported [ 379.174680][T21599] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 379.193458][T21599] ext4 filesystem being mounted at /240/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 379.195428][T21608] loop4: detected capacity change from 0 to 764 [ 379.236068][T21599] EXT4-fs error (device loop0): ext4_empty_dir:3094: inode #12: comm syz.0.5878: invalid size [ 379.286227][T21615] loop3: detected capacity change from 0 to 512 [ 379.302900][T21615] workqueue: Failed to create a rescuer kthread for wq "ext4-rsv-conversion": -EINTR [ 379.303000][T21615] EXT4-fs: failed to create workqueue [ 379.317874][T21615] EXT4-fs (loop3): mount failed [ 379.327782][T21621] loop4: detected capacity change from 0 to 512 [ 379.335711][T18283] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 379.391679][T21632] loop8: detected capacity change from 0 to 512 [ 379.399906][T21632] EXT4-fs: inline encryption not supported [ 379.405756][T21632] ext3: Unknown parameter 'appraise' [ 379.478752][T21640] loop8: detected capacity change from 0 to 764 [ 379.517400][T21647] loop9: detected capacity change from 0 to 128 [ 379.563385][T21649] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5896'. [ 379.823671][T21656] loop4: detected capacity change from 0 to 128 [ 379.897624][T21662] loop3: detected capacity change from 0 to 128 [ 379.925741][T21667] loop8: detected capacity change from 0 to 512 [ 379.932444][T21667] EXT4-fs: inline encryption not supported [ 379.944945][T21667] EXT4-fs (loop8): mounting ext3 file system using the ext4 subsystem [ 379.958661][T21664] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5902'. [ 379.967658][T21664] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5902'. [ 379.985429][T21667] EXT4-fs error (device loop8): ext4_xattr_ibody_find:2240: inode #15: comm syz.8.5903: corrupted in-inode xattr: e_value size too large [ 380.026364][T21664] vlan1: entered promiscuous mode [ 380.026750][ T53] kworker/u8:5: attempt to access beyond end of device [ 380.026750][ T53] loop3: rw=1, sector=145, nr_sectors = 896 limit=128 [ 380.035715][T21664] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 380.066684][T21667] EXT4-fs error (device loop8): ext4_orphan_get:1394: comm syz.8.5903: couldn't read orphan inode 15 (err -117) [ 380.177818][ T3662] kworker/u8:9: attempt to access beyond end of device [ 380.177818][ T3662] loop9: rw=1, sector=145, nr_sectors = 896 limit=128 [ 380.192451][T21667] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 380.269381][T17799] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 380.302666][T21679] pim6reg1: entered promiscuous mode [ 380.308044][T21679] pim6reg1: entered allmulticast mode [ 380.348631][T21681] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5910'. [ 380.490622][T21692] loop9: detected capacity change from 0 to 128 [ 380.616617][T21704] xt_hashlimit: max too large, truncated to 1048576 [ 380.840323][T21712] netlink: 'syz.8.5923': attribute type 7 has an invalid length. [ 380.848312][T21712] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5923'. [ 381.182003][T21729] loop4: detected capacity change from 0 to 512 [ 381.215849][ T28] kworker/u8:1: attempt to access beyond end of device [ 381.215849][ T28] loop9: rw=1, sector=145, nr_sectors = 896 limit=128 [ 381.307840][T21742] xt_hashlimit: max too large, truncated to 1048576 [ 381.403002][T21747] netlink: 40 bytes leftover after parsing attributes in process `syz.9.5938'. [ 381.437013][T21748] pim6reg1: entered promiscuous mode [ 381.442346][T21748] pim6reg1: entered allmulticast mode [ 381.516859][ T29] kauditd_printk_skb: 241 callbacks suppressed [ 381.516873][ T29] audit: type=1400 audit(1740030621.580:15132): avc: denied { ioctl } for pid=21743 comm="syz.4.5937" path="socket:[70141]" dev="sockfs" ino=70141 ioctlcmd=0xf505 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 381.584282][T21753] loop9: detected capacity change from 0 to 1024 [ 381.620741][T21753] EXT4-fs (loop9): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 381.645510][T21756] loop0: detected capacity change from 0 to 1024 [ 381.652207][T21753] EXT4-fs (loop9): revision level too high, forcing read-only mode [ 381.660357][T21753] EXT4-fs (loop9): too many log groups per flexible block group [ 381.668115][T21753] EXT4-fs (loop9): failed to initialize mballoc (-12) [ 381.669888][T21756] EXT4-fs: Ignoring removed nobh option [ 381.674939][T21753] EXT4-fs (loop9): mount failed [ 381.680505][T21756] EXT4-fs: Ignoring removed bh option [ 381.801979][T21756] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 381.833659][T21756] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4115: comm syz.0.5940: Allocating blocks 497-513 which overlap fs metadata [ 381.848949][T21756] EXT4-fs (loop0): pa ffff888106506d90: logic 256, phys. 385, len 8 [ 381.857374][T21756] EXT4-fs error (device loop0): ext4_mb_release_inode_pa:5366: group 0, free 0, pa_free 1 [ 381.999302][T21764] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5942'. [ 382.023250][T18283] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 382.032298][T21766] loop3: detected capacity change from 0 to 512 [ 382.039488][T21766] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 382.059246][T21766] EXT4-fs (loop3): 1 truncate cleaned up [ 382.080753][T21766] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 382.195630][T17425] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 382.358107][T21796] loop3: detected capacity change from 0 to 764 [ 382.407479][T21799] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5958'. [ 382.854182][T21806] netlink: 8 bytes leftover after parsing attributes in process `syz.9.5957'. [ 382.939852][ T29] audit: type=1326 audit(1740030622.990:15133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21809 comm="syz.3.5962" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4db8eccde9 code=0x7ffc0000 [ 382.963609][ T29] audit: type=1326 audit(1740030622.990:15134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21809 comm="syz.3.5962" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4db8eccde9 code=0x7ffc0000 [ 382.987328][ T29] audit: type=1326 audit(1740030622.990:15135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21809 comm="syz.3.5962" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4db8eccde9 code=0x7ffc0000 [ 383.011037][ T29] audit: type=1326 audit(1740030622.990:15136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21809 comm="syz.3.5962" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4db8eccde9 code=0x7ffc0000 [ 383.034692][ T29] audit: type=1326 audit(1740030623.000:15137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21809 comm="syz.3.5962" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4db8eccde9 code=0x7ffc0000 [ 383.058353][ T29] audit: type=1326 audit(1740030623.000:15138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21809 comm="syz.3.5962" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4db8eccde9 code=0x7ffc0000 [ 383.081929][ T29] audit: type=1326 audit(1740030623.000:15139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21809 comm="syz.3.5962" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4db8eccde9 code=0x7ffc0000 [ 383.105572][ T29] audit: type=1326 audit(1740030623.000:15140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21809 comm="syz.3.5962" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4db8eccde9 code=0x7ffc0000 [ 383.129214][ T29] audit: type=1326 audit(1740030623.000:15141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21809 comm="syz.3.5962" exe="/root/syz-executor" sig=0 arch=c000003e syscall=427 compat=0 ip=0x7f4db8eccde9 code=0x7ffc0000 [ 383.374106][T21832] netlink: 28 bytes leftover after parsing attributes in process `syz.8.5971'. [ 383.407188][T21831] loop9: detected capacity change from 0 to 764 [ 383.592285][T21846] loop0: detected capacity change from 0 to 128 [ 383.642855][T21834] loop8: detected capacity change from 0 to 2048 [ 383.656773][T21834] [EXT4 FS bs=2048, gc=1, bpg=262144, ipg=32, mo=a842e02c, mo2=0002] [ 383.669855][T21834] System zones: 0-7 [ 383.676640][T21834] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 383.811630][T21841] EXT4-fs error (device loop8): ext4_validate_block_bitmap:441: comm syz.8.5972: bg 0: block 234: padding at end of block bitmap is not set [ 383.831103][T21852] netlink: 8 bytes leftover after parsing attributes in process `syz.9.5978'. [ 383.845118][T21841] EXT4-fs (loop8): Remounting filesystem read-only [ 383.901167][T21834] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop8 ino=12 [ 383.912028][T21854] netlink: 40 bytes leftover after parsing attributes in process `syz.4.5979'. [ 383.955317][T21858] 9pnet_fd: Insufficient options for proto=fd [ 383.961530][T21854] loop4: detected capacity change from 0 to 1024 [ 384.068097][T17799] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 384.108244][T21874] loop8: detected capacity change from 0 to 512 [ 384.142506][T21877] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5983'. [ 384.176408][T21874] EXT4-fs (loop8): revision level too high, forcing read-only mode [ 384.192827][T21874] EXT4-fs (loop8): orphan cleanup on readonly fs [ 384.202727][T21874] EXT4-fs warning (device loop8): ext4_enable_quotas:7145: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 384.220915][T21893] netlink: 'syz.4.5988': attribute type 1 has an invalid length. [ 384.227139][T21874] EXT4-fs (loop8): Cannot turn on quotas: error -117 [ 384.239896][T21874] EXT4-fs error (device loop8): ext4_validate_block_bitmap:441: comm syz.8.5982: bg 0: block 40: padding at end of block bitmap is not set [ 384.258451][T21874] EXT4-fs error (device loop8) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 384.267719][T21874] EXT4-fs (loop8): 1 truncate cleaned up [ 384.270667][T21893] bond0: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 384.273830][T21874] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 384.308191][T17799] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 384.341166][ T53] bond0: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 384.355882][T21893] 8021q: adding VLAN 0 to HW filter on device bond0 [ 384.452856][T21917] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5990'. [ 384.462229][ T40] bond0: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 384.696064][T21939] loop0: detected capacity change from 0 to 512 [ 384.703579][T21939] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 384.716864][T21939] EXT4-fs (loop0): 1 truncate cleaned up [ 384.722970][T21939] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 384.775609][T21953] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5998'. [ 384.832740][T21926] loop4: detected capacity change from 0 to 2048 [ 384.860939][T18283] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 384.890741][T21980] loop9: detected capacity change from 0 to 128 [ 384.971453][ T50] kworker/u8:3: attempt to access beyond end of device [ 384.971453][ T50] loop9: rw=1, sector=145, nr_sectors = 896 limit=128 [ 384.998987][T21987] loop3: detected capacity change from 0 to 512 [ 385.006863][T21987] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 385.040484][T21995] netlink: 8 bytes leftover after parsing attributes in process `syz.9.6004'. [ 385.050429][T21987] EXT4-fs (loop3): 1 truncate cleaned up [ 385.059838][T21987] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 385.090907][T17425] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 385.123243][T22000] xt_hashlimit: max too large, truncated to 1048576 [ 385.416405][T22012] loop8: detected capacity change from 0 to 1024 [ 385.442541][T22012] EXT4-fs: Ignoring removed nobh option [ 385.448167][T22012] EXT4-fs: Ignoring removed bh option [ 385.466491][T22016] loop3: detected capacity change from 0 to 128 [ 385.483077][T22012] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 385.488471][T22017] loop0: detected capacity change from 0 to 4096 [ 385.502212][T22017] ext4: Unknown parameter 'fsname' [ 385.539711][T22012] EXT4-fs error (device loop8): ext4_mb_mark_diskspace_used:4115: comm syz.8.6012: Allocating blocks 497-513 which overlap fs metadata [ 385.563860][ T53] kworker/u8:5: attempt to access beyond end of device [ 385.563860][ T53] loop3: rw=1, sector=145, nr_sectors = 896 limit=128 [ 385.568629][T22024] loop4: detected capacity change from 0 to 4096 [ 385.587816][T22012] EXT4-fs (loop8): pa ffff888106506ee0: logic 256, phys. 385, len 8 [ 385.588015][T22024] ext4: Unknown parameter 'fsname' [ 385.596104][T22012] EXT4-fs error (device loop8): ext4_mb_release_inode_pa:5366: group 0, free 0, pa_free 1 [ 385.847492][T17799] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 385.876447][T22035] xt_hashlimit: max too large, truncated to 1048576 [ 386.140267][T22047] loop3: detected capacity change from 0 to 512 [ 386.147676][T22047] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 386.160527][T22047] EXT4-fs (loop3): 1 truncate cleaned up [ 386.167424][T22047] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 386.238878][T22056] loop9: detected capacity change from 0 to 512 [ 386.247014][T17425] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 386.265069][T22056] ext4: Bad value for 'debug_want_extra_isize' [ 386.375331][T22066] xt_hashlimit: max too large, truncated to 1048576 [ 386.433164][T22052] loop0: detected capacity change from 0 to 2048 [ 386.448563][T22052] [EXT4 FS bs=2048, gc=1, bpg=262144, ipg=32, mo=a842e02c, mo2=0002] [ 386.466982][T22052] System zones: 0-7 [ 386.519317][T22052] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 386.548746][T22081] loop3: detected capacity change from 0 to 1024 [ 386.555484][T22081] EXT4-fs: Ignoring removed nobh option [ 386.561059][T22081] EXT4-fs: Ignoring removed bh option [ 386.581863][T22081] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 386.607187][ T29] kauditd_printk_skb: 90 callbacks suppressed [ 386.607255][ T29] audit: type=1400 audit(1740030626.670:15231): avc: denied { write } for pid=22042 comm="syz.8.6024" name="usbmon0" dev="devtmpfs" ino=141 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 386.643625][T22059] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.6027: bg 0: block 234: padding at end of block bitmap is not set [ 386.669700][T22081] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4115: comm syz.3.6038: Allocating blocks 497-513 which overlap fs metadata [ 386.675743][T22086] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop0 ino=12 [ 386.695668][T22081] EXT4-fs (loop3): pa ffff888106506e00: logic 256, phys. 385, len 8 [ 386.703741][T22081] EXT4-fs error (device loop3): ext4_mb_release_inode_pa:5366: group 0, free 0, pa_free 1 [ 386.713827][T22059] EXT4-fs (loop0): Remounting filesystem read-only [ 386.787766][T17425] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 386.947174][T18283] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 387.004039][T22094] pim6reg1: entered promiscuous mode [ 387.009372][T22094] pim6reg1: entered allmulticast mode [ 387.036620][ T29] audit: type=1326 audit(1740030627.100:15232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22097 comm="syz.4.6043" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c15c1cde9 code=0x7ffc0000 [ 387.060325][ T29] audit: type=1326 audit(1740030627.100:15233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22097 comm="syz.4.6043" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f3c15c1cde9 code=0x7ffc0000 [ 387.084019][ T29] audit: type=1326 audit(1740030627.100:15234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22097 comm="syz.4.6043" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c15c1cde9 code=0x7ffc0000 [ 387.133654][ T29] audit: type=1326 audit(1740030627.100:15235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22097 comm="syz.4.6043" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f3c15c1cde9 code=0x7ffc0000 [ 387.157069][ T29] audit: type=1326 audit(1740030627.100:15236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22097 comm="syz.4.6043" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c15c1cde9 code=0x7ffc0000 [ 387.180631][ T29] audit: type=1326 audit(1740030627.100:15237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22097 comm="syz.4.6043" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f3c15c1cde9 code=0x7ffc0000 [ 387.204192][ T29] audit: type=1326 audit(1740030627.100:15238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22097 comm="syz.4.6043" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c15c1cde9 code=0x7ffc0000 [ 387.218433][T22101] loop9: detected capacity change from 0 to 1024 [ 387.227750][ T29] audit: type=1326 audit(1740030627.100:15239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22097 comm="syz.4.6043" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c15c1cde9 code=0x7ffc0000 [ 387.257734][ T29] audit: type=1326 audit(1740030627.100:15240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22097 comm="syz.4.6043" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3c15c1cde9 code=0x7ffc0000 [ 387.313059][T22113] loop0: detected capacity change from 0 to 1024 [ 387.325192][T22101] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 387.342041][T22113] EXT4-fs: Ignoring removed nobh option [ 387.347765][T22113] EXT4-fs: Ignoring removed bh option [ 387.354038][T22101] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 387.376379][T22113] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 387.393325][T22101] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=22101 comm=syz.9.6044 [ 387.428509][T22113] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4115: comm syz.0.6048: Allocating blocks 497-513 which overlap fs metadata [ 387.453148][T22113] EXT4-fs (loop0): pa ffff888106506ee0: logic 256, phys. 385, len 8 [ 387.461483][T22113] EXT4-fs error (device loop0): ext4_mb_release_inode_pa:5366: group 0, free 0, pa_free 1 [ 387.476746][T22119] loop4: detected capacity change from 0 to 128 [ 387.490241][T22119] loop4: detected capacity change from 0 to 1024 [ 387.497848][T22119] ext4: Unknown parameter 'fsname' [ 387.620368][T18283] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 388.511932][T22140] loop9: detected capacity change from 0 to 764 [ 388.755146][T22150] xt_hashlimit: max too large, truncated to 1048576 [ 388.802525][T22155] loop0: detected capacity change from 0 to 128 [ 388.818511][T22152] loop9: detected capacity change from 0 to 1024 [ 388.843864][T22162] pim6reg1: entered promiscuous mode [ 388.849193][T22162] pim6reg1: entered allmulticast mode [ 388.863095][T22164] loop3: detected capacity change from 0 to 128 [ 388.879752][T22152] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 389.282667][T22178] loop4: detected capacity change from 0 to 764 [ 389.380484][ T53] kworker/u8:5: attempt to access beyond end of device [ 389.380484][ T53] loop3: rw=1, sector=145, nr_sectors = 896 limit=128 [ 389.443621][T22184] loop3: detected capacity change from 0 to 1024 [ 389.456526][T22152] Set syz1 is full, maxelem 65536 reached [ 389.499452][T22184] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 389.519259][T22188] loop4: detected capacity change from 0 to 128 [ 389.543523][T22184] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 389.565387][T17481] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 389.746956][T22197] pim6reg1: entered promiscuous mode [ 389.752401][T22197] pim6reg1: entered allmulticast mode [ 389.787601][ T4559] kworker/u8:11: attempt to access beyond end of device [ 389.787601][ T4559] loop0: rw=1, sector=145, nr_sectors = 896 limit=128 [ 389.841836][T22204] loop0: detected capacity change from 0 to 764 [ 390.129622][T22216] __nla_validate_parse: 3 callbacks suppressed [ 390.129637][T22216] netlink: 28 bytes leftover after parsing attributes in process `syz.8.6090'. [ 390.407377][T22232] loop0: detected capacity change from 0 to 764 [ 390.582224][T22240] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6101'. [ 390.624515][T22242] loop4: detected capacity change from 0 to 4096 [ 390.631134][T22242] ext4: Unknown parameter 'fsname' [ 390.691701][T22249] blktrace: Concurrent blktraces are not allowed on loop17 [ 390.914833][T22265] loop9: detected capacity change from 0 to 764 [ 390.941680][T22270] netlink: 28 bytes leftover after parsing attributes in process `syz.9.6112'. [ 391.041919][T22284] netlink: 200 bytes leftover after parsing attributes in process `syz.0.6119'. [ 391.089147][T22290] loop9: detected capacity change from 0 to 764 [ 391.161924][T22299] loop9: detected capacity change from 0 to 4096 [ 391.169072][T22299] ext4: Unknown parameter 'fsname' [ 391.205361][T22303] pim6reg1: entered promiscuous mode [ 391.210742][T22303] pim6reg1: entered allmulticast mode [ 391.683091][T22320] loop0: detected capacity change from 0 to 128 [ 391.750923][T22329] loop8: detected capacity change from 0 to 128 [ 391.916147][T22321] loop4: detected capacity change from 0 to 2048 [ 392.324476][T22350] syz_tun: entered promiscuous mode [ 392.331049][T22350] batadv_slave_0: entered promiscuous mode [ 392.341800][T22350] debugfs: Directory 'hsr1' with parent 'hsr' already present! [ 392.367620][T22350] Cannot create hsr debugfs directory [ 392.398227][T22350] loop3: detected capacity change from 0 to 1024 [ 392.407049][T22350] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 392.432800][T22350] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 392.441472][T22350] EXT4-fs (loop3): too many log groups per flexible block group [ 392.449386][T22350] EXT4-fs (loop3): failed to initialize mballoc (-12) [ 392.457838][T22350] EXT4-fs (loop3): mount failed [ 392.587405][T22360] xt_hashlimit: max too large, truncated to 1048576 [ 392.971784][ T4559] kworker/u8:11: attempt to access beyond end of device [ 392.971784][ T4559] loop8: rw=1, sector=145, nr_sectors = 896 limit=128 [ 392.989495][ T2855] kworker/u8:6: attempt to access beyond end of device [ 392.989495][ T2855] loop0: rw=1, sector=145, nr_sectors = 896 limit=128 [ 392.996967][T22368] loop3: detected capacity change from 0 to 1024 [ 393.024314][T22368] EXT4-fs: Ignoring removed nobh option [ 393.030033][T22368] EXT4-fs: Ignoring removed bh option [ 393.057417][T22368] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 393.097324][T22368] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4115: comm syz.3.6157: Allocating blocks 497-513 which overlap fs metadata [ 393.113079][T22368] EXT4-fs (loop3): pa ffff8881065b0700: logic 256, phys. 385, len 8 [ 393.121149][T22368] EXT4-fs error (device loop3): ext4_mb_release_inode_pa:5366: group 0, free 0, pa_free 1 [ 393.126712][T22385] loop0: detected capacity change from 0 to 1024 [ 393.159937][T22385] EXT4-fs: Ignoring removed nobh option [ 393.165711][T22385] EXT4-fs: Ignoring removed bh option [ 393.175102][T22385] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 393.180021][T22392] loop4: detected capacity change from 0 to 128 [ 393.230763][T22385] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4115: comm syz.0.6163: Allocating blocks 497-513 which overlap fs metadata [ 393.247005][T22385] EXT4-fs (loop0): pa ffff8881065b0690: logic 256, phys. 385, len 8 [ 393.255270][T22385] EXT4-fs error (device loop0): ext4_mb_release_inode_pa:5366: group 0, free 0, pa_free 1 [ 393.279629][T22394] loop8: detected capacity change from 0 to 128 [ 393.292280][T22398] loop9: detected capacity change from 0 to 128 [ 393.379488][T18283] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 393.432553][T17425] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 393.605150][T22415] loop4: detected capacity change from 0 to 128 [ 393.756800][T22415] loop4: detected capacity change from 0 to 1024 [ 393.767908][T22415] ext4: Unknown parameter 'fsname' [ 393.805685][T22402] loop0: detected capacity change from 0 to 2048 [ 393.880513][T22402] [EXT4 FS bs=2048, gc=1, bpg=262144, ipg=32, mo=a842e02c, mo2=0002] [ 393.893302][T22402] System zones: 0-7 [ 393.914577][T22402] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 393.996877][T22425] loop4: detected capacity change from 0 to 1024 [ 394.018368][T22406] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.6169: bg 0: block 234: padding at end of block bitmap is not set [ 394.034023][T22406] EXT4-fs (loop0): Remounting filesystem read-only [ 394.076444][T22425] EXT4-fs: Ignoring removed nobh option [ 394.082072][T22425] EXT4-fs: Ignoring removed bh option [ 394.097770][T22425] loop4: detected capacity change from 0 to 2048 [ 394.122654][T18283] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 394.191877][ T52] kworker/u8:4: attempt to access beyond end of device [ 394.191877][ T52] loop9: rw=1, sector=145, nr_sectors = 896 limit=128 [ 394.245461][ T4559] kworker/u8:11: attempt to access beyond end of device [ 394.245461][ T4559] loop8: rw=1, sector=145, nr_sectors = 896 limit=128 [ 394.770172][T22466] loop3: detected capacity change from 0 to 128 [ 394.857496][T22455] vxcan1 speed is unknown, defaulting to 1000 [ 394.870865][T22451] loop8: detected capacity change from 0 to 2048 [ 394.933858][T14779] syz_tun (unregistering): left promiscuous mode [ 394.941068][T22451] [EXT4 FS bs=2048, gc=1, bpg=262144, ipg=32, mo=a842e02c, mo2=0002] [ 394.994941][T22451] System zones: 0-7 [ 395.000807][T22451] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 395.031179][T22475] loop9: detected capacity change from 0 to 512 [ 395.054764][T22475] ext4: Bad value for 'debug_want_extra_isize' [ 395.121098][ T29] kauditd_printk_skb: 134 callbacks suppressed [ 395.121110][ T29] audit: type=1326 audit(1740030635.180:15375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22474 comm="syz.9.6196" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2e75ccde9 code=0x7ffc0000 [ 395.134707][ T4559] EXT4-fs error (device loop8): ext4_validate_block_bitmap:441: comm kworker/u8:11: bg 0: block 234: padding at end of block bitmap is not set [ 395.151118][ T29] audit: type=1326 audit(1740030635.180:15376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22474 comm="syz.9.6196" exe="/root/syz-executor" sig=0 arch=c000003e syscall=162 compat=0 ip=0x7fc2e75ccde9 code=0x7ffc0000 [ 395.192935][ T2855] kworker/u8:6: attempt to access beyond end of device [ 395.192935][ T2855] loop3: rw=1, sector=145, nr_sectors = 896 limit=128 [ 395.216154][ T4559] EXT4-fs (loop8): Remounting filesystem read-only [ 395.229957][T22455] chnl_net:caif_netlink_parms(): no params data found [ 395.319514][T17799] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 395.355265][ T4559] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 395.369165][ T29] audit: type=1326 audit(1740030635.400:15377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22474 comm="syz.9.6196" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2e75ccde9 code=0x7ffc0000 [ 395.392946][ T29] audit: type=1326 audit(1740030635.400:15378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22474 comm="syz.9.6196" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc2e75ccde9 code=0x7ffc0000 [ 395.451526][ T29] audit: type=1326 audit(1740030635.490:15379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22487 comm="syz.0.6200" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd42b92cde9 code=0x7ffc0000 [ 395.475289][ T29] audit: type=1326 audit(1740030635.490:15380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22487 comm="syz.0.6200" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd42b92cde9 code=0x7ffc0000 [ 395.499004][ T29] audit: type=1326 audit(1740030635.490:15381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22487 comm="syz.0.6200" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7fd42b92cde9 code=0x7ffc0000 [ 395.522606][ T29] audit: type=1326 audit(1740030635.490:15382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22487 comm="syz.0.6200" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd42b92cde9 code=0x7ffc0000 [ 395.546376][ T29] audit: type=1326 audit(1740030635.490:15383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22487 comm="syz.0.6200" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fd42b92cde9 code=0x7ffc0000 [ 395.569890][ T29] audit: type=1326 audit(1740030635.490:15384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22487 comm="syz.0.6200" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd42b92cde9 code=0x7ffc0000 [ 395.622001][T22455] bridge0: port 1(bridge_slave_0) entered blocking state [ 395.629362][T22455] bridge0: port 1(bridge_slave_0) entered disabled state [ 395.637063][T22455] bridge_slave_0: entered allmulticast mode [ 395.644465][T22455] bridge_slave_0: entered promiscuous mode [ 395.653298][ T4559] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 395.668624][T22455] bridge0: port 2(bridge_slave_1) entered blocking state [ 395.675780][T22455] bridge0: port 2(bridge_slave_1) entered disabled state [ 395.683574][T22455] bridge_slave_1: entered allmulticast mode [ 395.773326][T22455] bridge_slave_1: entered promiscuous mode [ 395.797387][ T4559] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 395.828347][T22455] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 395.983563][ T4559] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 396.023267][T22516] loop9: detected capacity change from 0 to 1024 [ 396.077133][T22516] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 396.140155][ T4559] bridge_slave_1: left allmulticast mode [ 396.145934][ T4559] bridge_slave_1: left promiscuous mode [ 396.151550][ T4559] bridge0: port 2(bridge_slave_1) entered disabled state [ 396.204084][ T4559] bridge_slave_0: left allmulticast mode [ 396.209796][ T4559] bridge_slave_0: left promiscuous mode [ 396.215507][ T4559] bridge0: port 1(bridge_slave_0) entered disabled state [ 396.229319][T17481] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 396.274613][ T4559] bond0 (unregistering): (slave ip6gretap1): Removing an active aggregator [ 396.285062][ T4559] bond0 (unregistering): (slave ip6gretap1): Releasing backup interface [ 396.336320][ T4559]  (unregistering): (slave bond_slave_0): Releasing backup interface [ 396.346636][ T4559]  (unregistering): (slave bond_slave_1): Releasing backup interface [ 396.355985][ T4559]  (unregistering): Released all slaves [ 396.364813][ T4559] bond0 (unregistering): Released all slaves [ 396.372972][T22530] loop0: detected capacity change from 0 to 4096 [ 396.373977][T22455] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 396.380288][T22530] ext4: Unknown parameter 'fsname' [ 396.412695][T22455] team0: Port device team_slave_0 added [ 396.421596][T22455] team0: Port device team_slave_1 added [ 396.442722][T22455] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 396.449707][T22455] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 396.475727][T22455] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 396.487315][T22455] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 396.494387][T22455] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 396.520339][T22455] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 396.534603][ T4559] batadv_slave_0: left promiscuous mode [ 396.543738][ T4559] hsr_slave_0: left promiscuous mode [ 396.549769][ T4559] hsr_slave_1: left promiscuous mode [ 396.555563][ T4559] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 396.563028][ T4559] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 396.572366][ T4559] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 396.579840][ T4559] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 396.590525][ T4559] veth1_macvtap: left promiscuous mode [ 396.596782][ T4559] veth0_macvtap: left promiscuous mode [ 396.602350][ T4559] veth1_vlan: left promiscuous mode [ 396.607642][ T4559] veth0_vlan: left promiscuous mode [ 396.642984][T22544] loop3: detected capacity change from 0 to 1024 [ 396.657201][T22544] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 396.689095][T17425] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 396.738620][T22548] pim6reg1: entered promiscuous mode [ 396.744093][T22548] pim6reg1: entered allmulticast mode [ 396.777168][T22455] hsr_slave_0: entered promiscuous mode [ 396.783271][T22455] hsr_slave_1: entered promiscuous mode [ 396.789116][T22455] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 396.798295][T22455] Cannot create hsr debugfs directory [ 396.870180][T22563] loop9: detected capacity change from 0 to 128 [ 397.001504][T22559] loop3: detected capacity change from 0 to 2048 [ 397.085642][T22559] [EXT4 FS bs=2048, gc=1, bpg=262144, ipg=32, mo=a842e02c, mo2=0002] [ 397.090520][ T4559] IPVS: stop unused estimator thread 0... [ 397.112048][T22559] System zones: 0-7 [ 397.118529][T22559] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 397.125324][T22455] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 397.132465][ T28] kworker/u8:1: attempt to access beyond end of device [ 397.132465][ T28] loop9: rw=1, sector=145, nr_sectors = 896 limit=128 [ 397.196986][T22571] loop8: detected capacity change from 0 to 1024 [ 397.217938][T22455] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 397.235771][T22571] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 397.301987][T22564] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.6226: bg 0: block 234: padding at end of block bitmap is not set [ 397.330492][T22455] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 397.356505][T22564] EXT4-fs (loop3): Remounting filesystem read-only [ 397.367960][T22455] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 397.396263][T22577] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop3 ino=12 [ 397.406779][T22576] loop8: detected capacity change from 0 to 1024 [ 397.484565][T22455] 8021q: adding VLAN 0 to HW filter on device bond0 [ 397.506950][T22455] 8021q: adding VLAN 0 to HW filter on device team0 [ 397.517474][ T28] bridge0: port 1(bridge_slave_0) entered blocking state [ 397.524664][ T28] bridge0: port 1(bridge_slave_0) entered forwarding state [ 397.534956][ T4559] bridge0: port 2(bridge_slave_1) entered blocking state [ 397.542042][ T4559] bridge0: port 2(bridge_slave_1) entered forwarding state [ 397.558342][T22455] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 397.568865][T22455] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 397.615290][T22586] loop8: detected capacity change from 0 to 128 [ 397.679665][T22455] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 397.727267][ T4559] kworker/u8:11: attempt to access beyond end of device [ 397.727267][ T4559] loop8: rw=1, sector=145, nr_sectors = 896 limit=128 [ 397.779424][T22605] netlink: 28 bytes leftover after parsing attributes in process `syz.9.6239'. [ 397.841564][T22455] veth0_vlan: entered promiscuous mode [ 397.849858][T22455] veth1_vlan: entered promiscuous mode [ 397.879480][T22455] veth0_macvtap: entered promiscuous mode [ 397.886899][T22455] veth1_macvtap: entered promiscuous mode [ 397.896865][T22455] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 397.907333][T22455] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 397.917225][T22455] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 397.927656][T22455] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 397.937489][T22455] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 397.947928][T22455] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 397.957793][T22455] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 397.968271][T22455] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 398.036428][T22455] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 398.047699][T22628] loop3: detected capacity change from 0 to 1024 [ 398.060237][T22455] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 398.070799][T22455] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 398.080644][T22455] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 398.091104][T22455] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 398.101119][T22455] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 398.111541][T22455] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 398.121436][T22455] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 398.131875][T22455] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 398.142971][T22455] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 398.151568][T22455] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 398.160419][T22455] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 398.169136][T22455] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 398.177921][T22455] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 398.360610][T22638] loop4: detected capacity change from 0 to 4096 [ 398.379285][T22638] ext4: Unknown parameter 'fsname' [ 398.388966][T22648] loop8: detected capacity change from 0 to 764 [ 398.399983][T22626] loop9: detected capacity change from 0 to 2048 [ 398.427539][T22654] netlink: 28 bytes leftover after parsing attributes in process `syz.8.6254'. [ 398.486199][T22626] [EXT4 FS bs=2048, gc=1, bpg=262144, ipg=32, mo=a842e02c, mo2=0002] [ 398.495901][T22626] System zones: 0-7 [ 398.569279][T22652] loop0: detected capacity change from 0 to 4096 [ 398.606337][T22652] ext4: Unknown parameter 'fsname' [ 398.649850][T22659] loop8: detected capacity change from 0 to 1024 [ 398.680563][T22659] EXT4-fs: Ignoring removed nobh option [ 398.686224][T22659] EXT4-fs: Ignoring removed bh option [ 399.001852][T22675] loop8: detected capacity change from 0 to 128 [ 399.071956][T22685] syz_tun: entered promiscuous mode [ 399.078157][T22685] batadv_slave_0: entered promiscuous mode [ 399.084908][T22685] debugfs: Directory 'hsr1' with parent 'hsr' already present! [ 399.092513][T22685] Cannot create hsr debugfs directory [ 399.161103][T22687] loop8: detected capacity change from 0 to 1024 [ 399.169417][T22687] EXT4-fs (loop8): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 399.180916][T22687] EXT4-fs (loop8): revision level too high, forcing read-only mode [ 399.189947][T22687] EXT4-fs (loop8): too many log groups per flexible block group [ 399.197644][T22687] EXT4-fs (loop8): failed to initialize mballoc (-12) [ 399.205589][T22687] EXT4-fs (loop8): mount failed [ 399.432540][T22708] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6277'. [ 399.620731][T22697] loop9: detected capacity change from 0 to 2048 [ 399.644999][T22697] [EXT4 FS bs=2048, gc=1, bpg=262144, ipg=32, mo=a842e02c, mo2=0002] [ 399.657800][T22697] System zones: 0-7 [ 400.057367][T22731] loop8: detected capacity change from 0 to 1024 [ 400.145649][T22740] netlink: 8 bytes leftover after parsing attributes in process `syz.9.6290'. [ 400.176245][ T29] kauditd_printk_skb: 86 callbacks suppressed [ 400.176260][ T29] audit: type=1326 audit(1740030640.240:15471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22737 comm="syz.4.6287" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7232f6cde9 code=0x7ffc0000 [ 400.224976][ T29] audit: type=1326 audit(1740030640.240:15472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22737 comm="syz.4.6287" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f7232f6cde9 code=0x7ffc0000 [ 400.249016][ T29] audit: type=1326 audit(1740030640.240:15473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22737 comm="syz.4.6287" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7232f6cde9 code=0x7ffc0000 [ 400.272582][ T29] audit: type=1326 audit(1740030640.240:15474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22737 comm="syz.4.6287" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f7232f6cde9 code=0x7ffc0000 [ 400.296024][ T29] audit: type=1326 audit(1740030640.240:15475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22737 comm="syz.4.6287" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7232f6cde9 code=0x7ffc0000 [ 400.319605][ T29] audit: type=1326 audit(1740030640.240:15476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22737 comm="syz.4.6287" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f7232f6cde9 code=0x7ffc0000 [ 400.343108][ T29] audit: type=1326 audit(1740030640.240:15477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22737 comm="syz.4.6287" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7232f6cde9 code=0x7ffc0000 [ 400.366719][ T29] audit: type=1326 audit(1740030640.240:15478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22737 comm="syz.4.6287" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7232f6cde9 code=0x7ffc0000 [ 400.390322][ T29] audit: type=1326 audit(1740030640.240:15479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22737 comm="syz.4.6287" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7232f6cde9 code=0x7ffc0000 [ 400.413991][ T29] audit: type=1326 audit(1740030640.240:15480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22737 comm="syz.4.6287" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7232f6cde9 code=0x7ffc0000 [ 400.498814][T22759] netlink: 'syz.9.6297': attribute type 1 has an invalid length. [ 400.565748][T22764] loop8: detected capacity change from 0 to 4096 [ 400.572439][T22764] ext4: Unknown parameter 'fsname' [ 400.649208][T22770] 9pnet_fd: Insufficient options for proto=fd [ 400.675760][T22767] netlink: 'syz.4.6300': attribute type 1 has an invalid length. [ 400.688168][T22753] loop0: detected capacity change from 0 to 2048 [ 400.704395][T22753] [EXT4 FS bs=2048, gc=1, bpg=262144, ipg=32, mo=a842e02c, mo2=0002] [ 400.716994][T22753] System zones: 0-7 [ 400.817190][T22786] loop0: detected capacity change from 0 to 1024 [ 400.832469][T22789] 9pnet_fd: Insufficient options for proto=fd [ 400.950282][T22800] 9pnet_fd: Insufficient options for proto=fd [ 400.975641][T22802] netlink: 200 bytes leftover after parsing attributes in process `syz.0.6314'. [ 401.022980][T22805] xt_hashlimit: max too large, truncated to 1048576 [ 401.219469][T22809] netlink: 'syz.0.6315': attribute type 32 has an invalid length. [ 401.368666][T22794] loop3: detected capacity change from 0 to 2048 [ 401.397547][T22794] [EXT4 FS bs=2048, gc=1, bpg=262144, ipg=32, mo=a842e02c, mo2=0002] [ 401.412280][T22794] System zones: 0-7 [ 401.459073][T22823] 9pnet_fd: Insufficient options for proto=fd [ 401.611518][T22829] loop8: detected capacity change from 0 to 1024 [ 401.620316][T22831] 9pnet_fd: Insufficient options for proto=fd [ 401.642955][T22833] netlink: 'syz.9.6325': attribute type 1 has an invalid length. [ 401.670112][T22839] xt_hashlimit: max too large, truncated to 1048576 [ 401.758421][T22846] loop3: detected capacity change from 0 to 128 [ 401.796029][T22848] loop8: detected capacity change from 0 to 4096 [ 401.802712][T22848] ext4: Unknown parameter 'fsname' [ 401.819669][T22844] loop4: detected capacity change from 0 to 4096 [ 401.826281][T22844] ext4: Unknown parameter 'fsname' [ 401.837267][T22849] loop3: detected capacity change from 0 to 1024 [ 401.853928][T22849] ext4: Unknown parameter 'fsname' [ 401.902768][T22851] loop9: detected capacity change from 0 to 4096 [ 401.913000][T22851] ext4: Unknown parameter 'fsname' [ 401.981756][T22853] loop0: detected capacity change from 0 to 4096 [ 401.989505][T22853] ext4: Unknown parameter 'fsname' [ 402.687803][T22878] netlink: 8 bytes leftover after parsing attributes in process `syz.8.6343'. [ 402.817329][T22881] loop4: detected capacity change from 0 to 4096 [ 402.863611][T22881] ext4: Unknown parameter 'fsname' [ 403.105855][T22892] loop8: detected capacity change from 0 to 4096 [ 403.126262][T22892] ext4: Unknown parameter 'fsname' [ 403.278552][T22846] syz.3.6328 (22846) used greatest stack depth: 6096 bytes left [ 403.316083][T22902] loop9: detected capacity change from 0 to 128 [ 403.329782][T22902] loop9: detected capacity change from 0 to 1024 [ 403.336367][T22902] ext4: Unknown parameter 'fsname' [ 403.389983][T22914] loop9: detected capacity change from 0 to 128 [ 403.682030][T22924] loop0: detected capacity change from 0 to 4096 [ 403.714575][T22928] loop4: detected capacity change from 0 to 1024 [ 403.718030][T22924] ext4: Unknown parameter 'fsname' [ 403.868693][T22935] loop3: detected capacity change from 0 to 4096 [ 403.875831][T22935] ext4: Unknown parameter 'fsname' [ 403.928109][T22940] loop8: detected capacity change from 0 to 4096 [ 403.934924][T22940] ext4: Unknown parameter 'fsname' [ 403.946503][T22936] xt_hashlimit: max too large, truncated to 1048576 [ 403.975649][T22942] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6372'. [ 404.263945][ T5753] kworker/u8:14: attempt to access beyond end of device [ 404.263945][ T5753] loop9: rw=1, sector=145, nr_sectors = 896 limit=128 [ 404.407377][T22970] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6383'. [ 404.420430][T22973] loop9: detected capacity change from 0 to 128 [ 404.704135][ T5753] kworker/u8:14: attempt to access beyond end of device [ 404.704135][ T5753] loop9: rw=1, sector=145, nr_sectors = 896 limit=128 [ 404.763141][T22997] loop8: detected capacity change from 0 to 4096 [ 404.788561][T22997] ext4: Unknown parameter 'fsname' [ 404.912600][T23012] loop4: detected capacity change from 0 to 512 [ 404.958574][T23024] loop3: detected capacity change from 0 to 1024 [ 404.991902][T23024] EXT4-fs mount: 22 callbacks suppressed [ 404.991918][T23024] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 405.029255][T23024] netlink: 40 bytes leftover after parsing attributes in process `syz.3.6410'. [ 405.065498][T17425] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 405.166857][T23048] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6420'. [ 405.205069][T23046] loop9: detected capacity change from 0 to 512 [ 405.211797][T23046] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 405.223419][T23046] EXT4-fs (loop9): 1 truncate cleaned up [ 405.229637][T23046] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 405.256909][T17481] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 405.272160][T23053] loop3: detected capacity change from 0 to 1024 [ 405.289832][T23053] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 405.306579][T23053] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 405.325642][T23053] EXT4-fs (loop3): too many log groups per flexible block group [ 405.333437][T23053] EXT4-fs (loop3): failed to initialize mballoc (-12) [ 405.349987][T23053] EXT4-fs (loop3): mount failed [ 405.372413][T23075] loop8: detected capacity change from 0 to 128 [ 405.426906][T23078] netlink: 28 bytes leftover after parsing attributes in process `syz.9.6433'. [ 405.460003][T23080] loop3: detected capacity change from 0 to 1024 [ 405.505856][T23080] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 405.521599][T23080] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 405.560528][T23082] loop9: detected capacity change from 0 to 512 [ 405.578084][T23082] /dev/loop9: Can't open blockdev [ 405.812263][T23107] loop3: detected capacity change from 0 to 4096 [ 405.830056][T23107] ext4: Unknown parameter 'fsname' [ 405.848242][T23112] loop4: detected capacity change from 0 to 1024 [ 405.859003][T23112] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6448'. [ 405.902454][T23115] loop9: detected capacity change from 0 to 1024 [ 405.971305][T23115] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 405.987979][T23115] netlink: 20 bytes leftover after parsing attributes in process `syz.9.6449'. [ 406.079065][T23121] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6452'. [ 406.089904][T17481] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 406.297576][T23140] loop0: detected capacity change from 0 to 1024 [ 406.328438][T23140] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 406.341534][T23150] loop9: detected capacity change from 0 to 128 [ 406.346122][T23140] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6460'. [ 406.369289][ T53] kworker/u8:5: attempt to access beyond end of device [ 406.369289][ T53] loop8: rw=1, sector=145, nr_sectors = 896 limit=128 [ 406.389397][T18283] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 406.438029][T23158] loop0: detected capacity change from 0 to 128 [ 406.726730][T23169] loop4: detected capacity change from 0 to 128 [ 406.819816][T23180] loop8: detected capacity change from 0 to 1024 [ 406.871460][T23180] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 407.059294][T17799] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 407.216538][ T4559] kworker/u8:11: attempt to access beyond end of device [ 407.216538][ T4559] loop9: rw=1, sector=145, nr_sectors = 896 limit=128 [ 407.277765][T23194] loop9: detected capacity change from 0 to 128 [ 407.309133][ T4559] kworker/u8:11: attempt to access beyond end of device [ 407.309133][ T4559] loop0: rw=1, sector=145, nr_sectors = 896 limit=128 [ 407.526044][T23190] loop8: detected capacity change from 0 to 2048 [ 407.540119][T23202] 9pnet_fd: Insufficient options for proto=fd [ 407.586989][T23190] [EXT4 FS bs=2048, gc=1, bpg=262144, ipg=32, mo=a842e02c, mo2=0002] [ 407.606999][T23190] System zones: 0-7 [ 407.627789][T23190] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 407.686905][T23196] loop3: detected capacity change from 0 to 2048 [ 407.759592][T23196] [EXT4 FS bs=2048, gc=1, bpg=262144, ipg=32, mo=a842e02c, mo2=0002] [ 407.774435][T23192] EXT4-fs error (device loop8): ext4_validate_block_bitmap:441: comm syz.8.6477: bg 0: block 234: padding at end of block bitmap is not set [ 407.804535][T23196] System zones: 0-7 [ 407.810429][T23196] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 407.829609][T23192] EXT4-fs (loop8): Remounting filesystem read-only [ 407.852680][ T29] kauditd_printk_skb: 67 callbacks suppressed [ 407.852696][ T29] audit: type=1400 audit(1740030647.900:15548): avc: denied { mounton } for pid=23214 comm="syz.4.6486" path="/proc/127/task/128/cgroup" dev="proc" ino=75783 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=file permissive=1 [ 407.882712][ T29] audit: type=1400 audit(1740030647.910:15549): avc: denied { remount } for pid=23214 comm="syz.4.6486" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 407.883539][T23216] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop8 ino=12 [ 408.096155][T23197] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.6479: bg 0: block 234: padding at end of block bitmap is not set [ 408.115836][T23194] ================================================================== [ 408.123937][T23194] BUG: KCSAN: data-race in __udp4_lib_mcast_deliver / udp_lib_unhash [ 408.132022][T23194] [ 408.134342][T23194] read-write to 0xffff888101702198 of 4 bytes by task 23193 on cpu 0: [ 408.142491][T23194] udp_lib_unhash+0x216/0x4e0 [ 408.147176][T23194] sk_common_release+0x70/0x220 [ 408.152036][T23194] udp_lib_close+0x15/0x20 [ 408.156454][T23194] inet_release+0xce/0xf0 [ 408.160781][T23194] inet6_release+0x3e/0x60 [ 408.165197][T23194] sock_close+0x68/0x150 [ 408.169440][T23194] __fput+0x2ac/0x640 [ 408.173431][T23194] ____fput+0x1c/0x30 [ 408.177408][T23194] task_work_run+0x13a/0x1a0 [ 408.182000][T23194] syscall_exit_to_user_mode+0xa8/0x120 [ 408.187548][T23194] do_syscall_64+0xd6/0x1c0 [ 408.192053][T23194] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 408.197953][T23194] [ 408.200271][T23194] read to 0xffff888101702198 of 4 bytes by task 23194 on cpu 1: [ 408.207894][T23194] __udp4_lib_mcast_deliver+0x97/0x730 [ 408.213345][T23194] __udp4_lib_rcv+0x966/0xfb0 [ 408.218015][T23194] udp_rcv+0x4f/0x60 [ 408.221906][T23194] ip_protocol_deliver_rcu+0x3f2/0x750 [ 408.227375][T23194] ip_local_deliver_finish+0x17d/0x210 [ 408.232839][T23194] ip_local_deliver+0xec/0x1d0 [ 408.237606][T23194] ip_sublist_rcv+0x3c7/0x640 [ 408.242295][T23194] ip_list_rcv+0x25e/0x290 [ 408.246724][T23194] __netif_receive_skb_list_core+0x4f0/0x520 [ 408.252706][T23194] netif_receive_skb_list_internal+0x4e4/0x660 [ 408.258861][T23194] netif_receive_skb_list+0x31/0x230 [ 408.264149][T23194] bpf_test_run_xdp_live+0xe10/0x1040 [ 408.269532][T23194] bpf_prog_test_run_xdp+0x51d/0x8b0 [ 408.274828][T23194] bpf_prog_test_run+0x20f/0x3a0 [ 408.279790][T23194] __sys_bpf+0x400/0x7a0 [ 408.284049][T23194] __x64_sys_bpf+0x43/0x50 [ 408.288521][T23194] x64_sys_call+0x2914/0x2dc0 [ 408.293208][T23194] do_syscall_64+0xc9/0x1c0 [ 408.297712][T23194] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 408.303606][T23194] [ 408.305922][T23194] value changed: 0x00000001 -> 0x00000000 [ 408.311631][T23194] [ 408.313950][T23194] Reported by Kernel Concurrency Sanitizer on: [ 408.320092][T23194] CPU: 1 UID: 0 PID: 23194 Comm: syz.9.6478 Not tainted 6.14.0-rc3-syzkaller-00079-g87a132e73910 #0 [ 408.330849][T23194] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 408.340899][T23194] ================================================================== [ 408.361416][T23230] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop3 ino=12 [ 408.381680][T17799] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 408.391992][ T4559] kworker/u8:11: attempt to access beyond end of device [ 408.391992][ T4559] loop9: rw=1, sector=145, nr_sectors = 896 limit=128 [ 408.407418][T23197] EXT4-fs (loop3): Remounting filesystem read-only [ 408.500789][T17425] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.