last executing test programs: 1m13.007837482s ago: executing program 4 (id=52): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000008c0)=ANY=[@ANYRES32, @ANYRES32, @ANYRES8=0x0, @ANYRES32, @ANYBLOB, @ANYRES32, @ANYRES32=r0, @ANYRES16=r0], 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000980)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) socketpair(0x10, 0x1, 0x0, &(0x7f0000000000)) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, 0x0, &(0x7f00000002c0)}, 0x20) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000500)={0xffffffffffffffff, 0xe0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200), ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc8, 0x8, 0x0, 0x0}}, 0x10) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0500000008000000e27f00000100000000000000", @ANYRES32, @ANYBLOB="000000008000"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000002300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r2}, &(0x7f0000000380), &(0x7f00000003c0)=r3}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000200)={{0x1, 0x1, 0x18}, './file0\x00'}) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6, @void, @value}, 0x94) r4 = socket$netlink(0x10, 0x3, 0xb) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) close(r4) 1m12.879102523s ago: executing program 4 (id=53): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x141a82, 0x0) r1 = dup(r0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000b80)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3, 0x0, 0xfffffffffffff660}, 0x18) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000080000000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) r5 = open(&(0x7f0000000100)='./bus\x00', 0x40542, 0x0) ftruncate(r5, 0xee72) sendfile(r1, r5, 0x0, 0x8000fffffffe) 1m12.715924643s ago: executing program 4 (id=54): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0xe) r1 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_int(r1, 0x107, 0xb, &(0x7f0000000340), &(0x7f0000000380)=0x4) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) getpeername$l2tp(r0, 0x0, &(0x7f0000000040)) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x3a) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r4}, 0x10) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="2e00000010008108040f9becdb4cb92e0a28b137140000004abd6efb2503eaff0d000100031172bf050005001201", 0x2e}], 0x1}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000280)={'batadv0\x00', 0x0}) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_TSINFO_GET(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x20, r8, 0x6a98047402e98331, 0x0, 0x0, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x20}}, 0x0) sendmsg$ETHTOOL_MSG_TSINFO_GET(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x50, r8, 0x100, 0x70bd25, 0x25dfdbfd, {}, [@HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000000}, 0x4) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) r10 = pidfd_getfd(r2, r2, 0x0) ioctl$IMSETDEVNAME(r10, 0x80184947, &(0x7f0000000240)={0x3, 'syz1\x00'}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000080)={{r9}, &(0x7f0000000040), &(0x7f0000000000)='%pK \x00'}, 0x20) r11 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r11, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)={0x2, 0x7, 0x1, 0x0, 0x2, 0x0, 0x70bd2a, 0x25dfdbfd}, 0x10}}, 0x8050) r12 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000540)=ANY=[@ANYBLOB="aa5be29449add398f1e778eff4ca90a47c7fb97ab6c595f8a27c4cb343d7a7e4a10f1a86dc6a468e8a1f76be844cc42154890cb83ba56623127b35da6896b0bbc9870392239daf52c703c8e3c418520b952cc950ff6c80d11f9e5f61415c9df757439719f73c3ea4322ea02401084041ba762544cc05253d04050835b6f0c077220e1ebbdc111bca5a69a8f1fe0b921533e59b38f42d107317c4ad32317788b6da673c5ed5192a633b5b6d65c7c2913cdff94a820e93f341856a09eb7798778d7669a5c750228ea2f4c17fdbcd1fda20e9da"], &(0x7f00000003c0)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x6c, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='kfree\x00', r12}, 0x10) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)={0x1b, 0x0, 0x0, 0x4, 0x0, 0x1, 0x7, '\x00', r6, 0xffffffffffffffff, 0x4, 0x3, 0x5, 0x0, @void, @value, @void, @value}, 0x50) r13 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r13, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r6}}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x0) 1m11.827216297s ago: executing program 4 (id=64): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10) r0 = semget$private(0x0, 0x1, 0x0) semtimedop(0x0, &(0x7f0000000040)=[{0x0, 0x5}, {0x3, 0xfffe, 0x1800}], 0x2, 0x0) semtimedop(r0, &(0x7f0000000080)=[{0x0, 0x7f}], 0x1, 0x0) semtimedop(r0, &(0x7f0000000040)=[{}], 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) sendmsg$nl_route(r1, 0x0, 0x0) semctl$IPC_RMID(r0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet6(0xa, 0x6, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0xc, &(0x7f0000000b80)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x4b0}}, 0x0) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) sendmsg$netlink(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[@ANYBLOB="1401000026000100000000000000000003"], 0x114}], 0x1}, 0x0) syz_genetlink_get_family_id$wireguard(&(0x7f0000000200), 0xffffffffffffffff) r6 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000300)={'veth0_to_hsr\x00'}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_mount_image$iso9660(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0x800000, &(0x7f0000000900)=ANY=[@ANYRES8=0x0, @ANYRESOCT, @ANYRESOCT, @ANYRES32, @ANYBLOB="b7ad7cd65c46a5be7840094fc88ed3944440d445ac89758d3aa4a6c77ea3e1e50196a99f88ba68f3377383de4de11c07aa5d22d9f4f3c58344d6011b6ea5ee82cf40e4ca5976370cb73c872e576f936791a0ffa5639ac237214be5926acea5405e00f1a144cf7a5240bc1e56ed617e19d6a5a268505f0012b4baf36d3a71eb34c8b67281dbba4b20c3d724ef150deff6f7d908bc72575a1f43b608e0d118", @ANYBLOB="a1fffd2e4c38a7b17fef1a78ad194301887b7711a1517cd8b4288a2fbb7d202d8c4a1809add074e6dde0703158125f2f114c49f5ee5f249d63ac0d851c212ccd8d82b7c694ead23c41f021e8bc78d646d07e3513568bb81d2179a012dcdcb845b0a58b6d5e46a177de56e3e77ed573967e4ebe299078019693ca486edbaa44e947802c7f46f1de18cf7f0e1af02964d04cc84d979855e8d3a3fda262f6a7d2b4b4849fd880c9b9af9be818ba05386754a3505e833ca0b95491ed", @ANYRES8=0x0], 0x3, 0x7cd, &(0x7f0000001780)="$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") r7 = openat$binfmt_register(0xffffff9c, &(0x7f0000000040), 0x1, 0x0) write$binfmt_register(r7, &(0x7f0000000100)={0x3a, 'syz3', 0x3a, 'E', 0x3a, 0x6, 0x3a, 'E', 0x3a, '@{@$\x9a$^', 0x3a, './file0', 0x3a, [0x50, 0x4f, 0x46, 0x4f, 0x50]}, 0x34) 1m11.13236997s ago: executing program 4 (id=71): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x2810000, &(0x7f0000000380)={[{@user_xattr}, {@noquota}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@jqfmt_vfsv1}, {@block_validity}, {@dioread_nolock}, {@noquota}, {@min_batch_time={'min_batch_time', 0x3d, 0x8}}, {@delalloc}, {@user_xattr}, {@quota}]}, 0x1, 0x54f, &(0x7f0000000b00)="$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") open(&(0x7f0000000200)='./bus\x00', 0x14507e, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x3c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0}, 0x0, 0x3, 0xffff, 0x0, 0x0, 0xfffffffa}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000d40)={0x0, 0x2904c, 0x3fffffffffffe52, 0x10003, '\x00', [{}, {0xffffffff}]}) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000001040)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sys_enter\x00', r2}, 0x10) select(0x20000000, 0x0, 0x0, 0x0, 0x0) 1m10.9524391s ago: executing program 4 (id=75): bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0, 0x0, 0xffffffffffffffff}, 0x13) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x200000, &(0x7f0000000280)={[{@min_batch_time={'min_batch_time', 0x3d, 0x1}}, {}, {@nojournal_checksum}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@dioread_nolock}, {@nodelalloc}, {@acl}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x800343}}]}, 0xfd, 0x587, &(0x7f0000001240)="$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") r1 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) pwritev2(r1, &(0x7f0000000240)=[{0x0}], 0x1, 0x1200, 0x41001, 0x3) 1m10.95226445s ago: executing program 32 (id=75): bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0, 0x0, 0xffffffffffffffff}, 0x13) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x200000, &(0x7f0000000280)={[{@min_batch_time={'min_batch_time', 0x3d, 0x1}}, {}, {@nojournal_checksum}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@dioread_nolock}, {@nodelalloc}, {@acl}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x800343}}]}, 0xfd, 0x587, &(0x7f0000001240)="$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") r1 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) pwritev2(r1, &(0x7f0000000240)=[{0x0}], 0x1, 0x1200, 0x41001, 0x3) 43.913091349s ago: executing program 1 (id=628): socket$inet_sctp(0x2, 0x5, 0x84) r0 = syz_io_uring_setup(0x4172, &(0x7f0000000780)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000000)=""/4, 0x4}], 0x27}) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) r4 = openat$cgroup_ro(r3, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r4, &(0x7f0000000200)=0x1, 0x12) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r5}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) close(0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0}, 0x18) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={0xffffffffffffffff, 0x3, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r6) r7 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x6, 0x4, 0x5, 0x4, 0x0, 0x1, 0x3000, 0x3, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x2, 0x4, @perf_config_ext={0x4, 0x8}, 0x2000, 0xfffffffffffffffd, 0x13, 0x6, 0x31, 0x40, 0x0, 0x0, 0xf, 0x0, 0x2}, 0xffffffffffffffff, 0x5, 0xffffffffffffffff, 0x0) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r8, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x78) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, r7) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r10}, &(0x7f00000001c0), &(0x7f00000002c0)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00') io_uring_enter(r0, 0x567, 0x0, 0x0, 0x0, 0x0) 43.853809659s ago: executing program 1 (id=630): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bf61c0540f00000007010000f8ffffffb702000000000000b7030000000000008500000072f5ad009500000000000000000011ada9f17e1ea5"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f0000001b40), 0x1, 0x0) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000380)="e65c9b71285c24fb5029264a59330c85bfc26ea8f6d10a97e8d5d4b628add82be58fd45fb651dd23dcc3cdd01642d95dba66db02eaaa1cdef02796d95810d3b832367826badc6ce8a2c33258566a74b4c6684f73f050abb69f9af0ade95092627e86f1b25095ffbe73f2ef0d5943c7350b6c2abc20247828693ce1c322eac7635dc9", 0x82}], 0x1) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x4b0}, 0x1, 0x0, 0x0, 0x44}, 0x0) mount$bind(&(0x7f0000000180)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x1101088, 0x0) mount_setattr(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0, &(0x7f0000000080)={0x0, 0x0, 0x20000}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) lremovexattr(&(0x7f0000000280)='./file1\x00', &(0x7f0000000500)=ANY=[@ANYBLOB="73797374646d2e008d62409cfb8d7ec79c393d0574724e0ca27470497f73145f7c520f01263ebf29c966e4fb475b38ae45f5ca10e07b07e7fa7506e84fd8b47150b3e45066fb189d"]) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) socket(0x10, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) prctl$PR_SET_SECCOMP(0x16, 0x0, &(0x7f00000002c0)={0x1, &(0x7f00000004c0)=[{0x200000000006, 0x4, 0x0, 0xff}]}) bpf$MAP_CREATE(0x0, 0x0, 0x48) r4 = bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) signalfd(r4, &(0x7f0000000080)={[0x4]}, 0x8) socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/tcp\x00') preadv(r5, &(0x7f0000000300)=[{&(0x7f00000014c0)=""/237, 0xed}], 0x1, 0x6, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) 43.66823936s ago: executing program 1 (id=637): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000980)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) r2 = socket$can_j1939(0x1d, 0x2, 0x7) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000240)={0x1d, r4, 0xffffffffffffffff, {}, 0xfe}, 0x18) bind$can_j1939(r2, &(0x7f0000000040)={0x1d, r4, 0x3, {0x1, 0xf0, 0x4}, 0x2}, 0x18) 43.62506081s ago: executing program 1 (id=638): r0 = syz_mount_image$vfat(&(0x7f00000004c0), &(0x7f0000000640)='./bus\x00', 0x0, &(0x7f0000000080)=ANY=[], 0x1, 0x1268, &(0x7f0000002500)="$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") open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) r1 = open(&(0x7f0000000100)='./bus\x00', 0x14113e, 0x0) write$binfmt_script(r1, &(0x7f0000000080), 0x208e290) perf_event_open(&(0x7f0000004cc0)={0x1, 0x44, 0x8, 0x0, 0x0, 0x0, 0x0, 0x9, 0x400, 0x6, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0xaf1d, 0x1, @perf_bp={0x0, 0x1}, 0x100410, 0x200, 0x2, 0x1, 0x9, 0x9, 0xfffd, 0x0, 0xbbd0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) read(r0, &(0x7f0000000a40)=""/4096, 0x1000) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xffc, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) syz_io_uring_setup(0x4169, &(0x7f0000000200)={0x0, 0x0, 0x2}, &(0x7f0000000480), &(0x7f0000000000)) chdir(&(0x7f0000000140)='./file0\x00') r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b0811000500000001002fd987446f7b3638bdbf", @ANYRES32, @ANYBLOB="8e0e00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1d, 0xc, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r4, @ANYBLOB="0000000000000000b708000000f1ff007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000000)='kmem_cache_free\x00', r5}, 0x10) r6 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r6, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x29}, './file0\x00'}) 43.114507422s ago: executing program 1 (id=642): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0xbf22, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xfffffffc, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000280)=0x10) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) lseek(r1, 0x3, 0x2) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket$inet6_dccp(0xa, 0x6, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000400)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_TP_METER(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000500)={0x30, r4, 0x3196aee33d918dfd, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r6}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8}]}, 0x30}}, 0x0) sendmsg$BATADV_CMD_SET_MESH(r2, &(0x7f00000004c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000200)={&(0x7f00000003c0)={0x44, r4, 0x400, 0x70bd27, 0x25dfdbfd, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0xffff}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x3}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r8 = socket$rds(0x15, 0x5, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8, 0x4, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000017b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000bc0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kfree\x00', r10}, 0x10) bind$rds(r8, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r8, &(0x7f0000000740)={&(0x7f0000000040)={0x2, 0x0, @dev}, 0x10, 0x0, 0x0, &(0x7f0000004680)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f0000002bc0)=[{&(0x7f0000001900)=""/135, 0x87}, {0xfffffffffffffffe, 0x2}], 0x2}}], 0x48}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r7}, 0x10) r11 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x0) preadv(r11, &(0x7f00000002c0)=[{&(0x7f0000000280)=""/8, 0x8}], 0x1, 0x0, 0x0) 42.184984176s ago: executing program 1 (id=657): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10) r0 = semget$private(0x0, 0x1, 0x0) semtimedop(0x0, &(0x7f0000000040)=[{0x0, 0x5}, {0x3, 0xfffe, 0x1800}], 0x2, 0x0) semtimedop(r0, &(0x7f0000000080)=[{0x0, 0x7f}], 0x1, 0x0) semtimedop(r0, &(0x7f0000000040)=[{}], 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) sendmsg$nl_route(r1, 0x0, 0x0) semctl$IPC_RMID(r0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet6(0xa, 0x6, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0xc, &(0x7f0000000b80)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) sendmsg$netlink(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[@ANYBLOB="1401000026000100000000000000000003"], 0x114}], 0x1}, 0x0) socket$packet(0x11, 0x2, 0x300) r5 = openat$binfmt_register(0xffffff9c, &(0x7f0000000040), 0x1, 0x0) write$binfmt_register(r5, &(0x7f0000000100)={0x3a, 'syz3', 0x3a, 'E', 0x3a, 0x6, 0x3a, 'E', 0x3a, '@{@$\x9a$^', 0x3a, './file0', 0x3a, [0x50, 0x4f, 0x46, 0x4f, 0x50]}, 0x34) 41.32966061s ago: executing program 5 (id=662): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x82, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x65d2381f, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x1, 0x0, 0x0, 0x95, 0x1fffffff, 0x0, 0x0, 0x40, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 41.25272092s ago: executing program 5 (id=664): r0 = syz_mount_image$vfat(&(0x7f00000004c0), &(0x7f0000000640)='./bus\x00', 0x0, &(0x7f0000000080)=ANY=[], 0x1, 0x1268, &(0x7f0000002500)="$eJzs3U9rI2UcB/Bf2vTv2qbquroL4oNeFCFue/DkpcguiAWl2gUVhFmbamialCYUIuLWkyfBlyHq0ZsgvoFevHgWBJFePO5BHGmT1aZJu7ptU5HP5zIPzzzfeWYyzMCE+TF7L32+sb7WLK9lrRgpFKK4ORbFuylSjMRodOzEc7d+/OnJN956+9XFpaUbyyndXHxz/sWU0uxT373z0ddPf9+6dOub2W8nYnfu3b3fFn7evbJ7de+Pr6LaTNVmqjdaKUu3G41WdrtWSavV5no5pddrlaxZSdV6s7LVs36t1tjcbKesvjozvblVaTZTVm+n9Uo7tQqptdVO2ftZtZ7K5XKamQ5OY+XLu3meR+T5WIxHnuf5VEzHpXgoZmI2SjEXD8cj8WhcjsfiSjweT8TVg1EXvd8AAAAAAAAAAAAAAAAAAADw/3Kf+v+C+n8AAAAAAAAAAAAAAAAAAAA4f0fr/4sRvv8PAAAAAAAAAAAAAAAAAAAAQ3af7/8fqf9/Xv0/AAAAAAAAAAAAAAAAAAAAnIfJzmI5pcmIjU+3V7ZXOstO/+JaVKMWlbgepfg9Dqr/Ozrtm68s3bieDszFCxt3uvk72yujvfn5sVLMFQbm5zv51JufiOnD+YUoxeXB8y8MzE/Gs8/s5z/p5MtRih/ei0bUYjWi0D36g/zH8ym9/NrSVG/+2v64Y42e82kBAACAs1ROf+l/ft/pDhq4vrOq+3yeuiMLJ/w/cOT5vBjXihd11NzTbH+4ntVqla0HbIwfv53x0225r1GIiCwO98xO/7K8P/mZTfGgjdGhTjp28phTnNMo/gd+zDNo/PrFoZ7JGO7sI91LIqvt3z//WSp28vxcd2zgxThxUur4e0ZhCPclhuPvk37RewIAAAAAAAAAAMC/MfDtv6mI6Hsf8IO+nnuvh/fG+7d8/OyfDeEIAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/mQHjgUAAAAAhPlbp9GxAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwFcBAAD///ME0UM=") open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) r1 = open(&(0x7f0000000100)='./bus\x00', 0x14113e, 0x0) write$binfmt_script(r1, &(0x7f0000000080), 0x208e290) perf_event_open(&(0x7f0000004cc0)={0x1, 0x44, 0x8, 0x0, 0x0, 0x0, 0x0, 0x9, 0x400, 0x6, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0xaf1d, 0x1, @perf_bp={0x0, 0x1}, 0x100410, 0x200, 0x2, 0x1, 0x9, 0x9, 0xfffd, 0x0, 0xbbd0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) read(r0, &(0x7f0000000a40)=""/4096, 0x1000) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xffc, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) syz_io_uring_setup(0x4169, &(0x7f0000000200)={0x0, 0x0, 0x2}, &(0x7f0000000480), &(0x7f0000000000)) chdir(&(0x7f0000000140)='./file0\x00') r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b0811000500000001002fd987446f7b3638bdbf", @ANYRES32, @ANYBLOB="8e0e00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1d, 0xc, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r4, @ANYBLOB="0000000000000000b708000000f1ff007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000000)='kmem_cache_free\x00', r5}, 0x10) r6 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r6, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x29}, './file0\x00'}) 40.673594793s ago: executing program 5 (id=672): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)=ANY=[@ANYRESOCT, @ANYRESOCT, @ANYRES64=0xffffffffffffffff, @ANYRES32, @ANYRES8=0xffffffffffffffff, @ANYRES64], 0x48) brk(0x9) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000280)={0x6, 0x0}, 0x8) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x3, 0x10, &(0x7f0000000580)=ANY=[@ANYRES64=r1, @ANYRES32=r0, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b0000000000000000000800008000000000000092cedd44", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES16=r2, @ANYRESHEX=r1, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="000000000000ffffffff000003"], &(0x7f00000004c0)='GPL\x00', 0xfffffffd, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, @void, @value}, 0x9d) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) pause() r5 = epoll_create(0x9) epoll_pwait2(r5, &(0x7f00000003c0)=[{}], 0x1, &(0x7f0000000200), 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r4}, 0x10) r6 = add_key$keyring(&(0x7f0000000080), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd) request_key(&(0x7f00000000c0)='asymmetric\x00', &(0x7f0000000100)={'syz', 0x0}, &(0x7f0000000200)='#$*\x00', r6) keyctl$restrict_keyring(0xa, r6, &(0x7f0000000300)='asymmetric\x00', &(0x7f0000000000)='id:cb2e') pipe2$9p(&(0x7f0000000200), 0x0) mbind(&(0x7f000054c000/0x1000)=nil, 0x1000, 0x2, &(0x7f0000000000)=0x5, 0x8, 0x0) r7 = socket(0x3, 0x3, 0x3a) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000031c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f00000005c0)='ext4_discard_blocks\x00', r4, 0x0, 0x5}, 0x18) r8 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r8, 0x402, 0x8000003d) fcntl$notify(0xffffffffffffffff, 0x402, 0x3c) close_range(r8, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000240)={'macvlan0\x00'}) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r9 = socket(0x200000100000011, 0x3, 0x4) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000900)=ANY=[], 0xc4}, 0x1, 0x0, 0x0, 0x4000800}, 0x40) 39.778958037s ago: executing program 5 (id=682): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="0a00000006000000ff0f000003"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000580)='kmem_cache_free\x00', r1}, 0x10) r2 = socket(0x1e, 0x1, 0x0) connect$tipc(r2, &(0x7f0000000000)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10) write$binfmt_misc(r2, &(0x7f0000000080), 0x2000011a) 39.649957557s ago: executing program 5 (id=687): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0xbf22, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xfffffffc, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000280)=0x10) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) lseek(r1, 0x3, 0x2) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket$inet6_dccp(0xa, 0x6, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000400)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_TP_METER(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000500)={0x30, r4, 0x3196aee33d918dfd, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r6}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8}]}, 0x30}}, 0x0) sendmsg$BATADV_CMD_SET_MESH(r2, &(0x7f00000004c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000200)={&(0x7f00000003c0)={0x44, r4, 0x400, 0x70bd27, 0x25dfdbfd, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0xffff}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x3}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r8 = socket$rds(0x15, 0x5, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8, 0x4, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000017b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000bc0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kfree\x00', r10}, 0x10) bind$rds(r8, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r8, &(0x7f0000000740)={&(0x7f0000000040)={0x2, 0x0, @dev}, 0x10, 0x0, 0x0, &(0x7f0000004680)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f0000002bc0)=[{&(0x7f0000001900)=""/135, 0x87}, {0xfffffffffffffffe, 0x2}], 0x2}}], 0x48}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r7}, 0x10) r11 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x0) preadv(r11, &(0x7f00000002c0)=[{&(0x7f0000000280)=""/8, 0x8}], 0x1, 0x0, 0x0) 38.795904111s ago: executing program 5 (id=697): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000730000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) write$selinux_context(r1, &(0x7f0000000340)='system_u:object_r:hugetlbfs_t:s0\x00', 0x1d) 26.789987483s ago: executing program 33 (id=657): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10) r0 = semget$private(0x0, 0x1, 0x0) semtimedop(0x0, &(0x7f0000000040)=[{0x0, 0x5}, {0x3, 0xfffe, 0x1800}], 0x2, 0x0) semtimedop(r0, &(0x7f0000000080)=[{0x0, 0x7f}], 0x1, 0x0) semtimedop(r0, &(0x7f0000000040)=[{}], 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) sendmsg$nl_route(r1, 0x0, 0x0) semctl$IPC_RMID(r0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet6(0xa, 0x6, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0xc, &(0x7f0000000b80)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) sendmsg$netlink(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[@ANYBLOB="1401000026000100000000000000000003"], 0x114}], 0x1}, 0x0) socket$packet(0x11, 0x2, 0x300) r5 = openat$binfmt_register(0xffffff9c, &(0x7f0000000040), 0x1, 0x0) write$binfmt_register(r5, &(0x7f0000000100)={0x3a, 'syz3', 0x3a, 'E', 0x3a, 0x6, 0x3a, 'E', 0x3a, '@{@$\x9a$^', 0x3a, './file0', 0x3a, [0x50, 0x4f, 0x46, 0x4f, 0x50]}, 0x34) 23.553414188s ago: executing program 34 (id=697): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000730000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) write$selinux_context(r1, &(0x7f0000000340)='system_u:object_r:hugetlbfs_t:s0\x00', 0x1d) 1.239406785s ago: executing program 3 (id=1282): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r0}, &(0x7f0000000000), &(0x7f00000003c0)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x18) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$sock_int(r2, 0x1, 0x10, &(0x7f0000000080)=0x5, 0x4) bind$bt_hci(r2, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) recvmmsg(r2, &(0x7f0000000f80)=[{{0x0, 0x0, 0x0}, 0x9}], 0x1, 0x2040, 0x0) 1.210422245s ago: executing program 2 (id=1283): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) socket(0xf, 0x5, 0x2) ioctl$KDGKBDIACR(r0, 0x4b4a, &(0x7f0000000440)=""/252) ioctl$TIOCGETD(r0, 0x5424, &(0x7f0000000000)) 1.210134795s ago: executing program 2 (id=1284): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000280)={0xa, 0x2, 0x0, @loopback, 0x9}, 0x1c) sendto$inet6(r0, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5dac14e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x18}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock_addr, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = socket$inet6(0xa, 0x3, 0x4) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) bind$inet6(r5, &(0x7f0000000140)={0xa, 0x4e22, 0xb, @local, 0x4}, 0x1c) sendto$inet6(r4, 0x0, 0x0, 0x40800, &(0x7f00000002c0)={0xa, 0x0, 0x6, @mcast2={0xff, 0x5}, 0xfffffffc}, 0x1c) sendmsg$nl_xfrm(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYRESHEX=r2], 0x40}}, 0x0) r6 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r6, 0x11b, 0x4, &(0x7f00000002c0)={&(0x7f0000000000)=""/74, 0x32a000, 0x800}, 0x20) socket$inet6(0xa, 0x4, 0xffffff57) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000b708000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r1, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) copy_file_range(r0, &(0x7f0000000200)=0x5, r7, &(0x7f0000000500)=0x2, 0xbc80, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) syz_clone(0x2304000, 0x0, 0x0, 0x0, 0x0, 0x0) 1.000114786s ago: executing program 3 (id=1288): openat$null(0xffffffffffffff9c, 0x0, 0x80401, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x0, 0x0}) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb7", @ANYRES32=r0, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x2008002, &(0x7f0000000080)={[{@stripe={'stripe', 0x3d, 0x1}}]}, 0x1, 0x55f, &(0x7f0000000540)="$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") r2 = socket$unix(0x1, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec8500000050000000850000000f00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000240)='ext4_drop_inode\x00', r1}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bind$unix(r2, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 984.708696ms ago: executing program 2 (id=1289): r0 = syz_io_uring_setup(0x4172, &(0x7f0000000780)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f00000004c0)=[{0x0}], 0x1}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r3}, &(0x7f00000001c0), &(0x7f00000002c0)}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r4}, 0x10) symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00') io_uring_enter(r0, 0x567, 0x0, 0x0, 0x0, 0x0) 933.159846ms ago: executing program 6 (id=1290): prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000031c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) r1 = accept$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) setsockopt$packet_tx_ring(r1, 0x107, 0xd, &(0x7f0000000240)=@req3={0xf, 0x4b43, 0x3, 0x7ff, 0xb, 0x6, 0x8}, 0x1c) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) setsockopt$bt_BT_RCVMTU(r2, 0x112, 0xd, &(0x7f0000000000)=0x2, 0x2) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 930.572606ms ago: executing program 2 (id=1291): r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000340)=ANY=[@ANYBLOB="cc000000130077a125bd7000000000000000fd0000004e1f0000000000000000000000000100"/56, @ANYRES32=r0, @ANYBLOB="000000000200000000000000000000007f0002"], 0xcc}}, 0x0) close_range(0xffffffffffffffff, r0, 0x0) syz_open_dev$sg(&(0x7f0000000040), 0x8, 0x109801) shutdown(0xffffffffffffffff, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='mm_page_free\x00', r4}, 0x18) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'vlan1\x00'}) r6 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r6) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) sendmsg$AUDIT_TTY_SET(r1, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x18, 0x3f9, 0x800, 0x70bd2c, 0x25dfdbfe, {0x1, 0x1}, ["", "", "", "", "", "", "", "", "", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x8801}, 0x8850) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r7, 0x8982, &(0x7f0000000000)) fallocate(r5, 0x62, 0x7, 0x7) 872.500606ms ago: executing program 6 (id=1292): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kfree\x00', r0}, 0x10) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000010c0)='/proc/bus/input/devices\x00', 0x0, 0x0) preadv(r1, 0x0, 0x0, 0x33, 0x0) 848.802387ms ago: executing program 6 (id=1295): r0 = syz_mount_image$vfat(&(0x7f00000004c0), &(0x7f0000000640)='./bus\x00', 0x0, &(0x7f0000000080)=ANY=[], 0x1, 0x1268, &(0x7f0000002500)="$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") open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) r1 = open(&(0x7f0000000100)='./bus\x00', 0x14113e, 0x0) write$binfmt_script(r1, &(0x7f0000000080), 0x208e290) read(r0, &(0x7f0000000a40)=""/4096, 0x1000) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xffc, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) syz_io_uring_setup(0x4169, &(0x7f0000000200)={0x0, 0x0, 0x2}, &(0x7f0000000480), &(0x7f0000000000)) chdir(&(0x7f0000000140)='./file0\x00') r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b0811000500000001002fd987446f7b3638bdbf", @ANYRES32, @ANYBLOB="8e0e00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1d, 0xc, &(0x7f0000000200)=ANY=[@ANYBLOB, @ANYRES32=r4, @ANYBLOB="0000000000000000b708000000f1ff007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000000)='kmem_cache_free\x00', r5}, 0x10) r6 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r6, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x29}, './file0\x00'}) 780.019237ms ago: executing program 7 (id=1296): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$inet(r2, &(0x7f0000000780)=[{{&(0x7f0000000040)={0x2, 0x4e21, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000100)=ANY=[], 0x30}}], 0x1, 0x4008804) 765.348887ms ago: executing program 3 (id=1297): bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$ptp0(0xffffffffffffff9c, 0x0, 0x2001, 0x0) r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) mbind(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x4002, 0x0, 0x3, 0x0) r1 = io_uring_setup(0x175c, &(0x7f000009df80)={0x0, 0x8, 0x0, 0xfffffffe, 0x5}) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r3 = syz_open_dev$loop(&(0x7f0000000000), 0x6, 0x180) syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000080)='./file1\x00', 0x1008014, &(0x7f0000000000)=ANY=[], 0x3, 0x7bf, &(0x7f0000000d80)="$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") socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f0000004a40)=[{{0x0, 0x0, 0x0}}, {{&(0x7f00000017c0)=@file={0x1, './file1\x00'}, 0x6e, 0x0}}], 0x2, 0x0) ioctl$BLKBSZSET(r3, 0x40081271, &(0x7f0000000180)=0x1) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/profiling', 0x101a02, 0x0) copy_file_range(r5, 0x0, r5, 0x0, 0x8, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f0000000100), 0x4) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r7 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00'}, 0x10) r8 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), r7) sendmsg$IPVS_CMD_NEW_DAEMON(r7, &(0x7f00000000c0)={0x0, 0x7, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000000000000000a000000380003801400020076657468305f766972745f7769666900060007004e2400000800030000000000080001"], 0x4c}}, 0x0) write$binfmt_aout(r2, &(0x7f0000000b80)=ANY=[], 0xff2e) epoll_create1(0x0) close_range(r1, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) rt_sigaction(0x11, 0x0, 0x0, 0x8, &(0x7f0000000000)) 743.175107ms ago: executing program 7 (id=1298): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r1, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000001180)={@fallback, 0xffffffffffffffff, 0x32, 0x0, 0x0, @void, @value}, 0x20) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000440)='./file0\x00', 0x2000081, &(0x7f0000000080)=ANY=[], 0x0, 0x23e, &(0x7f0000000bc0)="$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") mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r2, 0xa02000000000000, 0x60, &(0x7f0000000000)={'filter\x00', 0xb001, 0x4, 0x3e8, 0x0, 0x0, 0x130, 0x300, 0x300, 0x300, 0x7fffffe, 0x0, {[{{@arp={@local, @empty, 0x0, 0x0, 0x0, 0x0, {}, {@mac=@local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'pimreg\x00', 'veth0_to_bridge\x00'}, 0xc0, 0x130}, @unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "f67b23ffdfa27f907a03732da3acbc6518e62a77ca06f258762e88c0d9f9d2f413b94a105f4bdf01425ce81c5d000000000000000500ffffffff00"}}}, {{@arp={@multicast2, @empty, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_to_team\x00', 'ip6tnl0\x00'}, 0xc0, 0xe8}, @unspec=@CLASSIFY={0x28}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE3={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x3f, &(0x7f0000000040)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) 604.508077ms ago: executing program 7 (id=1301): r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x54}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="4400000010000104001007fb5c360dff9fe30000", @ANYRES32=r3, @ANYBLOB="0100000000000000240012000c000100627269646765000e14000200080007"], 0x44}}, 0x0) sendto$packet(r0, 0x0, 0x0, 0x5dc, &(0x7f0000000140)={0x11, 0x8100, r3, 0x1, 0x0, 0x6, @dev}, 0x14) 568.401648ms ago: executing program 7 (id=1302): ioctl$USBDEVFS_CONTROL(0xffffffffffffffff, 0xc0185500, &(0x7f0000000080)={0x0, 0x14, 0x8, 0x2, 0x65, 0x6a, &(0x7f00000004c0)="5a9db06bd11a3beeb44afdbddd0a22b1859635e161889d120070846148c53e5016b504d3e5454abc1d9dfdcb52ce02002e3df4c59dbb96587b822f6c6a2ed6f89c0be1e5344a8947d8fc18974ee55e887344e13060705c9716db93e78afc3a95d819ff0e7e"}) openat2(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x100, 0x6, 0x10}, 0x18) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000095980000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f0ffffffb702000005000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x14) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f00000001c0)={'ip6tnl0\x00', &(0x7f00000002c0)={'ip6_vti0\x00', 0x0, 0x29, 0x7, 0x87, 0x9, 0x4, @local, @dev={0xfe, 0x80, '\x00', 0xc}, 0x7800, 0x89, 0x4, 0x9}}) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000300)={0x38, 0x1403, 0x1, 0x700, 0x0, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'sit0\x00'}}]}, 0x38}}, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095", @ANYRES32=r1], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000640)='kfree\x00', r4, 0x0, 0x200}, 0x18) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000140)=ANY=[@ANYBLOB="c0010000100013070000000000000000fe800000000000010000000000ff00bbfe8000000000000000000000000000bb00000000000000100a000000a3000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="20010000000000000000000000000002000004d432000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000004000000000000000000000000000000020004000000000000000000cf000200656362286369706865725f6e756c6c29"], 0x1c0}, 0x1, 0x0, 0x0, 0x4001}, 0x1000c080) 481.666688ms ago: executing program 3 (id=1304): r0 = syz_io_uring_setup(0x4172, &(0x7f0000000780)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f00000004c0)}) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r3}, &(0x7f00000001c0), &(0x7f00000002c0)}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r4}, 0x10) io_uring_enter(r0, 0x567, 0x0, 0x0, 0x0, 0x0) 481.156218ms ago: executing program 0 (id=1305): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kfree\x00', r0}, 0x10) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000010c0)='/proc/bus/input/devices\x00', 0x0, 0x0) preadv(r1, 0x0, 0x0, 0x33, 0x0) 472.153558ms ago: executing program 3 (id=1306): prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000031c0)=ANY=[@ANYBLOB="620af8ffa1dc0021bfa100000000000007010000f8ffffffb702000007000000bd120000000000008500000010000000b70000000000000095000000000000003faf7cf39e3100c8acaa47684f2aa3d9b18ed812a2e2c49e8020a6f4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24561f1b2607995daa56f151905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64b751a0f241b072e90080008002d7559f3b14820ed58b15627c95aa0b784625704f07372c29184ff7f4a7c0000070015006056feb4cc664c0af9360a1f7a5e6b607130c89f18c0c1089d8b8588d72ec29c48b45e000000000000041201baa80b0b8ed8fb1ec577c377f627daaf787a68af2ad0810000000000006fa03c6468978089b302d7ff6023cdcedb5e0125ebbcebdde510cb2364149215108337719acd97cfa107d40224edc5465a932b77a74e802a0dc6bf25d8a242bc6099ad2300000480006ef6c1ff0900ff0000000010c63a949e8b7955394ffaff03000000000000ab87b1bdeda7be586602d985430cea080000000000fb1a26abfb0767192361448279b05d96a703a660587a167ca17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aab926b81e3b59c9b081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632d5933a1c1fa5605bd7603f2ba2a790d62d6faec2fed44da4928b30142ba1fde5c5d50b83bae616b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0cb97fca585ec6bf58351d578be00d952aab9c71764b0a8a7583c90b3433b809bdb155481ef836eb0f8c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223d8d9e86c5ea06d108d8f80a0eb4fa39f6b5c02e6d6d90756ff578f57000000009700cf0b000000000000000003000000000000000000000000001000000000559711e6e8fcffffffffffffffb2d02edc3e01dd271c896249ed85b980680b09000000000f0000169cdcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffffd897ef3b7cda42f93d53046da21b40216e14ba2d6af8656b01e17addaed2b25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccf1f9f3282830689da6b53b263339863297771d74732d400003341bf4a00fc9fec0271ff01589646efd1cf870cd7bb2366fde4a594290c405ff870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d30a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78249788f11f761036eafed1fb2b98b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe760e717a04becff0f719197724f4fce1093b62d7e8c7123d890cec55bf404e4e1f74b7eed82571be54c72d978cf906df08f11f1c4042e36acd37d7f9e109f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2acd1fe514283707c70600000000000000b7561301bb997316db01ee601f2c9659db9bc04f7089a660d8dcc3ae83169cf331efe895ff2e1c5560926e90109b598502d3e959efc71f665c542c9062ece84c99a061887a20639b41c8c12ee86c50804042b3eac1f871b136345cf67ca3fb5aac518a515d83129cd857c775f9e7d6101da841735e186c489b3a06fb99e0347f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af403269b4a39ce40293947d9a631bcbe3583784acbda216550d7aec6b79e30cbd128f91e358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f000000009191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e669261192899d4562e00e22d564ae09bb6d163118e401e024fd452277c3887d6116c6cc9d8046c216c1f895778cb2214209ed2d5d776e22a2a798de44aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b55ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f608ce27defc93871c5f99a3594191e104d417e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250df98674152f94e30400000000000000000000000000a1fec9000000d694210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137ab79a404abde7750898b59270b939b81367ac91bd627e87306703be8672d70d1ab57075228a95d32f46ed9bd1f00fb8191bbab2dc599dda61ee2010000294859323e7a45319f18101288a0268893373750d1a8fe64680b0a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7d58c08acaf30065b928a31d2eca55f74a23641f61f2d5b308cf01cfaed9ef0ce21d69993e9960ff5f76015e6009756237badf4e7965bfe2777e808fcba821a00e8c5c39609ff854256cb490000000000c1fee30a3f7a85d1b2b458c77685efc0ceb1c8e5729c66018d169fc03aa188546bb2e51935ab9067ec3ad2a182068e1e3a0e2505bc7f41019645466ac96e0d0b3bc19faa5449209b085f3c334b47f067bbab40743b2a428f1da1f626602111b40e761fd210819203828b202779d386ed295f023c67d867014d12ca3c471c7868e7da7eaa69eb7f7f80572fdd11bb1d070080fbc22bf73468788df51710eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331ff5e20fa26b8471d42645288d7226bbd9c9e9e1cc9eb3d541e407cc2dae5e690cd628ab84875f2c50ba830d3f474b079b407000000deff00004043060000005dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71b967ce7daac4be290159f6bcd75f0dda9de5532e66ae9e48b0ed1254a81faae79b6af6fbb869604d51de44c4e0973171ad47d6c00ebc7603093f000000fdec743af930cd6db49a47613808bad959719c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f15d6533f78a1f4e2df40600000000000000e9b49a1b36d48a44ba6a4530e59bec53e876dc660dd6d89f80a4377b1b1292a893a516dab183ee65744fb8fc4f9ce2242e0f00000000010000000000000000000057d77480e0345effff6413258d1f6eb190aa28cbb4bafe3436b176c7ed4b0600b805d5edd9d188daf28d89c014c3ecca10ae55704544673e1fb03b84f63e022fe755f4007a4a899eaf52c4f491f1e97c862e29e4570600000091c691faee1e0c8fe056a07474e6e5490a7d3c3402000000b60600d837c6befc63ddf2f594ad7cbc56a1e44d218c956a5392a995f1fae8e9f206efbb33854dc70104d74dc07748f9745cb796da2dfb714a0500000000000000faed94fc39acfb3fd25dfa8116a154cd1202000000b59fed817072a0da60160761fd3dffda0f7c742eabd8ab68334d2a1693cb187539049e331272bf5135044df8161400211b8012b6eb1ed5656e83f65509bb4b323c5bd61bff949d3bade2f6ffda1360c2786e16937ab61d6dcafed319c7000000000000000542954c167dd9b4acd946ffffffffffffffff1389179b025dbe063b7f906217b2cf8410c7023aa3e5cc3ba1000000000000000000000000000000006ae6301a2da44394275c582a6516bb92ea1980a0a659f2f1811c9e281c209647c4241f292b20508b215dde27bb2487a6e2b5e4a8ccfab90c23827ef06cbe364073005f8a6d1456aaeb85ffb7858f24eced67a67ab825e863928ed64c83f62ffdaa997657335b630500163aff094059e626766845fd779c9e6cdbbd64c2499ce3ffe2fef03f7cdd0d90f3a7579579a142c0f7b318264d5c13c31cf475829528267ead38523cab7e1664e8426cfce471fef821c8a02a7e7d954d05b68a9c28f79429b09e2bb3681ae2b831e27c735123361c193d66ed4d71f19b199d371ec6bfada7cd370e3fdd3cd980fa1e145fd3f3e96b1feb53c865e1ada08f5d16ed652ee0c7f45352222692fbd679212c225d097aa90f7e1fb1f983415f43e75a19ecf7fd21bfa150ef563aa72ba3c43c5f3d9be128ec26b691f31f9cab931631606a81622f120675c962be2d3b5e95f74f0b209e42e6bdd76e6e725295b1d78d928f6f63e4581d5cc41cbde2ba66adc1168070c8c6e18a6e452a31bde54ad3e16304d06a234f5f9311ef0f78924b68dbb4712efdb6974667bdb54f16fd2061b9ba93638dd177227e94e4ebd0ec1d437db948062bf41742000000000000000000305f700400fa0c61d5fe6d8ff353f631080405547d65375ae04f44f0c2543c772c5ccb137be7dc87746e1785a8214454d77d4ea5ed144a648257f4a0301067bbcd9b91072659d872f26b036e2b81025edb5f45f785e2c2602b248ecdd80f019ca659be7e010000005a27564f33c9d458a60be3dab38baab7eb1a66ab1ffd6308f7fd51beb3985b7581bb5584c53984ba9c3340f97e8d3825681c53de5f554e595b00000000000000006a8fa9f05d64c4be42f981f00051a39938613067dbd1428c0805b4031a667e01bfec016e51844cefa8a855bf23ac887b4a88eed6d9443857242f28e31a41d20105fbf3394ff910e734b4d9101265ff729c426e01c1ab13dda8c388b9e6626f19eecb87e39175e85e17000000000000000000009431807e43886903526074e6b40244c938a4c68a38c25ddd7c143b3f1400010000ec66815cf8d1f56aa1424bc9b5d58790298e5b310969e50c222563b54e60854e1b0100448aca8c5ccbf5546ce4c3cd5a733fec25fb94e1e0f966bcbd28a4d8fe4f556eaa1104a793006619700798354c6ae05025040965e3083562bfa20968c04007d21dc02c9fd1f75e1ff40f439bdde4e784012e52049b483d02f81b88f5f57816b3fecec79cfca8d37203e769759d6b6a56b7605ced8ee18475a77ff0963a565fb6021d216c01b1098e40550a9cfd80e918d685a7b099a4f8ed654cd76ca61fe5ad8a31ec558fdbfa706d5e738bceae81fe777c307d5bc72183a4c2d35732ab9100781b9912160a3fd2a2e74dd690c57bdfdc1f069f9491bca7a8c59363799be7005c51bc25a8bbe2cf5ddf6aa161693782b0e7feb8a768f391b49d4c978c96dbb52f21c1227c8bed10591958c906321a248b5f76ceedfe0d080d6aeadc11b237b3326dd04b86ac37c0d131544888db9e128d059761ad9a393e96c3b41c13c5a381bff187a75de560ba6eb3faa5ff8d2bb3c88f8de5efc2fb2200cfda6d07ceae22577064334fbf76a23e62e6059211d995b879f6b7d3f7fcf03652b81e6b7cdeff947ad185d3c6269ca247b429c3b863af34bac64c247672a8f1ef60407d29a874f4ec31c9effed55543a65a6b4d778cebcd43b7905f3960140bd783540a7353014bda8e9c7a34a5f428fd1f8eb11e837dd9d586487fdebcb1ecd3a003ff0fda4be617fecf1ff0ef2cdfb7fea73ca18874664d60a4b9423f3297bc8eb91b4ee1d73272abbef3e7a828a7d7ab055a8eb58fe379de85338304e26e3620941b463e9049fd105c74c91cc4d71b0f76e2c2e4825106aa7ce2a3adbbc7a0443ece58e752b47e6f677ec97c5c568a89d6e36b165c39132a0f27080ece2a94c360b002c77f82662675a7713c7067081cac1599a998c41ff4754268ae1676384ff799783f55d7e5a1a0920300000000000000d98440c355927629f2bcf9dc215a18ca0265400abf38e90000000000000000008faf2cddffbfa66bf32eb718e88ec75603ed7c7a8825ce0f27a114bd7a4ab74d0c7b8d90ccc1c3ca6620def782e24d75aed70eb676437f62677a69e0994cd82d72e95493c830fe9515329f40b7025326dec33a527c5d999298eaa3690fd0d38a02fc6e0bc16dbe19f353027edc014411e1138087221492f5d5e5cc9d0a1acd3f581eda9a807aa0e609f935f626d96351e0ff116686cbeb8939feecd5dac8cf45101942ce18e57bb7f337df5435bcf7e504b7c427f70a10e1cb8993a661306a0576b638a0171e6800b5b35589d676eb30ed1a72e8f7b057eb281c4504195635b6b285ebaba019913a2520e43ed790231f047f7d3789c10ae7d724929f77aec1d33d9587580268ee14396f71e7ef588cb2560d6bd0795a9b97281229eb16de286553469fad7214ffc3e416f8b8e442dce1d37f9b1c88a5d8a8d9f2fe45bd8df213ecb4194c8554aea13cadcd502e51f6fec80418e772b5bd8d0228949058038b185909ee542848680f9ad43f4057d676d5e21ae3d7e0e4a28c03f112a94707f032b35915e42993ff148291b8babe026646ee41905992db217561b90811c4702a14f312fe5d2ae7257db6be1034cc1c346b76a853ce274bf0435e18f7e86c660c18c872a4882d21db2046a1893b83c62d61bfeadc1f913e4cab2b897e096dd3fe3525090410cb23bab36cdf200a36014032cf6e5121803c5a0c4a273a19f340163fc6265441d513a1294b8439276394945d94a589708e32a1cb30a8b07b391201385e0b92ecbb7b13d7a87284164018ace6ce58a82c5de321452461089cdd69259f5390f5f508646a524490583c30630bedb47e158ad41c0a653e86a4f4f255cd2a6e95f33b586823aef5564d9de1f5bdd8c80e193f0597b8003860302cd243c00bc5a82c52afb115d16258d507937966bb89409d6d47b8b652d0761d7c72875ae1efb9bc7c6807c2d783e31fd9cd7e84d3d50d8fc44ab8ac9ccd2c0d42e3bd4c029241320446bbf47e23d1320de30fbdf7ed13f80c28fb5c13fccc2e3f73509bdcddad8a2fe48cdd61f2f43611704af64eed8b0cbbd08754f93b8f3d6347aad5cde1ccc5cbd5eaa87e52cea257c856a4af5243eeb5e89f0000000000000000f420df5e4c6d856b3d55e455c08110b2ef4255a38f81555e8e1f22d59c0bc3c9013e66a1f5bda1b695e1602c0afb5c35b2f68f3b151b1e869f40ff4d1bef5e926e1ff95f6321131e4cb797f53455a093a95e67605222d6acc29c46e5db1ef3b8b07e2169fb24ced4b3ae87ebeca06df93212e465bbd1a7e41df2e1a0d508f86cfc7a469ac682685c44692877d03c34c23a65d2677acc73b5d276fdebd685c9b7a079eae228d8426188cb19b083548f5f29e493ab079f33d1965dcbb165015c46998ad410d60cc65fcfa73bd65a43fc024455c4bf530d663976cf71490577251780ab6b1cf8d397444b5be575229f687a3d95ea6b2aa62fce8acb3d4a6a130b4fefa55d0c1d6f3fa448ee24e588e2965c9a442f0baf90923dda91a6850fb7b9c7f432b63001423fedcf053fa28024cc9a178a07042dabc07176fc524032c2edb340c9c18a83565c431aeb0c869683507255254430f90f61e4eca9c8fa98c000b35fec357ee1ebd08439bd95c1ab0753dfd2603d1608bd8c589a1e160000a6ee0ad13346e08738c2d7b00b5d121d918f1dc8bceded939fa8605b54b37cdfcea0bf2bc63e655dc04a2e50212ff89d6587d49896ce18916cf3adc12839c345ca91bb232b891fae2fdd68aaa38281c0feb2c107af3e080d6cdd1c6646ec6804d7e9960c02aa0db9eda24bbcb287fd2a890fa7f9d6ae0c0b1f8dd1603c9ea2f66b572276f96a28b5b6dd9f9bf6ad4bdaa2139b90faf1f40b0f141258578bd825daaaf718d21b7ac05fe5d1b699e5422ca341fe1c944f68fe3a6d783dcf30b0e09d7688f696883b61cb64464b04d351a0a69b0733c348049b0430ed40e200f4ff0000000000000000000000996bcc1b721b152c892fab887e7d20466d90c049c0fdf51dcc16d226a2619c6f47bc25b7f5df5c09fed638922ed127ab36aa7b0c58a2ce5894b1b0f5375d340d96b69b966b05daaf585121a9c7605ed8e9964eef1f14b74cbb2ccdadc6d0b77cf0492b75e1cd11bfdcfddde91b20366715ba0cbe1041be2a65c25d7ca15ef8b71bd2ab9a4294899a1964b0152518fc2ac15a728bcb9e2bc4b551dfdf9011a2a607bc39ad2c4d7c64dcf967724e9b63c397d5265ad3f1da4395a5a800d8845257dcbf210d4f00fe0bd3deed05e506736e6bb6d40ee6cb960bcdb33633ee87f82beb665a9a4c2d4d2b06479ade3a4cd6bba765c9f52b52a0bdd0849ab92baae3775570accb5a57ee9f0035fc6d3df4eebec2e7eb4ff863d3979a20f4428ddca471037b49d4fd130743a97faa02c293b721e52bf53d64c6585e138162331ef98792e1e9b21a6a084fb7b42c64062ef1323a8a65a8ed6038f274f28ff4f78136a1ef108efbe8c4f4e347d50dcdbc33bf3ade4c3a39d316061930d7dd39b8acdecc3f27830e3eda40e648328d95a9aee65a9dd09fd4e96d5b852025dc53ec3f30cc753e6a796084b4e34f521dbb230ae0f3b79142073d437e1fd22d3b7503ffa95b1d5c7740b0ecbfd35dc0f8af895583dfcc2689f6e02c2dd4b57f3dcac54f40da013eb221fa3d65de760576031052c25a96ed4b20230b36d46d3d3fd6bb1d77cc8a48a6b10fa0149e55ccde4a2b26cca2d1ca9191c74ab006a602543fc24d1283e353cfb917620000000024bf3eed258c02a591ec4cd295212d9a98d38745f6f6c4530900000000000000f184f239098bf32551c7cf454e2865974f6520112743f73c619c3cab5609e00178f7393e53462f31559220c026bbde09837bf1b3ffe748a3247c9569f0c5e99f4494f93e0fa1badca90c888616eca97bddabd8003fc12a084d4b11d841979e161b998ddda92f194c4ec7947b7b303be11e0962d429a2c542a28c4932e14c123dfe2b8ec47a11cce134fd6e"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 446.389298ms ago: executing program 0 (id=1307): r0 = syz_io_uring_setup(0x4172, &(0x7f0000000780)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f00000004c0)=[{0x0}], 0x1}) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r3}, 0x10) symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00') io_uring_enter(r0, 0x567, 0x0, 0x0, 0x0, 0x0) 431.272418ms ago: executing program 6 (id=1308): openat$null(0xffffffffffffff9c, 0x0, 0x80401, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x0, 0x0}) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb7", @ANYRES32=r0, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x2008002, &(0x7f0000000080)={[{@stripe={'stripe', 0x3d, 0x1}}]}, 0x1, 0x55f, &(0x7f0000000540)="$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") r2 = socket$unix(0x1, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec8500000050000000850000000f00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000240)='ext4_drop_inode\x00', r1}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bind$unix(r2, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 393.877719ms ago: executing program 0 (id=1309): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$inet(r2, &(0x7f0000000780)=[{{&(0x7f0000000040)={0x2, 0x4e21, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000100)=ANY=[], 0x30}}], 0x1, 0x4008804) 377.333298ms ago: executing program 3 (id=1310): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x2303, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffc}]}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00"/20, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/14], 0x48) munmap(&(0x7f0000001000/0x4000)=nil, 0x4000) r2 = syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x0, 0xb, 0x0, 0x0, 0x7995}, 0xfcb5, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000000)='kmem_cache_free\x00', r4}, 0x10) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x8, &(0x7f0000000140), 0x5, 0x4c9, &(0x7f0000000540)="$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") truncate(&(0x7f0000000080)='./file1\x00', 0xc00) ioctl$TIOCVHANGUP(r0, 0x5437, 0x2) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYRESOCT=r0], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r5}, 0x10) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCVHANGUP(r6, 0x5437, 0x2) r7 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) write$cgroup_int(r7, &(0x7f0000000040)=0x288, 0x12) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f00000005c0)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000000200000000000000000000030000000002000000020000000000000000000000000000010500000008000002000000000200000500000000000000000100"/91], 0x0, 0x66, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) r8 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a80)=ANY=[], 0x34}}, 0x0) 314.569469ms ago: executing program 0 (id=1311): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x2303, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffc}]}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00"/20, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/14], 0x48) munmap(&(0x7f0000001000/0x4000)=nil, 0x4000) r2 = syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x0, 0xb, 0x0, 0x0, 0x7995}, 0xfcb5, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000000)='kmem_cache_free\x00', r4}, 0x10) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x8, &(0x7f0000000140), 0x5, 0x4c9, &(0x7f0000000540)="$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") truncate(&(0x7f0000000080)='./file1\x00', 0xc00) ioctl$TIOCVHANGUP(r0, 0x5437, 0x2) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYRESOCT=r0], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r5}, 0x10) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCVHANGUP(r6, 0x5437, 0x2) r7 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) write$cgroup_int(r7, &(0x7f0000000040)=0x288, 0x12) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f00000005c0)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000000200000000000000000000030000000002000000020000000000000000000000000000010500000008000002000000000200000500000000000000000100"/91], 0x0, 0x66, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) r8 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a80)=ANY=[], 0x34}}, 0x0) 303.135419ms ago: executing program 0 (id=1312): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r0}, &(0x7f0000000500), &(0x7f0000000280)=r1}, 0x20) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r2, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) sendto$inet(r2, 0x0, 0x0, 0x20048404, &(0x7f0000000080)={0x2, 0x4e03, @empty}, 0x10) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800}}, {@minixdf}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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") r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r3}, 0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r4}, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000010008000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x34, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00'}, 0x10) r6 = socket$igmp6(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r6, 0x29, 0x22, &(0x7f0000000580)={{0xa, 0xffff, 0x82000001, @mcast2, 0x5}, {0xa, 0x0, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}}, 0x0, {[0x4, 0x0, 0x0, 0x0, 0x0, 0x8]}}, 0x5c) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB], &(0x7f00000001c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='writeback_queue_io\x00', r7, 0x0, 0xc}, 0x18) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000300)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r8, @ANYBLOB="0000000000000000b702000002"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 96.36486ms ago: executing program 7 (id=1313): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async, rerun: 32) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) (rerun: 32) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000004f4b000000000000000000180100002020702000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000fdffffff850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) (async) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000100)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r1}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async, rerun: 64) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x2001, 0x0) (async, rerun: 64) clock_adjtime(0xffffffd3, &(0x7f0000000340)={0x6, 0x0, 0xfffffffffffffffd}) (async) mbind(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x4002, &(0x7f0000000000)=0x2, 0x3, 0x0) (async) r3 = io_uring_setup(0x175c, &(0x7f000009df80)) (async, rerun: 32) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) (rerun: 32) write$binfmt_aout(r4, &(0x7f0000000b80)=ANY=[], 0xff2e) ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "df3f0400000000000000000000000609000040"}) r5 = syz_open_pts(r4, 0x0) (async) r6 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r4, &(0x7f0000000080)={0x8}) (async) dup3(r5, r4, 0x0) (async, rerun: 32) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r4, &(0x7f00000000c0)) (async, rerun: 32) close_range(r3, 0xffffffffffffffff, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYRES32=0x0, @ANYRES32=0x0], 0x23c}}, 0x0) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000008c0)={&(0x7f0000000000)='kmem_cache_free\x00', r2}, 0x10) (async, rerun: 64) prlimit64(0x0, 0xb, 0x0, 0x0) (async, rerun: 64) rt_sigaction(0x11, 0x0, 0x0, 0x8, &(0x7f0000000000)) (async, rerun: 64) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00'}, 0x10) (async, rerun: 64) socket$nl_generic(0x10, 0x3, 0x10) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) 96.08008ms ago: executing program 0 (id=1314): socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x4, 0x1e3}, &(0x7f00000004c0)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, 0x0, 0x0, 0x4) r3 = syz_open_dev$sg(0x0, 0x0, 0x8002) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000005c0)=[{0x200000000006, 0xde, 0x0, 0x7ffc1ffb}]}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYRESOCT=r3], 0x0, 0x0, 0xffffffffffffff9d, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r5}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000100)='kmem_cache_free\x00', r6}, 0x18) syz_io_uring_submit(r1, r2, 0x0) io_uring_enter(r0, 0x47f9, 0x0, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x18) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="280000000203010400000000ffffffff000000000800010001"], 0x28}}, 0x0) sendmsg$NFQNL_MSG_VERDICT_BATCH(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[@ANYBLOB="20000000030301"], 0x20}}, 0x0) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="02000000040000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r8, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sched_switch\x00', r9}, 0x10) r10 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r10) unshare(0x28000600) r11 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCGSID(r11, 0x5429, 0x0) 95.25885ms ago: executing program 7 (id=1315): socket$kcm(0x21, 0x2, 0xa) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000040)='./file2\x00', 0x1000052, &(0x7f0000000240)=ANY=[], 0xfd, 0x120c, &(0x7f0000004500)="$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") prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chroot(&(0x7f0000000000)='./file0\x00') r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r1, &(0x7f0000000080), 0x1c) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000600)={0x20, r3, 0x65283e1aaa2ddbb1, 0x0, 0x0, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x6}]}]}, 0x20}}, 0x0) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f00000000c0)=0x1, 0x4) write$binfmt_script(r1, &(0x7f0000000100), 0xfffffecd) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f0000000b80)=@ccm_128={{0x304}, "6e9297a2501046d3", "f88ba5cf480884fa27a54b7f53f6bdaa", "cba8a655", "f600"}, 0x28) setsockopt$sock_int(r1, 0x1, 0x12, &(0x7f0000000b40), 0x4) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000940)={'syztnl1\x00', &(0x7f00000008c0)={'syztnl2\x00', 0x0, 0x2f, 0xc, 0x4, 0x3, 0x11, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @mcast2, 0x8090, 0x1, 0x1, 0x6}}) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0xc, 0x18, &(0x7f0000000380)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x200}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@jmp={0x5, 0x1, 0x3, 0x2, 0x1, 0x9ffa4dcaa3d49623, 0xaae9da19f3ebc9c}, @map_fd={0x18, 0x2, 0x1, 0x0, r0}, @initr0={0x18, 0x0, 0x0, 0x0, 0x5}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000005c0)='GPL\x00', 0xc1f7, 0x9b, &(0x7f0000000800)=""/155, 0x41100, 0x0, '\x00', r4, @fallback=0x25, r0, 0x8, &(0x7f0000000980)={0x0, 0x4}, 0x8, 0x10, &(0x7f00000009c0)={0x5, 0x3, 0x4, 0x4}, 0x10, 0x0, r0, 0x9, &(0x7f0000000a00)=[r0, r0, r0], &(0x7f0000000a40)=[{0x3, 0x4, 0x3, 0x2}, {0x0, 0x1, 0x4, 0x1}, {0x3, 0x3, 0x8, 0x2}, {0x4, 0x1, 0x8, 0x4}, {0x1, 0x5, 0x6, 0x5}, {0x4, 0x3, 0xb, 0x4}, {0x1, 0x2, 0xa, 0x7}, {0x2, 0x1, 0xb, 0xc}, {0x3, 0x3, 0x0, 0x5}], 0x10, 0x2, @void, @value}, 0x94) chroot(&(0x7f00000001c0)='./file0/../file0/../file0\x00') r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r6}, 0x10) open$dir(&(0x7f0000000000)='./file0\x00', 0x200080, 0x105) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) r8 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r8, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r7, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in={{0x2, 0x4e24, @local}}, 0x5, 0x0, 0x5, 0x0, 0x324, 0x0, 0xfc}, 0x9c) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000001e40)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000240)='kmem_cache_free\x00', r9}, 0x10) 63.82194ms ago: executing program 6 (id=1316): r0 = syz_io_uring_setup(0x4172, &(0x7f0000000780)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f00000004c0)}) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r3}, &(0x7f00000001c0), &(0x7f00000002c0)}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r4}, 0x10) io_uring_enter(r0, 0x567, 0x0, 0x0, 0x0, 0x0) 54.14679ms ago: executing program 2 (id=1317): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kfree\x00', r0}, 0x10) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000010c0)='/proc/bus/input/devices\x00', 0x0, 0x0) preadv(r1, 0x0, 0x0, 0x33, 0x0) 181.78µs ago: executing program 6 (id=1318): r0 = syz_mount_image$vfat(&(0x7f00000004c0), &(0x7f0000000640)='./bus\x00', 0x0, &(0x7f0000000080)=ANY=[], 0x1, 0x1268, &(0x7f0000002500)="$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") open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) r1 = open(&(0x7f0000000100)='./bus\x00', 0x14113e, 0x0) write$binfmt_script(r1, &(0x7f0000000080), 0x208e290) read(r0, &(0x7f0000000a40)=""/4096, 0x1000) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xffc, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) syz_io_uring_setup(0x4169, &(0x7f0000000200)={0x0, 0x0, 0x2}, &(0x7f0000000480), &(0x7f0000000000)) chdir(&(0x7f0000000140)='./file0\x00') r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b0811000500000001002fd987446f7b3638bdbf", @ANYRES32, @ANYBLOB="8e0e00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1d, 0xc, &(0x7f0000000200)=ANY=[@ANYBLOB, @ANYRES32=r4, @ANYBLOB="0000000000000000b708000000f1ff007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000000)='kmem_cache_free\x00', r5}, 0x10) r6 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r6, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x29}, './file0\x00'}) 0s ago: executing program 2 (id=1319): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f0000000040)={[{@journal_checksum}, {@norecovery}, {@minixdf}]}, 0x1, 0x516, &(0x7f0000000200)="$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") mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x8, 0x3, 0x1e8, 0x0, 0x25, 0x148, 0x340, 0x60, 0x438, 0x2a8, 0x2a8, 0x438, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xb8, 0x0, {0x200003ae, 0x7f00}}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x6, 'syz0\x00'}}}, {{@ip={@broadcast, @multicast1, 0x0, 0x0, 'veth1_to_bond\x00', 'dvmrp1\x00', {0xff}}, 0x0, 0x70, 0x98}, @common=@unspec=@MARK={0x28, 'MARK\x00', 0x2, {0x9, 0x8001}}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x248) syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x2, &(0x7f0000000000)={[{@noblock_validity}, {@grpquota}, {@errors_remount}, {@minixdf}, {@jqfmt_vfsv0}, {@usrjquota, 0x2e}], [], 0x22}, 0x84, 0x452, &(0x7f0000000480)="$eJzs20tvG1UUAOAz46bvklDKow/AUBARj6RJC3TBBgRSN0hIsCjLkKZVqdugJki0qmhAqCxRfwGwROIXsIINAlYgtrBHSBXqhsICDRp7nBrHDnbs1Gn9fdIk986Mfc/xzLXvzLUDGFrl/E8SsTMifomI0YgoNe9Qrv27cf3S7F/XL80mkWWv/5HkD4s/r1+are+aFP93FJXxNCL9KIn9LdpduHDxzEylMne+qE8unn1ncuHCxWdOn505NXdq7tz00aNHDk89/9z0s33Jc1ce67735w/sPfbm1Vdnj1996/sv83h3Ftsb86gZ67nNcpSXX5Nmj/f87BvLroZysmmAgdCVvK/nh2uk2v9HoxQ3D95ovPLhQIMD1lWWZdmWFWuXRwBLGXAHS2LQEQCDUf+gz69/68stHH4M3LUXaxdAed43iqW2ZVOkxT4jTde3/VSOiONLf3+aL9HyPgQAQH99nY9/nm41/kvjvob97irmhsYi4u6I2B0R90TEnoi4N6K67/0R8UCX7Zeb6ivHPz9tW1NiHcrHfy8Uc1v/Hf/VR38xVipqu6r5jyQnT1fmDhWvyXiMbMnrU6u08c3LP3/Sblvj+C9f8vbrY8Eijt83Nd2gOzGzONNLzo2ufVC9B3h5Zf7J8kxAEhF7I2LfGp5/a0ScfvKLA+22/3/+q+jDPFP2ecQTteO/FE351yWrz09Obo3K3KHJ+lmx0g8/XnmtXfs95d8H+fHf3vL8X85/LGmcr13ovo0rv37c9ppmref/5uSNanlzse69mcXF81MRm5Olleunbz62Xq/vn+c/frB1/98d8c9nxeP2R0R+Ej8YEQ9FxMNF7I9ExKMRcXCV/L976bG3157/+srzP9HV8e++UDrz7Vft2u/s+B+plsaLNZ28/3UaYC+vHQAAANwu0up34JN0YrmcphMTte/w74ntaWV+YfGpk/PvnjtR+678WIyk9Ttdow33Q6eKe8P1+nRT/XD1vnGWZdm2an1idr6yXnPqQGd2tOn/ud9Kg44OWHddzaO1+0UbcFvye00YXvo/DC/9H4aX/g/Dq1X/vxxxYwChALeYz38YXvo/DC/9H4aX/g9DqZff9a9W2H1svZ75TiuUNkYYXRci3RBhrK2QbowwaoUtEdHpzpfjVgU26HcmAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA/vg3AAD//zLQ7Dk=") r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x11, 0xb, &(0x7f0000000140)=ANY=[@ANYBLOB="180000000000000000000000782e00001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000feffffbfb702000008000000b703000052320000850000006212000095"], &(0x7f0000000040)='GPL\x00', 0xd, 0xfe7, &(0x7f0000001e00)=""/4071, 0x40f00, 0x9, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ftruncate(r1, 0x4) kernel console output (not intermixed with test programs): :sysadm_r:sysadm_t pid=6908 comm="syz.3.808" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7feb2924ff19 code=0x7ffc0000 [ 81.296564][ T29] audit: type=1326 audit(1733328961.788:15095): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6908 comm="syz.3.808" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7feb2924ff53 code=0x7ffc0000 [ 81.340497][ T6852] team0: Port device team_slave_0 added [ 81.346891][ T6852] team0: Port device team_slave_1 added [ 81.384007][ T6852] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 81.391053][ T6852] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.417041][ T6852] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 81.428482][ T6852] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 81.435511][ T6852] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.461421][ T6852] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 81.712460][ T6931] tmpfs: Bad value for 'mpol' [ 81.840342][ T6852] hsr_slave_0: entered promiscuous mode [ 81.910852][ T6852] hsr_slave_1: entered promiscuous mode [ 81.970010][ T6852] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 82.007135][ T6852] Cannot create hsr debugfs directory [ 82.070893][ T3584] bridge_slave_1: left allmulticast mode [ 82.076660][ T3584] bridge_slave_1: left promiscuous mode [ 82.082394][ T3584] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.100484][ T3584] bridge_slave_0: left allmulticast mode [ 82.106305][ T3584] bridge_slave_0: left promiscuous mode [ 82.111952][ T3584] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.209275][ T3584] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 82.221204][ T3584] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 82.231353][ T3584] bond0 (unregistering): Released all slaves [ 82.298678][ T3584] hsr_slave_0: left promiscuous mode [ 82.304437][ T3584] hsr_slave_1: left promiscuous mode [ 82.310977][ T3584] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 82.318440][ T3584] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 82.327531][ T3584] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 82.335034][ T3584] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 82.401021][ T3584] veth1_macvtap: left promiscuous mode [ 82.406573][ T3584] veth0_macvtap: left promiscuous mode [ 82.412090][ T3584] veth1_vlan: left promiscuous mode [ 82.417352][ T3584] : left promiscuous mode [ 82.425819][ T6951] loop2: detected capacity change from 0 to 512 [ 82.476453][ T6951] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 82.511312][ T6959] netlink: 8 bytes leftover after parsing attributes in process `syz.0.824'. [ 82.527386][ T6951] ext4 filesystem being mounted at /156/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 82.543780][ T3584] team0 (unregistering): Port device team_slave_1 removed [ 82.556797][ T3584] team0 (unregistering): Port device team_slave_0 removed [ 82.569433][ T6951] EXT4-fs error (device loop2): ext4_do_update_inode:5153: inode #2: comm syz.2.822: corrupted inode contents [ 82.591662][ T6951] EXT4-fs error (device loop2): ext4_dirty_inode:6041: inode #2: comm syz.2.822: mark_inode_dirty error [ 82.613616][ T6951] EXT4-fs error (device loop2): ext4_do_update_inode:5153: inode #2: comm syz.2.822: corrupted inode contents [ 82.630267][ T6852] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 82.641629][ T6959] ip6gre1: entered allmulticast mode [ 82.675665][ T6951] EXT4-fs error (device loop2): __ext4_ext_dirty:207: inode #2: comm syz.2.822: mark_inode_dirty error [ 82.694810][ T6852] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 82.704081][ T6852] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 82.714143][ T6852] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 82.736672][ T3302] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.752416][ T6852] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.765501][ T6852] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.792733][ T332] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.799850][ T332] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.808626][ T332] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.815694][ T332] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.835973][ T6852] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 82.903678][ T6977] loop3: detected capacity change from 0 to 512 [ 82.931130][ T6852] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.941611][ T3584] IPVS: stop unused estimator thread 0... [ 82.965493][ T6977] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 82.995750][ T6977] ext4 filesystem being mounted at /186/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 83.017990][ T6977] EXT4-fs error (device loop3): ext4_xattr_block_get:596: inode #15: comm syz.3.828: corrupted xattr block 32: e_value out of bounds [ 83.030675][ T6985] loop2: detected capacity change from 0 to 256 [ 83.051426][ T6985] msdos: Unknown parameter 'qy0M' [ 83.092704][ T6977] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=15 [ 83.121599][ T7002] A link change request failed with some changes committed already. Interface wg0 may have been left with an inconsistent configuration, please check. [ 83.128503][ T6977] EXT4-fs error (device loop3): ext4_xattr_block_get:596: inode #15: comm syz.3.828: corrupted xattr block 32: e_value out of bounds [ 83.166346][ T7002] loop2: detected capacity change from 0 to 512 [ 83.198169][ T7002] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 83.205910][ T6977] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=15 [ 83.237173][ T6977] EXT4-fs error (device loop3): ext4_xattr_block_get:596: inode #15: comm syz.3.828: corrupted xattr block 32: e_value out of bounds [ 83.257529][ T7002] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 83.277353][ T6977] EXT4-fs error (device loop3): ext4_xattr_block_get:596: inode #15: comm syz.3.828: corrupted xattr block 32: e_value out of bounds [ 83.306124][ T7002] ext4 filesystem being mounted at /160/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 83.323407][ T6852] veth0_vlan: entered promiscuous mode [ 83.353234][ T6852] veth1_vlan: entered promiscuous mode [ 83.361975][ T6977] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=15 [ 83.417041][ T3302] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 83.438593][ T6852] veth0_macvtap: entered promiscuous mode [ 83.456456][ T6852] veth1_macvtap: entered promiscuous mode [ 83.493347][ T6852] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.503850][ T6852] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.513674][ T6852] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.524216][ T6852] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.534152][ T6852] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.544667][ T6852] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.567411][ T6852] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.576124][ T3306] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.602679][ T6852] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.613224][ T6852] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.623077][ T6852] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.629869][ T7035] loop2: detected capacity change from 0 to 512 [ 83.633513][ T6852] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.649726][ T6852] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.660196][ T6852] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.681257][ T6852] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.722260][ T3876] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.733001][ T7035] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 83.745719][ T7035] ext4 filesystem being mounted at /162/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 83.757088][ T6852] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.765855][ T6852] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.774567][ T6852] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.783382][ T6852] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.810852][ T7035] EXT4-fs error (device loop2): ext4_do_update_inode:5153: inode #2: comm syz.2.835: corrupted inode contents [ 83.843528][ T7035] EXT4-fs error (device loop2): ext4_dirty_inode:6041: inode #2: comm syz.2.835: mark_inode_dirty error [ 83.856741][ T3876] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.867492][ T7035] EXT4-fs error (device loop2): ext4_do_update_inode:5153: inode #2: comm syz.2.835: corrupted inode contents [ 83.885411][ T7035] EXT4-fs error (device loop2): __ext4_ext_dirty:207: inode #2: comm syz.2.835: mark_inode_dirty error [ 83.968958][ T3876] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.999368][ T3302] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.037003][ T7025] chnl_net:caif_netlink_parms(): no params data found [ 84.137928][ T3876] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.168460][ T7104] dccp_close: ABORT with 340 bytes unread [ 84.214821][ T7108] loop2: detected capacity change from 0 to 8192 [ 84.244550][ T7112] loop6: detected capacity change from 0 to 8192 [ 84.248556][ T7025] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.258047][ T7025] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.275164][ T7114] netlink: 256 bytes leftover after parsing attributes in process `syz.0.849'. [ 84.297056][ T7025] bridge_slave_0: entered allmulticast mode [ 84.303845][ T7025] bridge_slave_0: entered promiscuous mode [ 84.311678][ T7025] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.318871][ T7025] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.329007][ T7025] bridge_slave_1: entered allmulticast mode [ 84.335575][ T7025] bridge_slave_1: entered promiscuous mode [ 84.385760][ T7025] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 84.399775][ T7114] binfmt_misc: register: failed to install interpreter file ./file0 [ 84.424565][ T7025] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 84.451720][ T7025] team0: Port device team_slave_0 added [ 84.458673][ T7025] team0: Port device team_slave_1 added [ 84.471483][ T3876] bridge_slave_1: left allmulticast mode [ 84.477176][ T3876] bridge_slave_1: left promiscuous mode [ 84.482872][ T3876] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.503811][ T3876] bridge_slave_0: left allmulticast mode [ 84.509581][ T3876] bridge_slave_0: left promiscuous mode [ 84.515243][ T3876] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.638226][ T3876] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 84.648829][ T3876] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 84.658914][ T3876] bond0 (unregistering): Released all slaves [ 84.677045][ T7025] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 84.684050][ T7025] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 84.710117][ T7025] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 84.734897][ T7025] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 84.741960][ T7025] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 84.767926][ T7025] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 84.798225][ T7145] block device autoloading is deprecated and will be removed. [ 84.807632][ T7145] syz.2.859: attempt to access beyond end of device [ 84.807632][ T7145] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 84.822341][ T3876] hsr_slave_0: left promiscuous mode [ 84.828072][ T3876] hsr_slave_1: left promiscuous mode [ 84.833759][ T3876] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 84.841293][ T3876] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 84.857176][ T3876] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 84.864588][ T3876] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 84.876066][ T3876] veth1_macvtap: left promiscuous mode [ 84.881625][ T3876] veth0_macvtap: left promiscuous mode [ 84.887200][ T3876] veth1_vlan: left promiscuous mode [ 84.892489][ T3876] veth0_vlan: left promiscuous mode [ 84.917284][ T7154] loop2: detected capacity change from 0 to 512 [ 84.939333][ T7154] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 84.952276][ T7154] ext4 filesystem being mounted at /167/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 84.965438][ T7154] EXT4-fs error (device loop2): ext4_xattr_block_get:596: inode #15: comm syz.2.862: corrupted xattr block 32: e_value out of bounds [ 84.979427][ T7154] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=15 [ 84.988499][ T7154] EXT4-fs error (device loop2): ext4_xattr_block_get:596: inode #15: comm syz.2.862: corrupted xattr block 32: e_value out of bounds [ 85.002360][ T7154] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=15 [ 85.011452][ T7154] EXT4-fs error (device loop2): ext4_xattr_block_get:596: inode #15: comm syz.2.862: corrupted xattr block 32: e_value out of bounds [ 85.011877][ T3876] team0 (unregistering): Port device team_slave_1 removed [ 85.027063][ T7154] EXT4-fs error (device loop2): ext4_xattr_block_get:596: inode #15: comm syz.2.862: corrupted xattr block 32: e_value out of bounds [ 85.046268][ T3876] team0 (unregistering): Port device team_slave_0 removed [ 85.049085][ T7154] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=15 [ 85.086103][ T7025] hsr_slave_0: entered promiscuous mode [ 85.101884][ T7025] hsr_slave_1: entered promiscuous mode [ 85.136019][ T3302] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.260209][ T7025] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 85.275336][ T7025] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 85.295639][ T7025] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 85.334584][ T7025] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 85.421717][ T7025] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.422153][ T7195] loop2: detected capacity change from 0 to 8192 [ 85.479443][ T7025] 8021q: adding VLAN 0 to HW filter on device team0 [ 85.506521][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.513625][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.555266][ T3876] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.562437][ T3876] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.721892][ T7025] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.754623][ T7227] FAT-fs (loop2): error, corrupted directory (invalid entries) [ 85.762338][ T7227] FAT-fs (loop2): Filesystem has been set read-only [ 85.774655][ T7195] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 85.972136][ T7025] veth0_vlan: entered promiscuous mode [ 85.980769][ T7025] veth1_vlan: entered promiscuous mode [ 85.995084][ T7025] veth0_macvtap: entered promiscuous mode [ 86.003094][ T7025] veth1_macvtap: entered promiscuous mode [ 86.013536][ T7025] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.024186][ T7025] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.034089][ T7025] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.044669][ T7025] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.055144][ T7025] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.065747][ T7025] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.076572][ T7025] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 86.087715][ T7025] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.098174][ T7025] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.108006][ T7025] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.118517][ T7025] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.128404][ T7025] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.138872][ T7025] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.149434][ T7025] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 86.159793][ T7025] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.168569][ T7025] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.177319][ T7025] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.186045][ T7025] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.266145][ T7304] loop0: detected capacity change from 0 to 8192 [ 86.362337][ T7317] netlink: 256 bytes leftover after parsing attributes in process `syz.3.888'. [ 86.392557][ T7317] binfmt_misc: register: failed to install interpreter file ./file0 [ 86.708272][ T7361] tmpfs: Bad value for 'mpol' [ 86.888552][ T7368] loop2: detected capacity change from 0 to 512 [ 87.040133][ T29] kauditd_printk_skb: 215 callbacks suppressed [ 87.040148][ T29] audit: type=1326 audit(1733328967.818:15311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7375 comm="syz.6.898" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b32f4ff19 code=0x7ffc0000 [ 87.077583][ T29] audit: type=1326 audit(1733328967.828:15312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7375 comm="syz.6.898" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b32f4ff19 code=0x7ffc0000 [ 87.101192][ T29] audit: type=1326 audit(1733328967.858:15313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7375 comm="syz.6.898" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f3b32f4ff19 code=0x7ffc0000 [ 87.120417][ T7388] loop0: detected capacity change from 0 to 8192 [ 87.124602][ T29] audit: type=1326 audit(1733328967.858:15314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7375 comm="syz.6.898" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b32f4ff19 code=0x7ffc0000 [ 87.154332][ T29] audit: type=1326 audit(1733328967.858:15315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7375 comm="syz.6.898" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f3b32f4ff19 code=0x7ffc0000 [ 87.177817][ T29] audit: type=1326 audit(1733328967.858:15316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7375 comm="syz.6.898" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b32f4ff19 code=0x7ffc0000 [ 87.201265][ T29] audit: type=1326 audit(1733328967.858:15317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7375 comm="syz.6.898" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f3b32f4ff19 code=0x7ffc0000 [ 87.210293][ T7395] netlink: 8 bytes leftover after parsing attributes in process `syz.7.900'. [ 87.224602][ T29] audit: type=1326 audit(1733328967.858:15318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7375 comm="syz.6.898" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b32f4ff19 code=0x7ffc0000 [ 87.242432][ T7368] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 87.256812][ T29] audit: type=1326 audit(1733328967.858:15319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7375 comm="syz.6.898" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7f3b32f4ff19 code=0x7ffc0000 [ 87.296733][ T29] audit: type=1326 audit(1733328967.988:15320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7387 comm="syz.7.900" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9611d4ff19 code=0x7ffc0000 [ 87.336329][ T7368] ext4 filesystem being mounted at /173/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 87.357280][ T7368] EXT4-fs error (device loop2): ext4_do_update_inode:5153: inode #2: comm syz.2.894: corrupted inode contents [ 87.419819][ T7368] EXT4-fs error (device loop2): ext4_dirty_inode:6041: inode #2: comm syz.2.894: mark_inode_dirty error [ 87.431455][ T7368] EXT4-fs error (device loop2): ext4_do_update_inode:5153: inode #2: comm syz.2.894: corrupted inode contents [ 87.443956][ T7368] EXT4-fs error (device loop2): __ext4_ext_dirty:207: inode #2: comm syz.2.894: mark_inode_dirty error [ 87.507536][ T7404] netlink: 256 bytes leftover after parsing attributes in process `syz.3.902'. [ 87.520778][ T3302] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 87.556783][ T7404] binfmt_misc: register: failed to install interpreter file ./file0 [ 87.568233][ T7407] loop6: detected capacity change from 0 to 8192 [ 87.614071][ T7420] loop7: detected capacity change from 0 to 512 [ 87.679040][ T7420] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 87.694134][ T7420] ext4 filesystem being mounted at /4/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 87.708678][ T7420] EXT4-fs error (device loop7): ext4_xattr_block_get:596: inode #15: comm syz.7.907: corrupted xattr block 32: e_value out of bounds [ 87.723076][ T7420] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop7 ino=15 [ 87.732677][ T7420] EXT4-fs error (device loop7): ext4_xattr_block_get:596: inode #15: comm syz.7.907: corrupted xattr block 32: e_value out of bounds [ 87.767784][ T7420] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop7 ino=15 [ 87.790824][ T7420] EXT4-fs error (device loop7): ext4_xattr_block_get:596: inode #15: comm syz.7.907: corrupted xattr block 32: e_value out of bounds [ 87.819631][ T7420] EXT4-fs error (device loop7): ext4_xattr_block_get:596: inode #15: comm syz.7.907: corrupted xattr block 32: e_value out of bounds [ 87.859709][ T7420] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop7 ino=15 [ 87.898160][ T7025] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 87.952010][ T7443] loop0: detected capacity change from 0 to 8192 [ 88.588555][ T7477] tmpfs: Bad value for 'mpol' [ 88.867732][ T7456] FAT-fs (loop0): error, corrupted directory (invalid entries) [ 88.875344][ T7456] FAT-fs (loop0): Filesystem has been set read-only [ 88.902296][ T7483] netlink: 256 bytes leftover after parsing attributes in process `syz.3.918'. [ 88.998404][ T7483] binfmt_misc: register: failed to install interpreter file ./file0 [ 89.039646][ T7498] A link change request failed with some changes committed already. Interface wg0 may have been left with an inconsistent configuration, please check. [ 89.063474][ T7490] loop6: detected capacity change from 0 to 8192 [ 89.267002][ T7512] loop3: detected capacity change from 0 to 8192 [ 89.383731][ T7533] netlink: 48 bytes leftover after parsing attributes in process `syz.7.933'. [ 89.502234][ T7529] loop0: detected capacity change from 0 to 8192 [ 89.520189][ T7542] netlink: 256 bytes leftover after parsing attributes in process `syz.2.934'. [ 89.588292][ T7542] binfmt_misc: register: failed to install interpreter file ./file0 [ 89.783838][ T7575] loop6: detected capacity change from 0 to 512 [ 89.807358][ T7575] EXT4-fs: Ignoring removed nomblk_io_submit option [ 89.824530][ T7575] EXT4-fs (loop6): orphan cleanup on readonly fs [ 89.871231][ T7575] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm +}[@: bg 0: block 248: padding at end of block bitmap is not set [ 89.920651][ T7575] EXT4-fs error (device loop6): ext4_acquire_dquot:6938: comm +}[@: Failed to acquire dquot type 1 [ 89.975246][ T7575] EXT4-fs (loop6): 1 truncate cleaned up [ 90.011380][ T7575] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 90.026052][ T7575] +}[@ (7575) used greatest stack depth: 9520 bytes left [ 90.043582][ T6852] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 90.098095][ T7605] loop3: detected capacity change from 0 to 8192 [ 90.126511][ T7610] loop6: detected capacity change from 0 to 8192 [ 90.137331][ T7608] netlink: 256 bytes leftover after parsing attributes in process `syz.2.951'. [ 90.171322][ T7608] binfmt_misc: register: failed to install interpreter file ./file0 [ 90.444148][ T7628] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 90.498469][ T7632] loop3: detected capacity change from 0 to 1024 [ 90.515514][ T7630] loop6: detected capacity change from 0 to 8192 [ 90.521681][ T7632] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 90.610585][ T7635] FAULT_INJECTION: forcing a failure. [ 90.610585][ T7635] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 90.623674][ T7635] CPU: 1 UID: 0 PID: 7635 Comm: syz.3.959 Not tainted 6.13.0-rc1-syzkaller-00025-gfeffde684ac2 #0 [ 90.634264][ T7635] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 90.644381][ T7635] Call Trace: [ 90.647702][ T7635] [ 90.650631][ T7635] dump_stack_lvl+0xf2/0x150 [ 90.655258][ T7635] dump_stack+0x15/0x1a [ 90.659451][ T7635] should_fail_ex+0x223/0x230 [ 90.664196][ T7635] should_fail+0xb/0x10 [ 90.668365][ T7635] should_fail_usercopy+0x1a/0x20 [ 90.673392][ T7635] copy_page_from_iter_atomic+0x228/0xf80 [ 90.679184][ T7635] ? shmem_write_begin+0xa2/0x180 [ 90.684319][ T7635] ? shmem_write_begin+0xda/0x180 [ 90.689348][ T7635] generic_perform_write+0x2f1/0x4a0 [ 90.694724][ T7635] shmem_file_write_iter+0xc2/0xe0 [ 90.699837][ T7635] vfs_write+0x77f/0x920 [ 90.704149][ T7635] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 90.709956][ T7635] ksys_write+0xe8/0x1b0 [ 90.714234][ T7635] __x64_sys_write+0x42/0x50 [ 90.718900][ T7635] x64_sys_call+0x287e/0x2dc0 [ 90.723571][ T7635] do_syscall_64+0xc9/0x1c0 [ 90.728066][ T7635] ? clear_bhb_loop+0x55/0xb0 [ 90.732805][ T7635] ? clear_bhb_loop+0x55/0xb0 [ 90.737504][ T7635] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 90.743541][ T7635] RIP: 0033:0x7feb2924ff19 [ 90.747965][ T7635] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 90.767689][ T7635] RSP: 002b:00007feb278c7058 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 90.776099][ T7635] RAX: ffffffffffffffda RBX: 00007feb29415fa0 RCX: 00007feb2924ff19 [ 90.784061][ T7635] RDX: 0000000000040010 RSI: 0000000020000180 RDI: 0000000000000006 [ 90.792103][ T7635] RBP: 00007feb278c70a0 R08: 0000000000000000 R09: 0000000000000000 [ 90.800064][ T7635] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 90.808026][ T7635] R13: 0000000000000000 R14: 00007feb29415fa0 R15: 00007fff68beed88 [ 90.815995][ T7635] [ 90.861525][ T7643] loop7: detected capacity change from 0 to 512 [ 90.893828][ T7643] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 90.915449][ T7643] ext4 filesystem being mounted at /16/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 90.960955][ T7649] netlink: 40 bytes leftover after parsing attributes in process `syz.3.962'. [ 90.980423][ T7643] EXT4-fs error (device loop7): ext4_do_update_inode:5153: inode #2: comm syz.7.961: corrupted inode contents [ 91.023778][ T7643] EXT4-fs error (device loop7): ext4_dirty_inode:6041: inode #2: comm syz.7.961: mark_inode_dirty error [ 91.061372][ T7643] EXT4-fs error (device loop7): ext4_do_update_inode:5153: inode #2: comm syz.7.961: corrupted inode contents [ 91.073769][ T7643] EXT4-fs error (device loop7): __ext4_ext_dirty:207: inode #2: comm syz.7.961: mark_inode_dirty error [ 91.108946][ T7025] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 91.151540][ T7653] netlink: 256 bytes leftover after parsing attributes in process `syz.0.964'. [ 91.203865][ T7656] binfmt_misc: register: failed to install interpreter file ./file0 [ 91.328455][ T7682] loop7: detected capacity change from 0 to 512 [ 91.341787][ T7684] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 91.353872][ T7684] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 91.389061][ T7684] bridge_slave_0: left allmulticast mode [ 91.394824][ T7684] bridge_slave_0: left promiscuous mode [ 91.396351][ T7682] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 91.400544][ T7684] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.414330][ T7682] ext4 filesystem being mounted at /20/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 91.432879][ T7684] bridge_slave_1: left allmulticast mode [ 91.438906][ T7684] bridge_slave_1: left promiscuous mode [ 91.444585][ T7684] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.446047][ T7682] EXT4-fs error (device loop7): ext4_do_update_inode:5153: inode #2: comm syz.7.976: corrupted inode contents [ 91.464120][ T7682] EXT4-fs error (device loop7): ext4_dirty_inode:6041: inode #2: comm syz.7.976: mark_inode_dirty error [ 91.475706][ T7684] bond0: (slave bond_slave_0): Releasing backup interface [ 91.476443][ T7682] EXT4-fs error (device loop7): ext4_do_update_inode:5153: inode #2: comm syz.7.976: corrupted inode contents [ 91.499739][ T7684] bond0: (slave bond_slave_1): Releasing backup interface [ 91.508372][ T7682] EXT4-fs error (device loop7): __ext4_ext_dirty:207: inode #2: comm syz.7.976: mark_inode_dirty error [ 91.523859][ T7684] team0: Port device team_slave_0 removed [ 91.533648][ T7684] team0: Port device team_slave_1 removed [ 91.538894][ T7693] syz.2.980[7693] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 91.539534][ T7693] syz.2.980[7693] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 91.540860][ T7684] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 91.551567][ T7693] syz.2.980[7693] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 91.562177][ T7684] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 91.591235][ T7684] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 91.598860][ T7684] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 91.610710][ T7025] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 91.707100][ T7696] netlink: 256 bytes leftover after parsing attributes in process `syz.7.981'. [ 91.737232][ T7696] binfmt_misc: register: failed to install interpreter file ./file0 [ 91.836892][ T7718] loop3: detected capacity change from 0 to 512 [ 91.913330][ T7729] netlink: 4 bytes leftover after parsing attributes in process `syz.6.993'. [ 91.950707][ T7718] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 91.963455][ T7718] ext4 filesystem being mounted at /219/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 91.977527][ T7718] EXT4-fs error (device loop3): ext4_do_update_inode:5153: inode #2: comm syz.3.992: corrupted inode contents [ 91.989942][ T7718] EXT4-fs error (device loop3): ext4_dirty_inode:6041: inode #2: comm syz.3.992: mark_inode_dirty error [ 92.001502][ T7718] EXT4-fs error (device loop3): ext4_do_update_inode:5153: inode #2: comm syz.3.992: corrupted inode contents [ 92.013490][ T7718] EXT4-fs error (device loop3): __ext4_ext_dirty:207: inode #2: comm syz.3.992: mark_inode_dirty error [ 92.070051][ T7729] loop6: detected capacity change from 0 to 512 [ 92.086924][ T29] kauditd_printk_skb: 481 callbacks suppressed [ 92.086938][ T29] audit: type=1326 audit(1733328972.858:15800): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7719 comm="syz.7.991" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9611d4ff19 code=0x7ffc0000 [ 92.116581][ T29] audit: type=1326 audit(1733328972.858:15801): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7719 comm="syz.7.991" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9611d4ff19 code=0x7ffc0000 [ 92.140063][ T29] audit: type=1326 audit(1733328972.858:15802): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7719 comm="syz.7.991" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f9611d4ff19 code=0x7ffc0000 [ 92.163479][ T29] audit: type=1326 audit(1733328972.858:15803): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7719 comm="syz.7.991" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9611d4ff19 code=0x7ffc0000 [ 92.186897][ T29] audit: type=1326 audit(1733328972.858:15804): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7719 comm="syz.7.991" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9611d4ff19 code=0x7ffc0000 [ 92.210351][ T29] audit: type=1326 audit(1733328972.858:15805): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7719 comm="syz.7.991" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f9611d4ff19 code=0x7ffc0000 [ 92.233651][ T29] audit: type=1326 audit(1733328972.858:15806): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7719 comm="syz.7.991" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9611d4ff19 code=0x7ffc0000 [ 92.257058][ T29] audit: type=1326 audit(1733328972.858:15807): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7719 comm="syz.7.991" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9611d4ff19 code=0x7ffc0000 [ 92.280447][ T29] audit: type=1326 audit(1733328972.858:15808): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7719 comm="syz.7.991" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f9611d4ff19 code=0x7ffc0000 [ 92.303893][ T29] audit: type=1326 audit(1733328972.858:15809): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7719 comm="syz.7.991" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f9611d4ff53 code=0x7ffc0000 [ 92.361887][ T3306] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 92.369219][ T7729] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 92.385803][ T7729] ext4 filesystem being mounted at /41/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 92.419508][ T7747] netlink: 16 bytes leftover after parsing attributes in process `+}[@'. [ 92.431103][ T6852] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 92.449075][ T7741] netlink: 256 bytes leftover after parsing attributes in process `syz.0.998'. [ 92.460464][ T7752] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1002'. [ 92.469529][ T7752] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1002'. [ 92.486839][ T7749] loop3: detected capacity change from 0 to 8192 [ 92.489321][ T7741] binfmt_misc: register: failed to install interpreter file ./file0 [ 92.582536][ T7763] sch_tbf: burst 2 is lower than device lo mtu (65550) ! [ 92.728324][ T7778] syz.6.1011: attempt to access beyond end of device [ 92.728324][ T7778] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 92.826234][ T7789] loop3: detected capacity change from 0 to 512 [ 92.846581][ T7785] netlink: 256 bytes leftover after parsing attributes in process `syz.6.1015'. [ 92.857802][ T7789] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 92.872340][ T7789] ext4 filesystem being mounted at /221/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 92.884400][ T7789] EXT4-fs error (device loop3): ext4_xattr_block_get:596: inode #15: comm syz.3.1014: corrupted xattr block 32: e_value out of bounds [ 92.891725][ T7785] binfmt_misc: register: failed to install interpreter file ./file0 [ 92.900730][ T7798] FAULT_INJECTION: forcing a failure. [ 92.900730][ T7798] name failslab, interval 1, probability 0, space 0, times 0 [ 92.908810][ T7789] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=15 [ 92.918816][ T7798] CPU: 1 UID: 0 PID: 7798 Comm: syz.7.1018 Not tainted 6.13.0-rc1-syzkaller-00025-gfeffde684ac2 #0 [ 92.938535][ T7798] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 92.941657][ T7789] EXT4-fs error (device loop3): ext4_xattr_block_get:596: inode #15: comm syz.3.1014: corrupted xattr block 32: e_value out of bounds [ 92.948725][ T7798] Call Trace: [ 92.948735][ T7798] [ 92.948742][ T7798] dump_stack_lvl+0xf2/0x150 [ 92.966449][ T7789] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=15 [ 92.968676][ T7798] dump_stack+0x15/0x1a [ 92.973389][ T7789] EXT4-fs error (device loop3): ext4_xattr_block_get:596: inode #15: comm syz.3.1014: corrupted xattr block 32: e_value out of bounds [ 92.982168][ T7798] should_fail_ex+0x223/0x230 [ 92.982195][ T7798] ? p9_client_stat+0x5b/0x220 [ 92.982225][ T7798] should_failslab+0x8f/0xb0 [ 92.987417][ T7789] EXT4-fs error (device loop3): ext4_xattr_block_get:596: inode #15: comm syz.3.1014: corrupted xattr block 32: e_value out of bounds [ 93.000070][ T7798] __kmalloc_cache_noprof+0x4e/0x320 [ 93.000098][ T7798] p9_client_stat+0x5b/0x220 [ 93.000127][ T7798] v9fs_vfs_getattr+0x14e/0x270 [ 93.005332][ T7789] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=15 [ 93.009591][ T7798] ? __pfx_v9fs_vfs_getattr+0x10/0x10 [ 93.009617][ T7798] vfs_statx_path+0x171/0x2d0 [ 93.061689][ T7798] __se_sys_newstat+0xb1/0x320 [ 93.066541][ T7798] ? fput+0x1c4/0x200 [ 93.070631][ T7798] ? ksys_write+0x176/0x1b0 [ 93.075196][ T7798] __x64_sys_newstat+0x31/0x40 [ 93.079946][ T7798] x64_sys_call+0x6eb/0x2dc0 [ 93.084630][ T7798] do_syscall_64+0xc9/0x1c0 [ 93.089118][ T7798] ? clear_bhb_loop+0x55/0xb0 [ 93.093779][ T7798] ? clear_bhb_loop+0x55/0xb0 [ 93.098448][ T7798] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 93.104356][ T7798] RIP: 0033:0x7f9611d4ff19 [ 93.108755][ T7798] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 93.128420][ T7798] RSP: 002b:00007f96103c7058 EFLAGS: 00000246 ORIG_RAX: 0000000000000004 [ 93.136837][ T7798] RAX: ffffffffffffffda RBX: 00007f9611f15fa0 RCX: 00007f9611d4ff19 [ 93.144807][ T7798] RDX: 0000000000000000 RSI: 00000000200006c0 RDI: 0000000020000040 [ 93.152801][ T7798] RBP: 00007f96103c70a0 R08: 0000000000000000 R09: 0000000000000000 [ 93.160760][ T7798] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 93.168715][ T7798] R13: 0000000000000000 R14: 00007f9611f15fa0 R15: 00007ffc24307fc8 [ 93.176813][ T7798] [ 93.182660][ T3306] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 93.248956][ T7809] loop6: detected capacity change from 0 to 512 [ 93.250012][ T7811] loop3: detected capacity change from 0 to 512 [ 93.279065][ T7811] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 93.297232][ T7811] ext4 filesystem being mounted at /224/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 93.309821][ T7811] EXT4-fs error (device loop3): ext4_do_update_inode:5153: inode #2: comm syz.3.1024: corrupted inode contents [ 93.323767][ T7816] loop7: detected capacity change from 0 to 8192 [ 93.341921][ T7811] EXT4-fs error (device loop3): ext4_dirty_inode:6041: inode #2: comm syz.3.1024: mark_inode_dirty error [ 93.365917][ T7811] EXT4-fs error (device loop3): ext4_do_update_inode:5153: inode #2: comm syz.3.1024: corrupted inode contents [ 93.381470][ T7811] EXT4-fs error (device loop3): __ext4_ext_dirty:207: inode #2: comm syz.3.1024: mark_inode_dirty error [ 93.421566][ T3306] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 93.454520][ T7824] loop0: detected capacity change from 0 to 512 [ 93.472676][ T7824] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 93.485559][ T7824] ext4 filesystem being mounted at /232/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 93.498284][ T7824] EXT4-fs error (device loop0): ext4_xattr_block_get:596: inode #15: comm syz.0.1029: corrupted xattr block 32: e_value out of bounds [ 93.520911][ T7824] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop0 ino=15 [ 93.531412][ T7824] EXT4-fs error (device loop0): ext4_xattr_block_get:596: inode #15: comm syz.0.1029: corrupted xattr block 32: e_value out of bounds [ 93.554753][ T7824] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop0 ino=15 [ 93.564859][ T7824] EXT4-fs error (device loop0): ext4_xattr_block_get:596: inode #15: comm syz.0.1029: corrupted xattr block 32: e_value out of bounds [ 93.580392][ T7824] EXT4-fs error (device loop0): ext4_xattr_block_get:596: inode #15: comm syz.0.1029: corrupted xattr block 32: e_value out of bounds [ 93.594529][ T7824] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop0 ino=15 [ 93.609739][ T7837] netlink: 256 bytes leftover after parsing attributes in process `syz.2.1032'. [ 93.648676][ T7837] binfmt_misc: register: failed to install interpreter file ./file0 [ 93.648803][ T3297] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 93.740407][ T3374] hid-generic 0008:0007:0002.0001: unknown main item tag 0x0 [ 93.747929][ T3374] hid-generic 0008:0007:0002.0001: unknown main item tag 0x0 [ 93.755375][ T3374] hid-generic 0008:0007:0002.0001: unknown main item tag 0x0 [ 93.762865][ T3374] hid-generic 0008:0007:0002.0001: unknown main item tag 0x0 [ 93.770302][ T3374] hid-generic 0008:0007:0002.0001: unknown main item tag 0x0 [ 93.777730][ T3374] hid-generic 0008:0007:0002.0001: unknown main item tag 0x0 [ 93.785187][ T3374] hid-generic 0008:0007:0002.0001: unknown main item tag 0x0 [ 93.792598][ T3374] hid-generic 0008:0007:0002.0001: unknown main item tag 0x0 [ 93.800022][ T3374] hid-generic 0008:0007:0002.0001: unknown main item tag 0x0 [ 93.807433][ T3374] hid-generic 0008:0007:0002.0001: unknown main item tag 0x0 [ 93.814810][ T3374] hid-generic 0008:0007:0002.0001: unknown main item tag 0x0 [ 93.822219][ T3374] hid-generic 0008:0007:0002.0001: unknown main item tag 0x0 [ 93.829614][ T3374] hid-generic 0008:0007:0002.0001: unknown main item tag 0x0 [ 93.837026][ T3374] hid-generic 0008:0007:0002.0001: unknown main item tag 0x0 [ 93.844452][ T3374] hid-generic 0008:0007:0002.0001: unknown main item tag 0x0 [ 93.851890][ T3374] hid-generic 0008:0007:0002.0001: unknown main item tag 0x0 [ 93.859314][ T3374] hid-generic 0008:0007:0002.0001: unknown main item tag 0x0 [ 93.866703][ T3374] hid-generic 0008:0007:0002.0001: unknown main item tag 0x0 [ 93.874080][ T3374] hid-generic 0008:0007:0002.0001: unknown main item tag 0x0 [ 93.881481][ T3374] hid-generic 0008:0007:0002.0001: unknown main item tag 0x0 [ 93.888914][ T3374] hid-generic 0008:0007:0002.0001: unknown main item tag 0x0 [ 93.896314][ T3374] hid-generic 0008:0007:0002.0001: unknown main item tag 0x0 [ 93.903717][ T3374] hid-generic 0008:0007:0002.0001: unknown main item tag 0x0 [ 93.911113][ T3374] hid-generic 0008:0007:0002.0001: unknown main item tag 0x0 [ 93.918615][ T3374] hid-generic 0008:0007:0002.0001: unknown main item tag 0x0 [ 93.926017][ T3374] hid-generic 0008:0007:0002.0001: unknown main item tag 0x0 [ 93.933476][ T3374] hid-generic 0008:0007:0002.0001: unknown main item tag 0x0 [ 93.940911][ T3374] hid-generic 0008:0007:0002.0001: unknown main item tag 0x0 [ 93.948304][ T3374] hid-generic 0008:0007:0002.0001: unknown main item tag 0x0 [ 93.955726][ T3374] hid-generic 0008:0007:0002.0001: unknown main item tag 0x0 [ 93.963101][ T3374] hid-generic 0008:0007:0002.0001: unknown main item tag 0x0 [ 93.970515][ T3374] hid-generic 0008:0007:0002.0001: unknown main item tag 0x0 [ 93.977911][ T3374] hid-generic 0008:0007:0002.0001: unknown main item tag 0x0 [ 93.985275][ T3374] hid-generic 0008:0007:0002.0001: unknown main item tag 0x0 [ 93.993485][ T3374] hid-generic 0008:0007:0002.0001: hidraw0: HID v1.00 Device [syz1] on syz0 [ 94.013382][ T7858] process 'syz.0.1040' launched '/dev/fd/6' with NULL argv: empty string added [ 94.096806][ T7864] loop7: detected capacity change from 0 to 8192 [ 94.127155][ T7871] loop0: detected capacity change from 0 to 512 [ 94.152122][ T7871] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 94.167363][ T7871] ext4 filesystem being mounted at /236/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 94.183185][ T7871] EXT4-fs error (device loop0): ext4_xattr_block_get:596: inode #15: comm syz.0.1046: corrupted xattr block 32: e_value out of bounds [ 94.199721][ T7871] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop0 ino=15 [ 94.208888][ T7871] EXT4-fs error (device loop0): ext4_xattr_block_get:596: inode #15: comm syz.0.1046: corrupted xattr block 32: e_value out of bounds [ 94.224020][ T7871] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop0 ino=15 [ 94.236247][ T7871] EXT4-fs error (device loop0): ext4_xattr_block_get:596: inode #15: comm syz.0.1046: corrupted xattr block 32: e_value out of bounds [ 94.256692][ T7871] EXT4-fs error (device loop0): ext4_xattr_block_get:596: inode #15: comm syz.0.1046: corrupted xattr block 32: e_value out of bounds [ 94.274944][ T7871] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop0 ino=15 [ 94.298641][ T3297] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 94.380271][ T7894] netlink: 256 bytes leftover after parsing attributes in process `syz.6.1051'. [ 94.390355][ T7898] loop0: detected capacity change from 0 to 512 [ 94.412347][ T7894] binfmt_misc: register: failed to install interpreter file ./file0 [ 94.438841][ T7898] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 94.446346][ T7905] netlink: 'syz.7.1057': attribute type 1 has an invalid length. [ 94.452096][ T7898] ext4 filesystem being mounted at /237/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 94.476928][ T7905] 8021q: adding VLAN 0 to HW filter on device bond1 [ 94.480336][ T7898] EXT4-fs error (device loop0): ext4_do_update_inode:5153: inode #2: comm syz.0.1053: corrupted inode contents [ 94.495467][ T7898] EXT4-fs error (device loop0): ext4_dirty_inode:6041: inode #2: comm syz.0.1053: mark_inode_dirty error [ 94.506153][ T7905] bond1: (slave gretap1): making interface the new active one [ 94.514507][ T7898] EXT4-fs error (device loop0): ext4_do_update_inode:5153: inode #2: comm syz.0.1053: corrupted inode contents [ 94.514904][ T7905] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 94.528526][ T7898] EXT4-fs error (device loop0): __ext4_ext_dirty:207: inode #2: comm syz.0.1053: mark_inode_dirty error [ 94.587857][ T3297] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 94.619876][ T7912] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 94.651517][ T7918] loop2: detected capacity change from 0 to 512 [ 94.671858][ T9] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 94.679381][ T9] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 94.686883][ T9] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 94.695865][ T9] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 94.703270][ T9] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 94.710847][ T9] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 94.718325][ T9] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 94.725864][ T9] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 94.728172][ T7925] loop0: detected capacity change from 0 to 2048 [ 94.733235][ T9] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 94.747001][ T9] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 94.747430][ T7925] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 94.754375][ T9] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 94.754401][ T9] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 94.777453][ T9] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 94.784847][ T9] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 94.793509][ T9] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 94.794473][ T7918] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 94.800943][ T9] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 94.800968][ T9] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 94.800990][ T9] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 94.820477][ T7918] ext4 filesystem being mounted at /211/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 94.820817][ T9] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 94.853324][ T9] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 94.860749][ T9] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 94.863991][ T7930] loop7: detected capacity change from 0 to 8192 [ 94.868174][ T9] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 94.881911][ T9] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 94.889343][ T9] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 94.896817][ T9] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 94.904210][ T9] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 94.911650][ T9] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 94.919172][ T9] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 94.919916][ T7918] EXT4-fs error (device loop2): ext4_xattr_block_get:596: inode #15: comm syz.2.1064: corrupted xattr block 32: e_value out of bounds [ 94.926638][ T9] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 94.947888][ T9] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 94.958417][ T7918] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=15 [ 94.968287][ T7918] EXT4-fs error (device loop2): ext4_xattr_block_get:596: inode #15: comm syz.2.1064: corrupted xattr block 32: e_value out of bounds [ 94.983573][ T9] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz0] on syz0 [ 94.995733][ T7918] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=15 [ 95.024347][ T7918] EXT4-fs error (device loop2): ext4_xattr_block_get:596: inode #15: comm syz.2.1064: corrupted xattr block 32: e_value out of bounds [ 95.047904][ T7918] EXT4-fs error (device loop2): ext4_xattr_block_get:596: inode #15: comm syz.2.1064: corrupted xattr block 32: e_value out of bounds [ 95.065760][ T7918] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=15 [ 95.077310][ T7939] syz.3.1069[7939] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 95.077443][ T7939] syz.3.1069[7939] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 95.089081][ T7939] syz.3.1069[7939] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 95.112473][ T3302] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 95.273310][ T7966] netlink: 36 bytes leftover after parsing attributes in process `syz.6.1080'. [ 95.311959][ T7968] loop2: detected capacity change from 0 to 8192 [ 95.322376][ C0] hrtimer: interrupt took 27195 ns [ 95.502078][ T7980] syz.0.1083[7980] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 95.502201][ T7980] syz.0.1083[7980] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 95.527608][ T7980] syz.0.1083[7980] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 95.574301][ T7982] loop3: detected capacity change from 0 to 512 [ 95.641338][ T7982] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 95.659570][ T7982] ext4 filesystem being mounted at /244/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 95.676757][ T7982] EXT4-fs error (device loop3): ext4_xattr_block_get:596: inode #15: comm syz.3.1082: corrupted xattr block 32: e_value out of bounds [ 95.699681][ T7982] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=15 [ 95.715029][ T7982] EXT4-fs error (device loop3): ext4_xattr_block_get:596: inode #15: comm syz.3.1082: corrupted xattr block 32: e_value out of bounds [ 95.730166][ T7982] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=15 [ 95.740444][ T7982] EXT4-fs error (device loop3): ext4_xattr_block_get:596: inode #15: comm syz.3.1082: corrupted xattr block 32: e_value out of bounds [ 95.755142][ T7982] EXT4-fs error (device loop3): ext4_xattr_block_get:596: inode #15: comm syz.3.1082: corrupted xattr block 32: e_value out of bounds [ 95.768746][ T8001] binfmt_misc: register: failed to install interpreter file ./file0 [ 95.771044][ T7982] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=15 [ 95.855556][ T3306] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 95.891630][ T7966] ------------[ cut here ]------------ [ 95.897609][ T7966] WARNING: CPU: 1 PID: 7966 at net/ipv6/ip6mr.c:419 ip6mr_rules_exit+0x18c/0x210 [ 95.907662][ T7966] Modules linked in: [ 95.912022][ T7966] CPU: 1 UID: 0 PID: 7966 Comm: syz.6.1080 Not tainted 6.13.0-rc1-syzkaller-00025-gfeffde684ac2 #0 [ 95.922901][ T7966] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 95.933402][ T7966] RIP: 0010:ip6mr_rules_exit+0x18c/0x210 [ 95.939300][ T7966] Code: 00 31 f6 31 d2 e8 74 04 34 fd 48 89 df e8 9c f2 d2 fc 4d 39 fd 74 18 e8 32 42 a4 fc 4c 89 eb e9 f7 fe ff ff e8 25 42 a4 fc 90 <0f> 0b 90 eb b5 e8 1a 42 a4 fc 48 8b 2c 24 eb 05 e8 0f 42 a4 fc 48 [ 95.939487][ T8018] loop3: detected capacity change from 0 to 512 [ 95.959261][ T7966] RSP: 0018:ffffc9000153bb40 EFLAGS: 00010293 [ 95.974600][ T7966] RAX: ffffffff848e68bb RBX: ffff888103442000 RCX: ffff888108792100 [ 95.977713][ T8018] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 95.983010][ T7966] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff88810793d6d8 [ 95.998172][ T8018] ext4 filesystem being mounted at /245/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 96.003600][ T7966] RBP: 0000000000000001 R08: 000188810793d6df R09: 0000000000000000 [ 96.020482][ T8018] EXT4-fs error (device loop3): ext4_do_update_inode:5153: inode #2: comm syz.3.1089: corrupted inode contents [ 96.022149][ T7966] R10: 0001ffffffffffff R11: 0001888103442008 R12: ffff88810793cd00 [ 96.034118][ T8018] EXT4-fs error (device loop3): ext4_dirty_inode:6041: inode #2: comm syz.3.1089: mark_inode_dirty error [ 96.041908][ T7966] R13: ffff88810793d6c8 R14: dead000000000122 R15: ffff88810793d6c8 [ 96.054772][ T8018] EXT4-fs error (device loop3): ext4_do_update_inode:5153: inode #2: comm syz.3.1089: corrupted inode contents [ 96.062113][ T7966] FS: 00007f3b315c76c0(0000) GS:ffff888237d00000(0000) knlGS:0000000000000000 [ 96.083119][ T7966] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 96.092274][ T8018] EXT4-fs error (device loop3): __ext4_ext_dirty:207: inode #2: comm syz.3.1089: mark_inode_dirty error [ 96.104072][ T7966] CR2: 000055b75a032300 CR3: 0000000132aec000 CR4: 00000000003506f0 [ 96.112381][ T7966] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 96.123831][ T7966] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 96.132082][ T7966] Call Trace: [ 96.135570][ T7966] [ 96.138990][ T7966] ? __warn+0x141/0x350 [ 96.144392][ T7966] ? report_bug+0x315/0x420 [ 96.149228][ T7966] ? ip6mr_rules_exit+0x18c/0x210 [ 96.154783][ T7966] ? handle_bug+0x60/0x90 [ 96.159442][ T7966] ? exc_invalid_op+0x1a/0x50 [ 96.164329][ T7966] ? asm_exc_invalid_op+0x1a/0x20 [ 96.169617][ T7966] ? ip6mr_rules_exit+0x18b/0x210 [ 96.174773][ T7966] ? ip6mr_rules_exit+0x18c/0x210 [ 96.180172][ T7966] ip6mr_net_exit_batch+0x2d/0x60 [ 96.185521][ T7966] ? __pfx_ip6mr_net_exit_batch+0x10/0x10 [ 96.192189][ T7966] setup_net+0x474/0x600 [ 96.197032][ T7966] copy_net_ns+0x290/0x430 [ 96.201779][ T7966] create_new_namespaces+0x228/0x430 [ 96.207383][ T7966] copy_namespaces+0x1ad/0x210 [ 96.212463][ T7966] copy_process+0xd82/0x1f90 [ 96.217282][ T7966] kernel_clone+0x167/0x5e0 [ 96.222117][ T7966] ? handle_mm_fault+0x1723/0x2ac0 [ 96.227779][ T7966] __x64_sys_clone+0xe8/0x120 [ 96.232968][ T7966] x64_sys_call+0x2d7e/0x2dc0 [ 96.237999][ T7966] do_syscall_64+0xc9/0x1c0 [ 96.242612][ T7966] ? clear_bhb_loop+0x55/0xb0 [ 96.247550][ T7966] ? clear_bhb_loop+0x55/0xb0 [ 96.252743][ T7966] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 96.259263][ T7966] RIP: 0033:0x7f3b32f4ff19 [ 96.264230][ T7966] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 96.284321][ T7966] RSP: 002b:00007f3b315c7008 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 96.302520][ T7966] RAX: ffffffffffffffda RBX: 00007f3b33115fa0 RCX: 00007f3b32f4ff19 [ 96.310742][ T7966] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000010eb22b000 [ 96.323671][ T7966] RBP: 00007f3b32fc3986 R08: 0000000000000000 R09: 0000000000000000 [ 96.332162][ T7966] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 96.340503][ T7966] R13: 0000000000000000 R14: 00007f3b33115fa0 R15: 00007fff6140df68 [ 96.349041][ T7966] [ 96.352317][ T7966] ---[ end trace 0000000000000000 ]--- [ 96.363878][ T8027] loop7: detected capacity change from 0 to 8192 [ 96.382400][ T3306] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 96.384847][ T7966] ------------[ cut here ]------------ [ 96.398053][ T7966] WARNING: CPU: 1 PID: 7966 at net/ipv4/ipmr.c:440 ipmr_rules_exit+0x18c/0x210 [ 96.407350][ T7966] Modules linked in: [ 96.411489][ T7966] CPU: 1 UID: 0 PID: 7966 Comm: syz.6.1080 Tainted: G W 6.13.0-rc1-syzkaller-00025-gfeffde684ac2 #0 [ 96.424297][ T7966] Tainted: [W]=WARN [ 96.428309][ T7966] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 96.438786][ T7966] RIP: 0010:ipmr_rules_exit+0x18c/0x210 [ 96.444589][ T7966] Code: 00 31 f6 31 d2 e8 34 19 4d fd 48 89 df e8 5c 07 ec fc 4d 39 fd 74 18 e8 f2 56 bd fc 4c 89 eb e9 f7 fe ff ff e8 e5 56 bd fc 90 <0f> 0b 90 eb b5 e8 da 56 bd fc 48 8b 2c 24 eb 05 e8 cf 56 bd fc 48 [ 96.465438][ T7966] RSP: 0018:ffffc9000153bb40 EFLAGS: 00010293 [ 96.471819][ T7966] RAX: ffffffff847553fb RBX: ffff888118071000 RCX: ffff888108792100 [ 96.480250][ T7966] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff88810793d338 [ 96.488399][ T7966] RBP: 0000000000000001 R08: 000188810793d33f R09: 0000000000000000 [ 96.496716][ T7966] R10: 0001ffffffffffff R11: 0001888118071008 R12: ffff88810793cd00 [ 96.504980][ T7966] R13: ffff88810793d328 R14: dead000000000122 R15: ffff88810793d328 [ 96.513425][ T7966] FS: 00007f3b315c76c0(0000) GS:ffff888237d00000(0000) knlGS:0000000000000000 [ 96.522820][ T7966] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 96.529788][ T7966] CR2: 00007f5ea5a7d178 CR3: 0000000132aec000 CR4: 00000000003506f0 [ 96.538130][ T7966] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 96.546378][ T7966] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 96.559858][ T7966] Call Trace: [ 96.563508][ T7966] [ 96.565877][ T8032] syz.0.1095[8032] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 96.566677][ T7966] ? __warn+0x141/0x350 [ 96.566820][ T8032] syz.0.1095[8032] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 96.578142][ T7966] ? report_bug+0x315/0x420 [ 96.583834][ T8032] syz.0.1095[8032] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 96.593816][ T7966] ? ipmr_rules_exit+0x18c/0x210 [ 96.619490][ T7966] ? handle_bug+0x60/0x90 [ 96.624047][ T7966] ? exc_invalid_op+0x1a/0x50 [ 96.629229][ T7966] ? asm_exc_invalid_op+0x1a/0x20 [ 96.633992][ T8034] loop0: detected capacity change from 0 to 2048 [ 96.634448][ T7966] ? ipmr_rules_exit+0x18b/0x210 [ 96.646266][ T7966] ? ipmr_rules_exit+0x18c/0x210 [ 96.651389][ T7966] ipmr_net_exit_batch+0x2d/0x60 [ 96.656676][ T7966] ? __pfx_ipmr_net_exit_batch+0x10/0x10 [ 96.662456][ T7966] setup_net+0x474/0x600 [ 96.666927][ T7966] copy_net_ns+0x290/0x430 [ 96.671682][ T7966] create_new_namespaces+0x228/0x430 [ 96.677405][ T7966] copy_namespaces+0x1ad/0x210 [ 96.682540][ T7966] copy_process+0xd82/0x1f90 [ 96.687516][ T7966] kernel_clone+0x167/0x5e0 [ 96.692589][ T7966] ? handle_mm_fault+0x1723/0x2ac0 [ 96.697926][ T7966] __x64_sys_clone+0xe8/0x120 [ 96.703220][ T7966] x64_sys_call+0x2d7e/0x2dc0 [ 96.708560][ T7966] do_syscall_64+0xc9/0x1c0 [ 96.713239][ T7966] ? clear_bhb_loop+0x55/0xb0 [ 96.718289][ T7966] ? clear_bhb_loop+0x55/0xb0 [ 96.723158][ T7966] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 96.729366][ T7966] RIP: 0033:0x7f3b32f4ff19 [ 96.734169][ T7966] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 96.754356][ T7966] RSP: 002b:00007f3b315c7008 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 96.762981][ T7966] RAX: ffffffffffffffda RBX: 00007f3b33115fa0 RCX: 00007f3b32f4ff19 [ 96.771599][ T7966] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000010eb22b000 [ 96.780027][ T7966] RBP: 00007f3b32fc3986 R08: 0000000000000000 R09: 0000000000000000 [ 96.788457][ T7966] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 96.796829][ T7966] R13: 0000000000000000 R14: 00007f3b33115fa0 R15: 00007fff6140df68 [ 96.805199][ T7966] [ 96.808366][ T7966] ---[ end trace 0000000000000000 ]--- [ 96.838496][ T8037] FAULT_INJECTION: forcing a failure. [ 96.838496][ T8037] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 96.851733][ T8037] CPU: 1 UID: 0 PID: 8037 Comm: syz.3.1093 Tainted: G W 6.13.0-rc1-syzkaller-00025-gfeffde684ac2 #0 [ 96.863930][ T8037] Tainted: [W]=WARN [ 96.867730][ T8037] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 96.876779][ T8034] loop0: p1 < > p4 [ 96.877793][ T8037] Call Trace: [ 96.877801][ T8037] [ 96.887798][ T8037] dump_stack_lvl+0xf2/0x150 [ 96.892482][ T8037] dump_stack+0x15/0x1a [ 96.896710][ T8037] should_fail_ex+0x223/0x230 [ 96.901396][ T8037] should_fail+0xb/0x10 [ 96.905556][ T8037] should_fail_usercopy+0x1a/0x20 [ 96.910696][ T8037] _copy_to_user+0x20/0xa0 [ 96.915114][ T8037] simple_read_from_buffer+0xa0/0x110 [ 96.920511][ T8037] proc_fail_nth_read+0xf9/0x140 [ 96.925484][ T8037] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 96.931083][ T8037] vfs_read+0x1a2/0x700 [ 96.935237][ T8037] ? __rcu_read_unlock+0x4e/0x70 [ 96.940173][ T8037] ? __fget_files+0x17c/0x1c0 [ 96.944908][ T8037] ksys_read+0xe8/0x1b0 [ 96.949125][ T8037] __x64_sys_read+0x42/0x50 [ 96.953624][ T8037] x64_sys_call+0x2874/0x2dc0 [ 96.958298][ T8037] do_syscall_64+0xc9/0x1c0 [ 96.962839][ T8037] ? clear_bhb_loop+0x55/0xb0 [ 96.967525][ T8037] ? clear_bhb_loop+0x55/0xb0 [ 96.972258][ T8037] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 96.978293][ T8037] RIP: 0033:0x7feb2924e92c [ 96.982759][ T8037] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 97.002357][ T8037] RSP: 002b:00007feb278c7050 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 97.010762][ T8037] RAX: ffffffffffffffda RBX: 00007feb29415fa0 RCX: 00007feb2924e92c [ 97.018724][ T8037] RDX: 000000000000000f RSI: 00007feb278c70b0 RDI: 0000000000000006 [ 97.026756][ T8037] RBP: 00007feb278c70a0 R08: 0000000000000000 R09: 0000000000000000 [ 97.034743][ T8037] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 97.042704][ T8037] R13: 0000000000000000 R14: 00007feb29415fa0 R15: 00007fff68beed88 [ 97.050684][ T8037] [ 97.074803][ T8034] loop0: p4 size 8388608 extends beyond EOD, truncated [ 97.156989][ T29] kauditd_printk_skb: 600 callbacks suppressed [ 97.157005][ T29] audit: type=1326 audit(1733328977.928:16410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8043 comm="syz.7.1099" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9611d4ff19 code=0x7ffc0000 [ 97.159276][ T8051] loop2: detected capacity change from 0 to 512 [ 97.163234][ T29] audit: type=1326 audit(1733328977.928:16411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8043 comm="syz.7.1099" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9611d4ff19 code=0x7ffc0000 [ 97.216670][ T29] audit: type=1326 audit(1733328977.928:16412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8043 comm="syz.7.1099" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9611d4ff19 code=0x7ffc0000 [ 97.240234][ T29] audit: type=1326 audit(1733328977.928:16413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8043 comm="syz.7.1099" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f9611d4ff19 code=0x7ffc0000 [ 97.263688][ T29] audit: type=1326 audit(1733328977.928:16414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8043 comm="syz.7.1099" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9611d4ff19 code=0x7ffc0000 [ 97.269615][ T8048] loop7: detected capacity change from 0 to 512 [ 97.287226][ T29] audit: type=1326 audit(1733328977.928:16415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8043 comm="syz.7.1099" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f9611d4e880 code=0x7ffc0000 [ 97.316961][ T29] audit: type=1326 audit(1733328977.998:16416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8043 comm="syz.7.1099" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9611d4ff19 code=0x7ffc0000 [ 97.340469][ T29] audit: type=1326 audit(1733328977.998:16417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8043 comm="syz.7.1099" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9611d4ff19 code=0x7ffc0000 [ 97.364057][ T29] audit: type=1326 audit(1733328978.048:16418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8043 comm="syz.7.1099" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7f9611d4ff19 code=0x7ffc0000 [ 97.387539][ T29] audit: type=1326 audit(1733328978.048:16419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8043 comm="syz.7.1099" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9611d4ff19 code=0x7ffc0000 [ 97.414140][ T8048] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 97.427393][ T8048] ext4 filesystem being mounted at /47/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 97.438355][ T8051] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 97.452084][ T8048] EXT4-fs error (device loop7): ext4_xattr_block_get:596: inode #15: comm syz.7.1099: corrupted xattr block 32: e_value out of bounds [ 97.466109][ T8051] ext4 filesystem being mounted at /219/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 97.481555][ T8048] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop7 ino=15 [ 97.490741][ T8048] EXT4-fs error (device loop7): ext4_xattr_block_get:596: inode #15: comm syz.7.1099: corrupted xattr block 32: e_value out of bounds [ 97.504132][ T8066] syz.6.1107[8066] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 97.504668][ T8066] syz.6.1107[8066] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 97.505500][ T8048] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop7 ino=15 [ 97.517239][ T8066] syz.6.1107[8066] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 97.528387][ T8051] EXT4-fs error (device loop2): ext4_do_update_inode:5153: inode #2: comm syz.2.1103: corrupted inode contents [ 97.559854][ T8048] EXT4-fs error (device loop7): ext4_xattr_block_get:596: inode #15: comm syz.7.1099: corrupted xattr block 32: e_value out of bounds [ 97.568281][ T8069] capability: warning: `syz.6.1108' uses 32-bit capabilities (legacy support in use) [ 97.585325][ T8051] EXT4-fs error (device loop2): ext4_dirty_inode:6041: inode #2: comm syz.2.1103: mark_inode_dirty error [ 97.607896][ T8051] EXT4-fs error (device loop2): ext4_do_update_inode:5153: inode #2: comm syz.2.1103: corrupted inode contents [ 97.624459][ T8048] EXT4-fs error (device loop7): ext4_xattr_block_get:596: inode #15: comm syz.7.1099: corrupted xattr block 32: e_value out of bounds [ 97.641195][ T8073] loop3: detected capacity change from 0 to 512 [ 97.650303][ T8051] EXT4-fs error (device loop2): __ext4_ext_dirty:207: inode #2: comm syz.2.1103: mark_inode_dirty error [ 97.661589][ T8048] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop7 ino=15 [ 97.676998][ T8073] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 97.690421][ T7025] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 97.691330][ T8073] ext4 filesystem being mounted at /249/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 97.726592][ T8082] loop6: detected capacity change from 0 to 512 [ 97.745055][ T3302] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 97.749298][ T8084] loop7: detected capacity change from 0 to 512 [ 97.760674][ T8082] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 97.773512][ T8082] ext4 filesystem being mounted at /64/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 97.775509][ T3306] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 97.804498][ T6852] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 97.843674][ T8084] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 97.862442][ T8084] ext4 filesystem being mounted at /48/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 97.893172][ T8084] FAULT_INJECTION: forcing a failure. [ 97.893172][ T8084] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 97.906327][ T8084] CPU: 1 UID: 0 PID: 8084 Comm: syz.7.1112 Tainted: G W 6.13.0-rc1-syzkaller-00025-gfeffde684ac2 #0 [ 97.918536][ T8084] Tainted: [W]=WARN [ 97.922351][ T8084] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 97.932400][ T8084] Call Trace: [ 97.935705][ T8084] [ 97.938626][ T8084] dump_stack_lvl+0xf2/0x150 [ 97.943220][ T8084] dump_stack+0x15/0x1a [ 97.947482][ T8084] should_fail_ex+0x223/0x230 [ 97.952191][ T8084] should_fail+0xb/0x10 [ 97.956337][ T8084] should_fail_usercopy+0x1a/0x20 [ 97.961427][ T8084] _copy_from_user+0x1e/0xb0 [ 97.966012][ T8084] autofs_dev_ioctl+0xd6/0x660 [ 97.970776][ T8084] ? __pfx_autofs_dev_ioctl+0x10/0x10 [ 97.976183][ T8084] __se_sys_ioctl+0xc9/0x140 [ 97.980768][ T8084] __x64_sys_ioctl+0x43/0x50 [ 97.985416][ T8084] x64_sys_call+0x1690/0x2dc0 [ 97.990082][ T8084] do_syscall_64+0xc9/0x1c0 [ 97.994653][ T8084] ? clear_bhb_loop+0x55/0xb0 [ 97.999352][ T8084] ? clear_bhb_loop+0x55/0xb0 [ 98.004022][ T8084] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 98.009928][ T8084] RIP: 0033:0x7f9611d4ff19 [ 98.014332][ T8084] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 98.033936][ T8084] RSP: 002b:00007f96103c7058 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 98.042367][ T8084] RAX: ffffffffffffffda RBX: 00007f9611f15fa0 RCX: 00007f9611d4ff19 [ 98.050363][ T8084] RDX: 0000000020000200 RSI: 00000000c018937e RDI: 0000000000000007 [ 98.058323][ T8084] RBP: 00007f96103c70a0 R08: 0000000000000000 R09: 0000000000000000 [ 98.066407][ T8084] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 98.074371][ T8084] R13: 0000000000000000 R14: 00007f9611f15fa0 R15: 00007ffc24307fc8 [ 98.082422][ T8084] [ 98.087648][ T8108] syz.2.1118[8108] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 98.087756][ T8108] syz.2.1118[8108] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 98.102630][ T8108] syz.2.1118[8108] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 98.141124][ T7025] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.166081][ T8112] loop6: detected capacity change from 0 to 8192 [ 98.174800][ T8112] vfat: Unknown parameter 'cz5 `FϥJŠL˛` [ 98.174800][ T8112] -PGC?͏-Reׄ$`X' [ 98.243260][ T8121] loop0: detected capacity change from 0 to 512 [ 98.299055][ T8121] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 98.315523][ T8136] syz.7.1120 uses obsolete (PF_INET,SOCK_PACKET) [ 98.317471][ T8121] ext4 filesystem being mounted at /249/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 98.341884][ T8121] EXT4-fs error (device loop0): ext4_xattr_block_get:596: inode #15: comm syz.0.1123: corrupted xattr block 32: e_value out of bounds [ 98.366877][ T8121] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop0 ino=15 [ 98.385293][ T8121] EXT4-fs error (device loop0): ext4_xattr_block_get:596: inode #15: comm syz.0.1123: corrupted xattr block 32: e_value out of bounds [ 98.429713][ T8121] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop0 ino=15 [ 98.439188][ T8121] EXT4-fs error (device loop0): ext4_xattr_block_get:596: inode #15: comm syz.0.1123: corrupted xattr block 32: e_value out of bounds [ 98.469909][ T8121] EXT4-fs error (device loop0): ext4_xattr_block_get:596: inode #15: comm syz.0.1123: corrupted xattr block 32: e_value out of bounds [ 98.484966][ T8121] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop0 ino=15 [ 98.496024][ T8160] __nla_validate_parse: 1 callbacks suppressed [ 98.496038][ T8160] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1130'. [ 98.496164][ T8161] syz.7.1131[8161] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 98.514338][ T8160] netlink: 'syz.3.1130': attribute type 4 has an invalid length. [ 98.533449][ T8160] netlink: 17 bytes leftover after parsing attributes in process `syz.3.1130'. [ 98.560505][ T3297] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.627740][ T8172] loop3: detected capacity change from 0 to 512 [ 98.647039][ T8172] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 98.661414][ T8172] ext4 filesystem being mounted at /258/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 98.673827][ T8172] EXT4-fs error (device loop3): ext4_do_update_inode:5153: inode #2: comm syz.3.1136: corrupted inode contents [ 98.686328][ T8172] EXT4-fs error (device loop3): ext4_dirty_inode:6041: inode #2: comm syz.3.1136: mark_inode_dirty error [ 98.698277][ T8172] EXT4-fs error (device loop3): ext4_do_update_inode:5153: inode #2: comm syz.3.1136: corrupted inode contents [ 98.710305][ T8172] EXT4-fs error (device loop3): __ext4_ext_dirty:207: inode #2: comm syz.3.1136: mark_inode_dirty error [ 98.730346][ T3306] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.885213][ T8193] loop3: detected capacity change from 0 to 512 [ 98.910261][ T8193] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 98.928635][ T8193] ext4 filesystem being mounted at /263/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 98.942361][ T8193] EXT4-fs error (device loop3): ext4_xattr_block_get:596: inode #15: comm syz.3.1144: corrupted xattr block 32: e_value out of bounds [ 98.957414][ T8193] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=15 [ 98.966956][ T8193] EXT4-fs error (device loop3): ext4_xattr_block_get:596: inode #15: comm syz.3.1144: corrupted xattr block 32: e_value out of bounds [ 98.967502][ T8201] FAULT_INJECTION: forcing a failure. [ 98.967502][ T8201] name failslab, interval 1, probability 0, space 0, times 0 [ 98.993529][ T8201] CPU: 1 UID: 0 PID: 8201 Comm: syz.7.1147 Tainted: G W 6.13.0-rc1-syzkaller-00025-gfeffde684ac2 #0 [ 98.995314][ T8193] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=15 [ 99.005681][ T8201] Tainted: [W]=WARN [ 99.005689][ T8201] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 99.005701][ T8201] Call Trace: [ 99.005708][ T8201] [ 99.034767][ T8201] dump_stack_lvl+0xf2/0x150 [ 99.039420][ T8201] dump_stack+0x15/0x1a [ 99.043618][ T8201] should_fail_ex+0x223/0x230 [ 99.048299][ T8201] should_failslab+0x8f/0xb0 [ 99.052977][ T8201] __kmalloc_node_track_caller_noprof+0xa8/0x410 [ 99.059456][ T8201] ? p9_client_create+0x1a7/0xaf0 [ 99.064523][ T8201] kstrdup+0x38/0x80 [ 99.068418][ T8201] p9_client_create+0x1a7/0xaf0 [ 99.073329][ T8201] ? should_failslab+0x8f/0xb0 [ 99.078094][ T8201] v9fs_session_init+0xf9/0xda0 [ 99.082979][ T8201] ? should_fail_ex+0xd7/0x230 [ 99.087764][ T8201] ? v9fs_mount+0x53/0x570 [ 99.092224][ T8201] ? should_failslab+0x8f/0xb0 [ 99.096990][ T8201] ? __kmalloc_cache_noprof+0x186/0x320 [ 99.102595][ T8201] v9fs_mount+0x69/0x570 [ 99.106882][ T8201] ? __pfx_v9fs_mount+0x10/0x10 [ 99.111734][ T8201] legacy_get_tree+0x77/0xd0 [ 99.116329][ T8201] vfs_get_tree+0x56/0x1e0 [ 99.120745][ T8201] do_new_mount+0x227/0x690 [ 99.125325][ T8201] path_mount+0x49b/0xb30 [ 99.129653][ T8201] __se_sys_mount+0x27c/0x2d0 [ 99.134332][ T8201] __x64_sys_mount+0x67/0x80 [ 99.138965][ T8201] x64_sys_call+0x2c84/0x2dc0 [ 99.143636][ T8201] do_syscall_64+0xc9/0x1c0 [ 99.148176][ T8201] ? clear_bhb_loop+0x55/0xb0 [ 99.152846][ T8201] ? clear_bhb_loop+0x55/0xb0 [ 99.157547][ T8201] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 99.163503][ T8201] RIP: 0033:0x7f9611d4ff19 [ 99.167910][ T8201] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 99.187516][ T8201] RSP: 002b:00007f96103c7058 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 99.195985][ T8201] RAX: ffffffffffffffda RBX: 00007f9611f15fa0 RCX: 00007f9611d4ff19 [ 99.203946][ T8201] RDX: 0000000020000180 RSI: 0000000020000000 RDI: 0000000000000000 [ 99.211908][ T8201] RBP: 00007f96103c70a0 R08: 0000000020000280 R09: 0000000000000000 [ 99.219913][ T8201] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 99.227917][ T8201] R13: 0000000000000000 R14: 00007f9611f15fa0 R15: 00007ffc24307fc8 [ 99.235915][ T8201] [ 99.246973][ T8193] EXT4-fs error (device loop3): ext4_xattr_block_get:596: inode #15: comm syz.3.1144: corrupted xattr block 32: e_value out of bounds [ 99.276462][ T8193] EXT4-fs error (device loop3): ext4_xattr_block_get:596: inode #15: comm syz.3.1144: corrupted xattr block 32: e_value out of bounds [ 99.298640][ T8193] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=15 [ 99.333598][ T8217] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1150'. [ 99.353101][ T3306] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.418044][ T8231] loop6: detected capacity change from 0 to 128 [ 99.435128][ T8231] vfat: Unknown parameter '' [ 99.477703][ T8236] loop3: detected capacity change from 0 to 128 [ 99.489420][ T8236] FAT-fs (loop3): error, clusters badly computed (0 != 1) [ 99.496684][ T8236] FAT-fs (loop3): Filesystem has been set read-only [ 99.505751][ T8236] FAT-fs (loop3): error, clusters badly computed (1 != 2) [ 99.514833][ T8236] FAT-fs (loop3): error, clusters badly computed (2 != 3) [ 99.522773][ T8236] FAT-fs (loop3): error, clusters badly computed (3 != 4) [ 99.542564][ T8236] FAT-fs (loop3): error, clusters badly computed (4 != 5) [ 99.559882][ T8241] loop6: detected capacity change from 0 to 1024 [ 99.574408][ T8236] FAT-fs (loop3): error, clusters badly computed (5 != 6) [ 99.584771][ T8241] EXT4-fs (loop6): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 99.592114][ T8236] FAT-fs (loop3): error, clusters badly computed (6 != 7) [ 99.603839][ T8236] FAT-fs (loop3): error, clusters badly computed (7 != 8) [ 99.611454][ T8236] FAT-fs (loop3): error, clusters badly computed (8 != 9) [ 99.629940][ T8236] FAT-fs (loop3): error, clusters badly computed (9 != 10) [ 99.637767][ T8236] FAT-fs (loop3): error, clusters badly computed (10 != 11) [ 99.645286][ T8236] FAT-fs (loop3): error, clusters badly computed (11 != 12) [ 99.653274][ T8236] FAT-fs (loop3): error, clusters badly computed (12 != 13) [ 99.661379][ T8241] EXT4-fs error (device loop6): ext4_expand_extra_isize_ea:2793: inode #15: comm syz.6.1158: corrupted in-inode xattr: bad magic number in in-inode xattr [ 99.661374][ T8236] FAT-fs (loop3): error, clusters badly computed (13 != 14) [ 99.684288][ T8236] FAT-fs (loop3): error, clusters badly computed (14 != 15) [ 99.697794][ T8258] netlink: 256 bytes leftover after parsing attributes in process `syz.0.1162'. [ 99.700964][ T8236] FAT-fs (loop3): error, clusters badly computed (15 != 16) [ 99.715704][ T8236] FAT-fs (loop3): error, clusters badly computed (16 != 17) [ 99.716859][ T8241] EXT4-fs warning (device loop6): ext4_expand_extra_isize_ea:2863: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 99.723013][ T8236] FAT-fs (loop3): error, clusters badly computed (17 != 18) [ 99.752760][ T8258] binfmt_misc: register: failed to install interpreter file ./file0 [ 99.754361][ T8236] FAT-fs (loop3): error, clusters badly computed (18 != 19) [ 99.789207][ T8236] FAT-fs (loop3): error, clusters badly computed (19 != 20) [ 99.798028][ T8236] FAT-fs (loop3): error, clusters badly computed (20 != 21) [ 99.806720][ T8236] FAT-fs (loop3): error, clusters badly computed (21 != 22) [ 99.814530][ T8236] FAT-fs (loop3): error, clusters badly computed (22 != 23) [ 99.823665][ T8236] FAT-fs (loop3): error, clusters badly computed (23 != 24) [ 99.831854][ T8236] FAT-fs (loop3): error, clusters badly computed (24 != 25) [ 99.839934][ T8236] FAT-fs (loop3): error, clusters badly computed (25 != 26) [ 99.847710][ T8236] FAT-fs (loop3): error, clusters badly computed (26 != 27) [ 99.855173][ T8236] FAT-fs (loop3): error, clusters badly computed (27 != 28) [ 99.862881][ T8236] FAT-fs (loop3): error, clusters badly computed (28 != 29) [ 99.870688][ T8236] FAT-fs (loop3): error, clusters badly computed (29 != 30) [ 99.878048][ T8236] FAT-fs (loop3): error, clusters badly computed (30 != 31) [ 99.885549][ T8236] FAT-fs (loop3): error, clusters badly computed (31 != 32) [ 99.892934][ T8236] FAT-fs (loop3): error, clusters badly computed (32 != 33) [ 99.900396][ T8236] FAT-fs (loop3): error, clusters badly computed (33 != 34) [ 99.907904][ T8236] FAT-fs (loop3): error, clusters badly computed (34 != 35) [ 99.907951][ T8236] FAT-fs (loop3): error, clusters badly computed (35 != 36) [ 99.908051][ T8236] FAT-fs (loop3): error, clusters badly computed (36 != 37) [ 99.908380][ T8236] FAT-fs (loop3): error, clusters badly computed (37 != 38) [ 99.908559][ T8236] FAT-fs (loop3): error, clusters badly computed (38 != 39) [ 99.908684][ T8236] FAT-fs (loop3): error, clusters badly computed (39 != 40) [ 99.908804][ T8236] FAT-fs (loop3): error, clusters badly computed (40 != 41) [ 99.908889][ T8236] FAT-fs (loop3): error, clusters badly computed (41 != 42) [ 99.908933][ T8236] FAT-fs (loop3): error, clusters badly computed (42 != 43) [ 99.909062][ T8236] FAT-fs (loop3): error, clusters badly computed (43 != 44) [ 99.909132][ T8236] FAT-fs (loop3): error, clusters badly computed (44 != 45) [ 99.909197][ T8236] FAT-fs (loop3): error, clusters badly computed (45 != 46) [ 99.909293][ T8236] FAT-fs (loop3): error, clusters badly computed (46 != 47) [ 99.909416][ T8236] FAT-fs (loop3): error, clusters badly computed (47 != 48) [ 99.909490][ T8236] FAT-fs (loop3): error, clusters badly computed (48 != 49) [ 99.909592][ T8236] FAT-fs (loop3): error, clusters badly computed (49 != 50) [ 99.909687][ T8236] FAT-fs (loop3): error, clusters badly computed (50 != 51) [ 99.909745][ T8236] FAT-fs (loop3): error, clusters badly computed (51 != 52) [ 99.909803][ T8236] FAT-fs (loop3): error, clusters badly computed (52 != 53) [ 99.909964][ T8236] FAT-fs (loop3): error, clusters badly computed (53 != 54) [ 99.910136][ T8236] FAT-fs (loop3): error, clusters badly computed (54 != 55) [ 99.910213][ T8236] FAT-fs (loop3): error, clusters badly computed (55 != 56) [ 99.910271][ T8236] FAT-fs (loop3): error, clusters badly computed (56 != 57) [ 99.910361][ T8236] FAT-fs (loop3): error, clusters badly computed (57 != 58) [ 99.910508][ T8236] FAT-fs (loop3): error, clusters badly computed (58 != 59) [ 99.910754][ T8236] FAT-fs (loop3): error, clusters badly computed (59 != 60) [ 99.910939][ T8236] FAT-fs (loop3): error, clusters badly computed (60 != 61) [ 99.910993][ T8236] FAT-fs (loop3): error, clusters badly computed (61 != 62) [ 99.911109][ T8236] FAT-fs (loop3): error, clusters badly computed (62 != 63) [ 99.911183][ T8236] FAT-fs (loop3): error, clusters badly computed (63 != 64) [ 99.911306][ T8236] FAT-fs (loop3): error, clusters badly computed (64 != 65) [ 99.911441][ T8236] FAT-fs (loop3): error, clusters badly computed (65 != 66) [ 99.911507][ T8236] FAT-fs (loop3): error, clusters badly computed (66 != 67) [ 99.911700][ T8236] FAT-fs (loop3): error, clusters badly computed (67 != 68) [ 99.911780][ T8236] FAT-fs (loop3): error, clusters badly computed (68 != 69) [ 99.911943][ T8236] FAT-fs (loop3): error, clusters badly computed (69 != 70) [ 99.912154][ T8236] FAT-fs (loop3): error, clusters badly computed (70 != 71) [ 99.912267][ T8236] FAT-fs (loop3): error, clusters badly computed (71 != 72) [ 99.912527][ T8236] FAT-fs (loop3): error, clusters badly computed (72 != 73) [ 99.912648][ T8236] FAT-fs (loop3): error, clusters badly computed (73 != 74) [ 99.912882][ T8236] FAT-fs (loop3): error, clusters badly computed (74 != 75) [ 99.912957][ T8236] FAT-fs (loop3): error, clusters badly computed (75 != 76) [ 99.913031][ T8236] FAT-fs (loop3): error, clusters badly computed (76 != 77) [ 99.913100][ T8236] FAT-fs (loop3): error, clusters badly computed (77 != 78) [ 99.913295][ T8236] FAT-fs (loop3): error, clusters badly computed (78 != 79) [ 99.913439][ T8236] FAT-fs (loop3): error, clusters badly computed (79 != 80) [ 99.913558][ T8236] FAT-fs (loop3): error, clusters badly computed (80 != 81) [ 99.913718][ T8236] FAT-fs (loop3): error, clusters badly computed (81 != 82) [ 99.913870][ T8236] FAT-fs (loop3): error, clusters badly computed (82 != 83) [ 99.914004][ T8236] FAT-fs (loop3): error, clusters badly computed (83 != 84) [ 99.914134][ T8236] FAT-fs (loop3): error, clusters badly computed (84 != 85) [ 99.914250][ T8236] FAT-fs (loop3): error, clusters badly computed (85 != 86) [ 99.914386][ T8236] FAT-fs (loop3): error, clusters badly computed (86 != 87) [ 99.914587][ T8236] FAT-fs (loop3): error, clusters badly computed (87 != 88) [ 99.914824][ T8236] FAT-fs (loop3): error, clusters badly computed (88 != 89) [ 99.914970][ T8236] FAT-fs (loop3): error, clusters badly computed (89 != 90) [ 99.915049][ T8236] FAT-fs (loop3): error, clusters badly computed (90 != 91) [ 99.915402][ T8236] FAT-fs (loop3): error, clusters badly computed (91 != 92) [ 99.915536][ T8236] FAT-fs (loop3): error, clusters badly computed (92 != 93) [ 99.915687][ T8236] FAT-fs (loop3): error, clusters badly computed (93 != 94) [ 99.915858][ T8236] FAT-fs (loop3): error, clusters badly computed (94 != 95) [ 99.916021][ T8236] FAT-fs (loop3): error, clusters badly computed (95 != 96) [ 99.916282][ T8236] FAT-fs (loop3): error, clusters badly computed (96 != 97) [ 99.916420][ T8236] FAT-fs (loop3): error, clusters badly computed (97 != 98) [ 99.916565][ T8236] FAT-fs (loop3): error, clusters badly computed (98 != 99) [ 99.916789][ T8236] FAT-fs (loop3): error, clusters badly computed (99 != 100) [ 99.916962][ T8236] FAT-fs (loop3): error, clusters badly computed (100 != 101) [ 99.917164][ T8236] FAT-fs (loop3): error, clusters badly computed (101 != 102) [ 99.917268][ T8236] FAT-fs (loop3): error, clusters badly computed (102 != 103) [ 99.917377][ T8236] FAT-fs (loop3): error, clusters badly computed (103 != 104) [ 99.917567][ T8236] FAT-fs (loop3): error, clusters badly computed (104 != 105) [ 99.917730][ T8236] FAT-fs (loop3): error, clusters badly computed (105 != 106) [ 99.917945][ T8236] FAT-fs (loop3): error, clusters badly computed (106 != 107) [ 99.918056][ T8236] FAT-fs (loop3): error, clusters badly computed (107 != 108) [ 99.918191][ T8236] FAT-fs (loop3): error, clusters badly computed (108 != 109) [ 99.918427][ T8236] FAT-fs (loop3): error, clusters badly computed (109 != 110) [ 99.918572][ T8236] FAT-fs (loop3): error, clusters badly computed (110 != 111) [ 99.918700][ T8236] FAT-fs (loop3): error, clusters badly computed (111 != 112) [ 99.918856][ T8236] FAT-fs (loop3): error, clusters badly computed (112 != 113) [ 99.918989][ T8236] FAT-fs (loop3): error, clusters badly computed (113 != 114) [ 99.919135][ T8236] FAT-fs (loop3): error, clusters badly computed (114 != 115) [ 99.919284][ T8236] FAT-fs (loop3): error, clusters badly computed (115 != 116) [ 99.919414][ T8236] FAT-fs (loop3): error, clusters badly computed (116 != 117) [ 99.919657][ T8236] FAT-fs (loop3): error, clusters badly computed (117 != 118) [ 99.919849][ T8236] FAT-fs (loop3): error, clusters badly computed (118 != 119) [ 100.764443][ T8341] loop6: detected capacity change from 0 to 128 [ 100.775158][ T8334] netlink: 256 bytes leftover after parsing attributes in process `syz.7.1173'. [ 100.789635][ T8341] EXT4-fs: Ignoring removed nobh option [ 100.798705][ T8341] ext4 filesystem being mounted at /73/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 100.828141][ T8334] binfmt_misc: register: failed to install interpreter file ./file0 [ 100.883780][ T8361] loop0: detected capacity change from 0 to 1024 [ 100.894029][ T8357] FAULT_INJECTION: forcing a failure. [ 100.894029][ T8357] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 100.907137][ T8357] CPU: 0 UID: 0 PID: 8357 Comm: syz.3.1175 Tainted: G W 6.13.0-rc1-syzkaller-00025-gfeffde684ac2 #0 [ 100.919305][ T8357] Tainted: [W]=WARN [ 100.923123][ T8357] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 100.933229][ T8357] Call Trace: [ 100.936496][ T8357] [ 100.939480][ T8357] dump_stack_lvl+0xf2/0x150 [ 100.944081][ T8357] dump_stack+0x15/0x1a [ 100.948234][ T8357] should_fail_ex+0x223/0x230 [ 100.952923][ T8357] should_fail+0xb/0x10 [ 100.957079][ T8357] should_fail_usercopy+0x1a/0x20 [ 100.962097][ T8357] _copy_to_user+0x20/0xa0 [ 100.966546][ T8357] simple_read_from_buffer+0xa0/0x110 [ 100.971964][ T8357] proc_fail_nth_read+0xf9/0x140 [ 100.976928][ T8357] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 100.982473][ T8357] vfs_read+0x1a2/0x700 [ 100.986627][ T8357] ? __rcu_read_unlock+0x4e/0x70 [ 100.991561][ T8357] ? __fget_files+0x17c/0x1c0 [ 100.996244][ T8357] ksys_read+0xe8/0x1b0 [ 101.000397][ T8357] __x64_sys_read+0x42/0x50 [ 101.005000][ T8357] x64_sys_call+0x2874/0x2dc0 [ 101.009733][ T8357] do_syscall_64+0xc9/0x1c0 [ 101.014229][ T8357] ? clear_bhb_loop+0x55/0xb0 [ 101.018925][ T8357] ? clear_bhb_loop+0x55/0xb0 [ 101.023598][ T8357] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 101.029570][ T8357] RIP: 0033:0x7feb2924e92c [ 101.033977][ T8357] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 101.053611][ T8357] RSP: 002b:00007feb278c7050 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 101.062048][ T8357] RAX: ffffffffffffffda RBX: 00007feb29415fa0 RCX: 00007feb2924e92c [ 101.070079][ T8357] RDX: 000000000000000f RSI: 00007feb278c70b0 RDI: 0000000000000005 [ 101.078188][ T8357] RBP: 00007feb278c70a0 R08: 0000000000000000 R09: 0000000000000000 [ 101.086201][ T8357] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 101.094163][ T8357] R13: 0000000000000000 R14: 00007feb29415fa0 R15: 00007fff68beed88 [ 101.102155][ T8357] [ 101.177585][ T8370] loop3: detected capacity change from 0 to 8192 [ 101.283726][ T8380] loop6: detected capacity change from 0 to 512 [ 101.376200][ T8380] ext4 filesystem being mounted at /74/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 101.396817][ T8380] EXT4-fs error (device loop6): ext4_xattr_block_get:596: inode #15: comm syz.6.1179: corrupted xattr block 32: e_value out of bounds [ 101.423359][ T8380] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop6 ino=15 [ 101.432413][ T8380] EXT4-fs error (device loop6): ext4_xattr_block_get:596: inode #15: comm syz.6.1179: corrupted xattr block 32: e_value out of bounds [ 101.449267][ T8380] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop6 ino=15 [ 101.462542][ T8380] EXT4-fs error (device loop6): ext4_xattr_block_get:596: inode #15: comm syz.6.1179: corrupted xattr block 32: e_value out of bounds [ 101.485119][ T8380] EXT4-fs error (device loop6): ext4_xattr_block_get:596: inode #15: comm syz.6.1179: corrupted xattr block 32: e_value out of bounds [ 101.485987][ T8380] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop6 ino=15 [ 101.795337][ T8438] loop3: detected capacity change from 0 to 512 [ 101.804945][ T8438] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 101.818244][ T8438] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 101.837383][ T8438] EXT4-fs (loop3): 1 truncate cleaned up [ 101.858853][ T8438] EXT4-fs error (device loop3): ext4_xattr_inode_iget:440: comm syz.3.1192: inode #1073372648: comm syz.3.1192: iget: illegal inode # [ 101.874573][ T8438] EXT4-fs error (device loop3): ext4_xattr_inode_iget:445: comm syz.3.1192: error while reading EA inode 1073372648 err=-117 [ 101.925110][ T8438] EXT4-fs error (device loop3): ext4_xattr_delete_inode:2977: inode #15: comm syz.3.1192: corrupted xattr block 33: invalid header [ 101.941605][ T8451] bpf_get_probe_write_proto: 5 callbacks suppressed [ 101.941619][ T8451] syz.6.1196[8451] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 101.948443][ T8451] syz.6.1196[8451] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 101.959918][ T8451] syz.6.1196[8451] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 101.962006][ T8438] EXT4-fs warning (device loop3): ext4_evict_inode:276: xattr delete (err -117) [ 102.213482][ T8485] loop3: detected capacity change from 0 to 512 [ 102.222854][ T29] kauditd_printk_skb: 450 callbacks suppressed [ 102.222868][ T29] audit: type=1400 audit(1733328983.008:16868): avc: denied { name_connect } for pid=8489 comm="syz.2.1201" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 102.257882][ T29] audit: type=1400 audit(1733328983.008:16869): avc: denied { shutdown } for pid=8489 comm="syz.2.1201" lport=50733 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 102.278836][ T29] audit: type=1400 audit(1733328983.008:16870): avc: denied { getopt } for pid=8489 comm="syz.2.1201" lport=50733 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 102.313927][ T8496] loop2: detected capacity change from 0 to 512 [ 102.329682][ T8496] journal_path: Lookup failure for './file1' [ 102.335765][ T8496] EXT4-fs: error: could not find journal device path [ 102.369578][ T8501] loop6: detected capacity change from 0 to 512 [ 102.370245][ T29] audit: type=1400 audit(1733328983.148:16871): avc: denied { create } for pid=8492 comm="syz.2.1203" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 102.396800][ T8485] ext4 filesystem being mounted at /272/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 102.397805][ T29] audit: type=1400 audit(1733328983.178:16872): avc: denied { bind } for pid=8492 comm="syz.2.1203" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 102.422443][ T8501] EXT4-fs: Ignoring removed orlov option [ 102.462707][ T8485] EXT4-fs error (device loop3): ext4_do_update_inode:5153: inode #2: comm syz.3.1200: corrupted inode contents [ 102.477119][ T29] audit: type=1400 audit(1733328983.258:16873): avc: denied { write } for pid=8492 comm="syz.2.1203" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 102.516016][ T8501] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 102.529699][ T8501] EXT4-fs (loop6): orphan cleanup on readonly fs [ 102.536647][ T8485] EXT4-fs error (device loop3): ext4_dirty_inode:6041: inode #2: comm syz.3.1200: mark_inode_dirty error [ 102.567304][ T8501] Quota error (device loop6): do_check_range: Getting dqdh_prev_free 917504 out of range 0-5 [ 102.577653][ T8501] Quota error (device loop6): qtree_write_dquot: Error -117 occurred while creating quota [ 102.587645][ T8501] EXT4-fs error (device loop6): ext4_acquire_dquot:6938: comm syz.6.1204: Failed to acquire dquot type 1 [ 102.662360][ T8501] EXT4-fs (loop6): 1 truncate cleaned up [ 102.727557][ T29] audit: type=1326 audit(1733328983.508:16874): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8500 comm="syz.6.1204" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b32f4ff19 code=0x7ffc0000 [ 102.751764][ T8485] EXT4-fs error (device loop3): ext4_do_update_inode:5153: inode #2: comm syz.3.1200: corrupted inode contents [ 102.787996][ T8485] EXT4-fs error (device loop3): __ext4_ext_dirty:207: inode #2: comm syz.3.1200: mark_inode_dirty error [ 102.810349][ T8526] syz.7.1207[8526] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 102.810427][ T8526] syz.7.1207[8526] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 102.831266][ T8517] loop2: detected capacity change from 0 to 8192 [ 102.850586][ T29] audit: type=1326 audit(1733328983.538:16875): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8500 comm="syz.6.1204" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b32f4ff19 code=0x7ffc0000 [ 102.878277][ T8526] syz.7.1207[8526] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 102.929661][ T8538] FAULT_INJECTION: forcing a failure. [ 102.929661][ T8538] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 102.954186][ T8538] CPU: 1 UID: 0 PID: 8538 Comm: syz.3.1209 Tainted: G W 6.13.0-rc1-syzkaller-00025-gfeffde684ac2 #0 [ 102.966452][ T8538] Tainted: [W]=WARN [ 102.970297][ T8538] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 102.980358][ T8538] Call Trace: [ 102.983655][ T8538] [ 102.986601][ T8538] dump_stack_lvl+0xf2/0x150 [ 102.991216][ T8538] dump_stack+0x15/0x1a [ 102.995399][ T8538] should_fail_ex+0x223/0x230 [ 103.000101][ T8538] should_fail+0xb/0x10 [ 103.004342][ T8538] should_fail_usercopy+0x1a/0x20 [ 103.009383][ T8538] _copy_to_user+0x20/0xa0 [ 103.013873][ T8538] simple_read_from_buffer+0xa0/0x110 [ 103.019319][ T8538] proc_fail_nth_read+0xf9/0x140 [ 103.024322][ T8538] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 103.029974][ T8538] vfs_read+0x1a2/0x700 [ 103.034147][ T8538] ? __rcu_read_unlock+0x4e/0x70 [ 103.039136][ T8538] ? __fget_files+0x17c/0x1c0 [ 103.043833][ T8538] ksys_read+0xe8/0x1b0 [ 103.047997][ T8538] __x64_sys_read+0x42/0x50 [ 103.052512][ T8538] x64_sys_call+0x2874/0x2dc0 [ 103.057200][ T8538] do_syscall_64+0xc9/0x1c0 [ 103.061712][ T8538] ? clear_bhb_loop+0x55/0xb0 [ 103.066401][ T8538] ? clear_bhb_loop+0x55/0xb0 [ 103.071149][ T8538] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 103.077098][ T8538] RIP: 0033:0x7feb2924e92c [ 103.081515][ T8538] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 103.101208][ T8538] RSP: 002b:00007feb278c7050 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 103.109653][ T8538] RAX: ffffffffffffffda RBX: 00007feb29415fa0 RCX: 00007feb2924e92c [ 103.117640][ T8538] RDX: 000000000000000f RSI: 00007feb278c70b0 RDI: 0000000000000006 [ 103.125620][ T8538] RBP: 00007feb278c70a0 R08: 0000000000000000 R09: 0000000000000000 [ 103.133604][ T8538] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 103.141572][ T8538] R13: 0000000000000000 R14: 00007feb29415fa0 R15: 00007fff68beed88 [ 103.149605][ T8538] [ 103.311609][ T8566] loop3: detected capacity change from 0 to 512 [ 103.388681][ T8566] EXT4-fs mount: 14 callbacks suppressed [ 103.388745][ T8566] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 103.408450][ T8566] ext4 filesystem being mounted at /276/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 103.429394][ T8566] EXT4-fs error (device loop3): ext4_xattr_block_get:596: inode #15: comm syz.3.1215: corrupted xattr block 32: e_value out of bounds [ 103.451325][ T8566] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=15 [ 103.460577][ T8566] EXT4-fs error (device loop3): ext4_xattr_block_get:596: inode #15: comm syz.3.1215: corrupted xattr block 32: e_value out of bounds [ 103.476007][ T8566] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=15 [ 103.486659][ T8566] EXT4-fs error (device loop3): ext4_xattr_block_get:596: inode #15: comm syz.3.1215: corrupted xattr block 32: e_value out of bounds [ 103.501158][ T8566] EXT4-fs error (device loop3): ext4_xattr_block_get:596: inode #15: comm syz.3.1215: corrupted xattr block 32: e_value out of bounds [ 103.515422][ T8566] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=15 [ 103.524037][ T8458] syz.0.1195 (8458) used greatest stack depth: 7352 bytes left [ 103.541544][ T3306] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.562273][ T8588] syz.3.1220: attempt to access beyond end of device [ 103.562273][ T8588] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 103.642178][ T8597] loop3: detected capacity change from 0 to 512 [ 103.682904][ T8597] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 103.690900][ T8597] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 103.701036][ T8597] System zones: 0-1, 15-15, 18-18, 34-34 [ 103.707883][ T8597] EXT4-fs (loop3): orphan cleanup on readonly fs [ 103.722030][ T8597] EXT4-fs warning (device loop3): ext4_enable_quotas:7156: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 103.736092][ T8608] loop0: detected capacity change from 0 to 8192 [ 103.736698][ T8597] EXT4-fs (loop3): Cannot turn on quotas: error -22 [ 103.750480][ T8597] EXT4-fs error (device loop3): ext4_orphan_get:1415: comm syz.3.1224: bad orphan inode 16 [ 103.760873][ T8597] ext4_test_bit(bit=15, block=18) = 1 [ 103.766296][ T8597] is_bad_inode(inode)=0 [ 103.770449][ T8597] NEXT_ORPHAN(inode)=0 [ 103.774525][ T8597] max_ino=32 [ 103.777730][ T8597] i_nlink=2 [ 103.781273][ T8597] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 103.795018][ T8597] FAULT_INJECTION: forcing a failure. [ 103.795018][ T8597] name failslab, interval 1, probability 0, space 0, times 0 [ 103.807806][ T8597] CPU: 1 UID: 0 PID: 8597 Comm: syz.3.1224 Tainted: G W 6.13.0-rc1-syzkaller-00025-gfeffde684ac2 #0 [ 103.820065][ T8597] Tainted: [W]=WARN [ 103.823933][ T8597] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 103.833987][ T8597] Call Trace: [ 103.837263][ T8597] [ 103.840266][ T8597] dump_stack_lvl+0xf2/0x150 [ 103.844904][ T8597] dump_stack+0x15/0x1a [ 103.849063][ T8597] should_fail_ex+0x223/0x230 [ 103.853835][ T8597] should_failslab+0x8f/0xb0 [ 103.858451][ T8597] kmem_cache_alloc_noprof+0x52/0x320 [ 103.863882][ T8597] ? alloc_vfsmnt+0x2b/0x300 [ 103.868506][ T8597] alloc_vfsmnt+0x2b/0x300 [ 103.872953][ T8597] clone_mnt+0x45/0x7a0 [ 103.877178][ T8597] copy_tree+0x2df/0x7f0 [ 103.881423][ T8597] copy_mnt_ns+0x11e/0x5f0 [ 103.885842][ T8597] ? kmem_cache_alloc_noprof+0x22c/0x320 [ 103.891468][ T8597] ? create_new_namespaces+0x3c/0x430 [ 103.896912][ T8597] create_new_namespaces+0x89/0x430 [ 103.902128][ T8597] ? security_capable+0x81/0x90 [ 103.906994][ T8597] unshare_nsproxy_namespaces+0xe6/0x120 [ 103.912696][ T8597] ksys_unshare+0x3c9/0x6e0 [ 103.917268][ T8597] __x64_sys_unshare+0x1f/0x30 [ 103.922060][ T8597] x64_sys_call+0x1a3e/0x2dc0 [ 103.926760][ T8597] do_syscall_64+0xc9/0x1c0 [ 103.931256][ T8597] ? clear_bhb_loop+0x55/0xb0 [ 103.935932][ T8597] ? clear_bhb_loop+0x55/0xb0 [ 103.940616][ T8597] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 103.946516][ T8597] RIP: 0033:0x7feb2924ff19 [ 103.950921][ T8597] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 103.970667][ T8597] RSP: 002b:00007feb278c7058 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 103.979074][ T8597] RAX: ffffffffffffffda RBX: 00007feb29415fa0 RCX: 00007feb2924ff19 [ 103.987038][ T8597] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000002a020400 [ 103.995000][ T8597] RBP: 00007feb278c70a0 R08: 0000000000000000 R09: 0000000000000000 [ 104.002965][ T8597] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 104.010958][ T8597] R13: 0000000000000000 R14: 00007feb29415fa0 R15: 00007fff68beed88 [ 104.018986][ T8597] [ 104.108067][ T3306] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.111615][ T8619] loop2: detected capacity change from 0 to 512 [ 104.131937][ T8623] netlink: 3 bytes leftover after parsing attributes in process `syz.6.1232'. [ 104.148401][ T8623] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 104.159866][ T8623] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 104.176307][ T8623] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 104.187115][ T8623] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 104.198110][ T8623] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 104.209951][ T8623] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 104.251732][ T8619] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 104.268377][ T8619] ext4 filesystem being mounted at /240/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 104.292385][ T8619] EXT4-fs error (device loop2): ext4_xattr_block_get:596: inode #15: comm syz.2.1231: corrupted xattr block 32: e_value out of bounds [ 104.326297][ T8619] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=15 [ 104.335420][ T8619] EXT4-fs error (device loop2): ext4_xattr_block_get:596: inode #15: comm syz.2.1231: corrupted xattr block 32: e_value out of bounds [ 104.358543][ T8644] loop7: detected capacity change from 0 to 512 [ 104.368111][ T8619] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=15 [ 104.392548][ T8619] EXT4-fs error (device loop2): ext4_xattr_block_get:596: inode #15: comm syz.2.1231: corrupted xattr block 32: e_value out of bounds [ 104.399415][ T8639] devtmpfs: Unknown parameter '' [ 104.412051][ T8619] EXT4-fs error (device loop2): ext4_xattr_block_get:596: inode #15: comm syz.2.1231: corrupted xattr block 32: e_value out of bounds [ 104.427275][ T8644] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 104.440521][ T8619] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=15 [ 104.449836][ T8644] ext4 filesystem being mounted at /77/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 104.469533][ T8651] syzkaller0: entered allmulticast mode [ 104.494458][ T8644] EXT4-fs error (device loop7): ext4_do_update_inode:5153: inode #2: comm syz.7.1239: corrupted inode contents [ 104.506712][ T3302] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.521669][ T8651] syzkaller0 (unregistering): left allmulticast mode [ 104.524576][ T8644] EXT4-fs error (device loop7): ext4_dirty_inode:6041: inode #2: comm syz.7.1239: mark_inode_dirty error [ 104.546868][ T8644] EXT4-fs error (device loop7): ext4_do_update_inode:5153: inode #2: comm syz.7.1239: corrupted inode contents [ 104.570836][ T8644] EXT4-fs error (device loop7): __ext4_ext_dirty:207: inode #2: comm syz.7.1239: mark_inode_dirty error [ 104.582185][ T8661] netlink: 'syz.0.1240': attribute type 3 has an invalid length. [ 104.602319][ T7025] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.681718][ T8673] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 104.692351][ T8677] loop0: detected capacity change from 0 to 128 [ 104.718598][ T8677] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 104.736676][ T8677] ext4 filesystem being mounted at /270/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 104.817163][ T3297] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 104.840187][ T8691] loop3: detected capacity change from 0 to 512 [ 104.881676][ T8691] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 104.932456][ T8691] ext4 filesystem being mounted at /287/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 104.944312][ T8691] EXT4-fs error (device loop3): ext4_xattr_block_get:596: inode #15: comm syz.3.1254: corrupted xattr block 32: e_value out of bounds [ 104.944457][ T8711] loop0: detected capacity change from 0 to 512 [ 104.971331][ T8691] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=15 [ 104.990892][ T8691] EXT4-fs error (device loop3): ext4_xattr_block_get:596: inode #15: comm syz.3.1254: corrupted xattr block 32: e_value out of bounds [ 104.998492][ T8711] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 105.024367][ T8723] debugfs: Directory 'ttyS3' with parent 'caif_serial' already present! [ 105.032863][ T8691] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=15 [ 105.042438][ T8691] EXT4-fs error (device loop3): ext4_xattr_block_get:596: inode #15: comm syz.3.1254: corrupted xattr block 32: e_value out of bounds [ 105.056830][ T8711] ext4 filesystem being mounted at /272/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 105.075377][ T8691] EXT4-fs error (device loop3): ext4_xattr_block_get:596: inode #15: comm syz.3.1254: corrupted xattr block 32: e_value out of bounds [ 105.095964][ T8711] EXT4-fs error (device loop0): ext4_do_update_inode:5153: inode #2: comm syz.0.1260: corrupted inode contents [ 105.108611][ T8711] EXT4-fs error (device loop0): ext4_dirty_inode:6041: inode #2: comm syz.0.1260: mark_inode_dirty error [ 105.120416][ T8711] EXT4-fs error (device loop0): ext4_do_update_inode:5153: inode #2: comm syz.0.1260: corrupted inode contents [ 105.133238][ T8711] EXT4-fs error (device loop0): __ext4_ext_dirty:207: inode #2: comm syz.0.1260: mark_inode_dirty error [ 105.158411][ T3297] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.169193][ T8691] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=15 [ 105.196672][ T8735] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8735 comm=syz.6.1263 [ 105.232242][ T3306] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.427796][ T8760] netlink: 256 bytes leftover after parsing attributes in process `syz.3.1269'. [ 105.437358][ T8774] loop6: detected capacity change from 0 to 256 [ 105.461566][ T8760] binfmt_misc: register: failed to install interpreter file ./file0 [ 105.486983][ T8782] FAULT_INJECTION: forcing a failure. [ 105.486983][ T8782] name failslab, interval 1, probability 0, space 0, times 0 [ 105.499706][ T8782] CPU: 0 UID: 0 PID: 8782 Comm: syz.6.1276 Tainted: G W 6.13.0-rc1-syzkaller-00025-gfeffde684ac2 #0 [ 105.511898][ T8782] Tainted: [W]=WARN [ 105.515683][ T8782] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 105.525755][ T8782] Call Trace: [ 105.529084][ T8782] [ 105.532111][ T8782] dump_stack_lvl+0xf2/0x150 [ 105.536732][ T8782] dump_stack+0x15/0x1a [ 105.540917][ T8782] should_fail_ex+0x223/0x230 [ 105.545621][ T8782] ? alloc_bprm+0x62/0x5d0 [ 105.550034][ T8782] should_failslab+0x8f/0xb0 [ 105.554618][ T8782] __kmalloc_cache_noprof+0x4e/0x320 [ 105.559899][ T8782] alloc_bprm+0x62/0x5d0 [ 105.564196][ T8782] do_execveat_common+0x134/0x800 [ 105.569283][ T8782] ? getname_flags+0x15a/0x3b0 [ 105.569305][ T8782] __x64_sys_execveat+0x75/0x90 [ 105.578898][ T8782] x64_sys_call+0x291e/0x2dc0 [ 105.583582][ T8782] do_syscall_64+0xc9/0x1c0 [ 105.588095][ T8782] ? clear_bhb_loop+0x55/0xb0 [ 105.592785][ T8782] ? clear_bhb_loop+0x55/0xb0 [ 105.597471][ T8782] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 105.603517][ T8782] RIP: 0033:0x7f3b32f4ff19 [ 105.607960][ T8782] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 105.627698][ T8782] RSP: 002b:00007f3b315c7058 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 105.636173][ T8782] RAX: ffffffffffffffda RBX: 00007f3b33115fa0 RCX: 00007f3b32f4ff19 [ 105.644154][ T8782] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000003 [ 105.652136][ T8782] RBP: 00007f3b315c70a0 R08: 0000000000001000 R09: 0000000000000000 [ 105.660111][ T8782] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 105.668083][ T8782] R13: 0000000000000000 R14: 00007f3b33115fa0 R15: 00007fff6140df68 [ 105.676077][ T8782] [ 105.728633][ T8790] FAULT_INJECTION: forcing a failure. [ 105.728633][ T8790] name failslab, interval 1, probability 0, space 0, times 0 [ 105.741317][ T8790] CPU: 1 UID: 0 PID: 8790 Comm: syz.6.1279 Tainted: G W 6.13.0-rc1-syzkaller-00025-gfeffde684ac2 #0 [ 105.753480][ T8790] Tainted: [W]=WARN [ 105.757356][ T8790] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 105.767506][ T8790] Call Trace: [ 105.770837][ T8790] [ 105.773775][ T8790] dump_stack_lvl+0xf2/0x150 [ 105.778392][ T8790] dump_stack+0x15/0x1a [ 105.782603][ T8790] should_fail_ex+0x223/0x230 [ 105.787320][ T8790] ? vt_do_diacrit+0x11a/0x690 [ 105.792127][ T8790] should_failslab+0x8f/0xb0 [ 105.796790][ T8790] __kmalloc_cache_noprof+0x4e/0x320 [ 105.802095][ T8790] vt_do_diacrit+0x11a/0x690 [ 105.806691][ T8790] ? security_capable+0x81/0x90 [ 105.811561][ T8790] vt_ioctl+0xe16/0x1810 [ 105.815825][ T8790] ? tty_jobctrl_ioctl+0x2ab/0x810 [ 105.821050][ T8790] tty_ioctl+0x815/0xbe0 [ 105.825372][ T8790] ? __pfx_tty_ioctl+0x10/0x10 [ 105.830187][ T8790] __se_sys_ioctl+0xc9/0x140 [ 105.834779][ T8790] __x64_sys_ioctl+0x43/0x50 [ 105.839380][ T8790] x64_sys_call+0x1690/0x2dc0 [ 105.844048][ T8790] do_syscall_64+0xc9/0x1c0 [ 105.848535][ T8790] ? clear_bhb_loop+0x55/0xb0 [ 105.853215][ T8790] ? clear_bhb_loop+0x55/0xb0 [ 105.857952][ T8790] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 105.863853][ T8790] RIP: 0033:0x7f3b32f4ff19 [ 105.868254][ T8790] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 105.887905][ T8790] RSP: 002b:00007f3b315c7058 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 105.896311][ T8790] RAX: ffffffffffffffda RBX: 00007f3b33115fa0 RCX: 00007f3b32f4ff19 [ 105.904292][ T8790] RDX: 0000000020000440 RSI: 0000000000004b4a RDI: 0000000000000003 [ 105.912266][ T8790] RBP: 00007f3b315c70a0 R08: 0000000000000000 R09: 0000000000000000 [ 105.920302][ T8790] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 105.928325][ T8790] R13: 0000000000000000 R14: 00007f3b33115fa0 R15: 00007fff6140df68 [ 105.936293][ T8790] [ 106.002890][ T8806] loop3: detected capacity change from 0 to 512 [ 106.066781][ T8806] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 106.081023][ T8820] netlink: 256 bytes leftover after parsing attributes in process `syz.0.1293'. [ 106.090533][ T8806] ext4 filesystem being mounted at /292/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 106.115562][ T8806] EXT4-fs error (device loop3): ext4_do_update_inode:5153: inode #2: comm syz.3.1288: corrupted inode contents [ 106.128342][ T8806] EXT4-fs error (device loop3): ext4_dirty_inode:6041: inode #2: comm syz.3.1288: mark_inode_dirty error [ 106.141065][ T8806] EXT4-fs error (device loop3): ext4_do_update_inode:5153: inode #2: comm syz.3.1288: corrupted inode contents [ 106.153393][ T8806] EXT4-fs error (device loop3): __ext4_ext_dirty:207: inode #2: comm syz.3.1288: mark_inode_dirty error [ 106.195928][ T8834] binfmt_misc: register: failed to install interpreter file ./file0 [ 106.219999][ T8836] loop7: detected capacity change from 0 to 256 [ 106.225992][ T3306] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.233441][ T8830] loop6: detected capacity change from 0 to 8192 [ 106.236271][ T8836] FAT-fs (loop7): bogus number of FAT sectors [ 106.247743][ T8836] FAT-fs (loop7): Can't find a valid FAT filesystem [ 106.299637][ T8840] Process accounting resumed [ 106.309825][ T8842] loop3: detected capacity change from 0 to 764 [ 106.321849][ T8842] iso9660: Unknown parameter '/dev/loop#' [ 106.331455][ T8842] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1297'. [ 106.336229][ T8840] serio: Serial port ptm1 [ 106.355705][ T8845] netlink: 'syz.7.1301': attribute type 7 has an invalid length. [ 106.363506][ T8845] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1301'. [ 106.411495][ T8850] sit0 speed is unknown, defaulting to 1000 [ 106.418714][ T8850] sit0 speed is unknown, defaulting to 1000 [ 106.424941][ T8850] sit0 speed is unknown, defaulting to 1000 [ 106.474669][ T8850] infiniband syz2: set active [ 106.479493][ T8850] infiniband syz2: added sit0 [ 106.484973][ T3357] sit0 speed is unknown, defaulting to 1000 [ 106.507737][ T8850] RDS/IB: syz2: added [ 106.511803][ T8850] smc: adding ib device syz2 with port count 1 [ 106.520191][ T8850] smc: ib device syz2 port 1 has pnetid [ 106.528372][ T3372] sit0 speed is unknown, defaulting to 1000 [ 106.534504][ T8850] sit0 speed is unknown, defaulting to 1000 [ 106.578198][ T8850] sit0 speed is unknown, defaulting to 1000 [ 106.588184][ T8866] loop6: detected capacity change from 0 to 512 [ 106.628155][ T8870] loop3: detected capacity change from 0 to 512 [ 106.629588][ T8850] sit0 speed is unknown, defaulting to 1000 [ 106.656495][ T8870] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 106.669806][ T8866] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 106.682378][ T8850] sit0 speed is unknown, defaulting to 1000 [ 106.684780][ T8866] ext4 filesystem being mounted at /107/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 106.708410][ T8870] ext4 filesystem being mounted at /296/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 106.713250][ T8850] sit0 speed is unknown, defaulting to 1000 [ 106.733648][ T8870] EXT4-fs error (device loop3): ext4_xattr_block_get:596: inode #15: comm syz.3.1310: corrupted xattr block 32: e_value out of bounds [ 106.750849][ T8866] EXT4-fs error (device loop6): ext4_do_update_inode:5153: inode #2: comm syz.6.1308: corrupted inode contents [ 106.751869][ T8870] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=15 [ 106.769427][ T8866] EXT4-fs error (device loop6): ext4_dirty_inode:6041: inode #2: comm syz.6.1308: mark_inode_dirty error [ 106.771833][ T8870] EXT4-fs error (device loop3): ext4_xattr_block_get:596: inode #15: comm syz.3.1310: corrupted xattr block 32: e_value out of bounds [ 106.797333][ T8870] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=15 [ 106.799168][ T8866] EXT4-fs error (device loop6): ext4_do_update_inode:5153: inode #2: comm syz.6.1308: corrupted inode contents [ 106.827808][ T8870] EXT4-fs error (device loop3): ext4_xattr_block_get:596: inode #15: comm syz.3.1310: corrupted xattr block 32: e_value out of bounds [ 106.854252][ T8883] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1314'. [ 106.863646][ T8883] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1314'. [ 106.876181][ T8866] EXT4-fs error (device loop6): __ext4_ext_dirty:207: inode #2: comm syz.6.1308: mark_inode_dirty error [ 106.876249][ T8870] EXT4-fs error (device loop3): ext4_xattr_block_get:596: inode #15: comm syz.3.1310: corrupted xattr block 32: e_value out of bounds [ 106.876858][ T8870] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=15 [ 106.911464][ T6852] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.965899][ T3287] ================================================================== [ 106.973996][ T3287] BUG: KCSAN: data-race in virtqueue_disable_cb / virtqueue_disable_cb [ 106.982225][ T3287] [ 106.984529][ T3287] read to 0xffff888102e02078 of 2 bytes by interrupt on cpu 1: [ 106.992050][ T3287] virtqueue_disable_cb+0x63/0x180 [ 106.997147][ T3287] skb_xmit_done+0x5f/0x140 [ 107.001636][ T3287] vring_interrupt+0x161/0x190 [ 107.006409][ T3287] __handle_irq_event_percpu+0x95/0x490 [ 107.011956][ T3287] handle_irq_event+0x64/0xf0 [ 107.016618][ T3287] handle_edge_irq+0x16d/0x5b0 [ 107.021376][ T3287] __common_interrupt+0x58/0xe0 [ 107.026218][ T3287] common_interrupt+0x7c/0x90 [ 107.030888][ T3287] asm_common_interrupt+0x26/0x40 [ 107.035902][ T3287] _raw_spin_unlock_irqrestore+0x3d/0x60 [ 107.041531][ T3287] folio_batch_move_lru+0x1ea/0x230 [ 107.046713][ T3287] folio_add_lru+0x145/0x1f0 [ 107.051293][ T3287] shmem_get_folio_gfp+0x7d6/0xd90 [ 107.056391][ T3287] shmem_write_begin+0xa2/0x180 [ 107.061233][ T3287] generic_perform_write+0x1a8/0x4a0 [ 107.066503][ T3287] shmem_file_write_iter+0xc2/0xe0 [ 107.071606][ T3287] vfs_write+0x77f/0x920 [ 107.075838][ T3287] ksys_write+0xe8/0x1b0 [ 107.080073][ T3287] __x64_sys_write+0x42/0x50 [ 107.084643][ T3287] x64_sys_call+0x287e/0x2dc0 [ 107.089298][ T3287] do_syscall_64+0xc9/0x1c0 [ 107.093778][ T3287] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 107.099655][ T3287] [ 107.101962][ T3287] write to 0xffff888102e02078 of 2 bytes by task 3287 on cpu 0: [ 107.109566][ T3287] virtqueue_disable_cb+0x85/0x180 [ 107.114660][ T3287] start_xmit+0x15c/0x1310 [ 107.119056][ T3287] dev_hard_start_xmit+0x119/0x3f0 [ 107.124149][ T3287] sch_direct_xmit+0x1a9/0x580 [ 107.128890][ T3287] __dev_queue_xmit+0xf6a/0x2090 [ 107.133803][ T3287] ip_finish_output2+0x721/0x890 [ 107.138735][ T3287] ip_finish_output+0x11a/0x2a0 [ 107.143562][ T3287] ip_output+0xab/0x170 [ 107.147697][ T3287] __ip_queue_xmit+0xbf2/0xc10 [ 107.152438][ T3287] ip_queue_xmit+0x38/0x50 [ 107.156831][ T3287] __tcp_transmit_skb+0x15ca/0x1980 [ 107.162009][ T3287] tcp_write_xmit+0x1410/0x3220 [ 107.166849][ T3287] __tcp_push_pending_frames+0x6a/0x1a0 [ 107.172403][ T3287] tcp_push+0x320/0x340 [ 107.176543][ T3287] tcp_sendmsg_locked+0x21ed/0x2710 [ 107.181743][ T3287] tcp_sendmsg+0x30/0x50 [ 107.185968][ T3287] inet_sendmsg+0x77/0xd0 [ 107.190298][ T3287] __sock_sendmsg+0x102/0x180 [ 107.194974][ T3287] sock_write_iter+0x15e/0x1a0 [ 107.199719][ T3287] vfs_write+0x77f/0x920 [ 107.203942][ T3287] ksys_write+0xe8/0x1b0 [ 107.208165][ T3287] __x64_sys_write+0x42/0x50 [ 107.212736][ T3287] x64_sys_call+0x287e/0x2dc0 [ 107.217392][ T3287] do_syscall_64+0xc9/0x1c0 [ 107.221893][ T3287] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 107.227787][ T3287] [ 107.230093][ T3287] value changed: 0x0000 -> 0x0001 [ 107.235091][ T3287] [ 107.237392][ T3287] Reported by Kernel Concurrency Sanitizer on: [ 107.243518][ T3287] CPU: 0 UID: 0 PID: 3287 Comm: syz-executor Tainted: G W 6.13.0-rc1-syzkaller-00025-gfeffde684ac2 #0 [ 107.255842][ T3287] Tainted: [W]=WARN SYZFAIL: failed to send rpc fd=3 want=56 sent=0 n=-1 (errno 32: Broken pipe) [ 107.259632][ T3287] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 107.269672][ T3287] ================================================================== [ 107.285046][ T8888] loop7: detected capacity change from 0 to 8192 [ 107.292669][ T29] kauditd_printk_skb: 729 callbacks suppressed [ 107.292683][ T29] audit: type=1400 audit(1733328988.058:17604): avc: denied { write } for pid=3287 comm="syz-executor" path="pipe:[2440]" dev="pipefs" ino=2440 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 107.380909][ T3306] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.392356][ T8888] FAT-fs (loop7): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 107.579712][ T50] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.628118][ T50] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.678035][ T50] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.729405][ T50] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.793119][ T50] bridge_slave_1: left allmulticast mode [ 107.798868][ T50] bridge_slave_1: left promiscuous mode [ 107.804496][ T50] bridge0: port 2(bridge_slave_1) entered disabled state [ 107.812208][ T50] bridge_slave_0: left allmulticast mode [ 107.817868][ T50] bridge_slave_0: left promiscuous mode [ 107.823480][ T50] bridge0: port 1(bridge_slave_0) entered disabled state [ 107.908770][ T50] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 107.918488][ T50] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 107.927920][ T50] bond0 (unregistering): Released all slaves [ 107.974059][ T50] hsr_slave_0: left promiscuous mode [ 107.980071][ T50] hsr_slave_1: left promiscuous mode [ 107.986071][ T50] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 107.993477][ T50] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 108.003331][ T50] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 108.010788][ T50] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 108.022023][ T50] veth1_macvtap: left promiscuous mode [ 108.027591][ T50] veth0_macvtap: left promiscuous mode [ 108.033136][ T50] veth1_vlan: left promiscuous mode [ 108.038485][ T50] veth0_vlan: left promiscuous mode [ 108.087139][ T50] team0 (unregistering): Port device team_slave_1 removed [ 108.096440][ T50] team0 (unregistering): Port device team_slave_0 removed [ 108.359359][ T50] IPVS: stop unused estimator thread 0... [ 108.420625][ T50] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.460370][ T50] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.508963][ T50] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.558649][ T50] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.621839][ T50] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.680249][ T50] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.737803][ T50] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.789512][ T50] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.873931][ T50] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.918267][ T50] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.968060][ T50] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.018778][ T50] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.084691][ T50] bridge_slave_1: left allmulticast mode [ 109.090385][ T50] bridge_slave_1: left promiscuous mode [ 109.096066][ T50] bridge0: port 2(bridge_slave_1) entered disabled state [ 109.103716][ T50] bridge_slave_0: left allmulticast mode [ 109.109490][ T50] bridge_slave_0: left promiscuous mode [ 109.115158][ T50] bridge0: port 1(bridge_slave_0) entered disabled state [ 109.123887][ T50] bridge_slave_1: left allmulticast mode [ 109.129685][ T50] bridge_slave_1: left promiscuous mode [ 109.135389][ T50] bridge0: port 2(bridge_slave_1) entered disabled state [ 109.143412][ T50] bridge_slave_0: left allmulticast mode [ 109.149098][ T50] bridge_slave_0: left promiscuous mode [ 109.154809][ T50] bridge0: port 1(bridge_slave_0) entered disabled state [ 109.202595][ T50] infiniband syz2: set down [ 109.258091][ T11] smc: removing ib device syz2 [ 109.291614][ T50] bond1 (unregistering): (slave gretap1): Releasing active interface [ 109.477335][ T50] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 109.487276][ T50] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 109.496703][ T50] bond0 (unregistering): Released all slaves [ 109.504924][ T50] bond0 (unregistering): Released all slaves [ 109.513275][ T50] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 109.522752][ T50] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 109.532272][ T50] bond0 (unregistering): Released all slaves [ 109.540366][ T50] bond1 (unregistering): Released all slaves [ 109.548112][ T3372] sit0 speed is unknown, defaulting to 1000 [ 109.592304][ T50] hsr_slave_0: left promiscuous mode [ 109.598543][ T50] hsr_slave_1: left promiscuous mode [ 109.604302][ T50] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 109.611787][ T50] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 109.620196][ T50] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 109.627703][ T50] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 109.637811][ T50] hsr_slave_0: left promiscuous mode [ 109.643442][ T50] hsr_slave_1: left promiscuous mode [ 109.651213][ T50] hsr_slave_0: left promiscuous mode [ 109.657476][ T50] hsr_slave_1: left promiscuous mode [ 109.663086][ T50] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 109.670517][ T50] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 109.678147][ T50] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 109.685588][ T50] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 109.697044][ T50] veth1_macvtap: left promiscuous mode [ 109.702501][ T50] veth0_macvtap: left promiscuous mode [ 109.708075][ T50] veth1_vlan: left promiscuous mode [ 109.713280][ T50] veth0_vlan: left promiscuous mode [ 109.718880][ T50] veth1_macvtap: left promiscuous mode [ 109.724392][ T50] veth0_macvtap: left promiscuous mode [ 109.729912][ T50] veth1_vlan: left promiscuous mode [ 109.735251][ T50] veth0_vlan: left promiscuous mode [ 109.741007][ T50] veth1_macvtap: left promiscuous mode [ 109.746495][ T50] veth0_macvtap: left promiscuous mode [ 109.751973][ T50] veth1_vlan: left promiscuous mode [ 109.757271][ T50] veth0_vlan: left promiscuous mode [ 109.855907][ T50] team0 (unregistering): Port device team_slave_1 removed [ 109.864682][ T50] team0 (unregistering): Port device team_slave_0 removed [ 109.946238][ T50] team0 (unregistering): Port device team_slave_1 removed [ 109.955338][ T50] team0 (unregistering): Port device team_slave_0 removed