last executing test programs: 2m26.548852749s ago: executing program 32 (id=4027): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB='\v\x00\x00\x00\a\x00\x00\x00\b\x00\x00\x00\b\x00\x00\x00'], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b708000000000e007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000020850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="0202000311000000000000000000000005000500000000000a00000000000000fe8000000000000000000000000000bb000000000000000002000100000007000000000b000000000200090000000000000000000000000005000600000000000a00000000000000fe8800000000000000000000000000010000000000000000010018"], 0x88}}, 0x0) 2m24.737155745s ago: executing program 33 (id=4070): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYRESDEC=0x0], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000280)='sched_switch\x00', r0}, 0x18) mknod(&(0x7f0000000000)='./file0\x00', 0x6000, 0x77b) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) unshare(0x8040600) r3 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x80042, 0x0) ioctl$PTP_PEROUT_REQUEST2(r3, 0x40383d0c, &(0x7f0000000980)={{0x2000000, 0x2000005}, {0x80000000000000, 0xffffffff}, 0x5, 0x6}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x15) remap_file_pages(&(0x7f000051c000/0x400000)=nil, 0x400d00, 0x0, 0x0, 0x0) r4 = syz_io_uring_setup(0x109, &(0x7f0000000140)={0x0, 0x114db, 0x0, 0x1, 0x89}, &(0x7f00000003c0)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000480)='./file0\x00', 0x46}) io_uring_enter(r4, 0x3518, 0xaddf, 0x2, 0x0, 0x0) syz_open_dev$loop(&(0x7f0000000040), 0x7, 0x0) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r7, 0x400448e7, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0x3, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000080850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2m24.038401868s ago: executing program 34 (id=4083): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', 0xffffffffffffffff, 0x0, 0x7}, 0x18) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r1, &(0x7f0000000a00)={0x0, 0xfffffffffffffe7f, &(0x7f00000009c0)={&(0x7f0000000640)={0x2c, r2, 0x1, 0x0, 0x25dfdbfe, {}, [@ETHTOOL_A_STRSET_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x141}, 0x0) 2m19.84165867s ago: executing program 5 (id=4148): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000003380)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000006cfa0000181200", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='block_bio_remap\x00', r1}, 0x10) quotactl$Q_SYNC(0xffffffff80000102, 0x0, 0x0, 0x0) 2m19.816997011s ago: executing program 5 (id=4150): socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x4000) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x7, 0x8000, 0x1}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r1, 0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000280)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000d0039000000000000b4a518110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000400)='io_uring_create\x00', r3}, 0x18) io_uring_setup(0x1de0, &(0x7f00000000c0)={0x0, 0x45d6, 0x80, 0x0, 0x80000000, 0x0, r3}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="380000006c0015000000d9fece23b82004000000", @ANYRES32=r6, @ANYBLOB="000080000000000018003480050035"], 0x38}, 0x1, 0x300}, 0x0) 2m19.792632931s ago: executing program 5 (id=4152): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000002c0)=@bpf_lsm={0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x4c, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYRES32=0x0, @ANYBLOB="0000000003120100280012800b00010062726964676500001800028005002c00020000000c002e"], 0x48}, 0x1, 0x0, 0x0, 0x20040884}, 0x0) 2m19.778699471s ago: executing program 5 (id=4154): memfd_secret(0x80000) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, 0x0, 0x0) sendto$inet6(r0, &(0x7f0000000100)="b8", 0x1, 0x24004851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) r1 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x3}}]}, 0x1, 0x5df, &(0x7f00000005c0)="$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") openat(r1, &(0x7f0000000180)='./file1\x00', 0xca6957ff58536d1b, 0x24) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYRES64=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @cgroup_sysctl=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) prctl$PR_SET_NAME(0xf, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffb}]}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000008000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000002c0)='sched_process_fork\x00', r3}, 0x10) syz_clone(0x5002400, 0x0, 0x46, 0x0, 0x0, 0x0) r4 = socket$pppl2tp(0x18, 0x1, 0x1) r5 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r4, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r5, {0x2, 0x4e23, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r6, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) syz_emit_ethernet(0x4c, &(0x7f0000000140)={@link_local, @random="ece65fbcee55", @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0x16, 0x11, 0x0, @remote, @mcast2, {[], {0x0, 0xe22, 0x16, 0x0, @gue={{0x2, 0x0, 0x0, 0x7}, "30b08e774e70"}}}}}}}, 0x0) 2m19.723500712s ago: executing program 5 (id=4155): syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x80040c, &(0x7f00000001c0), 0x1, 0x5e8, &(0x7f0000001200)="$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") unshare(0x22020600) unshare(0x200) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000005c40)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000640)=@newtaction={0x11c, 0x30, 0x9, 0x0, 0x0, {}, [{0x108, 0x1, [@m_csum={0x104, 0x19, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x4a0, 0x4, 0x7, 0x4, 0x1}, 0x6a}}]}, {0xbc, 0x6, "e76ac2a229e74c498e11c9d7e93deced1f8c6862ce4414a70891edfff7b790cc2154c3fe0207ab5cc22f18c43c2d0e29735979f83e9aeaa22db8038bf5a9d18131eb6c0417662474661de6d5ec13383a54a8e5af1dbe32abda36d6e6ca1e3ca021360da2ed63b8fe1e4ac9ea28eb59a42abc42ea1e3d3400c63b5cac9f2e452f7c886024e6f9862d0e58b9d92a99fe8cc9c8c5976ff2640ca9fa701270d89cbe5b79f79b10edf370eb0bc07e41f126c56dfd5de691002946"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}]}, 0x11c}}, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) open(&(0x7f0000000240)='./bus\x00', 0x143142, 0x146) r1 = socket$igmp6(0xa, 0x3, 0x3a) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$MRT6_ADD_MFC(r1, 0x29, 0x22, &(0x7f0000000000)={{0xa, 0x0, 0x101, @loopback, 0xa3c}, {0xa, 0xfffe, 0xfffffffd, @dev, 0x4}, 0x1000, {[0x9, 0x0, 0xfffffffe, 0xfffffef9, 0x0, 0x1, 0x2]}}, 0x5c) write(0xffffffffffffffff, &(0x7f0000004200)='t', 0x1) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000080)) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7ffff000) r3 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file2\x00', 0x42, 0x109) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r4, 0x84, 0x75, &(0x7f0000000000)={0x0, 0xcc}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) pwrite64(r3, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) 2m19.630899934s ago: executing program 35 (id=4156): r0 = socket$inet(0xa, 0x801, 0x84) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f0000000b00)=ANY=[@ANYBLOB="18010000010000000000000000030000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000001c0)={'veth0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x10, 0x1}}]}}, @TCA_RATE={0x6}]}, 0x4c}, 0x1, 0x0, 0x0, 0x48801}, 0x0) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) r4 = accept4(r0, 0x0, 0x0, 0x0) getsockopt$inet_mreqsrc(r0, 0x0, 0x26, &(0x7f0000000000)={@local, @local, @multicast2}, &(0x7f0000000180)=0xc) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r4, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x1}, 0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r4, 0x84, 0x7c, &(0x7f0000000240)={0x0, 0x2}, 0x8) 2m19.476942597s ago: executing program 5 (id=4159): socket$unix(0x1, 0x1, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote, 0x9}, 0x1c) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) bpf$TOKEN_CREATE(0x24, &(0x7f0000000380)={0x0, r3}, 0x8) bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) vmsplice(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000500)="7c15b6bce0568bdbef75e4667376c6507c51094765fcc21aa8810d5a760327a50bc67e6f84d20215ae0b84a847e4a948b5258b28626336e159ad54d4c00f287cdf1bade52605c3e691", 0x49}], 0x1, 0x0) 2m19.454329378s ago: executing program 36 (id=4159): socket$unix(0x1, 0x1, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote, 0x9}, 0x1c) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) bpf$TOKEN_CREATE(0x24, &(0x7f0000000380)={0x0, r3}, 0x8) bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) vmsplice(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000500)="7c15b6bce0568bdbef75e4667376c6507c51094765fcc21aa8810d5a760327a50bc67e6f84d20215ae0b84a847e4a948b5258b28626336e159ad54d4c00f287cdf1bade52605c3e691", 0x49}], 0x1, 0x0) 2m18.651608873s ago: executing program 3 (id=4168): syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x80040c, &(0x7f00000001c0), 0x1, 0x5e8, &(0x7f0000001200)="$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") unshare(0x22020600) unshare(0x200) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005c40)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000640)=@newtaction={0x11c, 0x30, 0x9, 0x0, 0x0, {}, [{0x108, 0x1, [@m_csum={0x104, 0x19, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x4a0, 0x4, 0x7, 0x4, 0x1}, 0x6a}}]}, {0xbc, 0x6, "e76ac2a229e74c498e11c9d7e93deced1f8c6862ce4414a70891edfff7b790cc2154c3fe0207ab5cc22f18c43c2d0e29735979f83e9aeaa22db8038bf5a9d18131eb6c0417662474661de6d5ec13383a54a8e5af1dbe32abda36d6e6ca1e3ca021360da2ed63b8fe1e4ac9ea28eb59a42abc42ea1e3d3400c63b5cac9f2e452f7c886024e6f9862d0e58b9d92a99fe8cc9c8c5976ff2640ca9fa701270d89cbe5b79f79b10edf370eb0bc07e41f126c56dfd5de691002946"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}]}, 0x11c}}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) open(&(0x7f0000000240)='./bus\x00', 0x143142, 0x146) r2 = socket$igmp6(0xa, 0x3, 0x3a) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$MRT6_ADD_MFC(r2, 0x29, 0x22, &(0x7f0000000000)={{0xa, 0x0, 0x101, @loopback, 0xa3c}, {0xa, 0xfffe, 0xfffffffd, @dev, 0x4}, 0x1000, {[0x9, 0x0, 0xfffffffe, 0xfffffef9, 0x0, 0x1, 0x2]}}, 0x5c) write(0xffffffffffffffff, &(0x7f0000004200)='t', 0x1) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000080)) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7ffff000) r4 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file2\x00', 0x42, 0x109) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r5, 0x84, 0x75, &(0x7f0000000000)={0x0, 0xcc}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) pwrite64(r4, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) 2m18.415082398s ago: executing program 3 (id=4170): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x210000, &(0x7f0000002f40)={[{@nodelalloc}, {@dioread_lock}, {@barrier_val={'barrier', 0x3d, 0x4}}, {@nolazytime}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x5}}, {@bh}, {@init_itable}]}, 0xfc, 0x56f, &(0x7f0000003780)="$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") truncate(&(0x7f0000000900)='./file1\x00', 0x3000000) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r1, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r2}, 0x18) write$binfmt_elf64(r0, &(0x7f0000000980)=ANY=[], 0x5b0) r3 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$inet(r3, &(0x7f0000000400)={&(0x7f00000000c0)={0x2, 0x4e21, @local}, 0x10, 0x0, 0x0, &(0x7f00000005c0)=[@ip_retopts={{0x18, 0x0, 0x7, {[@generic={0x94, 0x4, "de8a"}, @ra={0x94, 0x4}]}}}], 0x18}, 0x80) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='net/igmp6\x00') lseek(r4, 0x89, 0x1) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), r0) sendmsg$IPVS_CMD_SET_CONFIG(r4, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000380)={0x58, r5, 0x4, 0x70bd26, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DAEMON={0x3c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @loopback}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'wg1\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @local}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x9}]}, 0x58}}, 0x80) close(r0) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0) r6 = socket$can_bcm(0x1d, 0x2, 0x2) recvmsg$can_bcm(r6, &(0x7f0000000700)={&(0x7f00000002c0)=@ax25={{0x3, @bcast}, [@bcast, @rose, @netrom, @remote, @default, @rose, @default, @null]}, 0x80, &(0x7f0000000580)=[{&(0x7f00000003c0)=""/171, 0xab}, {&(0x7f0000000480)=""/76, 0x4c}, {&(0x7f0000000940)=""/4096, 0x1000}, {&(0x7f0000000500)=""/100, 0x64}], 0x4, &(0x7f0000000600)=""/255, 0xff}, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000100)=0x3, 0x8) capset(&(0x7f0000000100)={0x20071026}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x81, 0xfffffffb}) r7 = syz_open_dev$loop(&(0x7f0000000040), 0x7, 0x0) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000080000085000000d0000000a50000009700000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000000)='sys_enter\x00', r8, 0x0, 0x680}, 0x18) rt_sigqueueinfo(0x0, 0x33, 0x0) ioctl$LOOP_SET_STATUS(r7, 0x4c02, 0x0) r9 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) write$binfmt_register(r9, &(0x7f0000000080)={0x3a, 'syz2', 0x3a, 'E', 0x3a, 0x4, 0x3a, '-}\\', 0x3a, '', 0x3a, './file1'}, 0x2a) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000b80)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 2m17.540308665s ago: executing program 3 (id=4183): socket$nl_route(0x10, 0x3, 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x401}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="f37fa7c34c88547e5c3ffc311561c57369b55aa1d770db31d315ea02360c44deb9afa33b82e8adb73057a617666cb3260e4fe57dbbd0e021c08e07a933def5950db66de26c75232d04b919727bdb925e1f7ceb1822ee5b03d0ad36c1de3fc62cb1e4720a7d2e024bf76273b64832e4aacedbe8690660bb735e2b5ee983dd083f2da5a4fdbda850"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r1) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000840), 0x81, r2}, 0x38) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000200)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r3}, 0x10) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x2, 0x4, 0x7fe2, 0x4}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3701}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) fcntl$setlease(r4, 0x400, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x5, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='leases_conflict\x00', r6}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0) 2m17.450472617s ago: executing program 3 (id=4184): memfd_secret(0x80000) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, 0x0, 0x0) sendto$inet6(r0, &(0x7f0000000100)="b8", 0x1, 0x24004851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) r1 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x3}}]}, 0x1, 0x5df, &(0x7f00000005c0)="$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") openat(r1, &(0x7f0000000180)='./file1\x00', 0xca6957ff58536d1b, 0x24) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYRES64=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @cgroup_sysctl=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) prctl$PR_SET_NAME(0xf, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffb}]}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000008000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000002c0)='sched_process_fork\x00', r3}, 0x10) syz_clone(0x5002400, 0x0, 0x46, 0x0, 0x0, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r4, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) syz_emit_ethernet(0x4c, &(0x7f0000000140)={@link_local, @random="ece65fbcee55", @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0x16, 0x11, 0x0, @remote, @mcast2, {[], {0x0, 0xe22, 0x16, 0x0, @gue={{0x2, 0x0, 0x0, 0x7}, "30b08e774e70"}}}}}}}, 0x0) 2m17.371723868s ago: executing program 3 (id=4185): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000280)='sched_switch\x00', r1}, 0x18) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r2, 0x0, 0x4000040) 2m17.041365595s ago: executing program 3 (id=4186): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7040000010000008500000078000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000280)='sched_switch\x00', r1}, 0x18) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)=ANY=[@ANYBLOB="bc000000010101080000000000000000000000030800034000000402100005800900010073797a300000000008001540000000040600124000010000080015400000000108001a4000000003580002"], 0xbc}, 0x1, 0x0, 0x0, 0x200000d0}, 0x4000040) r3 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000080000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000a3850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = dup2(r3, r3) ioctl$BLKTRACESETUP(r4, 0xc0481273, &(0x7f0000000240)={'\x00', 0x40, 0xa, 0x1, 0x40000000, 0x10}) ioctl$BLKTRACETEARDOWN(r4, 0x1276, 0x0) 2m17.041144025s ago: executing program 37 (id=4186): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7040000010000008500000078000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000280)='sched_switch\x00', r1}, 0x18) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)=ANY=[@ANYBLOB="bc000000010101080000000000000000000000030800034000000402100005800900010073797a300000000008001540000000040600124000010000080015400000000108001a4000000003580002"], 0xbc}, 0x1, 0x0, 0x0, 0x200000d0}, 0x4000040) r3 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000080000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000a3850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = dup2(r3, r3) ioctl$BLKTRACESETUP(r4, 0xc0481273, &(0x7f0000000240)={'\x00', 0x40, 0xa, 0x1, 0x40000000, 0x10}) ioctl$BLKTRACETEARDOWN(r4, 0x1276, 0x0) 2m10.180364338s ago: executing program 6 (id=4309): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x210000, &(0x7f0000002f40)={[{@nodelalloc}, {@dioread_lock}, {@barrier_val={'barrier', 0x3d, 0x4}}, {@nolazytime}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x5}}, {@bh}, {@init_itable}]}, 0xfc, 0x56f, &(0x7f0000003780)="$eJzs3d9rW1UcAPDvTdPup66DMdQHGezByVy6tv6YIDgfRYcDfZ+hzcpouowmHWsduD24F19kCCIOxD/Adx+H/4B/xUAHQ0bRBxEiN73psjZp2i4z2fL5wG3Pyb23535z7vf2nNyEBDC0jqU/chEvR8Q3ScShlnX5yFYeW9tu9eH1mXRJol7/9M8kkuyx5vZJ9vtAVnkpIn79KuJkbnO71eWV+WK5XFrM6hO1hSsT1eWVU5cWinOludLlqenpM29NT737zts9i/X1839//8ndD898fXz1u5/vH76dxNk4mK1rjeMJ3GitHCv+m5VG4+yGDSd70NggSfp9AOzKSJbno5FeAw7FSJb1wPPvy4ioA0Mqkf8wpJrjgObcvkfz4GfGgw/WJkCN2Mda48+vvTYSextzo/2ryWMzo3S+O96D9tM2fvnjzu10ia1fh9jXpQ6wIzduRsTpfH7z9T/Jrn+7d7rx4vHWNrYxbP9/oJ/upuOfN9qN/3Lr459oM/450CZ3d6N7/ufu96CZjtLx33ttx7/rl67xkaz2QmPMN5pcvFQunY6IFyPiRNS73vo4s3qv3mld6/gvXdL2m2PB7Dju5/c8vs9ssVaMiLFdhvyYBzcjXsm3iz9Z7/+kTf+nz8f5bbZxtHTn1U7rusf/dNV/initbf8/6tZk6/uTE43zYaJ5Vmz2162jv3Vqv9/xp/2/f+v4x5PW+7XVnbfx495/Sp3W7fb8H0s+a5SbSXCtWKstTkaMJR9vfnzq0b7NenP7NP4Tx7e+/rU7/9PJ1+fbjP/WkVsdNx2E/p/dUf/vvHDvoy9+6NT+9vr/zUbpRPZIdv1rLztXtnuAT/r8AQAAAAAAwCDJRcTBSHKF9XIuVyisvb/jSOzPlSvV2smLlaXLs9H4rOx4jOaad7oPtbwfYjJ7P2yzPrWhPh0RhyPi25F9jXphplKe7XfwAAAAAAAAAAAAAAAAAAAAMCAOdPj8f+r3kX4fHfDUNb7YYE+/jwLoh65f+d+Lb3oCBlLX/AeeW/Ifhpf8h+El/2F4yX8YXvIfhpf8h+El/wEAAAAAAAAAAAAAAAAAAAAAAAAAAKCnzp87ly711YfXZ9L67NXlpfnK1VOzpep8YWFppjBTWbxSmKtU5sqlwkxlodvfK1cqVyanYunaRK1UrU1Ul1cuLFSWLtcuXFoozpUulEb/l6gAAAAAAAAAAAAAAAAAAADg2VJdXpkvlsulRYWOhfdjIA7jaQa4Zle75wclCoUOhZtZ9+5srz5elAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABgg/8CAAD//4yLMZo=") truncate(&(0x7f0000000900)='./file1\x00', 0x3000000) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={0xffffffffffffffff, 0x0, 0x0}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r1}, 0x18) write$binfmt_elf64(r0, &(0x7f0000000980)=ANY=[], 0x5b0) r2 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$inet(r2, &(0x7f0000000400)={&(0x7f00000000c0)={0x2, 0x4e21, @local}, 0x10, 0x0, 0x0, &(0x7f00000005c0)=[@ip_retopts={{0x18, 0x0, 0x7, {[@generic={0x94, 0x4, "de8a"}, @ra={0x94, 0x4}]}}}], 0x18}, 0x80) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='net/igmp6\x00') lseek(r3, 0x89, 0x1) syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), r0) close(r0) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0) r4 = socket$can_bcm(0x1d, 0x2, 0x2) recvmsg$can_bcm(r4, &(0x7f0000000700)={&(0x7f00000002c0)=@ax25={{0x3, @bcast}, [@bcast, @rose, @netrom, @remote, @default, @rose, @default, @null]}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000380)=""/27, 0x1b}, {&(0x7f00000003c0)=""/171, 0xab}, {&(0x7f0000000480)=""/76, 0x4c}, {&(0x7f0000000940)=""/4096, 0x1000}, {&(0x7f0000000500)=""/100, 0x64}], 0x5, &(0x7f0000000600)=""/255, 0xff}, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000100)=0x3, 0x8) capset(&(0x7f0000000100)={0x20071026}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x81, 0xfffffffb}) r5 = syz_open_dev$loop(&(0x7f0000000040), 0x7, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000080000085000000d0000000a50000009700000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) rt_sigqueueinfo(0x0, 0x33, 0x0) ioctl$LOOP_SET_STATUS(r5, 0x4c02, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000b80)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 2m9.330768375s ago: executing program 6 (id=4332): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa4000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000280)='sched_switch\x00', r1}, 0x18) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)=ANY=[@ANYBLOB="bc000000010101080000000000000000000000030800034000000402100005800900010073797a300000000008001540000000040600124000010000080015400000000108001a4000000003580002"], 0xbc}, 0x1, 0x0, 0x0, 0x200000d0}, 0x4000040) r3 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000080000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000a3850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = dup2(r3, r3) ioctl$BLKTRACESETUP(r4, 0xc0481273, &(0x7f0000000240)={'\x00', 0x40, 0xa, 0x1, 0x40000000, 0x10}) ioctl$BLKTRACETEARDOWN(r4, 0x1276, 0x0) 2m9.281419996s ago: executing program 6 (id=4336): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x30, 0x1, 0x0, 0x0, 0x0, 0x3, 0x40510, 0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xda65, 0x5, @perf_bp={0x0, 0x8}, 0xb008, 0x10000, 0x40, 0x1, 0x8, 0xc21, 0x2b, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a999850000000400000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000400)='kfree\x00', r0}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r1 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="4800000010000507000000000000000016000000", @ANYRES32=r4, @ANYBLOB="0000000200000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r6) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0x14) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x11, &(0x7f0000000300)={&(0x7f00000003c0)=@delchain={0x3c, 0x2c, 0xf31, 0x600, 0x2000, {0x0, 0x0, 0x0, r7, {}, {0xfff2, 0xffff}, {0xffff, 0x1}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_FLAGS={0x8, 0x16, 0x2}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4008844}, 0x4010) 2m8.960259292s ago: executing program 6 (id=4340): memfd_secret(0x80000) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, 0x0, 0x0) sendto$inet6(r0, &(0x7f0000000100)="b8", 0x1, 0x24004851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) r1 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x3}}]}, 0x1, 0x5df, &(0x7f00000005c0)="$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") openat(r1, &(0x7f0000000180)='./file1\x00', 0xca6957ff58536d1b, 0x24) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYRES64=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @cgroup_sysctl=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) prctl$PR_SET_NAME(0xf, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffb}]}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000008000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_clone(0x5002400, 0x0, 0x46, 0x0, 0x0, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) syz_emit_ethernet(0x4c, &(0x7f0000000140)={@link_local, @random="ece65fbcee55", @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0x16, 0x11, 0x0, @remote, @mcast2, {[], {0x0, 0xe22, 0x16, 0x0, @gue={{0x2, 0x0, 0x0, 0x7}, "30b08e774e70"}}}}}}}, 0x0) 2m8.863359354s ago: executing program 6 (id=4342): syz_emit_ethernet(0x1bb, &(0x7f0000000180)={@local, @random="f5f8329948bc", @void, {@ipv6={0x86dd, @gre_packet={0x7, 0x6, "4a9e6c", 0x185, 0x2f, 0xe78c6d029ffc7582, @local, @mcast2, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6558, 0xf1, 0x3, [], "713f664a40145bfa14026e893648b221515d0b61761bb6f9671c39abe21f8448c4004a7393ff13ffd09202592a58ef8092b90ee0888397f431f5c1a1b53929e0c0337e6fc54c686fa384a8c9e0542c97373597ca3c78a032109ed04a1b1c4a2ab3e38cdcaf5e22d560cca463cee0163d1eb06985f197e17e25058948555794e07c522bdf38ea4bab1e6c9f9356bc0d59137da6fd274deb029ad84a0d204b0117b2f57cf0901527ef12476b8f49625c27f8ddf4bc9d0850a603941dbe69acf8e1f8702c20910b9438eba8be6433f50cd287652a4e5c59da14d17059ca5e8f17a0450132a8f6fe269ec78f3580436d192750"}, {0x0, 0x0, 0x1, 0x1}, {0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x86dd, [], "eb2152c2d63ade510b84d9856e93c2eaaab878457ef466fd96b484745dbf20f9b7be993733cd3b054471da77051e5e2b10ed5fa5992f63ed68c2a089a678cee33419afd6f2f9279391bdb624f7542f1b"}, {0xca88, 0x88be, 0x4, {{0x5, 0x1, 0x3, 0x3, 0x1, 0x0, 0x0, 0x35}, 0x1, {0xa753}}}, {0x8, 0x22eb, 0x1, {{0xe, 0x2, 0x0, 0x1, 0x0, 0x3, 0x2, 0x4}, 0x2, {0x0, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x1}}}, {0x8, 0x6558, 0x4}}}}}}}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x3ac6d11eab5197de, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x2, 0x6, 0x8, 0x80000001}, {0x7, 0x80, 0x7, 0x7}]}) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='sched_process_wait\x00'}, 0x10) bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="85000000070000006a0a00ff000000000c000000000000009500000000000000181000", @ANYRES32, @ANYBLOB="000000000000000005000000000000009500000000000000b1f8306e05d1e4aab009c16b5c05077115d0749619ca39f89974785ae0619b77c6585f678ac92a3b6b4148f56b43c3dd75d75f97c8f92f60a2def458df05e2fbfb3e849b2b3cffd4f29446ae60dd76654b2639b2bc14350706214a6ab7a712d4317fbc3ca01d0d3ed6110b3775903141a5091a4d3db8eb335414fbdb288aba73aaf6d18000a3a2a069cf7f9402e1425bb6bc370576aa1faea0fe222671ecf99038fce8dba53dcb11f87cca"], &(0x7f0000000140)='GPL\x00', 0x2, 0x95, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x94) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, 0x2}, 0x94) r2 = socket$packet(0x11, 0x2, 0x300) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x1, @perf_config_ext={0x7, 0x6}, 0x0, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r3, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) linkat(0xffffffffffffff9c, &(0x7f00000006c0)='./file2\x00', 0xffffffffffffff9c, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f00000000c0)='ext4_mark_inode_dirty\x00', r1, 0x0, 0xc}, 0x18) r4 = syz_mount_image$ext4(&(0x7f0000000700)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x8042, &(0x7f0000000380)={[{@grpjquota}, {@init_itable_val={'init_itable', 0x3d, 0x7}}, {@dioread_nolock}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x7fffffff}}]}, 0x1, 0x4f3, &(0x7f0000000740)="$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") r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$TIOCSSOFTCAR(r5, 0x541a, &(0x7f0000000080)=0x1ff) write$binfmt_script(r5, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r5, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000400)={@fallback=r4, 0x12, 0x0, 0x4, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x0, &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000300)=[0x0], &(0x7f0000000340)=[0x0], 0x0}, 0x40) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000500)={@cgroup=r5, r1, 0x23, 0x10, 0x0, @void, @value=r5, @void, @void, r6}, 0x20) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYRES32=r5], 0x48) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, r7, 0x0, '\x00', 0x0, 0x0}, 0x50) setsockopt$packet_tx_ring(r2, 0x107, 0xd, &(0x7f0000000540)=@req={0x7f, 0x1000, 0x1e, 0x9}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0900000004000000e27f00000100000012000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) preadv(0xffffffffffffffff, 0x0, 0x0, 0xc002a0, 0x1) 2m8.213693657s ago: executing program 6 (id=4356): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x210000, &(0x7f0000002f40)={[{@nodelalloc}, {@dioread_lock}, {@barrier_val={'barrier', 0x3d, 0x4}}, {@nolazytime}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x5}}, {@bh}, {@init_itable}]}, 0xfc, 0x56f, &(0x7f0000003780)="$eJzs3d9rW1UcAPDvTdPup66DMdQHGezByVy6tv6YIDgfRYcDfZ+hzcpouowmHWsduD24F19kCCIOxD/Adx+H/4B/xUAHQ0bRBxEiN73psjZp2i4z2fL5wG3Pyb23535z7vf2nNyEBDC0jqU/chEvR8Q3ScShlnX5yFYeW9tu9eH1mXRJol7/9M8kkuyx5vZJ9vtAVnkpIn79KuJkbnO71eWV+WK5XFrM6hO1hSsT1eWVU5cWinOludLlqenpM29NT737zts9i/X1839//8ndD898fXz1u5/vH76dxNk4mK1rjeMJ3GitHCv+m5VG4+yGDSd70NggSfp9AOzKSJbno5FeAw7FSJb1wPPvy4ioA0Mqkf8wpJrjgObcvkfz4GfGgw/WJkCN2Mda48+vvTYSextzo/2ryWMzo3S+O96D9tM2fvnjzu10ia1fh9jXpQ6wIzduRsTpfH7z9T/Jrn+7d7rx4vHWNrYxbP9/oJ/upuOfN9qN/3Lr459oM/450CZ3d6N7/ufu96CZjtLx33ttx7/rl67xkaz2QmPMN5pcvFQunY6IFyPiRNS73vo4s3qv3mld6/gvXdL2m2PB7Dju5/c8vs9ssVaMiLFdhvyYBzcjXsm3iz9Z7/+kTf+nz8f5bbZxtHTn1U7rusf/dNV/initbf8/6tZk6/uTE43zYaJ5Vmz2162jv3Vqv9/xp/2/f+v4x5PW+7XVnbfx495/Sp3W7fb8H0s+a5SbSXCtWKstTkaMJR9vfnzq0b7NenP7NP4Tx7e+/rU7/9PJ1+fbjP/WkVsdNx2E/p/dUf/vvHDvoy9+6NT+9vr/zUbpRPZIdv1rLztXtnuAT/r8AQAAAAAAwCDJRcTBSHKF9XIuVyisvb/jSOzPlSvV2smLlaXLs9H4rOx4jOaad7oPtbwfYjJ7P2yzPrWhPh0RhyPi25F9jXphplKe7XfwAAAAAAAAAAAAAAAAAAAAMCAOdPj8f+r3kX4fHfDUNb7YYE+/jwLoh65f+d+Lb3oCBlLX/AeeW/Ifhpf8h+El/2F4yX8YXvIfhpf8h+El/wEAAAAAAAAAAAAAAAAAAAAAAAAAAKCnzp87ly711YfXZ9L67NXlpfnK1VOzpep8YWFppjBTWbxSmKtU5sqlwkxlodvfK1cqVyanYunaRK1UrU1Ul1cuLFSWLtcuXFoozpUulEb/l6gAAAAAAAAAAAAAAAAAAADg2VJdXpkvlsulRYWOhfdjIA7jaQa4Zle75wclCoUOhZtZ9+5srz5elAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABgg/8CAAD//4yLMZo=") truncate(&(0x7f0000000900)='./file1\x00', 0x3000000) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={0xffffffffffffffff, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r1}, 0x18) write$binfmt_elf64(r0, &(0x7f0000000980)=ANY=[], 0x5b0) r2 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$inet(r2, &(0x7f0000000400)={&(0x7f00000000c0)={0x2, 0x4e21, @local}, 0x10, 0x0, 0x0, &(0x7f00000005c0)=[@ip_retopts={{0x18, 0x0, 0x7, {[@generic={0x94, 0x4, "de8a"}, @ra={0x94, 0x4}]}}}], 0x18}, 0x80) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='net/igmp6\x00') lseek(r3, 0x89, 0x1) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), r0) sendmsg$IPVS_CMD_SET_CONFIG(r3, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000380)={0x58, r4, 0x4, 0x70bd26, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DAEMON={0x3c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @loopback}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'wg1\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @local}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x9}]}, 0x58}}, 0x80) close(r0) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0) r5 = socket$can_bcm(0x1d, 0x2, 0x2) recvmsg$can_bcm(r5, &(0x7f0000000700)={&(0x7f00000002c0)=@ax25={{0x3, @bcast}, [@bcast, @rose, @netrom, @remote, @default, @rose, @default, @null]}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000380)=""/27, 0x1b}, {&(0x7f00000003c0)=""/171, 0xab}, {&(0x7f0000000480)=""/76, 0x4c}, {&(0x7f0000000940)=""/4096, 0x1000}, {&(0x7f0000000500)=""/100, 0x64}], 0x5, &(0x7f0000000600)=""/255, 0xff}, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000100)=0x3, 0x8) capset(&(0x7f0000000100)={0x20071026}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x81, 0xfffffffb}) r6 = syz_open_dev$loop(&(0x7f0000000040), 0x7, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000080000085000000d0000000a50000009700000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000000)='sys_enter\x00', r7, 0x0, 0x680}, 0x18) rt_sigqueueinfo(0x0, 0x33, 0x0) ioctl$LOOP_SET_STATUS(r6, 0x4c02, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) write$binfmt_register(r8, &(0x7f0000000080)={0x3a, 'syz2', 0x3a, 'E', 0x3a, 0x4, 0x3a, '-}\\', 0x3a, '', 0x3a, './file1'}, 0x2a) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000b80)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 2m8.212934067s ago: executing program 38 (id=4356): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x210000, &(0x7f0000002f40)={[{@nodelalloc}, {@dioread_lock}, {@barrier_val={'barrier', 0x3d, 0x4}}, {@nolazytime}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x5}}, {@bh}, {@init_itable}]}, 0xfc, 0x56f, &(0x7f0000003780)="$eJzs3d9rW1UcAPDvTdPup66DMdQHGezByVy6tv6YIDgfRYcDfZ+hzcpouowmHWsduD24F19kCCIOxD/Adx+H/4B/xUAHQ0bRBxEiN73psjZp2i4z2fL5wG3Pyb23535z7vf2nNyEBDC0jqU/chEvR8Q3ScShlnX5yFYeW9tu9eH1mXRJol7/9M8kkuyx5vZJ9vtAVnkpIn79KuJkbnO71eWV+WK5XFrM6hO1hSsT1eWVU5cWinOludLlqenpM29NT737zts9i/X1839//8ndD898fXz1u5/vH76dxNk4mK1rjeMJ3GitHCv+m5VG4+yGDSd70NggSfp9AOzKSJbno5FeAw7FSJb1wPPvy4ioA0Mqkf8wpJrjgObcvkfz4GfGgw/WJkCN2Mda48+vvTYSextzo/2ryWMzo3S+O96D9tM2fvnjzu10ia1fh9jXpQ6wIzduRsTpfH7z9T/Jrn+7d7rx4vHWNrYxbP9/oJ/upuOfN9qN/3Lr459oM/450CZ3d6N7/ufu96CZjtLx33ttx7/rl67xkaz2QmPMN5pcvFQunY6IFyPiRNS73vo4s3qv3mld6/gvXdL2m2PB7Dju5/c8vs9ssVaMiLFdhvyYBzcjXsm3iz9Z7/+kTf+nz8f5bbZxtHTn1U7rusf/dNV/initbf8/6tZk6/uTE43zYaJ5Vmz2162jv3Vqv9/xp/2/f+v4x5PW+7XVnbfx495/Sp3W7fb8H0s+a5SbSXCtWKstTkaMJR9vfnzq0b7NenP7NP4Tx7e+/rU7/9PJ1+fbjP/WkVsdNx2E/p/dUf/vvHDvoy9+6NT+9vr/zUbpRPZIdv1rLztXtnuAT/r8AQAAAAAAwCDJRcTBSHKF9XIuVyisvb/jSOzPlSvV2smLlaXLs9H4rOx4jOaad7oPtbwfYjJ7P2yzPrWhPh0RhyPi25F9jXphplKe7XfwAAAAAAAAAAAAAAAAAAAAMCAOdPj8f+r3kX4fHfDUNb7YYE+/jwLoh65f+d+Lb3oCBlLX/AeeW/Ifhpf8h+El/2F4yX8YXvIfhpf8h+El/wEAAAAAAAAAAAAAAAAAAAAAAAAAAKCnzp87ly711YfXZ9L67NXlpfnK1VOzpep8YWFppjBTWbxSmKtU5sqlwkxlodvfK1cqVyanYunaRK1UrU1Ul1cuLFSWLtcuXFoozpUulEb/l6gAAAAAAAAAAAAAAAAAAADg2VJdXpkvlsulRYWOhfdjIA7jaQa4Zle75wclCoUOhZtZ9+5srz5elAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABgg/8CAAD//4yLMZo=") truncate(&(0x7f0000000900)='./file1\x00', 0x3000000) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={0xffffffffffffffff, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r1}, 0x18) write$binfmt_elf64(r0, &(0x7f0000000980)=ANY=[], 0x5b0) r2 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$inet(r2, &(0x7f0000000400)={&(0x7f00000000c0)={0x2, 0x4e21, @local}, 0x10, 0x0, 0x0, &(0x7f00000005c0)=[@ip_retopts={{0x18, 0x0, 0x7, {[@generic={0x94, 0x4, "de8a"}, @ra={0x94, 0x4}]}}}], 0x18}, 0x80) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='net/igmp6\x00') lseek(r3, 0x89, 0x1) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), r0) sendmsg$IPVS_CMD_SET_CONFIG(r3, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000380)={0x58, r4, 0x4, 0x70bd26, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DAEMON={0x3c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @loopback}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'wg1\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @local}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x9}]}, 0x58}}, 0x80) close(r0) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0) r5 = socket$can_bcm(0x1d, 0x2, 0x2) recvmsg$can_bcm(r5, &(0x7f0000000700)={&(0x7f00000002c0)=@ax25={{0x3, @bcast}, [@bcast, @rose, @netrom, @remote, @default, @rose, @default, @null]}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000380)=""/27, 0x1b}, {&(0x7f00000003c0)=""/171, 0xab}, {&(0x7f0000000480)=""/76, 0x4c}, {&(0x7f0000000940)=""/4096, 0x1000}, {&(0x7f0000000500)=""/100, 0x64}], 0x5, &(0x7f0000000600)=""/255, 0xff}, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000100)=0x3, 0x8) capset(&(0x7f0000000100)={0x20071026}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x81, 0xfffffffb}) r6 = syz_open_dev$loop(&(0x7f0000000040), 0x7, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000080000085000000d0000000a50000009700000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000000)='sys_enter\x00', r7, 0x0, 0x680}, 0x18) rt_sigqueueinfo(0x0, 0x33, 0x0) ioctl$LOOP_SET_STATUS(r6, 0x4c02, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) write$binfmt_register(r8, &(0x7f0000000080)={0x3a, 'syz2', 0x3a, 'E', 0x3a, 0x4, 0x3a, '-}\\', 0x3a, '', 0x3a, './file1'}, 0x2a) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000b80)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 2m5.360808482s ago: executing program 8 (id=4413): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) listen(r0, 0x0) r1 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r1, &(0x7f0000002300)={&(0x7f0000000040)=@id={0x1e, 0x3, 0x0, {0x4e22, 0x1}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x8005}, 0x4) sendmsg$tipc(r1, &(0x7f00000002c0)={&(0x7f00000000c0)=@nameseq={0x1e, 0x2, 0x0, {0x41}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x480c0}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sysctl, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r3}, 0x10) accept4(r0, 0x0, 0x0, 0x400000000000000) 2m5.318375773s ago: executing program 8 (id=4416): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYRESDEC=0x0], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000280)='sched_switch\x00', r0}, 0x18) mknod(&(0x7f0000000000)='./file0\x00', 0x6000, 0x77b) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0}, 0x94) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) unshare(0x8040600) ioctl$PTP_PEROUT_REQUEST2(0xffffffffffffffff, 0x40383d0c, &(0x7f0000000980)={{0x2000000, 0x2000005}, {0x80000000000000, 0xffffffff}, 0x5, 0x6}) r1 = syz_io_uring_setup(0x109, &(0x7f0000000140)={0x0, 0x114db, 0x0, 0x1, 0x89}, &(0x7f00000003c0)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000480)='./file0\x00', 0x46}) io_uring_enter(r1, 0x3518, 0xaddf, 0x2, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0x3, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000080850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2m5.279224744s ago: executing program 8 (id=4417): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x8000000004) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x3a, &(0x7f0000000580)={&(0x7f0000000680)=ANY=[@ANYBLOB="8c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000005000128009000100766c616e0000000040000280060001000000000004000480280003800c00010040000000060000000c0001000004000000000000d8fd010006000000090000000600050088a8000008000a00", @ANYRES32, @ANYBLOB="08000500", @ANYRES32], 0x8c}, 0x1, 0xba01, 0x0, 0x4004001}, 0x0) 2m5.167273866s ago: executing program 8 (id=4419): memfd_secret(0x80000) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, 0x0, 0x0) sendto$inet6(r0, &(0x7f0000000100)="b8", 0x1, 0x24004851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) r1 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x3}}]}, 0x1, 0x5df, &(0x7f00000005c0)="$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") openat(r1, &(0x7f0000000180)='./file1\x00', 0xca6957ff58536d1b, 0x24) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYRES64=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @cgroup_sysctl=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) syz_clone(0x5002400, 0x0, 0x46, 0x0, 0x0, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) syz_emit_ethernet(0x4c, &(0x7f0000000140)={@link_local, @random="ece65fbcee55", @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0x16, 0x11, 0x0, @remote, @mcast2, {[], {0x0, 0xe22, 0x16, 0x0, @gue={{0x2, 0x0, 0x0, 0x7}, "30b08e774e70"}}}}}}}, 0x0) 2m5.078055858s ago: executing program 8 (id=4421): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb7", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000280)='sched_switch\x00', r1}, 0x18) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)=ANY=[@ANYBLOB="bc000000010101080000000000000000000000030800034000000402100005800900010073797a300000000008001540000000040600124000010000080015400000000108001a4000000003580002"], 0xbc}, 0x1, 0x0, 0x0, 0x200000d0}, 0x4000040) r3 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000080000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000a3850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = dup2(r3, r3) ioctl$BLKTRACESETUP(r4, 0xc0481273, &(0x7f0000000240)={'\x00', 0x40, 0xa, 0x1, 0x40000000, 0x10}) ioctl$BLKTRACETEARDOWN(r4, 0x1276, 0x0) 2m4.772069064s ago: executing program 8 (id=4425): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='kfree\x00', r1}, 0x18) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=@newtaction={0xe68, 0x30, 0x871a15abc695fa3d, 0x70bd27, 0x0, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{}, 0x93, 0xfc}, [{0x2, 0x0, 0x0, 0x0, 0xfffffffd}, {0x0, 0xfffffffc, 0x0, 0x1}, {0x1, 0x0, 0x0, 0x4000000, 0x7, 0x80000}, {0x8, 0x5, 0x0, 0xfffffffc, 0x5}, {}, {}, {0x0, 0xc3, 0x0, 0x636e8971, 0x7}, {0x0, 0x5, 0x0, 0x0, 0x1}, {0x5}, {}, {0x0, 0x10}, {0x0, 0x4, 0x0, 0x8000000}, {0x0, 0xffffffff, 0x0, 0x0, 0xfffffffd}, {0x2, 0x0, 0x400000, 0x6, 0x6, 0x1000}, {0x0, 0x0, 0x0, 0x0, 0x3}, {}, {}, {0x0, 0x1000, 0x0, 0x8000000}, {}, {0x0, 0x0, 0x0, 0x0, 0x20}, {0xfffffffd}, {0x2, 0x0, 0x0, 0x2}, {0x8, 0x0, 0x0, 0xfffffffc}, {0x0, 0x2000}, {0x0, 0x0, 0x0, 0x0, 0x4}, {0x0, 0x7, 0x0, 0x0, 0xffffffff}, {0x0, 0x0, 0x0, 0x2, 0x0, 0x3}, {0x0, 0x0, 0x0, 0x0, 0x5, 0xfffffffd}, {0xffffffff}, {}, {0x0, 0x0, 0x0, 0x4, 0xb8a, 0x6}, {0xffffffff}, {}, {}, {}, {0x80000001, 0x0, 0x0, 0x2000000, 0x3}, {}, {0x0, 0x0, 0x0, 0x3, 0x0, 0x5}, {0x0, 0x9, 0x0, 0x0, 0x0, 0x2}, {}, {0x0, 0x0, 0x0, 0x1, 0x3}, {0x80}, {0x0, 0x0, 0x0, 0x5}, {0x0, 0x0, 0x0, 0x0, 0x8}, {0x0, 0x0, 0x8}, {0x8000, 0x0, 0x0, 0x1, 0x9}, {0x3, 0x0, 0x0, 0x0, 0x10}, {}, {}, {0x0, 0x15, 0x0, 0x48510}, {}, {0x0, 0x1, 0x0, 0x3}, {}, {0xfffffffe, 0x0, 0x0, 0x1000000}, {0x0, 0x0, 0x0, 0x0, 0xd, 0xffffffff}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {0x0, 0xfffefffd}, {0x0, 0xfffffffd, 0x0, 0x1}, {}, {0x5, 0x0, 0x8001}, {}, {0x0, 0x0, 0x0, 0x3ff, 0x40000000}, {}, {0x0, 0x7, 0x0, 0x0, 0xfffffffd, 0x400000}, {0x4, 0x0, 0x200}, {}, {}, {0x5}, {}, {0x0, 0x0, 0x0, 0x5, 0x0, 0xfb4}, {}, {0x0, 0x101, 0x0, 0x0, 0x0, 0xffffffff}, {}, {0x0, 0x0, 0x0, 0x1}, {0x20000000, 0x0, 0x0, 0x4, 0x9}, {0xfffffffe}, {0x0, 0x0, 0x0, 0x0, 0x7}, {0x0, 0x2, 0xfffffffc}, {0xef}, {}, {0x0, 0x0, 0x2, 0x0, 0x0, 0x400000}, {0x800000, 0x0, 0x0, 0x0, 0x0, 0x56}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffefffff}, {}, {0x0, 0x0, 0x6, 0x0, 0x4}, {}, {}, {0x0, 0x7091cba, 0x0, 0xfffffffc}, {0x6, 0x0, 0x0, 0x0, 0x0, 0xa144}, {0x7f}, {}, {}, {0x0, 0x2, 0x0, 0x0, 0x0, 0xffffffff}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff8}, {0x3, 0x0, 0x0, 0x4, 0x0, 0x8}, {0x2, 0x0, 0x20000000}, {}, {0x0, 0x0, 0xfffffffe, 0x4eae63d7}, {}, {0x0, 0x3, 0x0, 0x0, 0x0, 0x292}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {}, {0x0, 0x800000, 0x0, 0x0, 0x0, 0x101}, {0x0, 0x5, 0x0, 0x0, 0x1}, {0x0, 0x5}, {0x0, 0x0, 0x0, 0x0, 0x80}, {0x10000000}, {0x0, 0x2e9c}, {0x0, 0x10000000, 0x0, 0x0, 0xfffffffc}, {0x3}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, {}, {0x0, 0x800, 0x0, 0x8}, {0x0, 0x0, 0xc}, {}, {}, {0xfffffffe, 0x0, 0x0, 0x0, 0x8000}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, {}, {}, {0x0, 0x8000}, {0x0, 0x0, 0x10000, 0x20000, 0xfffffffc}, {0x0, 0x80000000, 0x0, 0x7dff800}], [{}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {0x0, 0x1}, {0x0, 0x1}, {}, {}, {}, {0x4}, {}, {}, {0x5}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {}, {0x2}, {}, {}, {0x1, 0x1}, {}, {}, {0x1}, {}, {}, {}, {0x0, 0x1}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x1}, {}, {}, {}, {0x5}, {}, {0x3}, {0x0, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {}, {}, {}, {0x5}, {}, {}, {0x3}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {0x5}, {0x2}, {}, {0x5}, {0x0, 0x1}, {}, {}, {0x4}, {}, {}, {}, {}, {0x1}, {0x2}, {0x5, 0x1}, {0x2}, {0x3, 0x1}, {}, {}, {}, {}, {}, {0x2, 0x1}, {}, {0x0, 0x1}, {}, {0x3}, {0x0, 0x1}, {}, {}, {}, {0x2}, {}, {0x2}, {0x4}, {0x3}, {}, {}, {0x0, 0x1}, {0x2}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe68}}, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0, 0xffffffffffffffff}, 0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x10, &(0x7f0000000a40)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000000)='kmem_cache_free\x00', r4}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) bpf$TOKEN_CREATE(0x24, &(0x7f00000000c0)={0x0, r4}, 0x8) socket(0x10, 0x3, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r5, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000002500)={&(0x7f00000001c0)=ANY=[@ANYBLOB="c8000000", @ANYRES16=r6, @ANYBLOB="010028bd7000000000000c000000180001801400020076657468305f746f5f626f6e640000009c0003809800038090000180840002000091507b350537973af1a09f6a0a22f8cf5cc62fede9e35a9c8b4b280b7cc021fe04a329c2b4e06a9e6a2907837e0e13aa46000000000000006ffa6ffe18e2bf1551e8572a854e8009d26e87f17c252e94ea5e5bf337ab9af020d39448051a0a38e93577073c7917707fe4bce142b8971a5f2be0a4b037a87c58f573ded724070800010002"], 0xc8}}, 0x0) 2m4.771487294s ago: executing program 39 (id=4425): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='kfree\x00', r1}, 0x18) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=@newtaction={0xe68, 0x30, 0x871a15abc695fa3d, 0x70bd27, 0x0, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{}, 0x93, 0xfc}, [{0x2, 0x0, 0x0, 0x0, 0xfffffffd}, {0x0, 0xfffffffc, 0x0, 0x1}, {0x1, 0x0, 0x0, 0x4000000, 0x7, 0x80000}, {0x8, 0x5, 0x0, 0xfffffffc, 0x5}, {}, {}, {0x0, 0xc3, 0x0, 0x636e8971, 0x7}, {0x0, 0x5, 0x0, 0x0, 0x1}, {0x5}, {}, {0x0, 0x10}, {0x0, 0x4, 0x0, 0x8000000}, {0x0, 0xffffffff, 0x0, 0x0, 0xfffffffd}, {0x2, 0x0, 0x400000, 0x6, 0x6, 0x1000}, {0x0, 0x0, 0x0, 0x0, 0x3}, {}, {}, {0x0, 0x1000, 0x0, 0x8000000}, {}, {0x0, 0x0, 0x0, 0x0, 0x20}, {0xfffffffd}, {0x2, 0x0, 0x0, 0x2}, {0x8, 0x0, 0x0, 0xfffffffc}, {0x0, 0x2000}, {0x0, 0x0, 0x0, 0x0, 0x4}, {0x0, 0x7, 0x0, 0x0, 0xffffffff}, {0x0, 0x0, 0x0, 0x2, 0x0, 0x3}, {0x0, 0x0, 0x0, 0x0, 0x5, 0xfffffffd}, {0xffffffff}, {}, {0x0, 0x0, 0x0, 0x4, 0xb8a, 0x6}, {0xffffffff}, {}, {}, {}, {0x80000001, 0x0, 0x0, 0x2000000, 0x3}, {}, {0x0, 0x0, 0x0, 0x3, 0x0, 0x5}, {0x0, 0x9, 0x0, 0x0, 0x0, 0x2}, {}, {0x0, 0x0, 0x0, 0x1, 0x3}, {0x80}, {0x0, 0x0, 0x0, 0x5}, {0x0, 0x0, 0x0, 0x0, 0x8}, {0x0, 0x0, 0x8}, {0x8000, 0x0, 0x0, 0x1, 0x9}, {0x3, 0x0, 0x0, 0x0, 0x10}, {}, {}, {0x0, 0x15, 0x0, 0x48510}, {}, {0x0, 0x1, 0x0, 0x3}, {}, {0xfffffffe, 0x0, 0x0, 0x1000000}, {0x0, 0x0, 0x0, 0x0, 0xd, 0xffffffff}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {0x0, 0xfffefffd}, {0x0, 0xfffffffd, 0x0, 0x1}, {}, {0x5, 0x0, 0x8001}, {}, {0x0, 0x0, 0x0, 0x3ff, 0x40000000}, {}, {0x0, 0x7, 0x0, 0x0, 0xfffffffd, 0x400000}, {0x4, 0x0, 0x200}, {}, {}, {0x5}, {}, {0x0, 0x0, 0x0, 0x5, 0x0, 0xfb4}, {}, {0x0, 0x101, 0x0, 0x0, 0x0, 0xffffffff}, {}, {0x0, 0x0, 0x0, 0x1}, {0x20000000, 0x0, 0x0, 0x4, 0x9}, {0xfffffffe}, {0x0, 0x0, 0x0, 0x0, 0x7}, {0x0, 0x2, 0xfffffffc}, {0xef}, {}, {0x0, 0x0, 0x2, 0x0, 0x0, 0x400000}, {0x800000, 0x0, 0x0, 0x0, 0x0, 0x56}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffefffff}, {}, {0x0, 0x0, 0x6, 0x0, 0x4}, {}, {}, {0x0, 0x7091cba, 0x0, 0xfffffffc}, {0x6, 0x0, 0x0, 0x0, 0x0, 0xa144}, {0x7f}, {}, {}, {0x0, 0x2, 0x0, 0x0, 0x0, 0xffffffff}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff8}, {0x3, 0x0, 0x0, 0x4, 0x0, 0x8}, {0x2, 0x0, 0x20000000}, {}, {0x0, 0x0, 0xfffffffe, 0x4eae63d7}, {}, {0x0, 0x3, 0x0, 0x0, 0x0, 0x292}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {}, {0x0, 0x800000, 0x0, 0x0, 0x0, 0x101}, {0x0, 0x5, 0x0, 0x0, 0x1}, {0x0, 0x5}, {0x0, 0x0, 0x0, 0x0, 0x80}, {0x10000000}, {0x0, 0x2e9c}, {0x0, 0x10000000, 0x0, 0x0, 0xfffffffc}, {0x3}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, {}, {0x0, 0x800, 0x0, 0x8}, {0x0, 0x0, 0xc}, {}, {}, {0xfffffffe, 0x0, 0x0, 0x0, 0x8000}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, {}, {}, {0x0, 0x8000}, {0x0, 0x0, 0x10000, 0x20000, 0xfffffffc}, {0x0, 0x80000000, 0x0, 0x7dff800}], [{}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {0x0, 0x1}, {0x0, 0x1}, {}, {}, {}, {0x4}, {}, {}, {0x5}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {}, {0x2}, {}, {}, {0x1, 0x1}, {}, {}, {0x1}, {}, {}, {}, {0x0, 0x1}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x1}, {}, {}, {}, {0x5}, {}, {0x3}, {0x0, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {}, {}, {}, {0x5}, {}, {}, {0x3}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {0x5}, {0x2}, {}, {0x5}, {0x0, 0x1}, {}, {}, {0x4}, {}, {}, {}, {}, {0x1}, {0x2}, {0x5, 0x1}, {0x2}, {0x3, 0x1}, {}, {}, {}, {}, {}, {0x2, 0x1}, {}, {0x0, 0x1}, {}, {0x3}, {0x0, 0x1}, {}, {}, {}, {0x2}, {}, {0x2}, {0x4}, {0x3}, {}, {}, {0x0, 0x1}, {0x2}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe68}}, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0, 0xffffffffffffffff}, 0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x10, &(0x7f0000000a40)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000000)='kmem_cache_free\x00', r4}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) bpf$TOKEN_CREATE(0x24, &(0x7f00000000c0)={0x0, r4}, 0x8) socket(0x10, 0x3, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r5, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000002500)={&(0x7f00000001c0)=ANY=[@ANYBLOB="c8000000", @ANYRES16=r6, @ANYBLOB="010028bd7000000000000c000000180001801400020076657468305f746f5f626f6e640000009c0003809800038090000180840002000091507b350537973af1a09f6a0a22f8cf5cc62fede9e35a9c8b4b280b7cc021fe04a329c2b4e06a9e6a2907837e0e13aa46000000000000006ffa6ffe18e2bf1551e8572a854e8009d26e87f17c252e94ea5e5bf337ab9af020d39448051a0a38e93577073c7917707fe4bce142b8971a5f2be0a4b037a87c58f573ded724070800010002"], 0xc8}}, 0x0) 1m18.78527122s ago: executing program 2 (id=5383): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000000850000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r2 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000200)=0x1, 0x4) connect$inet(r2, &(0x7f0000000380)={0x2, 0x4e25, @dev={0xac, 0x14, 0x14, 0x3e}}, 0x10) 1m18.754977621s ago: executing program 2 (id=5385): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote, 0x9}, 0x1c) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) sendmmsg$inet(r2, &(0x7f0000001040)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f0000000800)="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", 0x2de}, {&(0x7f0000000bc0)="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", 0x1e9}, {&(0x7f0000000240)="05437c98b91b1455046f57b5fc913814bde2bbeac2104eaea9c9d01a7838d859207067c10aa7352abbdf98e9bf033a3184a11e84639d3b9164d9c5d729f3dd409d39ff041e657c8df70e1607d58c863d5f323f6d5cf367cd939f790732e8d2310e876fcb299cd44b72bda697035b7b475bc35afbb483db39ac864dbee0c9760c22a1d32d83588afd7c994652413b22db76874ca052ef2013317eb7fcc5677e", 0x9f}, {&(0x7f0000000200)="f610e61fc81cc3edc86f0500194d27a5a42cf1880b0dfd1ecda0fd0e", 0x1c}, {&(0x7f00000000c0)="714cbd", 0x3}], 0x5, 0x0, 0x0, 0x900}}], 0x2, 0x0) 1m18.712642451s ago: executing program 2 (id=5387): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000015c0)=ANY=[], 0x50) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='rss_stat\x00', r0}, 0x18) r1 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00'}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, 0x0, 0x0) 1m18.652356453s ago: executing program 2 (id=5388): r0 = syz_open_procfs(0x0, &(0x7f0000000480)='task\x00') r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014fa0000b7030000000008008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000020000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r4, 0x800448d5, 0x0) bind$bt_hci(r4, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x200008f, &(0x7f00000003c0), 0x0, 0x554, &(0x7f0000000980)="$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") mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r3, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000300)={'#! ', '', [{0x20, 'memory.events\x00'}]}, 0x13) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_wait_time\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000004, 0x28011, r6, 0x0) ftruncate(r6, 0x796c) write$UHID_INPUT(r6, &(0x7f0000001300)={0x8, {"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", 0x1000}}, 0x1006) perf_event_open(&(0x7f0000000140)={0x8, 0x80, 0x7, 0xff, 0x0, 0x3, 0x82, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x7}, 0x8080, 0x0, 0x20, 0x1, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x10000000000007}, 0xffffffffffffffff, 0x1, r6, 0x3) perf_event_open(&(0x7f0000000400)={0x8, 0x80, 0x0, 0x94, 0x10, 0x0, 0x82, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0xb}, 0x1, 0x45}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x1e, 0x12, r7, 0x0) fchdir(r0) r8 = syz_clone(0x20300000, 0x0, 0x0, 0x0, 0x0, 0x0) write$vga_arbiter(r7, &(0x7f0000000200), 0xf) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) syz_open_procfs(r8, &(0x7f00000000c0)='maps\x00') 1m18.306729559s ago: executing program 2 (id=5393): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001ec0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfe37}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r0, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="b907ef19edfff007049e0ff0888e", 0x0, 0x6000, 0x18000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 1m17.862154478s ago: executing program 2 (id=5398): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000400000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89001) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="1b00"/11], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) mount_setattr(r1, &(0x7f0000001d80)='.\x00', 0x8000, &(0x7f0000001dc0)={0x0, 0x0, 0x40000}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sys_enter\x00', r0}, 0x10) r4 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000200)=0x1, 0x4) connect$inet(r4, &(0x7f0000000380)={0x2, 0x4e25, @dev={0xac, 0x14, 0x14, 0x3e}}, 0x10) sendmmsg(r4, &(0x7f0000006140)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000740)="65c6d96326a838047976a77611d4c4ecc94b3585c42786716ad7c93fd3a228e9a1cd93801f5b4033ea9ae2b561128c2893aba2af73f86ac4a65917672e186b297cada86c7b329c4831efa7d660040c757e6ce437d7853ac2cca9605a2e18bf6529e94453fac161511f4483dc8b5294583cc78cd79fb68fb57bd8697ac1639517070e92cd2d36932b0e26cf8fdd87e817f08f7d937282c63371e22e43e8ab5c2b3d851d147f260004a12512be6e3b6b48a430a4e4747a28d766c634658499181a54867295ad5496ef6eed69b0da6b885004a5bc869e090798f4a1139e098f282ab4aefc8a67fe2087e1eadd30c54f4c87b1fb7a", 0xf3}, {&(0x7f00000002c0)="b16b5d1ddcad4b5eedb9593060ada4a1778939f40388ef540871ce291c1010f3310edf7028093cf8709632cad4866d5e448d5385c80db3518564b1194247acfb3b463ee97c794123a991311e51e1790748a23c3301974b905bbd18b3e54cb3cc90c180fba7461df205130349d430083d2c66", 0x72}], 0x2}}], 0x1, 0x4000) close(r4) 1m17.862044248s ago: executing program 40 (id=5398): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000400000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89001) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="1b00"/11], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) mount_setattr(r1, &(0x7f0000001d80)='.\x00', 0x8000, &(0x7f0000001dc0)={0x0, 0x0, 0x40000}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sys_enter\x00', r0}, 0x10) r4 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000200)=0x1, 0x4) connect$inet(r4, &(0x7f0000000380)={0x2, 0x4e25, @dev={0xac, 0x14, 0x14, 0x3e}}, 0x10) sendmmsg(r4, &(0x7f0000006140)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000740)="65c6d96326a838047976a77611d4c4ecc94b3585c42786716ad7c93fd3a228e9a1cd93801f5b4033ea9ae2b561128c2893aba2af73f86ac4a65917672e186b297cada86c7b329c4831efa7d660040c757e6ce437d7853ac2cca9605a2e18bf6529e94453fac161511f4483dc8b5294583cc78cd79fb68fb57bd8697ac1639517070e92cd2d36932b0e26cf8fdd87e817f08f7d937282c63371e22e43e8ab5c2b3d851d147f260004a12512be6e3b6b48a430a4e4747a28d766c634658499181a54867295ad5496ef6eed69b0da6b885004a5bc869e090798f4a1139e098f282ab4aefc8a67fe2087e1eadd30c54f4c87b1fb7a", 0xf3}, {&(0x7f00000002c0)="b16b5d1ddcad4b5eedb9593060ada4a1778939f40388ef540871ce291c1010f3310edf7028093cf8709632cad4866d5e448d5385c80db3518564b1194247acfb3b463ee97c794123a991311e51e1790748a23c3301974b905bbd18b3e54cb3cc90c180fba7461df205130349d430083d2c66", 0x72}], 0x2}}], 0x1, 0x4000) close(r4) 3.192806327s ago: executing program 1 (id=6396): r0 = eventfd2(0xb, 0x800) tee(0xffffffffffffffff, r0, 0xa6ed, 0x0) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) r1 = getpid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) fcntl$setownex(r0, 0xf, &(0x7f0000000000)={0x2, r1}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000740)=@framed, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x18) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) r6 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000840)='./file0\x00', &(0x7f0000000080), 0x18) utimensat(r6, 0x0, &(0x7f0000000880)={{0x0, 0xea60}, {0x0, 0x3ffffffe}}, 0x0) unshare(0x64000600) syz_open_dev$usbfs(&(0x7f0000000080), 0x74, 0x101301) 2.56662116s ago: executing program 4 (id=6403): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) socket(0x2, 0x80805, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r2, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) setsockopt(r0, 0x84, 0x80, &(0x7f00000002c0)="1a00000002000000", 0x8) 2.547545641s ago: executing program 4 (id=6404): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) socket(0x2, 0x80805, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r2, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) setsockopt(r0, 0x84, 0x80, &(0x7f00000002c0)="1a00000002000000", 0x8) (fail_nth: 1) 2.487223172s ago: executing program 4 (id=6405): socket$netlink(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="18010000008000000000000000000004850000006d00000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) sched_setscheduler(0x0, 0x2, 0x0) syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x30000c6, &(0x7f00000000c0), 0x2, 0x572, &(0x7f0000001600)="$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") perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x24, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x20005, 0xb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='kfree\x00', r4}, 0x9) openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000180), 0x10280, 0x0) sendmsg$ETHTOOL_MSG_COALESCE_GET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000fbdb0cf81c000000180001801400020074756e6c30"], 0x2c}}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002006e6c3830323131"], 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x40050) bpf$PROG_LOAD(0x5, &(0x7f00000012c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000160000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x20042, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000840000"], 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r6}, 0x10) r7 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r7, 0x11b, 0x4, &(0x7f0000000100)={0x0, 0x204000, 0x1000}, 0x20) fallocate(r5, 0x0, 0x0, 0x8000c62) r8 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) sendfile(r8, r8, 0x0, 0x100000800000009) 2.485197351s ago: executing program 9 (id=6406): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x210000, &(0x7f0000002f40)={[{@nodelalloc}, {@dioread_lock}, {@barrier_val={'barrier', 0x3d, 0x4}}, {@nolazytime}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x5}}, {@bh}, {@init_itable}]}, 0xfc, 0x56f, &(0x7f0000003780)="$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") truncate(&(0x7f0000000900)='./file1\x00', 0x3000000) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r1, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r2}, 0x18) write$binfmt_elf64(r0, &(0x7f0000000980)=ANY=[], 0x5b0) r3 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$inet(r3, &(0x7f0000000400)={&(0x7f00000000c0)={0x2, 0x4e21, @local}, 0x10, 0x0, 0x0, &(0x7f00000005c0)=[@ip_retopts={{0x18, 0x0, 0x7, {[@generic={0x94, 0x4, "de8a"}, @ra={0x94, 0x4}]}}}], 0x18}, 0x80) lseek(0xffffffffffffffff, 0x89, 0x1) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), r0) sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000380)={0x58, r4, 0x4, 0x70bd26, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DAEMON={0x3c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @loopback}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'wg1\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @local}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x9}]}, 0x58}}, 0x80) close(r0) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0) r5 = socket$can_bcm(0x1d, 0x2, 0x2) recvmsg$can_bcm(r5, &(0x7f0000000700)={&(0x7f00000002c0)=@ax25={{0x3, @bcast}, [@bcast, @rose, @netrom, @remote, @default, @rose, @default, @null]}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000380)=""/27, 0x1b}, {&(0x7f00000003c0)=""/171, 0xab}, {&(0x7f0000000480)=""/76, 0x4c}, {&(0x7f0000000940)=""/4096, 0x1000}, {&(0x7f0000000500)=""/100, 0x64}], 0x5, &(0x7f0000000600)=""/255, 0xff}, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000100)=0x3, 0x8) capset(&(0x7f0000000100)={0x20071026}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x81, 0xfffffffb}) r6 = syz_open_dev$loop(&(0x7f0000000040), 0x7, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000080000085000000d0000000a50000009700000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000000)='sys_enter\x00', r7, 0x0, 0x680}, 0x18) rt_sigqueueinfo(0x0, 0x33, 0x0) ioctl$LOOP_SET_STATUS(r6, 0x4c02, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) write$binfmt_register(r8, &(0x7f0000000080)={0x3a, 'syz2', 0x3a, 'E', 0x3a, 0x4, 0x3a, '-}\\', 0x3a, '', 0x3a, './file1'}, 0x2a) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000b80)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb70200"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2.306416944s ago: executing program 1 (id=6407): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000"], 0x0}, 0x94) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x22a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x1, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x1) r1 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r0}, 0x8) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000130000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r2}, &(0x7f0000000280), &(0x7f00000002c0)=r3}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r4}, 0x10) close(r1) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) syz_clone(0x20083500, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) r5 = openat$sysfs(0xffffff9c, &(0x7f00000037c0)='/sys/kernel/notes', 0x0, 0x0) r6 = syz_io_uring_setup(0xbdc, &(0x7f0000000080)={0x0, 0xec21, 0x80, 0x1, 0x40000333}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r7, r8, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r5, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1, 0x0, 0x1}) io_uring_enter(r6, 0x847ba, 0x2000, 0xe, 0x0, 0x0) 2.246091226s ago: executing program 4 (id=6409): syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x20c006, &(0x7f0000000480)={[{@debug}, {@mblk_io_submit}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@lazytime}, {@discard}, {@grpquota}], [{@seclabel}]}, 0x1, 0x446, &(0x7f0000000d40)="$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") syz_clone3(&(0x7f0000000780)={0x1c3002480, 0x0, 0x0, 0x0, {0x2b}, 0x0, 0x0, 0x0, 0x0}, 0x58) r0 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xf, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000003000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, &(0x7f0000000380)=0x0, &(0x7f0000000440)=0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8aba5d4b34740a93, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r1, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000500)='btrfs_writepage_end_io_hook\x00', r3}, 0x18) r4 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r4, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) connect$vsock_stream(r4, &(0x7f0000000400)={0x28, 0x0, 0x2710, @host}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={0x0, r2, 0x0, 0xb}, 0x18) unshare(0xa000200) socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x34120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000016"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0700000004000000000100000100000028"], 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r6, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='kfree\x00', r7, 0x0, 0x7}, 0x18) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x32, 0x1, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x430, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xff1e0a118c8c8d0d, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r8}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet6(0xa, 0x80001, 0x0) creat(&(0x7f00000002c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f00000001c0), 0x0) 2.078302749s ago: executing program 1 (id=6410): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000001a00)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x40}}, 0x10) connect$inet(r1, &(0x7f0000000040)={0x2, 0x4e24, @multicast1}, 0x10) setsockopt$inet_udp_int(r1, 0x11, 0x67, &(0x7f0000000080)=0x6, 0x4) sendto$inet(r1, &(0x7f00000000c0)="8689d46205a341", 0xffe3, 0x4000080, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000d80)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000580)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x2a, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) syz_open_dev$usbfs(&(0x7f0000000080), 0x76, 0x40702) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) socketpair$unix(0x1, 0x1, 0x0, 0x0) epoll_create1(0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) 1.992016031s ago: executing program 4 (id=6411): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0x7fff}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r0}, &(0x7f0000000200), &(0x7f0000000240)}, 0x20) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0x2}) readv(r2, &(0x7f00000001c0)=[{&(0x7f0000001400)=""/227, 0x10}], 0x4) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) 1.889076463s ago: executing program 7 (id=6412): syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x30000c6, &(0x7f00000000c0), 0x2, 0x572, &(0x7f0000001600)="$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") r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000012c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000160000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x20042, 0x1) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) fallocate(r1, 0x0, 0x0, 0x8000c62) 1.714906716s ago: executing program 7 (id=6413): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2042, 0x0) ioctl$AUTOFS_IOC_FAIL(r2, 0x4c80, 0x7000000) 1.619937018s ago: executing program 9 (id=6414): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000012c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000160000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f0000000100)={0x0, 0x204000, 0x1000}, 0x20) 1.50558186s ago: executing program 7 (id=6415): syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x80040c, &(0x7f00000001c0), 0x1, 0x5e8, &(0x7f0000001200)="$eJzs3c9vFdUeAPDv3P6gpbzXQl7ee7iQJsZAorS0gCHGBWwNafBH3Lix0oJIgYbWaNGEkuDGxLgxxsSVC/G/UCJbVrpy4caVISFqWJp4zdzOlP6Y2x+X207T+XySS2fOmeGc4fLtOXPuOXMDqKzB9I9axMGImE4i+pP5xbzOyDIHF4579OdH59NXEvX6a78nkWRp+fFJ9rMvO7knIn78IYkDHavLnZm7cXl8amryerY/PHtlenhm7sbRS1fGL05enLw6+sLoqZMnTp4aOdbSdd0sSDt7+933+z8Ze/Obr/5KRr79ZSyJ0/FyduDS62iXwRhs/Jskq7P6TrW7sJJ0ZP9Plr7FSWeJFWJT8vevKyL+F/3REY/fvP74+JVSKwdsqXoSUQcqKhH/UFF5PyC/t195H1wrpVcCbIeHZxYGAFbHf+fC2GD0NMYG9j5KYumwThIRrY3MLbcvIu7fG7t94d7Y7diicTig2PytiPh/UfwnjfgfiJ4YaMR/bVn8p/2Cc9nPNP3VFstfOVQs/mH7LMR/z5rxH03i/60l8f92i+UPPt58p3dZ/Pe2ekkAAAAAAABQWXfPRMTzRZ//1xbn/0TB/J++iDjdhvIHV+yv/vy/9qANxQAFHp6JeKlw/m8tn/070JFt/asxH6AruXBpavJYRPw7Io5E1550f2SNMo5+euDLZnmD2fy//JWWfz+bC5jV40HnnuXnTIzPjj/pdQMRD29FPFU4/zdZbP+TgvY//X0wvcEyDjx751yzvPXjH9gq9a8jDhe2/4+fWpGs/XyO4UZ/YDjvFaz29Ieffdes/Fbj3yMm4Mml7f/eteN/IFn6vJ6ZzZdxfK6z3iyv1f5/d/J645Ez3VnaB+Ozs9dHIrqTsx1p6rL00c3XGXajPB7yeEnj/8gza4//FfX/eyNifsXfnfyxfE1x7r9/9/3arD76/1CeNP4nNtX+b35j9M7A983K31j7f6LR1h/JUoz/wYIv8jDtXp5eEI6dRVnbXV8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA2A1qEbEvktrQ4natNjQU0RcR/4m9talrM7PPXbj23tWJNK/x/f+1/Jt++xf2k/z7/weW7I+u2D8eEfsj4vOO3sb+0PlrUxNlXzwAAAAAAAAAAAAAAAAAAADsEH1N1v+nfusou3bAlussuwJAaQri/6cy6gFsP+0/VJf4h+oS/1Bd4h+qq8X472p3PYDtp/2H6hL/UF3iHwAAAAAAdpX9h+7+nETE/Iu9jVeqO8szvwd2t1rZFQBK4xE/UF2m/kB1uccHknXye5qetN6Za5k+/wQnAwAAAAAAAAAAAEDlHD5o/T9UlfX/UF3W/0N15ev/D5VcD2D7uccHYp2V/IXr/9c9CwAAAAAAAAAAAABop5m5G5fHp6Ymr9t4Y2dUox0b6Tu7kYPr9frNxrEtlbVnB1zpjtrIp8LvlPqs2MjX+m3srNJ+JQEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACv8EwAA//8IGSKz") unshare(0x22020600) unshare(0x200) socket$netlink(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005c40)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000640)=@newtaction={0x18, 0x30, 0x9, 0x0, 0x0, {}, [{0x4}]}, 0x18}}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) open(&(0x7f0000000240)='./bus\x00', 0x143142, 0x146) r2 = socket$igmp6(0xa, 0x3, 0x3a) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$MRT6_ADD_MFC(r2, 0x29, 0x22, &(0x7f0000000000)={{0xa, 0x0, 0x101, @loopback, 0xa3c}, {0xa, 0xfffe, 0xfffffffd, @dev, 0x4}, 0x1000, {[0x9, 0x0, 0xfffffffe, 0xfffffef9, 0x0, 0x1, 0x2]}}, 0x5c) 1.491079941s ago: executing program 9 (id=6416): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2042, 0x0) ioctl$AUTOFS_IOC_FAIL(r2, 0x4c80, 0x7000000) 1.480757601s ago: executing program 9 (id=6417): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000001a00)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x40}}, 0x10) connect$inet(r1, &(0x7f0000000040)={0x2, 0x4e24, @multicast1}, 0x10) setsockopt$inet_udp_int(r1, 0x11, 0x67, &(0x7f0000000080)=0x6, 0x4) sendto$inet(r1, &(0x7f00000000c0)="8689d46205a341", 0xffe3, 0x4000080, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000d80)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000580)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x2a, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) syz_open_dev$usbfs(&(0x7f0000000080), 0x76, 0x40702) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) epoll_create1(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r6}, 0x10) syz_clone(0x6a000000, 0x0, 0x0, 0x0, 0x0, 0x0) 1.431247602s ago: executing program 7 (id=6418): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x210000, &(0x7f0000002f40)={[{@nodelalloc}, {@dioread_lock}, {@barrier_val={'barrier', 0x3d, 0x4}}, {@nolazytime}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x5}}, {@bh}, {@init_itable}]}, 0xfc, 0x56f, &(0x7f0000003780)="$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") truncate(&(0x7f0000000900)='./file1\x00', 0x3000000) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={0xffffffffffffffff, 0x0, 0x0}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000059000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r1}, 0x18) write$binfmt_elf64(r0, &(0x7f0000000980)=ANY=[], 0x5b0) r2 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$inet(r2, &(0x7f0000000400)={&(0x7f00000000c0)={0x2, 0x4e21, @local}, 0x10, 0x0, 0x0, &(0x7f00000005c0)=[@ip_retopts={{0x18, 0x0, 0x7, {[@generic={0x94, 0x4, "de8a"}, @ra={0x94, 0x4}]}}}], 0x18}, 0x80) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='net/igmp6\x00') lseek(r3, 0x89, 0x1) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), r0) sendmsg$IPVS_CMD_SET_CONFIG(r3, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000380)={0x58, r4, 0x4, 0x70bd26, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DAEMON={0x3c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @loopback}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'wg1\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @local}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x9}]}, 0x58}}, 0x80) close(r0) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0) r5 = socket$can_bcm(0x1d, 0x2, 0x2) recvmsg$can_bcm(r5, &(0x7f0000000700)={&(0x7f00000002c0)=@ax25={{0x3, @bcast}, [@bcast, @rose, @netrom, @remote, @default, @rose, @default, @null]}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000380)=""/27, 0x1b}, {&(0x7f00000003c0)=""/171, 0xab}, {&(0x7f0000000480)=""/76, 0x4c}, {&(0x7f0000000940)=""/4096, 0x1000}, {&(0x7f0000000500)=""/100, 0x64}], 0x5, &(0x7f0000000600)=""/255, 0xff}, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000100)=0x3, 0x8) capset(&(0x7f0000000100)={0x20071026}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x81, 0xfffffffb}) r6 = syz_open_dev$loop(&(0x7f0000000040), 0x7, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000080000085000000d0000000a50000009700000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) rt_sigqueueinfo(0x0, 0x33, 0x0) ioctl$LOOP_SET_STATUS(r6, 0x4c02, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000b80)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 1.397077193s ago: executing program 0 (id=6419): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}}, 0x0, 0x0, 0x0, 0x0, 0x41002, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r0}, 0x18) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) r3 = syz_io_uring_setup(0x49a, 0x0, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x40, 0x0, r1, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0, 0x40000120, 0x4aa52520f215cfe4, {0x2}}) io_uring_enter(r3, 0x154e, 0x0, 0x41, 0x0, 0x0) 1.154523047s ago: executing program 1 (id=6420): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000400)=@newqdisc={0x38, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_pie={{0x8}, {0xc, 0x2, [@TCA_PIE_BETA={0x4}]}}]}, 0x38}}, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000240), 0xe, 0x101301) ioctl$USBDEVFS_RELEASE_PORT(r3, 0x80045519, &(0x7f0000000480)=0x6) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) mq_open(0x0, 0x42, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r4}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000580)='kmem_cache_free\x00', r6}, 0x18) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r7, 0x24, &(0x7f0000001100)={0x0, 0x0, 0x0, 0x1, 0xffffffffffffffff}) setsockopt$MRT6_INIT(r7, 0x29, 0xc8, &(0x7f00000001c0), 0x4) syz_emit_ethernet(0x6e, &(0x7f0000000080)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x38, 0x3a, 0x0, @remote, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x5dc, {0x0, 0x6, "8cb02b", 0x0, 0x2f, 0x0, @loopback={0x4000000}, @local, [@srh={0x2b, 0x0, 0x4, 0x0, 0x0, 0x10}]}}}}}}}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000200)='ext4_da_reserve_space\x00', r5, 0x0, 0x7fff}, 0x18) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x64, 0x0, 0x0, 0x0, 0x0, 0x4, 0x91957, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_bp={&(0x7f0000000180), 0xe}, 0x2012, 0x0, 0x2, 0x2, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) openat$sndseq(0xffffffffffffff9c, 0x0, 0x62181) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0x5, 0x0, 0x0) epoll_create(0x3) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) acct(0x0) 1.0392746s ago: executing program 4 (id=6421): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="190000000400000008000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x161281, 0x0) write$binfmt_aout(r2, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c812e5d6000"}) r3 = syz_open_pts(r2, 0x0) ioctl$TCSETSF(r3, 0x5404, &(0x7f0000000180)={0x38000, 0x8, 0x0, 0x2, 0x5, "aa32b73986bbee6bd231334cbfa0b758261a93"}) r4 = socket$inet_udp(0x2, 0x2, 0x0) recvmsg(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)=""/15, 0xf}, {0x0}], 0x2}, 0x0) bind$inet(r4, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0xbe, &(0x7f0000000680)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x1, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x4e24, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x1, "65a252e7cb7a5918c004a9971a46afced2c32642b1ec9fe34818d8ccd82041b7", "c930713c550e74ee13c2638ac75b2a9666efd31a34fce4498df8105d8bd8ed283a220c3a9becd8a70d3607ea8270d351", "ae12e16b560f2f8ac4ca3e745ce285f12f6e8719e7f1e7f286a68f76", {"980aa8fb8f80d69f1fb587086447e93e", "55e824bb69e833bd36300b088233545a"}}}}}}}, 0x0) 985.655441ms ago: executing program 41 (id=6421): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="190000000400000008000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x161281, 0x0) write$binfmt_aout(r2, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c812e5d6000"}) r3 = syz_open_pts(r2, 0x0) ioctl$TCSETSF(r3, 0x5404, &(0x7f0000000180)={0x38000, 0x8, 0x0, 0x2, 0x5, "aa32b73986bbee6bd231334cbfa0b758261a93"}) r4 = socket$inet_udp(0x2, 0x2, 0x0) recvmsg(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)=""/15, 0xf}, {0x0}], 0x2}, 0x0) bind$inet(r4, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0xbe, &(0x7f0000000680)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x1, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x4e24, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x1, "65a252e7cb7a5918c004a9971a46afced2c32642b1ec9fe34818d8ccd82041b7", "c930713c550e74ee13c2638ac75b2a9666efd31a34fce4498df8105d8bd8ed283a220c3a9becd8a70d3607ea8270d351", "ae12e16b560f2f8ac4ca3e745ce285f12f6e8719e7f1e7f286a68f76", {"980aa8fb8f80d69f1fb587086447e93e", "55e824bb69e833bd36300b088233545a"}}}}}}}, 0x0) 592.624148ms ago: executing program 9 (id=6423): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007b00", @ANYRES32, @ANYBLOB], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000280)='sched_switch\x00', r0, 0x0, 0x3}, 0x18) kexec_load(0xffffffff, 0x1, &(0x7f0000000380)=[{&(0x7f00000007c0)="840cf90f3ca0a76ef8a03911b2af237865f461cd4579fd0f2861b47260f4ac334a122b727295cbb6d23195a5f8288f9366a99ec1f4f4c5ddf61c34ac77614c7f3b38e7112b81f6f0eb2f216b293b2165316603eb53a33c5d178a0a7c49c8cb13da6fecf564d965956917ac", 0x6b, 0x6}], 0x30002) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000580)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000f9116b5d4c31cd375c72709c2945dd7635989e2b4c3028ceb3a7b0c1f18f7c0faa4aa095c04cb31a2792f31946878fe3c7f52b0e02501395ec34398e78202d4843013b86b34643042ed824d0bd11e6c213efb09441043480637139f2aaa2efe1f53a9863d7e2e69411717410caaa2966d8e4481df372cff044c99e66675ecbaf77370f85c873655a9b"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r1}, 0x18) faccessat2(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup\x00', 0x7, 0x1100) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000740)={{r2}, &(0x7f00000006c0), &(0x7f0000000700)='%pS \x00'}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r3}, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x8946, 0x0) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x4008804) r5 = syz_clone(0x6a000000, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x3, @perf_bp={0x0, 0x4}, 0xa825ac5c68ab40cc, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, r5, 0x6, 0xffffffffffffffff, 0x2) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) vmsplice(r7, 0x0, 0x0, 0x1) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000d00)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="5800000002060102000034e40000000000000003050001000600000005000400000000000900020073797a3100000000050005000200000011000300686173683a69702c706f7274000000000c00"], 0x58}, 0x1, 0x0, 0x0, 0xc5dff1b4c279acea}, 0x2) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="50000000090601020000000000000000020000000900020073797a31000000000500010007000000280007800c00018008000140ffffffff0500070084000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x4000}, 0x80) 518.8081ms ago: executing program 7 (id=6424): r0 = socket$packet(0x11, 0x3, 0x300) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000004f4b000000000000000000180100002020702000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000fdffffff850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_clone(0x630c1100, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETOBJ(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x20, 0x13, 0xa, 0x3, 0x0, 0x0, {0x1, 0x0, 0x2}, [@NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x40000800}, 0x8000) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c0000005e00679a3601ffc4910700004f78d4c1a0731cccff"], 0x1c}}, 0x0) sendto(r2, &(0x7f00000001c0)="6a1a2752f24983f0581b7c5f7c0fe3b48df6d3cc70636351d6", 0x19, 0x40000, &(0x7f0000000300)=@hci={0x1f, 0x1}, 0x80) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) recvmmsg$unix(r2, &(0x7f0000002380)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000440)=[{0x20, 0x0, 0x0, 0xfffff010}, {0x6}]}, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000004c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000040), 0x81, r5}, 0x38) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2d, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r6, 0x0, 0x6}, 0x18) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) mbind(&(0x7f00005b4000/0x4000)=nil, 0x100000000004000, 0x0, 0x0, 0x0, 0x2) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0xf, &(0x7f00000004c0)=ANY=[@ANYBLOB="180000000800000000411fa9fa00000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x5, 0x0, 0x0, 0x41000, 0x60, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4004}, 0x94) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000fbff000000000000001d8500000007000000a50000002a00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f00000001c0)='kmem_cache_free\x00', r7}, 0x10) r8 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r8, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[], 0x28}, 0x1, 0x0, 0x0, 0x68010}, 0x0) 467.283221ms ago: executing program 0 (id=6425): bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="07000000040000000001000001"], 0x50) (async) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="07000000040000000001000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0x7}, 0x18) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0x7}, 0x18) fsconfig$FSCONFIG_CMD_RECONFIGURE(0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0) (async) fsconfig$FSCONFIG_CMD_RECONFIGURE(0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$inet6(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000380)='neigh_update\x00', r5}, 0x10) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="020d0000100000000000000000000000080012000200020000000000000000001000000003000000000000000000000010000000000000000000000000000000fc020000000000000000000000000000030005000000000002000000ac1414aa0000000000000000030006000000000002"], 0x80}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) (async) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x2000007d, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000059"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000380)='neigh_update\x00', r8}, 0x10) r9 = open(&(0x7f0000000340)='./cgroup\x00', 0x0, 0x120) getdents(r9, &(0x7f0000000000)=""/78, 0x4e) getdents64(r9, 0xfffffffffffffffe, 0x41) sendto$inet6(r4, &(0x7f00000000c0)="900000001c001f4d154a817393278bff0a80a578020000000104740014000100ac1414bb0542d6401051a2d708f37ac8da1a297e0099c5ac0000c5b068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000760700c0c80cefd28581d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee9aa241731ae9e0b390", 0x90, 0x0, 0x0, 0x0) r10 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB="48020000", @ANYRES16=r10, @ANYBLOB="01002cbd7000ffdbdf250c000000180001801400020076657468315f746f5f626174616476001c000380180003800c000180080001800000010003000000"], 0x48}, 0x1, 0x0, 0x0, 0x818}, 0x20000004) 466.994591ms ago: executing program 0 (id=6426): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2042, 0x0) ioctl$AUTOFS_IOC_FAIL(r2, 0x4c80, 0x7000000) 451.006541ms ago: executing program 0 (id=6427): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000012c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000160000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f0000000100)={0x0, 0x204000, 0x1000}, 0x20) 422.693621ms ago: executing program 0 (id=6428): bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1b000000000000000000000000802f8de3b537d825c79dbd82e1141b415a963cd9e3ed175d5dece7e40cd9ff8aa632474df3c32398165aaaa53df70eb7d76e9c960fd23960378075d2206d8a14fbf02c1bb1f86de3a9184a2a5684948b8b82185f30533507323fbc000000e92cc7e8cacdabce2baebf4c414a7318109312b1bb5c4b94516f6a18e8fa1913da8c64209206af0daebf640198727dc2bd7c6e4c0c00a72a7c0edab3b2e885acac5d2026b81bd98040651b9f6739a1443c49fac455f1f2fea73e6b4577e7f1554ad14fe6a3e99d84a5ee6aeb73e11b94758bbb2ed035dda4c73b20d413257eb5c88f6dd632550543b4f401b1f0e07ec9dc94ff8298a382899e2f2aafe37d3265a3c5a42b77d2f307d52a6f23542b73c3c2d2b200e9a0c4ecfc64f1cc6b6026b4306529104d8566ce40077842a227496c2e8c0d6b58516728dfb38d24a67130c0e03c4e96c3297176e58ae94700"], 0x50) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4000000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="81ffffff00000000180012800e0001007769726567756172640000000400028008000a00bc"], 0x40}}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000180)='host1x_channel_submitted\x00', r1, 0x0, 0xfffffffffffffffd}, 0x18) lsetxattr$security_capability(&(0x7f0000000080)='./cgroup/cgroup.procs\x00', &(0x7f0000000240), &(0x7f00000001c0)=@v3={0x3000000, [{0x1, 0x2}, {0x1002, 0xffffffc0}]}, 0x18, 0x0) lchown(&(0x7f0000000000)='./cgroup/cgroup.procs\x00', 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffffffffffff27}, 0x41) r3 = syz_clone(0xc0000, 0x0, 0x6, 0x0, 0x0, 0x0) pidfd_send_signal(0xffffffffffffffff, 0x2, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) ioctl$BLKTRACESETUP(r4, 0xc0481273, &(0x7f0000000b40)={'\x00', 0x7, 0x2a4, 0x8, 0x0, 0x4000000000000005}) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x80, 0x1, 0x0, 0x0, 0x0, 0x10001, 0x530, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_bp={0x0, 0x2}, 0x0, 0x10008, 0x7, 0x1, 0x8, 0xa0002, 0xb, 0x0, 0x750, 0x0, 0x8001}, r3, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) r6 = dup2(r4, r4) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'team0\x00', 0x0}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001340)={0x0, r6, 0x0, 0x6}, 0x18) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) ioctl$TIOCVHANGUP(r8, 0x5437, 0x0) syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x1}, 0x94) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') ioctl$TIOCL_BLANKSCREEN(0xffffffffffffffff, 0x4b67, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xc, &(0x7f0000000700)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0b827168f80c3f3216cf760cc18baf884ee07375a60b4901aaf30b100b0e"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r7, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) 201.687526ms ago: executing program 1 (id=6429): r0 = syz_open_dev$sg(&(0x7f0000000280), 0x0, 0x22c43) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0x7, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000700)={&(0x7f00000006c0)='kmem_cache_free\x00', r2}, 0x10) syz_emit_ethernet(0x83, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030486dd601b8b97004d88c19e9ace00000000000000002100000002ff02000000000000000000000000000104004e200023b0"], 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a000000020000"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xf, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000003000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', 0xffffffffffffffff, 0x0, 0x8}, 0x18) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f00000000c0)=ANY=[@ANYRES64=r0]) 156.343127ms ago: executing program 1 (id=6430): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0x4, &(0x7f0000000040)=ANY=[], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) socket(0x29, 0x6, 0x8) bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="0b00000000cf1c7b1808d17e7dffff5377c495fdf065b435ffb579e8e3e96b31c5"], 0x48) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4) recvmmsg(r1, &(0x7f0000000480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=""/11, 0x17}}], 0x400000000000179, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x6, 0x0, 0x8100, 0x0, {0xc3}, {}, {0xe, 0xd}}, [@TCA_RATE={0x6}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0) syz_usb_connect(0x2, 0x2d, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000459bb2405804035000000000000109021b000111000000090400000195699b0009058b", @ANYRES8], 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x200c8004, &(0x7f0000000100)={0xa, 0xe20, 0xd, @mcast1}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f00000009c0)="c7cfcaaa22e10542fca5c0195350f15147657e0bfc59d383a47190db88690e6fedc3040ab5809ae02a54cd429cc3338c5afa0c9dce3f91950d1f567f358ac21154159130e88cbb6c43197813b2f23f3e442f80877490b393408142ebcfea6821f543e5ee9e27032e2b75d78f1b79f5a6bb6f0645e267770ef7e8f3a92148091217450ce8581e54223eeb6486205a209bf1fe854d211c03f8c3140fc3979d824082990d119473d20e94f253c9621fac339560ae46cb24b88bf2d01559bb658e343257b90f233b81bc5c398be3bbddb23a1e", 0xffd6, 0xc001, 0x0, 0xffffffffffffff0c) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x88, 0x1, &(0x7f0000000080), 0x4) syz_open_procfs(0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000a80)='kfree\x00', 0xffffffffffffffff, 0x0, 0xfffffffffffffffd}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00'}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xf8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xfffffffffffffd27}, 0x48) ioctl$AUTOFS_IOC_FAIL(0xffffffffffffffff, 0x4c80, 0x7000000) 34.920009ms ago: executing program 9 (id=6431): socket$netlink(0x10, 0x3, 0x0) syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x30000c6, &(0x7f00000000c0), 0x2, 0x572, &(0x7f0000001600)="$eJzs3d9rU+cbAPDnpKm/v99WENnGGAUv5nCmtt0PB7twl2OTCdu9C2ks0tRIk4rthOnFvNnNkMEYE8but3svZf/A/gphCjKkbBe76TjpSW1t0jbamur5fCDyvnlP+p7nvOd5fU9OQgLIrZH0n0LEqxHxXRIxFBFJ1laMrHFkebvFR9cq6SOJpaXP/0pa26X19t9qv+5gVnklIn7/JuJEYX2/jfmF6XKtVp3N6qPNmcujjfmFkxdnylPVqeql8YmJ0+9OjH/w/nvbFutb5/758bO7H5/+9tjiD789OHwriTNxKGtbHcem9nVtub66MhIj2TEZjDNPbDjWy46/AJJ+7wBPZSDL88FI54ChGMiyHnj5fR0RS0BOJfIfcqq9Dmhf2/d0HfwSePjR8gXQ+viLy++NxL7WtdGBxWTNlVF6vTu8Df2nfdy5f/tW+ohe34cAeAbXb0TEqWJx/fyXZPPf0zu1hW2e7MP8B8/P3XT983an9U9hZf0THdY/Bzvk7tPYPP8LD7ahm67S9d+HHde/Kzethgey2v9aa77B5MLFWjWd2/4fEcdjcG9a3+h+zunFe0vd2lav/+6kh/rRtUp7LZjtx4Pi3rWvmSw3y88S82oPb0S81nH9m6yMf9Jh/NPjcW6LfRyt3n6jW9ua+O/fvrW4Lv6dtfRLxJsdx//xHa1k4/uTo63zYbR9Vqz3982jf3Trv9/xp+N/YOP4h5PV92sbvffx875/q93a1sQfneLvfP7vSb5olfdkz10tN5uzYxF7kk/XPz/++LXtenv7NP7jxzae/zqd//sj4sstxn/zyK+vbyn+Po3/ZE/j33vh3idf/dSt/83jT8f/nVbpePZMNv8NbRTXVnfwWY8fAAAAAAAA7CaFiDgUSaG0Ui4USqXlz3cciQOFWr3RPHGhPndpMlrflR2OwUL7TvfQqs9DjGWfh23Xx5+oT0TE4Yj4fmB/q16q1GuT/Q4eAAAAAAAAAAAAAAAAAAAAdomDXb7/n/pzoN97B+w4P/kN+bVp/m/HLz0Bu5L//yG/5D/kl/yH/JL/kF/yH/JL/kN+yX/IL/kPAAAAAAAAAAAAAAAAAAAAAAAAAAAA2+rc2bPpY2nx0bVKWp+8Mj83Xb9ycrLamC7NzFVKlfrs5dJUvT5Vq5Yq9ZnN/l6tXr88Nh5zV0eb1UZztDG/cH6mPnepef7iTHmqer46+FyiAgAAAAAAAAAAAAAAAAAAgBdLY35hulyrVWd3qpDsfBcK/SwUd8du5KdQjOfSV79nJgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB47L8AAAD//84fMw8=") perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x20042, 0x1) fallocate(r0, 0x0, 0x0, 0x8000c62) r1 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) sendfile(r1, r1, 0x0, 0x100000800000009) 22.744509ms ago: executing program 7 (id=6432): syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x30000c6, &(0x7f00000000c0), 0x2, 0x572, &(0x7f0000001600)="$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") r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='kfree\x00', r1}, 0x9) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x20042, 0x1) fallocate(r2, 0x0, 0x0, 0x8000c62) r3 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) sendfile(r3, r3, 0x0, 0x100000800000009) 0s ago: executing program 0 (id=6433): r0 = socket$packet(0x11, 0x3, 0x300) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000004f4b000000000000000000180100002020702000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000fdffffff850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_clone(0x630c1100, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000440)=[{0x20, 0x0, 0x0, 0xfffff010}, {0x6}]}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[], 0x28}, 0x1, 0x0, 0x0, 0x68010}, 0x0) kernel console output (not intermixed with test programs): 000000. [ 371.070729][T21065] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 371.089761][T21065] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 371.109255][T21069] loop7: detected capacity change from 0 to 1024 [ 371.116210][T21061] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 371.173786][T21069] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 371.227182][T21069] EXT4-fs error (device loop7): ext4_mb_mark_diskspace_used:4183: comm syz.7.5909: Allocating blocks 385-513 which overlap fs metadata [ 371.244306][T21069] EXT4-fs (loop7): pa ffff8881072aa4d0: logic 16, phys. 129, len 24 [ 371.252367][T21069] EXT4-fs error (device loop7): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 8 [ 371.425237][T15638] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 371.443260][T21074] netlink: 'syz.7.5910': attribute type 5 has an invalid length. [ 371.465942][ T29] kauditd_printk_skb: 206 callbacks suppressed [ 371.465961][ T29] audit: type=1326 audit(1757268526.404:10147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21073 comm="syz.7.5910" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3092acebe9 code=0x7ffc0000 [ 371.497357][ T29] audit: type=1326 audit(1757268526.404:10148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21073 comm="syz.7.5910" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3092acebe9 code=0x7ffc0000 [ 371.521376][ T29] audit: type=1326 audit(1757268526.444:10149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21073 comm="syz.7.5910" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3092acebe9 code=0x7ffc0000 [ 371.545274][ T29] audit: type=1326 audit(1757268526.444:10150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21073 comm="syz.7.5910" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3092acebe9 code=0x7ffc0000 [ 371.568867][ T29] audit: type=1326 audit(1757268526.444:10151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21073 comm="syz.7.5910" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3092acebe9 code=0x7ffc0000 [ 371.592678][ T29] audit: type=1326 audit(1757268526.444:10152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21073 comm="syz.7.5910" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3092acebe9 code=0x7ffc0000 [ 371.616315][ T29] audit: type=1326 audit(1757268526.444:10153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21073 comm="syz.7.5910" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f3092acd550 code=0x7ffc0000 [ 371.640152][ T29] audit: type=1326 audit(1757268526.444:10154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21073 comm="syz.7.5910" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f3092ad0417 code=0x7ffc0000 [ 371.663945][ T29] audit: type=1326 audit(1757268526.444:10155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21073 comm="syz.7.5910" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f3092acebe9 code=0x7ffc0000 [ 371.687735][ T29] audit: type=1326 audit(1757268526.444:10156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21073 comm="syz.7.5910" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f3092ad0417 code=0x7ffc0000 [ 371.777110][T21079] loop1: detected capacity change from 0 to 1024 [ 371.789164][T21084] loop9: detected capacity change from 0 to 1024 [ 371.806123][T21084] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 371.808480][T21079] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 371.899006][T21088] netlink: '’': attribute type 10 has an invalid length. [ 372.103677][T15919] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 372.337071][T19565] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 372.338504][T21107] program syz.7.5921 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 372.381666][T21112] loop9: detected capacity change from 0 to 1024 [ 372.397909][T21110] loop1: detected capacity change from 0 to 512 [ 372.398098][T21112] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 372.425833][T21110] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 372.441758][T21110] EXT4-fs (loop1): orphan cleanup on readonly fs [ 372.450491][T21112] EXT4-fs error (device loop9): ext4_mb_mark_diskspace_used:4183: comm syz.9.5924: Allocating blocks 385-513 which overlap fs metadata [ 372.466634][T21110] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #16: comm syz.1.5922: corrupted inode contents [ 372.480475][T21112] EXT4-fs (loop9): pa ffff8881072aa460: logic 16, phys. 129, len 24 [ 372.488743][T21112] EXT4-fs error (device loop9): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 8 [ 372.499920][T21110] EXT4-fs error (device loop1): ext4_dirty_inode:6538: inode #16: comm syz.1.5922: mark_inode_dirty error [ 372.516466][T21110] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #16: comm syz.1.5922: corrupted inode contents [ 372.528701][T21110] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #16: comm syz.1.5922: mark_inode_dirty error [ 372.541606][T21110] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #16: comm syz.1.5922: corrupted inode contents [ 372.555012][T21110] EXT4-fs error (device loop1) in ext4_orphan_del:305: Corrupt filesystem [ 372.574737][T15919] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 372.586457][T21110] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #16: comm syz.1.5922: corrupted inode contents [ 372.599024][T21110] EXT4-fs error (device loop1): ext4_truncate:4666: inode #16: comm syz.1.5922: mark_inode_dirty error [ 372.615887][T21110] EXT4-fs error (device loop1) in ext4_process_orphan:347: Corrupt filesystem [ 372.628596][T21110] EXT4-fs (loop1): 1 truncate cleaned up [ 372.634735][T14343] EXT4-fs error (device loop1): ext4_release_dquot:6973: comm kworker/u8:13: Failed to release dquot type 1 [ 372.649571][T21110] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 372.824357][T21121] usb usb8: usbfs: interface 0 claimed by hub while 'syz.9.5925' sets config #0 [ 372.862318][T21126] loop4: detected capacity change from 0 to 1024 [ 372.876696][T21126] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 372.895743][T19565] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 372.934925][T21126] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4183: comm syz.4.5927: Allocating blocks 385-513 which overlap fs metadata [ 372.954042][T21130] loop1: detected capacity change from 0 to 1024 [ 372.964750][T21130] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 372.981245][T21126] EXT4-fs (loop4): pa ffff8881072601c0: logic 16, phys. 129, len 24 [ 372.989323][T21126] EXT4-fs error (device loop4): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 8 [ 373.036598][T21133] loop0: detected capacity change from 0 to 1024 [ 373.055954][T21133] EXT4-fs: Ignoring removed bh option [ 373.073661][T21133] EXT4-fs (loop0): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 373.117531][T21133] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 373.135550][T16024] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 373.189901][T21137] loop4: detected capacity change from 0 to 1024 [ 373.207050][T19565] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 373.224258][T21137] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 373.247028][T21141] netlink: 'syz.1.5931': attribute type 5 has an invalid length. [ 373.274227][T21145] loop7: detected capacity change from 0 to 1024 [ 373.281117][T21145] EXT4-fs: Ignoring removed bh option [ 373.286963][T21145] EXT4-fs (loop7): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 373.309156][T21145] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 373.328396][T16024] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 373.354754][T21149] program syz.4.5934 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 373.592895][T21156] loop9: detected capacity change from 0 to 512 [ 373.650391][T21156] EXT4-fs error (device loop9): ext4_validate_block_bitmap:441: comm syz.9.5936: bg 0: block 248: padding at end of block bitmap is not set [ 373.669570][T21156] EXT4-fs error (device loop9): ext4_acquire_dquot:6937: comm syz.9.5936: Failed to acquire dquot type 1 [ 373.684946][T21156] EXT4-fs (loop9): 1 truncate cleaned up [ 373.695296][T21156] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 373.709963][T21156] ext4 filesystem being mounted at /391/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 373.721549][T21164] netlink: 'syz.4.5938': attribute type 13 has an invalid length. [ 373.729466][T21164] netlink: 'syz.4.5938': attribute type 17 has an invalid length. [ 373.762208][T21164] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 373.778991][T21165] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 373.792579][T21165] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 373.824107][T21156] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 373.866480][T16788] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 373.895527][T21169] loop0: detected capacity change from 0 to 1024 [ 373.984456][T21169] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 374.231423][T15638] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 374.268338][T16788] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 374.407061][T21179] loop7: detected capacity change from 0 to 1024 [ 374.413757][T21181] loop0: detected capacity change from 0 to 1024 [ 374.422350][T21179] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 374.437118][T21181] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 374.466630][T21181] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4183: comm syz.0.5942: Allocating blocks 385-513 which overlap fs metadata [ 374.483981][T21181] EXT4-fs (loop0): pa ffff8881072602a0: logic 16, phys. 129, len 24 [ 374.492058][T21181] EXT4-fs error (device loop0): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 8 [ 374.525365][T15638] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 374.534614][T21186] loop4: detected capacity change from 0 to 512 [ 374.544414][T21186] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 374.557792][T21186] ext4 filesystem being mounted at /342/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 374.589969][T16788] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 374.613108][T16024] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 374.656604][T21196] program syz.4.5947 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 374.667786][T21194] loop0: detected capacity change from 0 to 512 [ 374.719406][T21199] loop4: detected capacity change from 0 to 512 [ 374.727976][T21194] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 374.738206][T21194] EXT4-fs (loop0): orphan cleanup on readonly fs [ 374.745780][T21199] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 374.758741][T21202] loop9: detected capacity change from 0 to 1024 [ 374.765879][T21199] ext4 filesystem being mounted at /344/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 374.768041][T21194] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #16: comm syz.0.5946: corrupted inode contents [ 374.793409][T21202] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 374.806433][T21194] EXT4-fs error (device loop0): ext4_dirty_inode:6538: inode #16: comm syz.0.5946: mark_inode_dirty error [ 374.830648][T21194] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #16: comm syz.0.5946: corrupted inode contents [ 374.850877][T21194] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #16: comm syz.0.5946: mark_inode_dirty error [ 374.851674][T21202] EXT4-fs error (device loop9): ext4_mb_mark_diskspace_used:4183: comm syz.9.5949: Allocating blocks 385-513 which overlap fs metadata [ 374.884829][T21202] EXT4-fs (loop9): pa ffff8881072602a0: logic 16, phys. 129, len 24 [ 374.892898][T21202] EXT4-fs error (device loop9): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 8 [ 374.904018][T16024] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 374.914310][T21194] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #16: comm syz.0.5946: corrupted inode contents [ 374.928225][T21194] EXT4-fs error (device loop0) in ext4_orphan_del:305: Corrupt filesystem [ 374.940031][T21208] loop7: detected capacity change from 0 to 512 [ 374.948536][T21194] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #16: comm syz.0.5946: corrupted inode contents [ 374.965295][T21194] EXT4-fs error (device loop0): ext4_truncate:4666: inode #16: comm syz.0.5946: mark_inode_dirty error [ 374.975121][T21208] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.5950: bg 0: block 248: padding at end of block bitmap is not set [ 374.991347][T21194] EXT4-fs error (device loop0) in ext4_process_orphan:347: Corrupt filesystem [ 374.991866][T21194] EXT4-fs (loop0): 1 truncate cleaned up [ 375.001813][T21210] loop4: detected capacity change from 0 to 512 [ 375.013096][T14388] EXT4-fs error (device loop0): ext4_release_dquot:6973: comm kworker/u8:54: Failed to release dquot type 1 [ 375.014139][T21208] EXT4-fs error (device loop7): ext4_acquire_dquot:6937: comm syz.7.5950: Failed to acquire dquot type 1 [ 375.039862][T21208] EXT4-fs (loop7): 1 truncate cleaned up [ 375.049209][T21208] ext4 filesystem being mounted at /367/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 375.049527][T21210] ext4 filesystem being mounted at /345/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 375.098963][T21217] loop9: detected capacity change from 0 to 1024 [ 375.108587][T21219] netlink: 'syz.4.5953': attribute type 5 has an invalid length. [ 375.207065][T21226] loop1: detected capacity change from 0 to 1024 [ 375.261907][T21230] loop0: detected capacity change from 0 to 1024 [ 375.308254][T21234] loop9: detected capacity change from 0 to 1024 [ 375.351282][T21230] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4183: comm syz.0.5956: Allocating blocks 385-513 which overlap fs metadata [ 375.404460][T21230] EXT4-fs (loop0): pa ffff888107260230: logic 16, phys. 129, len 24 [ 375.412796][T21230] EXT4-fs error (device loop0): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 8 [ 375.486000][T21245] loop1: detected capacity change from 0 to 1024 [ 375.494985][T21247] program syz.9.5962 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 375.648993][T21252] loop9: detected capacity change from 0 to 1024 [ 375.861434][T21245] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4183: comm syz.1.5961: Allocating blocks 385-513 which overlap fs metadata [ 375.879758][T21252] EXT4-fs error (device loop9): ext4_mb_mark_diskspace_used:4183: comm syz.9.5963: Allocating blocks 385-513 which overlap fs metadata [ 375.913267][T21245] EXT4-fs (loop1): pa ffff8881072aa3f0: logic 16, phys. 129, len 24 [ 375.921330][T21245] EXT4-fs error (device loop1): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 8 [ 375.947425][T21258] EXT4-fs (loop9): pa ffff8881072aa540: logic 16, phys. 129, len 24 [ 375.955552][T21258] EXT4-fs error (device loop9): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 8 [ 375.995399][T21263] loop4: detected capacity change from 0 to 1024 [ 376.043318][T21269] loop4: detected capacity change from 0 to 1024 [ 376.064539][T21273] validate_nla: 1 callbacks suppressed [ 376.064551][T21273] netlink: '’': attribute type 10 has an invalid length. [ 376.099700][T21275] loop1: detected capacity change from 0 to 1024 [ 376.227493][T21281] loop7: detected capacity change from 0 to 1024 [ 376.238609][T21282] loop4: detected capacity change from 0 to 1024 [ 376.483432][ T29] kauditd_printk_skb: 159 callbacks suppressed [ 376.483447][ T29] audit: type=1326 audit(1757268531.424:10310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21293 comm="syz.4.5976" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60e5c0ebe9 code=0x7ffc0000 [ 376.490214][T21294] loop4: detected capacity change from 0 to 512 [ 376.513310][ T29] audit: type=1326 audit(1757268531.424:10311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21293 comm="syz.4.5976" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60e5c0ebe9 code=0x7ffc0000 [ 376.543184][ T29] audit: type=1326 audit(1757268531.424:10312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21293 comm="syz.4.5976" exe="/root/syz-executor" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7f60e5c0ebe9 code=0x7ffc0000 [ 376.568498][ T29] audit: type=1326 audit(1757268531.424:10313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21293 comm="syz.4.5976" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60e5c0ebe9 code=0x7ffc0000 [ 376.592256][ T29] audit: type=1326 audit(1757268531.424:10314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21293 comm="syz.4.5976" exe="/root/syz-executor" sig=0 arch=c000003e syscall=208 compat=0 ip=0x7f60e5c0ebe9 code=0x7ffc0000 [ 376.595506][T21296] netlink: 'syz.9.5977': attribute type 5 has an invalid length. [ 376.616022][ T29] audit: type=1326 audit(1757268531.424:10315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21293 comm="syz.4.5976" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60e5c0ebe9 code=0x7ffc0000 [ 376.647177][ T29] audit: type=1326 audit(1757268531.424:10316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21293 comm="syz.4.5976" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60e5c0ebe9 code=0x7ffc0000 [ 376.671205][ T29] audit: type=1326 audit(1757268531.424:10317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21293 comm="syz.4.5976" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f60e5c0ebe9 code=0x7ffc0000 [ 376.695063][ T29] audit: type=1326 audit(1757268531.424:10318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21293 comm="syz.4.5976" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60e5c0ebe9 code=0x7ffc0000 [ 376.718741][ T29] audit: type=1326 audit(1757268531.424:10319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21293 comm="syz.4.5976" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f60e5c0ebe9 code=0x7ffc0000 [ 376.743548][T21294] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 376.763416][T21294] EXT4-fs (loop4): orphan cleanup on readonly fs [ 376.774388][T21294] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #16: comm syz.4.5976: corrupted inode contents [ 376.777328][T21301] loop7: detected capacity change from 0 to 1024 [ 376.787971][T21294] EXT4-fs error (device loop4): ext4_dirty_inode:6538: inode #16: comm syz.4.5976: mark_inode_dirty error [ 376.806435][T21294] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #16: comm syz.4.5976: corrupted inode contents [ 376.819020][T21294] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #16: comm syz.4.5976: mark_inode_dirty error [ 376.835231][T21294] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #16: comm syz.4.5976: corrupted inode contents [ 376.848562][T21294] EXT4-fs error (device loop4) in ext4_orphan_del:305: Corrupt filesystem [ 376.858184][T21294] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #16: comm syz.4.5976: corrupted inode contents [ 376.875914][T21294] EXT4-fs error (device loop4): ext4_truncate:4666: inode #16: comm syz.4.5976: mark_inode_dirty error [ 376.894315][T21294] EXT4-fs error (device loop4) in ext4_process_orphan:347: Corrupt filesystem [ 376.904294][T21294] EXT4-fs (loop4): 1 truncate cleaned up [ 376.910383][T14343] EXT4-fs error (device loop4): ext4_release_dquot:6973: comm kworker/u8:13: Failed to release dquot type 1 [ 376.991940][T21310] loop7: detected capacity change from 0 to 1024 [ 377.078377][T21310] EXT4-fs error (device loop7): ext4_mb_mark_diskspace_used:4183: comm syz.7.5981: Allocating blocks 385-513 which overlap fs metadata [ 377.094248][T21310] EXT4-fs (loop7): pa ffff8881072aa3f0: logic 16, phys. 129, len 24 [ 377.102252][T21310] EXT4-fs error (device loop7): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 8 [ 377.180647][T21315] loop1: detected capacity change from 0 to 1024 [ 377.246245][T21315] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4183: comm syz.1.5982: Allocating blocks 385-513 which overlap fs metadata [ 377.275007][T21322] siw: device registration error -23 [ 377.301683][T21314] EXT4-fs (loop1): pa ffff8881072aa460: logic 16, phys. 129, len 24 [ 377.309837][T21314] EXT4-fs error (device loop1): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 8 [ 377.488900][T21329] loop9: detected capacity change from 0 to 1024 [ 377.497258][T21324] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=12 sclass=netlink_route_socket pid=21324 comm=syz.7.5985 [ 377.503044][T21331] netlink: '’': attribute type 10 has an invalid length. [ 377.583538][T21335] loop7: detected capacity change from 0 to 512 [ 377.671983][T21335] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.5990: bg 0: block 248: padding at end of block bitmap is not set [ 377.690551][T21335] EXT4-fs error (device loop7): ext4_acquire_dquot:6937: comm syz.7.5990: Failed to acquire dquot type 1 [ 377.711133][T21344] loop0: detected capacity change from 0 to 1024 [ 377.711219][T21335] EXT4-fs (loop7): 1 truncate cleaned up [ 377.727554][T21335] ext4 filesystem being mounted at /376/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 377.928141][T21347] usb usb8: usbfs: interface 0 claimed by hub while 'syz.9.5991' sets config #0 [ 377.969878][T21344] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4183: comm syz.0.5992: Allocating blocks 385-513 which overlap fs metadata [ 378.030262][T21344] EXT4-fs (loop0): pa ffff8881072aa540: logic 16, phys. 129, len 24 [ 378.038407][T21344] EXT4-fs error (device loop0): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 8 [ 378.172580][T21353] loop7: detected capacity change from 0 to 1024 [ 378.184950][T21355] loop0: detected capacity change from 0 to 1024 [ 378.191915][T21355] EXT4-fs: Ignoring removed bh option [ 378.197916][T21355] EXT4-fs (loop0): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 378.213223][T21353] EXT4-fs error (device loop7): ext4_mb_mark_diskspace_used:4183: comm syz.7.5994: Allocating blocks 385-513 which overlap fs metadata [ 378.229612][T21353] EXT4-fs (loop7): pa ffff8881072aa540: logic 16, phys. 129, len 24 [ 378.237654][T21353] EXT4-fs error (device loop7): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 8 [ 378.443639][T21368] loop1: detected capacity change from 0 to 1024 [ 378.495940][T21373] loop1: detected capacity change from 0 to 1024 [ 378.567919][T21373] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4183: comm syz.1.6000: Allocating blocks 385-513 which overlap fs metadata [ 378.584315][T21373] EXT4-fs (loop1): pa ffff888107260310: logic 16, phys. 129, len 24 [ 378.592361][T21373] EXT4-fs error (device loop1): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 8 [ 378.845933][T21378] siw: device registration error -23 [ 379.109188][T21391] loop1: detected capacity change from 0 to 1024 [ 379.161685][T21391] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4183: comm syz.1.6002: Allocating blocks 385-513 which overlap fs metadata [ 379.192574][T21398] netlink: 'syz.4.6007': attribute type 13 has an invalid length. [ 379.195423][T21391] EXT4-fs (loop1): pa ffff8881072603f0: logic 16, phys. 129, len 24 [ 379.200500][T21398] netlink: 'syz.4.6007': attribute type 17 has an invalid length. [ 379.216650][T21391] EXT4-fs error (device loop1): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 8 [ 379.236998][T21398] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 379.253411][T21399] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 379.264333][T21392] loop0: detected capacity change from 0 to 512 [ 379.269920][T21399] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 379.297968][T21392] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.6005: bg 0: block 248: padding at end of block bitmap is not set [ 379.315607][T21392] EXT4-fs error (device loop0): ext4_acquire_dquot:6937: comm syz.0.6005: Failed to acquire dquot type 1 [ 379.330029][T21392] EXT4-fs (loop0): 1 truncate cleaned up [ 379.360468][T21392] ext4 filesystem being mounted at /303/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 379.402174][T21385] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=12 sclass=netlink_route_socket pid=21385 comm=syz.7.6004 [ 379.405422][T21405] loop9: detected capacity change from 0 to 1024 [ 379.430256][T21407] loop1: detected capacity change from 0 to 1024 [ 379.436637][T21405] EXT4-fs: Ignoring removed bh option [ 379.436906][T21405] EXT4-fs (loop9): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 379.469467][T21407] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4183: comm syz.1.6009: Allocating blocks 385-513 which overlap fs metadata [ 379.485394][T21407] EXT4-fs (loop1): pa ffff8881072aa460: logic 16, phys. 129, len 24 [ 379.493587][T21407] EXT4-fs error (device loop1): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 8 [ 379.573294][T21418] netlink: 'syz.0.6012': attribute type 13 has an invalid length. [ 379.581151][T21418] netlink: 'syz.0.6012': attribute type 17 has an invalid length. [ 379.588715][T21420] loop1: detected capacity change from 0 to 1024 [ 379.604977][T21418] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 379.624625][T21423] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 379.633329][T21423] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 379.664646][T21420] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4183: comm syz.1.6013: Allocating blocks 385-513 which overlap fs metadata [ 379.675614][T21429] loop7: detected capacity change from 0 to 1024 [ 379.680971][T21420] EXT4-fs (loop1): pa ffff8881072aa460: logic 16, phys. 129, len 24 [ 379.686620][T21429] EXT4-fs: Ignoring removed bh option [ 379.693110][T21420] EXT4-fs error (device loop1): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 8 [ 379.699175][T21429] EXT4-fs (loop7): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 379.792433][T21434] loop1: detected capacity change from 0 to 1024 [ 379.810257][T21434] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4183: comm syz.1.6017: Allocating blocks 385-513 which overlap fs metadata [ 379.827594][T21434] EXT4-fs (loop1): pa ffff8881072aa460: logic 16, phys. 129, len 24 [ 379.835661][T21434] EXT4-fs error (device loop1): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 8 [ 380.974323][T21450] loop7: detected capacity change from 0 to 1024 [ 380.989012][T21453] loop9: detected capacity change from 0 to 1024 [ 381.021145][T21458] loop4: detected capacity change from 0 to 1024 [ 381.024012][T21450] EXT4-fs error (device loop7): ext4_mb_mark_diskspace_used:4183: comm syz.7.6021: Allocating blocks 385-513 which overlap fs metadata [ 381.028242][T21458] EXT4-fs: Ignoring removed bh option [ 381.051379][T21458] EXT4-fs (loop4): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 381.108791][T21453] EXT4-fs error (device loop9): ext4_mb_mark_diskspace_used:4183: comm syz.9.6022: Allocating blocks 385-513 which overlap fs metadata [ 381.126397][T21453] EXT4-fs (loop9): pa ffff888107260230: logic 16, phys. 129, len 24 [ 381.134544][T21453] EXT4-fs error (device loop9): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 8 [ 381.150276][T21450] EXT4-fs (loop7): pa ffff8881072aa460: logic 16, phys. 129, len 24 [ 381.158469][T21450] EXT4-fs error (device loop7): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 8 [ 381.213140][T21468] netlink: '’': attribute type 10 has an invalid length. [ 381.239364][T21471] loop1: detected capacity change from 0 to 1024 [ 381.261537][T21474] loop9: detected capacity change from 0 to 1024 [ 381.333176][T21474] EXT4-fs error (device loop9): ext4_mb_mark_diskspace_used:4183: comm syz.9.6030: Allocating blocks 385-513 which overlap fs metadata [ 381.350770][T21474] EXT4-fs (loop9): pa ffff8881072603f0: logic 16, phys. 129, len 24 [ 381.358868][T21474] EXT4-fs error (device loop9): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 8 [ 381.647015][T21495] loop9: detected capacity change from 0 to 1024 [ 381.814662][T21483] Set syz1 is full, maxelem 65536 reached [ 381.957520][T21499] usb usb8: usbfs: interface 0 claimed by hub while 'syz.0.6036' sets config #0 [ 382.166783][T21503] netlink: 'syz.1.6038': attribute type 13 has an invalid length. [ 382.174786][T21503] netlink: 'syz.1.6038': attribute type 17 has an invalid length. [ 382.218879][T21503] dummy0: left promiscuous mode [ 382.227940][T21504] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 382.236637][T21504] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 382.244414][T21503] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 382.274814][T21506] netlink: '’': attribute type 10 has an invalid length. [ 382.398150][T21512] loop0: detected capacity change from 0 to 1024 [ 382.507342][T21519] loop4: detected capacity change from 0 to 512 [ 382.538950][T21519] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.6044: bg 0: block 248: padding at end of block bitmap is not set [ 382.555258][T21519] __quota_error: 47 callbacks suppressed [ 382.555310][T21519] Quota error (device loop4): write_blk: dquota write failed [ 382.569202][T21519] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 382.579918][T21519] EXT4-fs error (device loop4): ext4_acquire_dquot:6937: comm syz.4.6044: Failed to acquire dquot type 1 [ 382.596744][T21519] EXT4-fs (loop4): 1 truncate cleaned up [ 382.608735][T21519] ext4 filesystem being mounted at /360/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 382.695178][T21526] usb usb8: usbfs: interface 0 claimed by hub while 'syz.7.6043' sets config #0 [ 382.791336][T21529] loop0: detected capacity change from 0 to 1024 [ 382.809898][T21529] EXT4-fs: Ignoring removed bh option [ 382.817166][T21529] EXT4-fs (loop0): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 382.929253][T21533] loop4: detected capacity change from 0 to 1024 [ 382.988537][T21541] loop1: detected capacity change from 0 to 1024 [ 383.340237][T21549] usb usb8: usbfs: interface 0 claimed by hub while 'syz.4.6051' sets config #0 [ 383.628852][T21559] netlink: '’': attribute type 10 has an invalid length. [ 383.708843][T21561] loop9: detected capacity change from 0 to 1024 [ 383.718230][T21553] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=12 sclass=netlink_route_socket pid=21553 comm=syz.7.6053 [ 383.754947][T21563] loop0: detected capacity change from 0 to 1024 [ 383.762068][T21563] EXT4-fs: Ignoring removed bh option [ 383.767898][T21563] EXT4-fs (loop0): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 383.803697][T21570] loop7: detected capacity change from 0 to 512 [ 383.814421][T21570] ext4 filesystem being mounted at /395/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 383.904854][T21576] loop7: detected capacity change from 0 to 512 [ 383.957947][ T29] audit: type=1326 audit(1757268538.894:10362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21581 comm="syz.4.6061" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60e5c0ebe9 code=0x7ffc0000 [ 383.987538][T21576] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.6059: bg 0: block 248: padding at end of block bitmap is not set [ 383.990195][ T29] audit: type=1326 audit(1757268538.914:10363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21581 comm="syz.4.6061" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60e5c0ebe9 code=0x7ffc0000 [ 384.016900][T21576] Quota error (device loop7): write_blk: dquota write failed [ 384.025925][ T29] audit: type=1326 audit(1757268538.914:10364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21581 comm="syz.4.6061" exe="/root/syz-executor" sig=0 arch=c000003e syscall=213 compat=0 ip=0x7f60e5c0ebe9 code=0x7ffc0000 [ 384.025955][ T29] audit: type=1326 audit(1757268538.914:10365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21581 comm="syz.4.6061" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60e5c0ebe9 code=0x7ffc0000 [ 384.025985][ T29] audit: type=1326 audit(1757268538.914:10366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21581 comm="syz.4.6061" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60e5c0ebe9 code=0x7ffc0000 [ 384.109188][T21576] Quota error (device loop7): qtree_write_dquot: Error -117 occurred while creating quota [ 384.120459][T21576] EXT4-fs error (device loop7): ext4_acquire_dquot:6937: comm syz.7.6059: Failed to acquire dquot type 1 [ 384.136492][T21576] EXT4-fs (loop7): 1 truncate cleaned up [ 384.146406][T21576] ext4 filesystem being mounted at /396/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 384.223374][T21588] bridge_slave_0: left allmulticast mode [ 384.229448][T21588] bridge_slave_0: left promiscuous mode [ 384.235430][T21588] bridge0: port 1(bridge_slave_0) entered disabled state [ 384.246402][T21588] bridge_slave_1: left allmulticast mode [ 384.252211][T21588] bridge_slave_1: left promiscuous mode [ 384.258032][T21588] bridge0: port 2(bridge_slave_1) entered disabled state [ 384.268637][T21591] loop1: detected capacity change from 0 to 1024 [ 384.288479][T21588] bond0: (slave bond_slave_0): Releasing backup interface [ 384.300224][T21588] bond0: (slave bond_slave_1): Releasing backup interface [ 384.347325][T21588] team0: Port device team_slave_0 removed [ 384.356910][T21588] team0: Port device team_slave_1 removed [ 384.383745][T21595] usb usb8: usbfs: interface 0 claimed by hub while 'syz.9.6063' sets config #0 [ 384.405357][T21596] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=12 sclass=netlink_route_socket pid=21596 comm=syz.4.6062 [ 384.419655][T21588] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 384.427275][T21588] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 384.438743][T21588] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 384.446327][T21588] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 384.654160][T21591] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4183: comm syz.1.6064: Allocating blocks 385-513 which overlap fs metadata [ 384.689271][T21591] EXT4-fs (loop1): pa ffff8881072aa460: logic 16, phys. 129, len 24 [ 384.697404][T21591] EXT4-fs error (device loop1): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 8 [ 384.874323][T21611] loop4: detected capacity change from 0 to 1024 [ 385.106582][T21614] bridge_slave_0: left allmulticast mode [ 385.112288][T21614] bridge_slave_0: left promiscuous mode [ 385.118107][T21614] bridge0: port 1(bridge_slave_0) entered disabled state [ 385.170439][T21625] loop9: detected capacity change from 0 to 1024 [ 385.184087][T21614] bridge_slave_1: left allmulticast mode [ 385.189849][T21614] bridge_slave_1: left promiscuous mode [ 385.195726][T21614] bridge0: port 2(bridge_slave_1) entered disabled state [ 385.251539][T21614] bond0: (slave bond_slave_0): Releasing backup interface [ 385.262436][T21614] bond0: (slave bond_slave_1): Releasing backup interface [ 385.291779][T21614] team0: Port device team_slave_0 removed [ 385.297990][T21618] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=12 sclass=netlink_route_socket pid=21618 comm=syz.1.6069 [ 385.310723][ T29] audit: type=1326 audit(1757268540.244:10367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21628 comm="syz.4.6073" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60e5c0ebe9 code=0x7ffc0000 [ 385.324151][T21614] team0: Port device team_slave_1 removed [ 385.341417][T21614] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 385.349070][T21614] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 385.357939][T21614] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 385.365372][T21614] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 385.440839][T21636] loop1: detected capacity change from 0 to 1024 [ 385.476682][T21636] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4183: comm syz.1.6076: Allocating blocks 385-513 which overlap fs metadata [ 385.517640][T21636] EXT4-fs (loop1): pa ffff8881072aa690: logic 16, phys. 129, len 24 [ 385.525815][T21636] EXT4-fs error (device loop1): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 8 [ 385.527130][T21634] loop9: detected capacity change from 0 to 512 [ 385.580186][T21634] EXT4-fs error (device loop9): ext4_validate_block_bitmap:441: comm syz.9.6075: bg 0: block 248: padding at end of block bitmap is not set [ 385.607834][T21634] EXT4-fs error (device loop9): ext4_acquire_dquot:6937: comm syz.9.6075: Failed to acquire dquot type 1 [ 385.628123][T21634] EXT4-fs (loop9): 1 truncate cleaned up [ 385.636931][T21634] ext4 filesystem being mounted at /422/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 385.673442][T21648] siw: device registration error -23 [ 385.824418][T21657] loop9: detected capacity change from 0 to 512 [ 385.835459][T21666] loop0: detected capacity change from 0 to 1024 [ 385.842318][T21666] EXT4-fs: Ignoring removed bh option [ 385.849006][T21666] EXT4-fs (loop0): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 385.870772][T21668] loop7: detected capacity change from 0 to 1024 [ 385.924102][T21657] ext4 filesystem being mounted at /423/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 385.947763][T21663] usb usb8: usbfs: interface 0 claimed by hub while 'syz.4.6083' sets config #0 [ 386.214988][T21700] loop7: detected capacity change from 0 to 1024 [ 386.356449][T21710] loop4: detected capacity change from 0 to 1024 [ 386.419093][T21714] loop9: detected capacity change from 0 to 1024 [ 386.535071][T21716] usb usb8: usbfs: interface 0 claimed by hub while 'syz.1.6100' sets config #0 [ 386.644679][T21727] loop1: detected capacity change from 0 to 512 [ 386.672864][T21727] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 386.682993][T21727] EXT4-fs (loop1): orphan cleanup on readonly fs [ 386.694487][T21727] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #16: comm syz.1.6103: corrupted inode contents [ 386.716794][T21727] EXT4-fs error (device loop1): ext4_dirty_inode:6538: inode #16: comm syz.1.6103: mark_inode_dirty error [ 386.730431][T21727] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #16: comm syz.1.6103: corrupted inode contents [ 386.749718][T21727] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #16: comm syz.1.6103: mark_inode_dirty error [ 386.763927][T21727] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #16: comm syz.1.6103: corrupted inode contents [ 386.808549][T21727] EXT4-fs error (device loop1) in ext4_orphan_del:305: Corrupt filesystem [ 386.821827][T21727] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #16: comm syz.1.6103: corrupted inode contents [ 386.842285][T21727] EXT4-fs error (device loop1): ext4_truncate:4666: inode #16: comm syz.1.6103: mark_inode_dirty error [ 386.863298][T21727] EXT4-fs error (device loop1) in ext4_process_orphan:347: Corrupt filesystem [ 386.883330][T21727] EXT4-fs (loop1): 1 truncate cleaned up [ 386.940583][T14355] EXT4-fs error (device loop1): ext4_release_dquot:6973: comm kworker/u8:24: Failed to release dquot type 1 [ 387.403970][T21752] usb usb8: usbfs: interface 0 claimed by hub while 'syz.0.6112' sets config #0 [ 387.416506][T21756] loop7: detected capacity change from 0 to 1024 [ 387.700659][T21782] netlink: '’': attribute type 10 has an invalid length. [ 387.730286][ T29] kauditd_printk_skb: 52 callbacks suppressed [ 387.730311][ T29] audit: type=1326 audit(1757268542.664:10417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21783 comm="syz.4.6122" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60e5c0ebe9 code=0x7ffc0000 [ 387.736875][T21784] loop4: detected capacity change from 0 to 512 [ 387.760158][ T29] audit: type=1326 audit(1757268542.664:10418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21783 comm="syz.4.6122" exe="/root/syz-executor" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7f60e5c0ebe9 code=0x7ffc0000 [ 387.790064][ T29] audit: type=1326 audit(1757268542.664:10419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21783 comm="syz.4.6122" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60e5c0ebe9 code=0x7ffc0000 [ 387.814001][ T29] audit: type=1326 audit(1757268542.664:10420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21783 comm="syz.4.6122" exe="/root/syz-executor" sig=0 arch=c000003e syscall=208 compat=0 ip=0x7f60e5c0ebe9 code=0x7ffc0000 [ 387.837689][ T29] audit: type=1326 audit(1757268542.664:10421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21783 comm="syz.4.6122" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60e5c0ebe9 code=0x7ffc0000 [ 387.861327][ T29] audit: type=1326 audit(1757268542.664:10422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21783 comm="syz.4.6122" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f60e5c0ebe9 code=0x7ffc0000 [ 387.884998][ T29] audit: type=1326 audit(1757268542.664:10423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21783 comm="syz.4.6122" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60e5c0ebe9 code=0x7ffc0000 [ 387.908569][ T29] audit: type=1326 audit(1757268542.664:10424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21783 comm="syz.4.6122" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f60e5c0ebe9 code=0x7ffc0000 [ 387.916368][T21784] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 387.932139][ T29] audit: type=1326 audit(1757268542.664:10425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21783 comm="syz.4.6122" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60e5c0ebe9 code=0x7ffc0000 [ 387.941882][T21784] EXT4-fs (loop4): orphan cleanup on readonly fs [ 387.963629][ T29] audit: type=1326 audit(1757268542.664:10426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21783 comm="syz.4.6122" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f60e5c0ebe9 code=0x7ffc0000 [ 387.995236][T21784] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #16: comm syz.4.6122: corrupted inode contents [ 388.008039][T21784] EXT4-fs error (device loop4): ext4_dirty_inode:6538: inode #16: comm syz.4.6122: mark_inode_dirty error [ 388.019852][T21784] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #16: comm syz.4.6122: corrupted inode contents [ 388.032045][T21793] loop7: detected capacity change from 0 to 1024 [ 388.039071][T21784] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #16: comm syz.4.6122: mark_inode_dirty error [ 388.051023][T21784] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #16: comm syz.4.6122: corrupted inode contents [ 388.064771][T21784] EXT4-fs error (device loop4) in ext4_orphan_del:305: Corrupt filesystem [ 388.074166][T21784] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #16: comm syz.4.6122: corrupted inode contents [ 388.078660][T21793] EXT4-fs error (device loop7): ext4_mb_mark_diskspace_used:4183: comm syz.7.6125: Allocating blocks 385-513 which overlap fs metadata [ 388.087598][T21784] EXT4-fs error (device loop4): ext4_truncate:4666: inode #16: comm syz.4.6122: mark_inode_dirty error [ 388.105330][T21793] EXT4-fs (loop7): pa ffff8881072aac40: logic 16, phys. 129, len 24 [ 388.112772][T21784] EXT4-fs error (device loop4) in ext4_process_orphan:347: Corrupt filesystem [ 388.118958][T21793] EXT4-fs error (device loop7): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 8 [ 388.129929][T21784] EXT4-fs (loop4): 1 truncate cleaned up [ 388.143773][T14343] EXT4-fs error (device loop4): ext4_release_dquot:6973: comm kworker/u8:13: Failed to release dquot type 1 [ 388.263547][T21801] loop7: detected capacity change from 0 to 1024 [ 388.370861][T21810] loop7: detected capacity change from 0 to 512 [ 388.402854][T21814] netlink: '’': attribute type 10 has an invalid length. [ 388.414829][T21810] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.6131: bg 0: block 248: padding at end of block bitmap is not set [ 388.445005][T21810] EXT4-fs error (device loop7): ext4_acquire_dquot:6937: comm syz.7.6131: Failed to acquire dquot type 1 [ 388.472421][T21810] EXT4-fs (loop7): 1 truncate cleaned up [ 388.482883][T21810] ext4 filesystem being mounted at /412/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 388.571647][T21830] loop7: detected capacity change from 0 to 512 [ 388.588647][T21830] ext4 filesystem being mounted at /413/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 388.635539][T21827] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=12 sclass=netlink_route_socket pid=21827 comm=syz.4.6137 [ 388.671291][T21841] loop9: detected capacity change from 0 to 1024 [ 388.688471][T21845] loop7: detected capacity change from 0 to 1024 [ 388.728143][T21845] EXT4-fs error (device loop7): ext4_mb_mark_diskspace_used:4183: comm syz.7.6144: Allocating blocks 385-513 which overlap fs metadata [ 388.746292][T21845] EXT4-fs (loop7): pa ffff8881072aae70: logic 16, phys. 129, len 24 [ 388.754376][T21845] EXT4-fs error (device loop7): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 8 [ 388.818339][T21856] loop9: detected capacity change from 0 to 1024 [ 388.841015][T21856] EXT4-fs error (device loop9): ext4_mb_mark_diskspace_used:4183: comm syz.9.6147: Allocating blocks 385-513 which overlap fs metadata [ 388.858604][T21856] EXT4-fs (loop9): pa ffff8881072605b0: logic 16, phys. 129, len 24 [ 388.866785][T21856] EXT4-fs error (device loop9): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 8 [ 388.893651][T21866] loop7: detected capacity change from 0 to 1024 [ 389.329920][T21877] bridge_slave_0: left allmulticast mode [ 389.335668][T21877] bridge_slave_0: left promiscuous mode [ 389.341321][T21877] bridge0: port 1(bridge_slave_0) entered disabled state [ 389.405186][T21877] bridge_slave_1: left allmulticast mode [ 389.410936][T21877] bridge_slave_1: left promiscuous mode [ 389.416645][T21877] bridge0: port 2(bridge_slave_1) entered disabled state [ 389.479250][T21877] bond0: (slave bond_slave_0): Releasing backup interface [ 389.490329][T21879] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=12 sclass=netlink_route_socket pid=21879 comm=syz.0.6154 [ 389.503164][T21881] loop1: detected capacity change from 0 to 1024 [ 389.510886][T21877] bond0: (slave bond_slave_1): Releasing backup interface [ 389.535048][T21877] team0: Port device team_slave_0 removed [ 389.546066][T21877] team0: Port device team_slave_1 removed [ 389.552757][T21877] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 389.736191][T21900] loop7: detected capacity change from 0 to 1024 [ 389.769105][T21903] loop1: detected capacity change from 0 to 512 [ 389.779675][T21903] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 389.802222][T21906] loop0: detected capacity change from 0 to 512 [ 389.810145][T21903] EXT4-fs error (device loop1): ext4_get_branch:178: inode #11: block 4294967295: comm syz.1.6163: invalid block [ 389.833871][T21903] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.6163: invalid indirect mapped block 4294967295 (level 1) [ 389.854351][T21903] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.6163: invalid indirect mapped block 4294967295 (level 1) [ 389.869890][T21906] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 389.879352][T21900] EXT4-fs error (device loop7): ext4_mb_mark_diskspace_used:4183: comm syz.7.6162: Allocating blocks 385-513 which overlap fs metadata [ 389.894678][T21906] EXT4-fs (loop0): orphan cleanup on readonly fs [ 389.901493][T21903] EXT4-fs (loop1): 2 truncates cleaned up [ 389.908726][T21906] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #16: comm syz.0.6165: corrupted inode contents [ 389.910297][T21913] loop9: detected capacity change from 0 to 512 [ 389.924672][T21918] EXT4-fs (loop7): pa ffff888107260620: logic 16, phys. 129, len 24 [ 389.933243][T21906] EXT4-fs error (device loop0): ext4_dirty_inode:6538: inode #16: comm syz.0.6165: mark_inode_dirty error [ 389.935189][T21918] EXT4-fs error (device loop7): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 8 [ 389.957138][T21906] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #16: comm syz.0.6165: corrupted inode contents [ 389.957577][T21903] EXT4-fs error (device loop1): ext4_validate_block_bitmap:432: comm syz.1.6163: bg 0: block 5: invalid block bitmap [ 389.969970][T21906] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #16: comm syz.0.6165: mark_inode_dirty error [ 389.994539][T21906] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #16: comm syz.0.6165: corrupted inode contents [ 390.007425][T21906] EXT4-fs error (device loop0) in ext4_orphan_del:305: Corrupt filesystem [ 390.026615][T21906] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #16: comm syz.0.6165: corrupted inode contents [ 390.033487][T21913] EXT4-fs error (device loop9): ext4_validate_block_bitmap:441: comm syz.9.6166: bg 0: block 248: padding at end of block bitmap is not set [ 390.040129][T21906] EXT4-fs error (device loop0): ext4_truncate:4666: inode #16: comm syz.0.6165: mark_inode_dirty error [ 390.059195][T21913] EXT4-fs error (device loop9): ext4_acquire_dquot:6937: comm syz.9.6166: Failed to acquire dquot type 1 [ 390.066755][T21906] EXT4-fs error (device loop0) in ext4_process_orphan:347: Corrupt filesystem [ 390.082417][T21913] EXT4-fs (loop9): 1 truncate cleaned up [ 390.087343][T21906] EXT4-fs (loop0): 1 truncate cleaned up [ 390.095918][T21913] ext4 filesystem being mounted at /441/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 390.098041][T14355] EXT4-fs error (device loop0): ext4_release_dquot:6973: comm kworker/u8:24: Failed to release dquot type 1 [ 390.204985][T21928] loop9: detected capacity change from 0 to 1024 [ 390.211719][T21929] netlink: 'syz.7.6168': attribute type 13 has an invalid length. [ 390.216519][T21928] EXT4-fs: Ignoring removed bh option [ 390.219573][T21929] netlink: 'syz.7.6168': attribute type 17 has an invalid length. [ 390.226391][T21928] EXT4-fs (loop9): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 390.242934][T21929] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 390.270355][T21929] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 390.278916][T21929] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 390.426582][T21941] loop0: detected capacity change from 0 to 1024 [ 390.440934][T21942] netlink: 'syz.4.6173': attribute type 13 has an invalid length. [ 390.448842][T21942] netlink: 'syz.4.6173': attribute type 17 has an invalid length. [ 390.465274][T21942] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 390.482419][T21942] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 390.491227][T21942] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 390.964359][T21954] loop7: detected capacity change from 0 to 1024 [ 391.105165][T21954] EXT4-fs error (device loop7): ext4_mb_mark_diskspace_used:4183: comm syz.7.6178: Allocating blocks 385-513 which overlap fs metadata [ 391.129107][T21963] loop4: detected capacity change from 0 to 1024 [ 391.145287][T21954] EXT4-fs (loop7): pa ffff888107260700: logic 16, phys. 129, len 24 [ 391.153454][T21954] EXT4-fs error (device loop7): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 8 [ 391.197611][T21961] loop1: detected capacity change from 0 to 512 [ 391.202825][T21963] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4183: comm syz.4.6181: Allocating blocks 385-513 which overlap fs metadata [ 391.219805][T21962] EXT4-fs (loop4): pa ffff8881072aaee0: logic 16, phys. 129, len 24 [ 391.228003][T21962] EXT4-fs error (device loop4): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 8 [ 391.256875][T21961] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.6180: bg 0: block 248: padding at end of block bitmap is not set [ 391.277245][T21961] EXT4-fs error (device loop1): ext4_acquire_dquot:6937: comm syz.1.6180: Failed to acquire dquot type 1 [ 391.300593][T21961] EXT4-fs (loop1): 1 truncate cleaned up [ 391.308512][T21961] ext4 filesystem being mounted at /139/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 391.411443][T21986] loop1: detected capacity change from 0 to 1024 [ 391.419968][T21986] EXT4-fs: Ignoring removed bh option [ 391.445301][T21986] EXT4-fs (loop1): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 391.504872][T21995] loop7: detected capacity change from 0 to 1024 [ 391.524582][T21995] EXT4-fs error (device loop7): ext4_mb_mark_diskspace_used:4183: comm syz.7.6190: Allocating blocks 385-513 which overlap fs metadata [ 391.542028][T21995] EXT4-fs (loop7): pa ffff8881072aaee0: logic 16, phys. 129, len 24 [ 391.550221][T21995] EXT4-fs error (device loop7): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 8 [ 391.570533][T21980] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=12 sclass=netlink_route_socket pid=21980 comm=syz.4.6185 [ 391.878864][T22009] loop9: detected capacity change from 0 to 1024 [ 391.885734][T22009] EXT4-fs: Ignoring removed bh option [ 391.891448][T22009] EXT4-fs (loop9): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 392.190102][T22015] usb usb8: usbfs: interface 0 claimed by hub while 'syz.9.6195' sets config #0 [ 392.432887][T22018] loop0: detected capacity change from 0 to 512 [ 392.446397][T22020] loop1: detected capacity change from 0 to 1024 [ 392.471547][T22020] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4183: comm syz.1.6196: Allocating blocks 385-513 which overlap fs metadata [ 392.472951][T22018] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.6197: bg 0: block 248: padding at end of block bitmap is not set [ 392.503154][T22018] EXT4-fs error (device loop0): ext4_acquire_dquot:6937: comm syz.0.6197: Failed to acquire dquot type 1 [ 392.517086][T22019] EXT4-fs (loop1): pa ffff8881072aabd0: logic 16, phys. 129, len 24 [ 392.518263][T22018] EXT4-fs (loop0): 1 truncate cleaned up [ 392.525173][T22019] EXT4-fs error (device loop1): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 8 [ 392.562770][T22018] ext4 filesystem being mounted at /336/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 392.567264][T22026] loop7: detected capacity change from 0 to 1024 [ 393.870633][T22046] loop4: detected capacity change from 0 to 1024 [ 393.878423][T22046] EXT4-fs: Ignoring removed bh option [ 393.888294][T22046] EXT4-fs (loop4): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 393.918869][ T29] kauditd_printk_skb: 71 callbacks suppressed [ 393.918886][ T29] audit: type=1326 audit(1757268548.854:10488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22041 comm="syz.9.6203" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21d758ebe9 code=0x7ffc0000 [ 394.041455][ T29] audit: type=1326 audit(1757268548.924:10489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22041 comm="syz.9.6203" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21d758ebe9 code=0x7ffc0000 [ 394.068695][ T29] audit: type=1326 audit(1757268548.924:10490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22041 comm="syz.9.6203" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f21d758ebe9 code=0x7ffc0000 [ 394.092315][ T29] audit: type=1326 audit(1757268548.924:10491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22041 comm="syz.9.6203" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21d758ebe9 code=0x7ffc0000 [ 394.116277][ T29] audit: type=1326 audit(1757268548.924:10492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22041 comm="syz.9.6203" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21d758ebe9 code=0x7ffc0000 [ 394.140540][ T29] audit: type=1326 audit(1757268548.924:10493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22041 comm="syz.9.6203" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f21d758ebe9 code=0x7ffc0000 [ 394.164380][ T29] audit: type=1326 audit(1757268548.924:10494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22041 comm="syz.9.6203" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21d758ebe9 code=0x7ffc0000 [ 394.188049][ T29] audit: type=1326 audit(1757268548.924:10495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22041 comm="syz.9.6203" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21d758ebe9 code=0x7ffc0000 [ 394.211802][ T29] audit: type=1326 audit(1757268548.924:10496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22041 comm="syz.9.6203" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f21d758d550 code=0x7ffc0000 [ 394.235451][ T29] audit: type=1326 audit(1757268548.924:10497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22041 comm="syz.9.6203" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f21d7590417 code=0x7ffc0000 [ 394.271435][T22054] loop0: detected capacity change from 0 to 1024 [ 394.280624][T22054] EXT4-fs: Ignoring removed bh option [ 394.298372][T22054] EXT4-fs (loop0): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 394.318686][T22056] loop4: detected capacity change from 0 to 1024 [ 394.329290][T22056] EXT4-fs: Ignoring removed bh option [ 394.342055][T22056] EXT4-fs (loop4): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 394.907823][T22071] loop7: detected capacity change from 0 to 1024 [ 394.914785][T22071] EXT4-fs: Ignoring removed bh option [ 394.920719][T22071] EXT4-fs (loop7): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 395.171653][T22084] loop4: detected capacity change from 0 to 1024 [ 395.274190][T22076] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=12 sclass=netlink_route_socket pid=22076 comm=syz.1.6211 [ 395.348256][T22092] loop1: detected capacity change from 0 to 1024 [ 395.355925][T22092] EXT4-fs: Ignoring removed bh option [ 395.361992][T22092] EXT4-fs (loop1): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 395.372192][T22094] loop0: detected capacity change from 0 to 1024 [ 395.397527][T22094] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4183: comm syz.0.6217: Allocating blocks 385-513 which overlap fs metadata [ 395.417454][T22094] EXT4-fs (loop0): pa ffff888107260620: logic 16, phys. 129, len 24 [ 395.425678][T22094] EXT4-fs error (device loop0): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 8 [ 395.478514][T22102] loop9: detected capacity change from 0 to 512 [ 395.491012][T22102] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 395.501503][T22102] EXT4-fs error (device loop9): ext4_get_branch:178: inode #11: block 4294967295: comm syz.9.6219: invalid block [ 395.517709][T22102] EXT4-fs error (device loop9): ext4_free_branches:1023: inode #11: comm syz.9.6219: invalid indirect mapped block 4294967295 (level 1) [ 395.533092][T22102] EXT4-fs error (device loop9): ext4_free_branches:1023: inode #11: comm syz.9.6219: invalid indirect mapped block 4294967295 (level 1) [ 395.554417][T22102] EXT4-fs (loop9): 2 truncates cleaned up [ 395.580967][T22102] EXT4-fs error (device loop9): ext4_validate_block_bitmap:432: comm syz.9.6219: bg 0: block 5: invalid block bitmap [ 395.637259][T22100] siw: device registration error -23 [ 395.673867][T22110] loop9: detected capacity change from 0 to 1024 [ 395.711892][T22117] loop1: detected capacity change from 0 to 1024 [ 395.718845][T22117] EXT4-fs: Ignoring removed bh option [ 395.724688][T22117] EXT4-fs (loop1): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 395.769161][T22122] program syz.7.6224 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 395.798182][T22124] loop7: detected capacity change from 0 to 1024 [ 395.805344][T22124] EXT4-fs: Ignoring removed bh option [ 395.811516][T22124] EXT4-fs (loop7): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 396.003891][T22130] bridge_slave_0: left allmulticast mode [ 396.009556][T22130] bridge_slave_0: left promiscuous mode [ 396.015247][T22130] bridge0: port 1(bridge_slave_0) entered disabled state [ 396.024155][T22130] bridge_slave_1: left allmulticast mode [ 396.029842][T22130] bridge_slave_1: left promiscuous mode [ 396.035554][T22130] bridge0: port 2(bridge_slave_1) entered disabled state [ 396.046694][T22130] bond0: (slave bond_slave_0): Releasing backup interface [ 396.059584][T22130] bond0: (slave bond_slave_1): Releasing backup interface [ 396.077243][T22130] team0: Port device team_slave_0 removed [ 396.089860][T22130] team0: Port device team_slave_1 removed [ 396.101319][T22130] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 396.108916][T22130] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 396.118873][T22130] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 396.126363][T22130] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 396.137122][T22133] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=12 sclass=netlink_route_socket pid=22133 comm=syz.9.6226 [ 396.177341][T22135] loop9: detected capacity change from 0 to 1024 [ 396.209908][T22135] EXT4-fs error (device loop9): ext4_mb_mark_diskspace_used:4183: comm syz.9.6227: Allocating blocks 385-513 which overlap fs metadata [ 396.227726][T22135] EXT4-fs (loop9): pa ffff888107260690: logic 16, phys. 129, len 24 [ 396.236469][T22135] EXT4-fs error (device loop9): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 8 [ 396.243270][T22139] loop0: detected capacity change from 0 to 1024 [ 396.253576][T22139] EXT4-fs: Ignoring removed bh option [ 396.259568][T22139] EXT4-fs (loop0): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 396.434958][T22153] netlink: '’': attribute type 10 has an invalid length. [ 396.464563][T22155] loop9: detected capacity change from 0 to 512 [ 396.473797][T22155] EXT4-fs (loop9): revision level too high, forcing read-only mode [ 396.503494][T22155] EXT4-fs (loop9): orphan cleanup on readonly fs [ 396.571212][T22160] loop4: detected capacity change from 0 to 1024 [ 396.583862][T22155] EXT4-fs error (device loop9): ext4_do_update_inode:5653: inode #16: comm syz.9.6233: corrupted inode contents [ 396.599405][T22155] EXT4-fs error (device loop9): ext4_dirty_inode:6538: inode #16: comm syz.9.6233: mark_inode_dirty error [ 396.615685][T22155] EXT4-fs error (device loop9): ext4_do_update_inode:5653: inode #16: comm syz.9.6233: corrupted inode contents [ 396.630290][T22155] EXT4-fs error (device loop9): __ext4_ext_dirty:206: inode #16: comm syz.9.6233: mark_inode_dirty error [ 396.692185][T22155] EXT4-fs error (device loop9): ext4_do_update_inode:5653: inode #16: comm syz.9.6233: corrupted inode contents [ 396.707488][T22155] EXT4-fs error (device loop9) in ext4_orphan_del:305: Corrupt filesystem [ 396.716828][T22155] EXT4-fs error (device loop9): ext4_do_update_inode:5653: inode #16: comm syz.9.6233: corrupted inode contents [ 396.750354][T22160] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4183: comm syz.4.6234: Allocating blocks 385-513 which overlap fs metadata [ 396.766245][T22155] EXT4-fs error (device loop9): ext4_truncate:4666: inode #16: comm syz.9.6233: mark_inode_dirty error [ 396.783985][T22160] EXT4-fs (loop4): pa ffff8881072aacb0: logic 16, phys. 129, len 24 [ 396.792034][T22160] EXT4-fs error (device loop4): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 8 [ 396.808604][T22155] EXT4-fs error (device loop9) in ext4_process_orphan:347: Corrupt filesystem [ 396.822428][T22155] EXT4-fs (loop9): 1 truncate cleaned up [ 396.829809][T14361] EXT4-fs error (device loop9): ext4_release_dquot:6973: comm kworker/u8:29: Failed to release dquot type 1 [ 396.846509][T22164] program syz.7.6235 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 396.947861][T22175] loop4: detected capacity change from 0 to 1024 [ 397.021349][T22166] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=12 sclass=netlink_route_socket pid=22166 comm=syz.1.6236 [ 397.037280][T22168] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=12 sclass=netlink_route_socket pid=22168 comm=syz.7.6237 [ 397.052869][T22178] loop4: detected capacity change from 0 to 1024 [ 397.059726][T22178] EXT4-fs: Ignoring removed bh option [ 397.067538][T22178] EXT4-fs (loop4): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 397.195488][T22188] loop7: detected capacity change from 0 to 1024 [ 397.216269][T22188] EXT4-fs: Ignoring removed bh option [ 397.223444][T22190] loop0: detected capacity change from 0 to 1024 [ 397.227922][T22194] loop1: detected capacity change from 0 to 1024 [ 397.233257][T22188] EXT4-fs (loop7): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 397.236909][T22194] EXT4-fs: Ignoring removed bh option [ 397.252303][T22194] EXT4-fs (loop1): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 397.267001][T22188] EXT4-fs mount: 205 callbacks suppressed [ 397.267020][T22188] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 397.373251][T22190] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 397.399762][T22190] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4183: comm syz.0.6245: Allocating blocks 385-513 which overlap fs metadata [ 397.417385][T22189] EXT4-fs (loop0): pa ffff8881072aac40: logic 16, phys. 129, len 24 [ 397.425624][T22189] EXT4-fs error (device loop0): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 8 [ 397.443778][T22194] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 397.560763][T16788] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 397.588860][T15638] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 397.642157][T22207] program syz.0.6247 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 397.673982][T22209] loop0: detected capacity change from 0 to 512 [ 397.712224][T22209] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 397.730188][T22209] ext4 filesystem being mounted at /346/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 397.766882][T16788] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 397.786161][T22215] loop0: detected capacity change from 0 to 1024 [ 397.794844][T22215] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 398.132291][T16788] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 398.198353][T22223] program syz.4.6253 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 398.210747][T19565] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 398.236554][T22221] loop9: detected capacity change from 0 to 512 [ 398.252997][T22227] loop4: detected capacity change from 0 to 1024 [ 398.260395][T22221] EXT4-fs (loop9): revision level too high, forcing read-only mode [ 398.270328][T22221] EXT4-fs (loop9): orphan cleanup on readonly fs [ 398.278359][T22221] EXT4-fs error (device loop9): ext4_do_update_inode:5653: inode #16: comm syz.9.6252: corrupted inode contents [ 398.291779][T22233] loop1: detected capacity change from 0 to 1024 [ 398.291933][T22221] EXT4-fs error (device loop9): ext4_dirty_inode:6538: inode #16: comm syz.9.6252: mark_inode_dirty error [ 398.300429][T22233] EXT4-fs: Ignoring removed bh option [ 398.311341][T22221] EXT4-fs error (device loop9): ext4_do_update_inode:5653: inode #16: comm syz.9.6252: corrupted inode contents [ 398.328798][T22227] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 398.329006][T22221] EXT4-fs error (device loop9): __ext4_ext_dirty:206: inode #16: comm syz.9.6252: mark_inode_dirty error [ 398.354975][T22233] EXT4-fs (loop1): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 398.365677][T22221] EXT4-fs error (device loop9): ext4_do_update_inode:5653: inode #16: comm syz.9.6252: corrupted inode contents [ 398.386893][T22221] EXT4-fs error (device loop9) in ext4_orphan_del:305: Corrupt filesystem [ 398.389575][T22227] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4183: comm syz.4.6255: Allocating blocks 385-513 which overlap fs metadata [ 398.409883][T22233] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 398.419845][T22221] EXT4-fs error (device loop9): ext4_do_update_inode:5653: inode #16: comm syz.9.6252: corrupted inode contents [ 398.450714][T22221] EXT4-fs error (device loop9): ext4_truncate:4666: inode #16: comm syz.9.6252: mark_inode_dirty error [ 398.454189][T22240] EXT4-fs (loop4): pa ffff888107260850: logic 16, phys. 129, len 24 [ 398.469846][T22240] EXT4-fs error (device loop4): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 8 [ 398.481397][T22221] EXT4-fs error (device loop9) in ext4_process_orphan:347: Corrupt filesystem [ 398.492430][T22236] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=12 sclass=netlink_route_socket pid=22236 comm=syz.0.6256 [ 398.507182][T22221] EXT4-fs (loop9): 1 truncate cleaned up [ 398.555443][T14355] EXT4-fs error (device loop9): ext4_release_dquot:6973: comm kworker/u8:24: Failed to release dquot type 1 [ 398.571827][T22221] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 398.588133][T19565] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 398.598030][T16024] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 398.615945][T22244] program syz.7.6259 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 399.609104][T15919] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 399.743667][T22266] loop1: detected capacity change from 0 to 1024 [ 399.750616][T22266] EXT4-fs: Ignoring removed bh option [ 399.760143][T22266] EXT4-fs (loop1): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 399.794261][T22271] loop9: detected capacity change from 0 to 1024 [ 399.806408][T22266] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 399.823084][T22271] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 399.852189][T22271] EXT4-fs error (device loop9): ext4_mb_mark_diskspace_used:4183: comm syz.9.6268: Allocating blocks 385-513 which overlap fs metadata [ 399.875162][T19565] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 399.905999][T22271] EXT4-fs (loop9): pa ffff888107260770: logic 16, phys. 129, len 24 [ 399.914133][T22271] EXT4-fs error (device loop9): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 8 [ 399.937115][T22281] loop1: detected capacity change from 0 to 1024 [ 399.947003][T22273] siw: device registration error -23 [ 399.957477][T22281] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 399.977446][T15919] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 399.987869][T22283] program syz.7.6271 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 400.099014][T22291] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4183: comm syz.1.6270: Allocating blocks 385-513 which overlap fs metadata [ 400.118118][T22297] loop7: detected capacity change from 0 to 1024 [ 400.131503][T22281] EXT4-fs (loop1): pa ffff888107260770: logic 16, phys. 129, len 24 [ 400.139588][T22281] EXT4-fs error (device loop1): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 8 [ 400.160954][T22289] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=12 sclass=netlink_route_socket pid=22289 comm=syz.9.6273 [ 400.281510][T19565] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 400.509735][T22297] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 400.571752][T22297] EXT4-fs error (device loop7): ext4_mb_mark_diskspace_used:4183: comm syz.7.6275: Allocating blocks 385-513 which overlap fs metadata [ 400.695710][T22314] loop0: detected capacity change from 0 to 1024 [ 400.702686][T22314] EXT4-fs: Ignoring removed bh option [ 400.722906][T22314] EXT4-fs (loop0): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 400.734313][T22297] EXT4-fs (loop7): pa ffff8881072aac40: logic 16, phys. 129, len 24 [ 400.742345][T22297] EXT4-fs error (device loop7): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 8 [ 400.772391][T22314] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 401.072923][T22322] netlink: 40 bytes leftover after parsing attributes in process `syz.4.6281'. [ 401.116541][T15638] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 401.285052][T16788] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 401.296271][ T29] kauditd_printk_skb: 88 callbacks suppressed [ 401.296285][ T29] audit: type=1326 audit(1757268556.244:10584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22325 comm="syz.4.6283" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60e5c0ebe9 code=0x7ffc0000 [ 401.366406][ T29] audit: type=1326 audit(1757268556.274:10585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22325 comm="syz.4.6283" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f60e5c0ebe9 code=0x7ffc0000 [ 401.390181][ T29] audit: type=1326 audit(1757268556.274:10586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22325 comm="syz.4.6283" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60e5c0ebe9 code=0x7ffc0000 [ 401.414085][ T29] audit: type=1326 audit(1757268556.274:10587): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22325 comm="syz.4.6283" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60e5c0ebe9 code=0x7ffc0000 [ 401.424579][T22332] program syz.0.6284 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 401.437694][ T29] audit: type=1326 audit(1757268556.274:10588): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22325 comm="syz.4.6283" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f60e5c0ebe9 code=0x7ffc0000 [ 401.470502][ T29] audit: type=1326 audit(1757268556.274:10589): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22325 comm="syz.4.6283" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60e5c0ebe9 code=0x7ffc0000 [ 401.494136][ T29] audit: type=1326 audit(1757268556.274:10590): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22325 comm="syz.4.6283" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60e5c0ebe9 code=0x7ffc0000 [ 401.517714][ T29] audit: type=1326 audit(1757268556.274:10591): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22325 comm="syz.4.6283" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f60e5c0d550 code=0x7ffc0000 [ 401.541313][ T29] audit: type=1326 audit(1757268556.274:10592): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22325 comm="syz.4.6283" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f60e5c10417 code=0x7ffc0000 [ 401.564968][ T29] audit: type=1326 audit(1757268556.274:10593): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22325 comm="syz.4.6283" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f60e5c0ebe9 code=0x7ffc0000 [ 401.883673][T22335] siw: device registration error -23 [ 401.908027][T22343] netlink: 'syz.7.6287': attribute type 13 has an invalid length. [ 401.916032][T22343] netlink: 'syz.7.6287': attribute type 17 has an invalid length. [ 401.957909][T22343] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 401.983107][T22344] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 402.001865][T22344] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 402.121703][T22354] loop4: detected capacity change from 0 to 1024 [ 402.136061][T22354] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 402.156812][T22354] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4183: comm syz.4.6292: Allocating blocks 385-513 which overlap fs metadata [ 402.180562][T22346] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=12 sclass=netlink_route_socket pid=22346 comm=syz.9.6289 [ 402.194391][T22353] EXT4-fs (loop4): pa ffff8881072609a0: logic 16, phys. 129, len 24 [ 402.202439][T22353] EXT4-fs error (device loop4): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 8 [ 402.221044][T22360] loop9: detected capacity change from 0 to 1024 [ 402.228610][T22360] EXT4-fs: Ignoring removed bh option [ 402.235499][T22360] EXT4-fs (loop9): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 402.246736][T16024] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 402.247278][T22358] netlink: 40 bytes leftover after parsing attributes in process `syz.1.6293'. [ 402.259235][T22360] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 402.301949][T15919] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 402.315648][T22367] program syz.1.6296 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 402.419985][T22369] loop4: detected capacity change from 0 to 512 [ 402.457990][T22369] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.6298: bg 0: block 248: padding at end of block bitmap is not set [ 402.477783][T22369] EXT4-fs error (device loop4): ext4_acquire_dquot:6937: comm syz.4.6298: Failed to acquire dquot type 1 [ 402.505347][T22375] loop1: detected capacity change from 0 to 512 [ 402.512329][T22369] EXT4-fs (loop4): 1 truncate cleaned up [ 402.526562][T22369] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 402.541950][T22369] ext4 filesystem being mounted at /411/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 402.578141][T22375] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.6300: bg 0: block 248: padding at end of block bitmap is not set [ 402.599891][T22375] EXT4-fs error (device loop1): ext4_acquire_dquot:6937: comm syz.1.6300: Failed to acquire dquot type 1 [ 402.613172][T22369] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 402.616503][T22375] EXT4-fs (loop1): 1 truncate cleaned up [ 402.631484][T22375] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 402.645159][T22375] ext4 filesystem being mounted at /164/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 402.671309][T22387] loop4: detected capacity change from 0 to 1024 [ 402.714585][T22375] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 402.751561][T22387] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 402.769503][T22394] loop7: detected capacity change from 0 to 1024 [ 402.835297][T22394] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 402.857897][T22387] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4183: comm syz.4.6303: Allocating blocks 385-513 which overlap fs metadata [ 402.900960][T22401] netlink: 40 bytes leftover after parsing attributes in process `syz.1.6307'. [ 402.930474][T22394] EXT4-fs error (device loop7): ext4_mb_mark_diskspace_used:4183: comm syz.7.6306: Allocating blocks 385-513 which overlap fs metadata [ 402.953833][T22397] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=12 sclass=netlink_route_socket pid=22397 comm=syz.0.6305 [ 402.973601][T22403] EXT4-fs (loop4): pa ffff8881072aaf50: logic 16, phys. 129, len 24 [ 402.981760][T22403] EXT4-fs error (device loop4): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 8 [ 403.012084][T22406] EXT4-fs (loop7): pa ffff8881072aabd0: logic 16, phys. 129, len 24 [ 403.020252][T22406] EXT4-fs error (device loop7): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 8 [ 403.089919][T15638] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 403.100895][T22409] loop0: detected capacity change from 0 to 1024 [ 403.111452][T16024] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 403.130044][T22411] loop1: detected capacity change from 0 to 512 [ 403.131151][T22409] EXT4-fs: Ignoring removed bh option [ 403.150152][T22409] EXT4-fs (loop0): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 403.167388][T22413] program syz.7.6310 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 403.179221][T22409] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 403.203533][T22411] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 403.211682][T22411] EXT4-fs (loop1): orphan cleanup on readonly fs [ 403.224841][T22420] netlink: 'syz.4.6311': attribute type 13 has an invalid length. [ 403.232770][T22420] netlink: 'syz.4.6311': attribute type 17 has an invalid length. [ 403.234747][T22411] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #16: comm syz.1.6309: corrupted inode contents [ 403.254705][T22411] EXT4-fs error (device loop1): ext4_dirty_inode:6538: inode #16: comm syz.1.6309: mark_inode_dirty error [ 403.267320][T22411] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #16: comm syz.1.6309: corrupted inode contents [ 403.282167][T22423] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 403.282791][T22411] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #16: comm syz.1.6309: mark_inode_dirty error [ 403.312976][T22411] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #16: comm syz.1.6309: corrupted inode contents [ 403.317661][T22423] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 403.327215][T22411] EXT4-fs error (device loop1) in ext4_orphan_del:305: Corrupt filesystem [ 403.342123][T16788] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 403.352681][T22411] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #16: comm syz.1.6309: corrupted inode contents [ 403.366183][T22411] EXT4-fs error (device loop1): ext4_truncate:4666: inode #16: comm syz.1.6309: mark_inode_dirty error [ 403.377876][T22411] EXT4-fs error (device loop1) in ext4_process_orphan:347: Corrupt filesystem [ 403.389584][T22411] EXT4-fs (loop1): 1 truncate cleaned up [ 403.395279][T22420] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 403.416470][T14368] EXT4-fs error (device loop1): ext4_release_dquot:6973: comm kworker/u8:36: Failed to release dquot type 1 [ 403.432278][T22411] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 403.586861][T22432] loop7: detected capacity change from 0 to 1024 [ 403.595932][T22432] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 403.624084][T15638] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 403.654493][T19565] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 403.704842][T22442] netlink: 'syz.7.6317': attribute type 13 has an invalid length. [ 403.712801][T22442] netlink: 'syz.7.6317': attribute type 17 has an invalid length. [ 403.735475][T22442] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 403.754918][T22442] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 403.763770][T22442] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 403.785250][T22444] siw: device registration error -23 [ 404.211869][T22449] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6320'. [ 404.351547][T22454] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=12 sclass=netlink_route_socket pid=22454 comm=syz.4.6321 [ 404.392145][T22459] loop9: detected capacity change from 0 to 1024 [ 404.400099][T22459] EXT4-fs: Ignoring removed bh option [ 404.406360][T22459] EXT4-fs (loop9): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 404.455078][T22459] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 404.484674][T15919] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 404.681051][T22473] loop0: detected capacity change from 0 to 1024 [ 404.716785][T22475] netlink: 'syz.1.6328': attribute type 13 has an invalid length. [ 404.724846][T22475] netlink: 'syz.1.6328': attribute type 17 has an invalid length. [ 404.769047][T22476] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 404.782204][T22476] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 404.803055][T22473] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 404.964310][T22475] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 405.051637][T16788] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 405.067000][T22481] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=12 sclass=netlink_route_socket pid=22481 comm=syz.9.6329 [ 406.117759][T22501] loop7: detected capacity change from 0 to 1024 [ 406.134495][T22501] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 406.155798][T22501] EXT4-fs error (device loop7): ext4_mb_mark_diskspace_used:4183: comm syz.7.6334: Allocating blocks 385-513 which overlap fs metadata [ 406.171614][T22501] EXT4-fs (loop7): pa ffff8881072aaf50: logic 16, phys. 129, len 24 [ 406.179724][T22501] EXT4-fs error (device loop7): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 8 [ 406.281790][T22507] loop9: detected capacity change from 0 to 1024 [ 406.297263][T22507] EXT4-fs: Ignoring removed bh option [ 406.304442][T22507] EXT4-fs (loop9): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 406.424930][T22507] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 406.424928][T15638] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 407.186668][T15919] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 407.211883][T22523] loop9: detected capacity change from 0 to 1024 [ 407.222032][T22523] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 407.241041][ T29] kauditd_printk_skb: 98 callbacks suppressed [ 407.241129][ T29] audit: type=1326 audit(1757268562.184:10687): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22514 comm="syz.7.6339" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3092acebe9 code=0x7ffc0000 [ 407.271349][ T29] audit: type=1326 audit(1757268562.184:10688): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22514 comm="syz.7.6339" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3092acebe9 code=0x7ffc0000 [ 407.295084][ T29] audit: type=1326 audit(1757268562.184:10689): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22514 comm="syz.7.6339" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3092acebe9 code=0x7ffc0000 [ 407.318799][ T29] audit: type=1326 audit(1757268562.184:10690): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22514 comm="syz.7.6339" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3092acebe9 code=0x7ffc0000 [ 407.342416][ T29] audit: type=1326 audit(1757268562.184:10691): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22514 comm="syz.7.6339" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3092acebe9 code=0x7ffc0000 [ 407.366098][ T29] audit: type=1326 audit(1757268562.184:10692): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22514 comm="syz.7.6339" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3092acebe9 code=0x7ffc0000 [ 407.390180][ T29] audit: type=1326 audit(1757268562.184:10693): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22514 comm="syz.7.6339" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3092acebe9 code=0x7ffc0000 [ 407.413782][ T29] audit: type=1326 audit(1757268562.184:10694): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22514 comm="syz.7.6339" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3092acebe9 code=0x7ffc0000 [ 407.437603][ T29] audit: type=1326 audit(1757268562.184:10695): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22514 comm="syz.7.6339" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f3092acd550 code=0x7ffc0000 [ 407.461349][ T29] audit: type=1326 audit(1757268562.184:10696): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22514 comm="syz.7.6339" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f3092ad0417 code=0x7ffc0000 [ 407.558826][T15919] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 407.612264][T22521] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=12 sclass=netlink_route_socket pid=22521 comm=syz.4.6341 [ 407.731052][T22542] netlink: 'syz.7.6345': attribute type 5 has an invalid length. [ 407.744527][T22539] loop4: detected capacity change from 0 to 1024 [ 407.764407][T22539] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 408.098413][T22539] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4183: comm syz.4.6346: Allocating blocks 385-513 which overlap fs metadata [ 408.134924][T22539] EXT4-fs (loop4): pa ffff8881072aaf50: logic 16, phys. 129, len 24 [ 408.143069][T22539] EXT4-fs error (device loop4): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 8 [ 408.171801][T22552] loop0: detected capacity change from 0 to 1024 [ 408.195937][T22552] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 408.235579][T16024] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 408.580985][T22560] loop1: detected capacity change from 0 to 512 [ 408.646608][T22560] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 408.657447][T22560] EXT4-fs (loop1): orphan cleanup on readonly fs [ 408.668427][T22560] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #16: comm syz.1.6352: corrupted inode contents [ 408.681547][T22560] EXT4-fs error (device loop1): ext4_dirty_inode:6538: inode #16: comm syz.1.6352: mark_inode_dirty error [ 408.694067][T22560] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #16: comm syz.1.6352: corrupted inode contents [ 408.706456][T22560] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #16: comm syz.1.6352: mark_inode_dirty error [ 408.719336][T22560] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #16: comm syz.1.6352: corrupted inode contents [ 408.753437][T22560] EXT4-fs error (device loop1) in ext4_orphan_del:305: Corrupt filesystem [ 408.764678][T22564] loop7: detected capacity change from 0 to 512 [ 408.774819][T22560] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #16: comm syz.1.6352: corrupted inode contents [ 408.802679][T16788] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 408.813885][T22564] EXT4-fs (loop7): revision level too high, forcing read-only mode [ 408.822081][T22560] EXT4-fs error (device loop1): ext4_truncate:4666: inode #16: comm syz.1.6352: mark_inode_dirty error [ 408.834554][T22564] EXT4-fs (loop7): orphan cleanup on readonly fs [ 408.847576][T22564] EXT4-fs error (device loop7): ext4_do_update_inode:5653: inode #16: comm syz.7.6353: corrupted inode contents [ 408.857616][T22568] loop0: detected capacity change from 0 to 1024 [ 408.860802][T22560] EXT4-fs error (device loop1) in ext4_process_orphan:347: Corrupt filesystem [ 408.877893][T22564] EXT4-fs error (device loop7): ext4_dirty_inode:6538: inode #16: comm syz.7.6353: mark_inode_dirty error [ 408.884079][T22568] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 408.890100][T22560] EXT4-fs (loop1): 1 truncate cleaned up [ 408.907822][T14361] EXT4-fs error (device loop1): ext4_release_dquot:6973: comm kworker/u8:29: Failed to release dquot type 1 [ 408.919569][T22564] EXT4-fs error (device loop7): ext4_do_update_inode:5653: inode #16: comm syz.7.6353: corrupted inode contents [ 408.932632][T22560] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 408.945267][T22564] EXT4-fs error (device loop7): __ext4_ext_dirty:206: inode #16: comm syz.7.6353: mark_inode_dirty error [ 408.957146][T22564] EXT4-fs error (device loop7): ext4_do_update_inode:5653: inode #16: comm syz.7.6353: corrupted inode contents [ 408.971459][T22564] EXT4-fs error (device loop7) in ext4_orphan_del:305: Corrupt filesystem [ 408.972350][T16788] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 408.999972][T22564] EXT4-fs error (device loop7): ext4_do_update_inode:5653: inode #16: comm syz.7.6353: corrupted inode contents [ 409.012306][T22564] EXT4-fs error (device loop7): ext4_truncate:4666: inode #16: comm syz.7.6353: mark_inode_dirty error [ 409.024127][T22564] EXT4-fs error (device loop7) in ext4_process_orphan:347: Corrupt filesystem [ 409.043096][T22564] EXT4-fs (loop7): 1 truncate cleaned up [ 409.045166][T22571] loop0: detected capacity change from 0 to 512 [ 409.055904][T14361] EXT4-fs error (device loop7): ext4_release_dquot:6973: comm kworker/u8:29: Failed to release dquot type 1 [ 409.068289][T22571] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 409.077605][T22564] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 409.091146][T22571] EXT4-fs error (device loop0): ext4_get_branch:178: inode #11: block 4294967295: comm syz.0.6355: invalid block [ 409.106386][T22571] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.6355: invalid indirect mapped block 4294967295 (level 1) [ 409.122227][T19565] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 409.139014][T22571] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.6355: invalid indirect mapped block 4294967295 (level 1) [ 409.158325][T22571] EXT4-fs (loop0): 2 truncates cleaned up [ 409.168807][T22571] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 409.184642][T22574] loop1: detected capacity change from 0 to 1024 [ 409.193705][T22571] EXT4-fs error (device loop0): ext4_validate_block_bitmap:432: comm syz.0.6355: bg 0: block 5: invalid block bitmap [ 409.212127][T22574] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4183: comm syz.1.6356: Allocating blocks 385-513 which overlap fs metadata [ 409.230638][T22573] EXT4-fs (loop1): pa ffff8881072aac40: logic 16, phys. 129, len 24 [ 409.238733][T22573] EXT4-fs error (device loop1): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 8 [ 409.282673][T22578] loop7: detected capacity change from 0 to 512 [ 409.291381][T22578] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 409.304453][T22578] EXT4-fs error (device loop7): ext4_get_branch:178: inode #11: block 4294967295: comm syz.7.6357: invalid block [ 409.322542][T22578] EXT4-fs error (device loop7): ext4_free_branches:1023: inode #11: comm syz.7.6357: invalid indirect mapped block 4294967295 (level 1) [ 409.339718][T22578] EXT4-fs error (device loop7): ext4_free_branches:1023: inode #11: comm syz.7.6357: invalid indirect mapped block 4294967295 (level 1) [ 409.372658][T22578] EXT4-fs (loop7): 2 truncates cleaned up [ 409.389002][T22587] loop1: detected capacity change from 0 to 512 [ 409.403385][T22585] loop9: detected capacity change from 0 to 512 [ 409.413033][T22578] EXT4-fs error (device loop7): ext4_validate_block_bitmap:432: comm syz.7.6357: bg 0: block 5: invalid block bitmap [ 409.420617][T22587] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 409.448318][T22587] EXT4-fs error (device loop1): ext4_get_branch:178: inode #11: block 4294967295: comm syz.1.6361: invalid block [ 409.473012][T22587] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.6361: invalid indirect mapped block 4294967295 (level 1) [ 409.488284][T22585] EXT4-fs (loop9): revision level too high, forcing read-only mode [ 409.506758][T22585] EXT4-fs (loop9): orphan cleanup on readonly fs [ 409.530036][T22585] EXT4-fs error (device loop9): ext4_do_update_inode:5653: inode #16: comm syz.9.6360: corrupted inode contents [ 409.542062][T22587] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.6361: invalid indirect mapped block 4294967295 (level 1) [ 409.571048][T22585] EXT4-fs error (device loop9): ext4_dirty_inode:6538: inode #16: comm syz.9.6360: mark_inode_dirty error [ 409.591259][T22587] EXT4-fs (loop1): 2 truncates cleaned up [ 409.610876][T22585] EXT4-fs error (device loop9): ext4_do_update_inode:5653: inode #16: comm syz.9.6360: corrupted inode contents [ 409.623712][T22600] netlink: 'syz.4.6363': attribute type 13 has an invalid length. [ 409.631642][T22600] netlink: 'syz.4.6363': attribute type 17 has an invalid length. [ 409.640491][T22599] loop0: detected capacity change from 0 to 512 [ 409.648316][T22599] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 409.651017][T22587] EXT4-fs error (device loop1): ext4_validate_block_bitmap:432: comm syz.1.6361: bg 0: block 5: invalid block bitmap [ 409.658617][T22599] EXT4-fs error (device loop0): ext4_get_branch:178: inode #11: block 4294967295: comm syz.0.6365: invalid block [ 409.682053][T22599] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.6365: invalid indirect mapped block 4294967295 (level 1) [ 409.685118][T22585] EXT4-fs error (device loop9): __ext4_ext_dirty:206: inode #16: comm syz.9.6360: mark_inode_dirty error [ 409.707609][T22600] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 409.710212][T22604] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 409.724826][T22585] EXT4-fs error (device loop9): ext4_do_update_inode:5653: inode #16: comm syz.9.6360: corrupted inode contents [ 409.733363][T22599] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.6365: invalid indirect mapped block 4294967295 (level 1) [ 409.744034][T22604] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 409.762633][T22585] EXT4-fs error (device loop9) in ext4_orphan_del:305: Corrupt filesystem [ 409.777095][T22599] EXT4-fs (loop0): 2 truncates cleaned up [ 409.793918][T22585] EXT4-fs error (device loop9): ext4_do_update_inode:5653: inode #16: comm syz.9.6360: corrupted inode contents [ 409.806269][T22585] EXT4-fs error (device loop9): ext4_truncate:4666: inode #16: comm syz.9.6360: mark_inode_dirty error [ 409.819531][T22585] EXT4-fs error (device loop9) in ext4_process_orphan:347: Corrupt filesystem [ 409.829488][T22609] netlink: 'syz.7.6366': attribute type 13 has an invalid length. [ 409.831437][T22599] EXT4-fs error (device loop0): ext4_validate_block_bitmap:432: comm syz.0.6365: bg 0: block 5: invalid block bitmap [ 409.837378][T22609] netlink: 'syz.7.6366': attribute type 17 has an invalid length. [ 409.859703][T22585] EXT4-fs (loop9): 1 truncate cleaned up [ 409.866129][T14361] EXT4-fs error (device loop9): ext4_release_dquot:6973: comm kworker/u8:29: Failed to release dquot type 1 [ 409.880393][T22610] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 409.889205][T22609] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 409.907154][T22610] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 410.027778][T22613] loop0: detected capacity change from 0 to 512 [ 410.034620][T22613] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 410.044543][T22613] EXT4-fs error (device loop0): ext4_get_branch:178: inode #11: block 4294967295: comm syz.0.6368: invalid block [ 410.056856][T22613] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.6368: invalid indirect mapped block 4294967295 (level 1) [ 410.071408][T22613] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.6368: invalid indirect mapped block 4294967295 (level 1) [ 410.086914][T22613] EXT4-fs (loop0): 2 truncates cleaned up [ 410.098418][T22613] EXT4-fs error (device loop0): ext4_validate_block_bitmap:432: comm syz.0.6368: bg 0: block 5: invalid block bitmap [ 410.489753][T22618] loop0: detected capacity change from 0 to 512 [ 410.503994][T22618] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 410.512223][T22618] EXT4-fs (loop0): orphan cleanup on readonly fs [ 410.520280][T22618] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #16: comm syz.0.6369: corrupted inode contents [ 410.532721][T22618] EXT4-fs error (device loop0): ext4_dirty_inode:6538: inode #16: comm syz.0.6369: mark_inode_dirty error [ 410.545093][T22618] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #16: comm syz.0.6369: corrupted inode contents [ 410.557180][T22618] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #16: comm syz.0.6369: mark_inode_dirty error [ 410.568854][T22618] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #16: comm syz.0.6369: corrupted inode contents [ 410.580932][T22618] EXT4-fs error (device loop0) in ext4_orphan_del:305: Corrupt filesystem [ 410.589857][T22618] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #16: comm syz.0.6369: corrupted inode contents [ 410.602090][T22618] EXT4-fs error (device loop0): ext4_truncate:4666: inode #16: comm syz.0.6369: mark_inode_dirty error [ 410.613627][T22618] EXT4-fs error (device loop0) in ext4_process_orphan:347: Corrupt filesystem [ 410.623256][T22618] EXT4-fs (loop0): 1 truncate cleaned up [ 410.646894][T14343] EXT4-fs error (device loop0): ext4_release_dquot:6973: comm kworker/u8:13: Failed to release dquot type 1 [ 410.863029][T22632] loop7: detected capacity change from 0 to 1024 [ 410.878274][T22632] EXT4-fs error (device loop7): ext4_mb_mark_diskspace_used:4183: comm syz.7.6373: Allocating blocks 385-513 which overlap fs metadata [ 410.894705][T22632] EXT4-fs (loop7): pa ffff888107260a80: logic 16, phys. 129, len 24 [ 410.902856][T22632] EXT4-fs error (device loop7): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 8 [ 410.948750][T22640] loop7: detected capacity change from 0 to 512 [ 410.983666][T22640] EXT4-fs (loop7): revision level too high, forcing read-only mode [ 410.991848][T22640] EXT4-fs (loop7): orphan cleanup on readonly fs [ 410.999862][T22640] EXT4-fs error (device loop7): ext4_do_update_inode:5653: inode #16: comm syz.7.6376: corrupted inode contents [ 411.016214][T22640] EXT4-fs error (device loop7): ext4_dirty_inode:6538: inode #16: comm syz.7.6376: mark_inode_dirty error [ 411.038695][T22640] EXT4-fs error (device loop7): ext4_do_update_inode:5653: inode #16: comm syz.7.6376: corrupted inode contents [ 411.064013][T22640] EXT4-fs error (device loop7): __ext4_ext_dirty:206: inode #16: comm syz.7.6376: mark_inode_dirty error [ 411.099154][T22640] EXT4-fs error (device loop7): ext4_do_update_inode:5653: inode #16: comm syz.7.6376: corrupted inode contents [ 411.130312][T22640] EXT4-fs error (device loop7) in ext4_orphan_del:305: Corrupt filesystem [ 411.164497][T22640] EXT4-fs error (device loop7): ext4_do_update_inode:5653: inode #16: comm syz.7.6376: corrupted inode contents [ 411.192148][T22640] EXT4-fs error (device loop7): ext4_truncate:4666: inode #16: comm syz.7.6376: mark_inode_dirty error [ 411.222739][T22640] EXT4-fs error (device loop7) in ext4_process_orphan:347: Corrupt filesystem [ 411.236998][T22640] EXT4-fs (loop7): 1 truncate cleaned up [ 411.242991][T14355] EXT4-fs error (device loop7): ext4_release_dquot:6973: comm kworker/u8:24: Failed to release dquot type 1 [ 411.287616][T22644] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=12 sclass=netlink_route_socket pid=22644 comm=syz.4.6377 [ 411.394724][T22654] FAULT_INJECTION: forcing a failure. [ 411.394724][T22654] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 411.407860][T22654] CPU: 0 UID: 0 PID: 22654 Comm: syz.1.6380 Not tainted syzkaller #0 PREEMPT(voluntary) [ 411.407886][T22654] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 411.407897][T22654] Call Trace: [ 411.407903][T22654] [ 411.407911][T22654] __dump_stack+0x1d/0x30 [ 411.407931][T22654] dump_stack_lvl+0xe8/0x140 [ 411.408003][T22654] dump_stack+0x15/0x1b [ 411.408017][T22654] should_fail_ex+0x265/0x280 [ 411.408058][T22654] should_fail+0xb/0x20 [ 411.408075][T22654] should_fail_usercopy+0x1a/0x20 [ 411.408095][T22654] _copy_to_user+0x20/0xa0 [ 411.408203][T22654] simple_read_from_buffer+0xb5/0x130 [ 411.408239][T22654] proc_fail_nth_read+0x10e/0x150 [ 411.408277][T22654] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 411.408376][T22654] vfs_read+0x1a5/0x770 [ 411.408394][T22654] ? __rcu_read_unlock+0x4f/0x70 [ 411.408412][T22654] ? __fget_files+0x184/0x1c0 [ 411.408459][T22654] ksys_read+0xda/0x1a0 [ 411.408477][T22654] __x64_sys_read+0x40/0x50 [ 411.408495][T22654] x64_sys_call+0x27bc/0x2ff0 [ 411.408515][T22654] do_syscall_64+0xd2/0x200 [ 411.408594][T22654] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 411.408613][T22654] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 411.408636][T22654] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 411.408692][T22654] RIP: 0033:0x7fa4c9edd5fc [ 411.408774][T22654] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 411.408788][T22654] RSP: 002b:00007fa4c8947030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 411.408805][T22654] RAX: ffffffffffffffda RBX: 00007fa4ca115fa0 RCX: 00007fa4c9edd5fc [ 411.408818][T22654] RDX: 000000000000000f RSI: 00007fa4c89470a0 RDI: 0000000000000004 [ 411.408830][T22654] RBP: 00007fa4c8947090 R08: 0000000000000000 R09: 0000000000000000 [ 411.408842][T22654] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 411.408855][T22654] R13: 00007fa4ca116038 R14: 00007fa4ca115fa0 R15: 00007ffd60c37a38 [ 411.408938][T22654] [ 411.688874][T22650] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=12 sclass=netlink_route_socket pid=22650 comm=syz.9.6379 [ 411.761489][T22668] loop7: detected capacity change from 0 to 1024 [ 411.809904][T22668] EXT4-fs error (device loop7): ext4_mb_mark_diskspace_used:4183: comm syz.7.6387: Allocating blocks 385-513 which overlap fs metadata [ 411.860891][T22668] EXT4-fs (loop7): pa ffff888107260af0: logic 16, phys. 129, len 24 [ 411.869010][T22668] EXT4-fs error (device loop7): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 8 [ 411.911156][T22648] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=12 sclass=netlink_route_socket pid=22648 comm=syz.4.6378 [ 411.955948][T22675] loop1: detected capacity change from 0 to 1024 [ 411.994423][T22675] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4183: comm syz.1.6388: Allocating blocks 385-513 which overlap fs metadata [ 412.078043][T22682] EXT4-fs (loop1): pa ffff8881072aac40: logic 16, phys. 129, len 24 [ 412.086171][T22682] EXT4-fs error (device loop1): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 8 [ 412.133534][T22686] loop0: detected capacity change from 0 to 512 [ 412.155057][T22686] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 412.163418][T22686] EXT4-fs (loop0): orphan cleanup on readonly fs [ 412.163861][T22688] loop4: detected capacity change from 0 to 1024 [ 412.174857][T22690] loop9: detected capacity change from 0 to 512 [ 412.183164][T22694] loop1: detected capacity change from 0 to 1024 [ 412.184437][T22688] EXT4-fs: Ignoring removed bh option [ 412.196805][T22686] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #16: comm syz.0.6383: corrupted inode contents [ 412.197004][T22688] EXT4-fs (loop4): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 412.209111][T22686] EXT4-fs error (device loop0): ext4_dirty_inode:6538: inode #16: comm syz.0.6383: mark_inode_dirty error [ 412.230387][T22686] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #16: comm syz.0.6383: corrupted inode contents [ 412.231141][T22690] EXT4-fs (loop9): revision level too high, forcing read-only mode [ 412.254524][T22686] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #16: comm syz.0.6383: mark_inode_dirty error [ 412.275511][T22690] EXT4-fs (loop9): orphan cleanup on readonly fs [ 412.283099][T22694] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4183: comm syz.1.6394: Allocating blocks 385-513 which overlap fs metadata [ 412.287542][T22690] EXT4-fs error (device loop9): ext4_do_update_inode:5653: inode #16: comm syz.9.6393: corrupted inode contents [ 412.297459][T22686] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #16: comm syz.0.6383: corrupted inode contents [ 412.311803][T22690] EXT4-fs error (device loop9): ext4_dirty_inode:6538: inode #16: comm syz.9.6393: mark_inode_dirty error [ 412.323224][T22694] EXT4-fs (loop1): pa ffff888107260af0: logic 16, phys. 129, len 24 [ 412.333476][T22690] EXT4-fs error (device loop9): ext4_do_update_inode:5653: inode #16: comm syz.9.6393: corrupted inode contents [ 412.340368][T22694] EXT4-fs error (device loop1): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 8 [ 412.353265][T22690] EXT4-fs error (device loop9): __ext4_ext_dirty:206: inode #16: comm syz.9.6393: mark_inode_dirty error [ 412.362563][T22686] EXT4-fs error (device loop0) in ext4_orphan_del:305: Corrupt filesystem [ 412.375546][T22690] EXT4-fs error (device loop9): ext4_do_update_inode:5653: inode #16: comm syz.9.6393: corrupted inode contents [ 412.382357][T22686] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #16: comm syz.0.6383: corrupted inode contents [ 412.396063][T22690] EXT4-fs error (device loop9) in ext4_orphan_del:305: Corrupt filesystem [ 412.406664][T22686] EXT4-fs error (device loop0): ext4_truncate:4666: inode #16: comm syz.0.6383: mark_inode_dirty error [ 412.425881][T22690] EXT4-fs error (device loop9): ext4_do_update_inode:5653: inode #16: comm syz.9.6393: corrupted inode contents [ 412.426033][T22686] EXT4-fs error (device loop0) in ext4_process_orphan:347: Corrupt filesystem [ 412.438261][T22690] EXT4-fs error (device loop9): ext4_truncate:4666: inode #16: comm syz.9.6393: mark_inode_dirty error [ 412.448389][T22686] EXT4-fs (loop0): 1 truncate cleaned up [ 412.458275][T22690] EXT4-fs error (device loop9) in ext4_process_orphan:347: Corrupt filesystem [ 412.465736][T14343] __quota_error: 262 callbacks suppressed [ 412.465807][T14343] Quota error (device loop0): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 412.473504][T22690] EXT4-fs (loop9): 1 truncate cleaned up [ 412.478238][T14343] EXT4-fs error (device loop0): ext4_release_dquot:6973: comm kworker/u8:13: Failed to release dquot type 1 [ 412.478816][T14343] Quota error (device loop9): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 412.515158][T14343] EXT4-fs error (device loop9): ext4_release_dquot:6973: comm kworker/u8:13: Failed to release dquot type 1 [ 412.527643][ T29] audit: type=1326 audit(1757268567.474:10954): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22685 comm="syz.0.6383" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f6307cad550 code=0x7ffc0000 [ 412.551384][ T29] audit: type=1326 audit(1757268567.474:10955): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22685 comm="syz.0.6383" exe="/root/syz-executor" sig=0 arch=c000003e syscall=80 compat=0 ip=0x7f6307cad937 code=0x7ffc0000 [ 412.575975][ T29] audit: type=1326 audit(1757268567.474:10956): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22685 comm="syz.0.6383" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f6307cad550 code=0x7ffc0000 [ 412.599601][ T29] audit: type=1326 audit(1757268567.474:10957): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22685 comm="syz.0.6383" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6307caebe9 code=0x7ffc0000 [ 412.623702][ T29] audit: type=1326 audit(1757268567.474:10958): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22685 comm="syz.0.6383" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6307caebe9 code=0x7ffc0000 [ 412.647384][ T29] audit: type=1326 audit(1757268567.474:10959): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22689 comm="syz.9.6393" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f21d758d550 code=0x7ffc0000 [ 412.670943][ T29] audit: type=1326 audit(1757268567.474:10960): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22689 comm="syz.9.6393" exe="/root/syz-executor" sig=0 arch=c000003e syscall=80 compat=0 ip=0x7f21d758d937 code=0x7ffc0000 [ 412.694454][ T29] audit: type=1326 audit(1757268567.474:10961): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22689 comm="syz.9.6393" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f21d758d550 code=0x7ffc0000 [ 413.230795][T22717] loop9: detected capacity change from 0 to 1024 [ 413.271311][T22717] EXT4-fs error (device loop9): ext4_mb_mark_diskspace_used:4183: comm syz.9.6400: Allocating blocks 385-513 which overlap fs metadata [ 413.291056][T22717] EXT4-fs (loop9): pa ffff888107260a80: logic 16, phys. 129, len 24 [ 413.299314][T22717] EXT4-fs error (device loop9): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 8 [ 413.313428][T22715] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6399'. [ 413.350382][T22725] netlink: 92 bytes leftover after parsing attributes in process `syz.9.6401'. [ 413.414192][T22731] loop4: detected capacity change from 0 to 1024 [ 413.451765][T22733] loop9: detected capacity change from 0 to 1024 [ 413.458618][T22733] EXT4-fs: Ignoring removed bh option [ 413.464585][T22733] EXT4-fs (loop9): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 413.504478][T22731] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4183: comm syz.4.6405: Allocating blocks 385-513 which overlap fs metadata [ 413.521232][T22731] EXT4-fs (loop4): pa ffff888107260af0: logic 16, phys. 129, len 24 [ 413.529505][T22731] EXT4-fs error (device loop4): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 8 [ 413.696286][T22744] loop4: detected capacity change from 0 to 512 [ 413.713959][T22744] EXT4-fs: Ignoring removed mblk_io_submit option [ 413.735388][T22744] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 413.756314][T22744] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e016c018, mo2=0002] [ 413.773764][T22744] System zones: 1-12 [ 413.783089][T22744] EXT4-fs (loop4): 1 truncate cleaned up [ 413.890146][T16024] EXT4-fs error (device loop4): ext4_readdir:264: inode #11: block 54: comm syz-executor: path /433/bus/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 413.916145][T16024] EXT4-fs error (device loop4): ext4_empty_dir:3120: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 413.937468][T16024] EXT4-fs error (device loop4): ext4_readdir:264: inode #11: block 54: comm syz-executor: path /433/bus/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 413.961036][T16024] EXT4-fs error (device loop4): ext4_empty_dir:3120: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 413.982326][T16024] EXT4-fs error (device loop4): ext4_readdir:264: inode #11: block 54: comm syz-executor: path /433/bus/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 414.019262][T16024] EXT4-fs error (device loop4): ext4_empty_dir:3120: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 414.033076][T22753] loop7: detected capacity change from 0 to 1024 [ 414.040699][T16024] EXT4-fs error (device loop4): ext4_readdir:264: inode #11: block 54: comm syz-executor: path /433/bus/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 414.078629][T22753] EXT4-fs error (device loop7): ext4_mb_mark_diskspace_used:4183: comm syz.7.6412: Allocating blocks 385-513 which overlap fs metadata [ 414.095199][T22752] EXT4-fs (loop7): pa ffff888107260a80: logic 16, phys. 129, len 24 [ 414.103334][T22752] EXT4-fs error (device loop7): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 8 [ 414.142701][T16024] EXT4-fs error (device loop4): ext4_empty_dir:3120: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 414.163908][T16024] EXT4-fs error (device loop4): ext4_readdir:264: inode #11: block 54: comm syz-executor: path /433/bus/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 414.188277][T16024] EXT4-fs error (device loop4): ext4_empty_dir:3120: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 414.430584][T22762] loop7: detected capacity change from 0 to 1024 [ 414.540707][T22772] loop7: detected capacity change from 0 to 1024 [ 414.547503][T22772] EXT4-fs: Ignoring removed bh option [ 414.553318][T22772] EXT4-fs (loop7): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 414.788238][T22780] netlink: 'syz.1.6420': attribute type 5 has an invalid length. [ 415.042396][T14355] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 415.109774][T14355] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 415.203245][T14355] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 415.235141][T22784] chnl_net:caif_netlink_parms(): no params data found [ 415.278125][T14355] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 415.326292][T22784] bridge0: port 1(bridge_slave_0) entered blocking state [ 415.334247][T22784] bridge0: port 1(bridge_slave_0) entered disabled state [ 415.341699][T22784] bridge_slave_0: entered allmulticast mode [ 415.348272][T22784] bridge_slave_0: entered promiscuous mode [ 415.355296][T22784] bridge0: port 2(bridge_slave_1) entered blocking state [ 415.362381][T22784] bridge0: port 2(bridge_slave_1) entered disabled state [ 415.369773][T22784] bridge_slave_1: entered allmulticast mode [ 415.376467][T22784] bridge_slave_1: entered promiscuous mode [ 415.398272][T22784] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 415.419496][T22784] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 415.465943][T22784] team0: Port device team_slave_0 added [ 415.483867][T22784] team0: Port device team_slave_1 added [ 415.525894][T22814] wireguard0: entered promiscuous mode [ 415.531468][T22814] wireguard0: entered allmulticast mode [ 415.575928][T22784] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 415.582984][T22784] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 415.609249][T22784] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 415.634130][T22784] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 415.641139][T22784] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 415.667157][T22784] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 415.707789][T22812] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=12 sclass=netlink_route_socket pid=22812 comm=syz.7.6424 [ 415.737219][T22820] program syz.1.6429 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 415.794596][T14355] bond0 (unregistering): Released all slaves [ 415.829030][T22824] netlink: 'syz.1.6430': attribute type 13 has an invalid length. [ 415.836947][T22824] netlink: 'syz.1.6430': attribute type 17 has an invalid length. [ 415.882196][T22826] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 415.912038][T22828] loop9: detected capacity change from 0 to 1024 [ 415.912626][T22826] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 415.928157][T22824] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 415.930286][T22830] loop7: detected capacity change from 0 to 1024 [ 415.952196][T14355] hsr_slave_0: left promiscuous mode [ 415.958827][T14355] hsr_slave_1: left promiscuous mode [ 415.968090][T14355] veth1_vlan: left promiscuous mode [ 415.973874][T22828] EXT4-fs error (device loop9): ext4_mb_mark_diskspace_used:4183: comm syz.9.6431: Allocating blocks 385-513 which overlap fs metadata [ 415.988080][T14355] veth0_vlan: left promiscuous mode [ 415.988194][T22828] ================================================================== [ 416.001444][T22828] BUG: KCSAN: data-race in _prb_read_valid / data_alloc [ 416.008493][T22828] [ 416.010810][T22828] write to 0xffffffff86894ad8 of 8 bytes by task 14355 on cpu 1: [ 416.018604][T22828] data_alloc+0x271/0x2b0 [ 416.022936][T22828] prb_reserve+0x808/0xaf0 [ 416.027357][T22828] vprintk_store+0x56d/0x860 [ 416.031938][T22828] vprintk_emit+0x178/0x650 [ 416.036432][T22828] vprintk_default+0x26/0x30 [ 416.041009][T22828] vprintk+0x1d/0x30 [ 416.044895][T22828] _printk+0x79/0xa0 [ 416.048782][T22828] __netdev_printk+0x321/0x3e0 [ 416.053538][T22828] netdev_info+0x9b/0xd0 [ 416.057858][T22828] __dev_set_promiscuity+0x233/0x450 [ 416.063131][T22828] __dev_set_rx_mode+0x113/0x160 [ 416.068069][T22828] dev_uc_del+0x85/0xa0 [ 416.072212][T22828] vlan_dev_stop+0xbf/0x110 [ 416.076712][T22828] __dev_close_many+0x1e1/0x420 [ 416.081568][T22828] netif_close_many+0xff/0x240 [ 416.086325][T22828] unregister_netdevice_many_notify+0x437/0x15d0 [ 416.092650][T22828] default_device_exit_batch+0x50c/0x560 [ 416.098293][T22828] ops_undo_list+0x2bd/0x410 [ 416.102883][T22828] cleanup_net+0x2de/0x4d0 [ 416.107403][T22828] process_scheduled_works+0x4cb/0x9d0 [ 416.112869][T22828] worker_thread+0x582/0x770 [ 416.117684][T22828] kthread+0x489/0x510 [ 416.121964][T22828] ret_from_fork+0xda/0x150 [ 416.126485][T22828] ret_from_fork_asm+0x1a/0x30 [ 416.131243][T22828] [ 416.133553][T22828] read to 0xffffffff86894ad8 of 16 bytes by task 22828 on cpu 0: [ 416.141251][T22828] _prb_read_valid+0x1bc/0x920 [ 416.146021][T22828] prb_read_valid+0x3c/0x60 [ 416.150531][T22828] console_unlock+0x164/0x330 [ 416.155204][T22828] vprintk_emit+0x388/0x650 [ 416.159869][T22828] vprintk_default+0x26/0x30 [ 416.164531][T22828] vprintk+0x1d/0x30 [ 416.168521][T22828] _printk+0x79/0xa0 [ 416.172423][T22828] __ext4_error+0x248/0x320 [ 416.176953][T22828] ext4_mb_mark_diskspace_used+0x273/0x3c0 [ 416.182759][T22828] ext4_mb_new_blocks+0xa62/0x2080 [ 416.187863][T22828] ext4_ext_map_blocks+0xff5/0x38a0 [ 416.193051][T22828] ext4_map_blocks+0x5ee/0xd00 [ 416.197808][T22828] ext4_alloc_file_blocks+0x2a9/0x800 [ 416.203170][T22828] ext4_do_fallocate+0x13b/0x3f0 [ 416.208114][T22828] ext4_fallocate+0x20d/0x2f0 [ 416.212779][T22828] vfs_fallocate+0x3b3/0x400 [ 416.217453][T22828] __x64_sys_fallocate+0x7a/0xd0 [ 416.222466][T22828] x64_sys_call+0x2514/0x2ff0 [ 416.227133][T22828] do_syscall_64+0xd2/0x200 [ 416.231633][T22828] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 416.237599][T22828] [ 416.239909][T22828] Reported by Kernel Concurrency Sanitizer on: [ 416.246040][T22828] CPU: 0 UID: 0 PID: 22828 Comm: syz.9.6431 Not tainted syzkaller #0 PREEMPT(voluntary) [ 416.255842][T22828] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 416.265885][T22828] ================================================================== [ 416.276459][T22837] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=11 sclass=netlink_route_socket pid=22837 comm=syz.0.6433 [ 416.308880][T22828] EXT4-fs (loop9): pa ffff888107260af0: logic 16, phys. 129, len 24 [ 416.317172][T22828] EXT4-fs error (device loop9): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 8 [ 416.339518][T22830] EXT4-fs error (device loop7): ext4_mb_mark_diskspace_used:4183: comm syz.7.6432: Allocating blocks 385-513 which overlap fs metadata [ 416.404537][T22838] EXT4-fs (loop7): pa ffff8881072aac40: logic 16, phys. 129, len 24 [ 416.412701][T22838] EXT4-fs error (device loop7): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 8 [ 416.482874][T22784] hsr_slave_0: entered promiscuous mode [ 416.489108][T22784] hsr_slave_1: entered promiscuous mode [ 416.497633][T22784] debugfs: 'hsr0' already exists in 'hsr' [ 416.503840][T22784] Cannot create hsr debugfs directory [ 416.799787][T14355] IPVS: stop unused estimator thread 0... [ 416.916286][T22784] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 416.925187][T22784] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 416.934034][T22784] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 416.943021][T22784] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 416.976672][T22784] 8021q: adding VLAN 0 to HW filter on device bond0 [ 416.988102][T22784] 8021q: adding VLAN 0 to HW filter on device team0 [ 416.997205][T14361] bridge0: port 1(bridge_slave_0) entered blocking state [ 417.004309][T14361] bridge0: port 1(bridge_slave_0) entered forwarding state [ 417.019197][T14343] bridge0: port 2(bridge_slave_1) entered blocking state [ 417.026313][T14343] bridge0: port 2(bridge_slave_1) entered forwarding state [ 417.082163][T22784] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 417.169442][T22784] veth0_vlan: entered promiscuous mode [ 417.177181][T22784] veth1_vlan: entered promiscuous mode [ 417.190801][T22784] veth0_macvtap: entered promiscuous mode [ 417.197926][T22784] veth1_macvtap: entered promiscuous mode [ 417.208290][T22784] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 417.219297][T22784] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 417.230150][T14388] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 417.239106][T14388] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 417.248399][T14388] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 417.257779][T14388] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0