last executing test programs: 1m28.310960537s ago: executing program 3 (id=915): bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='kmem_cache_free\x00', r0}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x0, 0x7fff0000}]}) syncfs(r1) r2 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000600)) stat(&(0x7f0000000340)='./file0\x00', 0x0) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0x2010480, &(0x7f00000001c0), 0x45, 0x77f, &(0x7f00000007c0)="$eJzs3c1rHOUfAPDvbJLmpf39kh/8QOspIGigdGNqbBU8VDyIYKGgZ9uw2YaaTbZkN6UJAVtE8CKoeBD00rMv9ebVl6v+FwrSUjUtVjxIZPal2TS76SZmd4V8PjDJ88zM7ne++8w88+zOsBvAgTWe/slEHI2I95KI0dr8JCIGKqX+iNPV9e6tr+XSKYmNjVd/TSrr3F1fy0XDY1KHa5VHI+LbtyOOZbbHLa2szs8UCvmlWn2yvHBpsrSyevziwsxcfi6/eHJqevrEqWdOndy/XH//YfXIrfdfevKL03++9ciNd79L4nQcqS1rzGO/jMd47TUZSF/CLV7c72A9lvR6A9iT9NDsqx7lcTRGo69SamG4m1sGAHTKmxGxAQAcMInzPwAcMPXPAe6ur+XqU28/keiu2y9ExFA1//r1zeqS/to1u6HKddCRu8mWKyNJRIztQ/zxiPjkq9c/S6fo0HVIgGauXouI82Pj2/v/ZNs9C7v1VBvrjD9Q1/9B93ydjn+ebTb+y9wf/0ST8c9gk2N3Lx5+/Gdu7kOYltLx3/MN97bda8i/ZqyvVvtPZcw3kFy4WMinfdt/I2IiBgbT+tQOMSbu/HVny4yBzWLj+O+3D974NI2f/t9cI3Ozf3Dr883OlGf+ad51t69FPNbfLP/kfvsnLca/Z9uM8fJz73zcalmaf5pvfdqef2dtXI94omn7b97Rlux4f+JkZXeYrO8UTXz540cjreI3tn86pfHr7wW6IW3/kZ3zH0sa79cs7T7G99dHv2m17OH5N9//DyWvVcqHavOuzJTLS1MRh5JXts8/sfnYer2+fpr/xOPNj/+d9v/0ED7fZv79t375fO/5d1aa/+wD7V/t+Vq1f3uFn2oPTufcuDff1yp+e+0/XSlN1Oa00/+1u6V7fuEAAAAAAAAAAAAAAAAAAAAAAAAAYBcyEXEkkkz2fjmTyWarv+H9/xjJFIql8rELxeXF2aj8VvZYDGTqX3U52vB9qFO178Ov1088UH86Iv4XER8ODlfq2VyxMNvr5AEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACg5nCL3/9P/TzY660DADpmqNcbAAB0nfM/ABw8uzv/D3dsOwCA7vH+HwAOHud/ADh4nP8BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADosLNnzqTTxh/ra7m0Pnt5ZXm+ePn4bL40n11YzmVzxaVL2blica6Qz+aKCy2f6Gr1X6FYvDQdi8tXJsv5UnmytLJ6bqG4vFg+d3FhZi5/Lj/QtcwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoH2lldX5mUIhv9S9wlAvgiooKOym0NhLDPeugwIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD4l/s7AAD//84BJ4A=") r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) io_setup(0x200, &(0x7f0000000140)=0x0) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x2, 0x1, 0x0, r3, &(0x7f0000000000), 0x0, 0xffffffffffffff00}]) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000540)={0x0, &(0x7f0000000040)}) connect$phonet_pipe(0xffffffffffffffff, &(0x7f0000000040)={0x23, 0x4, 0x4}, 0x10) ioctl$SIOCPNENABLEPIPE(0xffffffffffffffff, 0x89ed, 0x0) 1m28.148316666s ago: executing program 3 (id=922): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='task_newtask\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x7, &(0x7f0000000040)=ANY=[@ANYRES8=r1, @ANYRESOCT=r0, @ANYRES32=r0, @ANYRES8=r0, @ANYRES8=0x0, @ANYRES8=r0, @ANYRES32=r0, @ANYRESDEC=r0], &(0x7f0000000200)='GPL\x00', 0x0, 0xffffffe3, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r2}, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB, @ANYRES32=r3, @ANYRES8=0x0], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r4}, 0x10) r5 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) syz_usb_connect$hid(0x4, 0x36, &(0x7f0000000640)=ANY=[], 0x0) close_range(r5, 0xffffffffffffffff, 0x0) 1m27.588205814s ago: executing program 3 (id=944): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4) connect$inet(r0, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000008027ed8c4cfa9e142e38b6c42dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) setsockopt$inet_int(r0, 0x0, 0xa, &(0x7f0000000040)=0x3, 0x1) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r2}, &(0x7f0000000000), &(0x7f0000000200)}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='hrtimer_init\x00', r3}, 0x10) clock_nanosleep(0x9, 0x0, &(0x7f00000004c0)={0x0, 0x3938700}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file2\x00', 0x10050, &(0x7f0000000840), 0x3, 0x52c, &(0x7f0000000880)="$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") readlink(0x0, 0x0, 0x0) r4 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(r4, 0x0, 0xf, 0x0, 0x0) unshare(0x22020600) r5 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r5, &(0x7f0000000000)={&(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c, 0x0}, 0x0) unshare(0x2a020400) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000001c0)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc0004}]}) shmget$private(0x0, 0x1000, 0x800, &(0x7f0000ffc000/0x1000)=nil) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r7}, 0x10) setrlimit(0x9, 0x0) io_setup(0x2004, &(0x7f0000000680)) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) 1m27.276256853s ago: executing program 3 (id=949): syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000300)='./file1\x00', 0x8000, &(0x7f00000000c0), 0xfd, 0x244, &(0x7f0000000680)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)) pwritev2(r0, &(0x7f0000000600)=[{&(0x7f0000000080)="df", 0x1}], 0x1, 0x800be6b, 0x0, 0x2) ioperm(0x5, 0x1, 0x26) io_setup(0xa, 0x0) r1 = geteuid() getresgid(&(0x7f0000007040), &(0x7f0000007080)=0x0, &(0x7f00000070c0)) fchown(r0, r1, r2) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) bind$bt_l2cap(r3, &(0x7f0000000000)={0x1f, 0x1, @none, 0x0, 0x1}, 0xe) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r4}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x3, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], &(0x7f0000000040)='syzkaller\x00', 0xf, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = shmget$private(0x0, 0x9000, 0x0, &(0x7f0000ff7000/0x9000)=nil) shmat(r5, &(0x7f0000ffd000/0x3000)=nil, 0x2000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, &(0x7f0000006d80)) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_buf(r6, 0x29, 0x20, &(0x7f0000000000)="0bbb268dd6ffa80800000000000000000000210d0000aaa8fa017242ba9380d440fe0000000000002900000004000000", 0x30) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000040)='devtmpfs\x00', 0x0, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000007004000ff0f00000700000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000005f45b73438110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580), &(0x7f0000000200), 0x23, r7}, 0x38) socket$inet6(0x10, 0x3, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000380)='neigh_update\x00', r8}, 0x10) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000380)='neigh_update\x00', r9}, 0x10) 1m27.177913332s ago: executing program 3 (id=952): bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x9, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000003c0)={@ifindex, 0x26, 0x1, 0x8, &(0x7f0000000040)=[0x0, 0x0, 0x0], 0x3, 0x0, &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000380)=[0x0]}, 0x40) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000440)={'vcan0\x00'}) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpu.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000000780)=ANY=[@ANYBLOB="000000004c900200080000000300010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff"]) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001700)={&(0x7f0000000080)='kmem_cache_free\x00'}, 0x10) syz_emit_ethernet(0x102a, &(0x7f0000001740)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x101c, 0x0, 0xfffd, 0x0, 0x11, 0x0, @empty, @empty}, {0xffff, 0x4e20, 0x1008, 0x0, @opaque="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"}}}}}, 0x0) 1m26.63577838s ago: executing program 3 (id=967): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="190000000400000008000000ff"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) pidfd_send_signal(0xffffffffffffffff, 0x1b, 0x0, 0x0) 1m26.6355806s ago: executing program 32 (id=967): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="190000000400000008000000ff"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) pidfd_send_signal(0xffffffffffffffff, 0x1b, 0x0, 0x0) 1m16.435104879s ago: executing program 2 (id=1163): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) syz_open_dev$loop(&(0x7f0000000140), 0x75f, 0xa382) memfd_create(&(0x7f0000000880)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc90\xb9voI\xa5/\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\x81\x00V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93\x9c5\xcf\t\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0xffffffffffffffff}, &(0x7f00000001c0), &(0x7f00000002c0)}, 0x20) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r7}, 0x10) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext, 0x1a220, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) getsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r8}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) shmat(0x0, &(0x7f0000001000/0x3000)=nil, 0x0) r9 = socket$xdp(0x2c, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000800)={'batadv_slave_1\x00', 0x0}) r11 = socket$xdp(0x2c, 0x3, 0x0) bind$xdp(r9, &(0x7f0000000040)={0x2c, 0x8, r10, 0x13, r11}, 0x10) r12 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42042, 0x14a) fallocate(r12, 0x20, 0x0, 0x8000) r13 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x1e, 0x1f, &(0x7f0000000340)=ANY=[@ANYBLOB="23110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000000000000850000008600000018220000", @ANYRES32=r1, @ANYBLOB="000000000200000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000080000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001000000850000008200000017140000000000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000850000008100000004200600a0c34873950000000000000018000000040000000000000000001000186000000d0000000000000000010000"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x1000, &(0x7f0000000f80)=""/4096, 0x41100, 0x3a, '\x00', r10, @fallback=0x18, r12, 0x8, &(0x7f0000000280)={0x0, 0x5}, 0x8, 0x10, &(0x7f0000000680)={0x2, 0xf, 0x101, 0x9}, 0x10, 0x0, r7, 0x6, 0x0, &(0x7f00000006c0)=[{0x2, 0x4, 0x1, 0x4}, {0x5, 0x2, 0x1, 0xa}, {0x4, 0x5, 0x6, 0x6}, {0x2, 0x3, 0xb}, {0x5, 0x4, 0xe, 0xc}, {0x4, 0x1, 0x3, 0x3}], 0x10, 0x5, @void, @value}, 0x94) fcntl$setpipe(r13, 0x407, 0x5) 1m16.228939688s ago: executing program 2 (id=1169): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) dup(r2) (fail_nth: 1) 1m13.096078155s ago: executing program 5 (id=1238): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) pwritev2(r1, &(0x7f0000000580)=[{&(0x7f0000000500)="e46f5808a412ebc78cb9905e3b", 0xd}, {0x0}], 0x2, 0xa, 0x5, 0x3) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000004000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000640)={{r1}, &(0x7f00000005c0), &(0x7f0000000600)='%pi6 \x00'}, 0x20) setitimer(0x0, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r3, 0x10, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 1m13.062139085s ago: executing program 5 (id=1239): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000990000000b"], 0x48) r0 = syz_open_procfs(0x0, &(0x7f0000000280)='attr\x00') prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x40, 0x7ffc0002}]}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x7, 0xfc, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r1}, 0x0, &(0x7f00000002c0)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) r3 = gettid() rt_sigtimedwait(&(0x7f0000000200)={[0x3fe]}, 0x0, 0x0, 0x8) tkill(r3, 0x7) io_setup(0x3, &(0x7f00000004c0)=0x0) io_submit(r4, 0x1, &(0x7f00000005c0)=[&(0x7f0000000580)={0x0, 0x0, 0x0, 0x5, 0x1, r0, 0x0, 0x0, 0x8000000000000000, 0x0, 0x0, r0}]) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) socket$inet_tcp(0x2, 0x1, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='binfmt_misc\x00', 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000200)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) utime(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={0x1ff, 0x1}) 1m12.921105035s ago: executing program 5 (id=1240): socketpair$tipc(0x1e, 0x5, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) r0 = syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x10e, &(0x7f0000000740)={[{@errors_continue}, {@nombcache}, {@max_batch_time={'max_batch_time', 0x3d, 0x3a1976b9}}, {@nojournal_checksum}]}, 0x4, 0x45b, &(0x7f00000010c0)="$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") chdir(&(0x7f0000000140)='./file0\x00') ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, 0x0) ioperm(0x0, 0x2, 0x2) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b000000070000000500000008000000"], 0x50) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000640)=@bpf_lsm={0x1d, 0x13, &(0x7f0000000480)=@raw=[@printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x4}}, @ldst={0x0, 0x3, 0x3, 0x2, 0x0, 0x6, 0xffffffffffffffff}, @map_idx_val={0x18, 0xb, 0x6, 0x0, 0x5, 0x0, 0x0, 0x0, 0x10000}, @printk={@lu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1}}], &(0x7f0000000080)='GPL\x00', 0x0, 0x2, &(0x7f00000000c0)=""/2, 0x41100, 0x26, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200)={0x5, 0x6, 0xf67, 0x3}, 0x10, 0xffffffffffffffff, 0x0, 0x4a, &(0x7f0000000340)=[r1], &(0x7f0000000540)=[{0x0, 0x4, 0x9, 0x6}, {0x0, 0x2, 0x9, 0x6}, {0x5, 0x3, 0xa, 0xa}, {0x5, 0x4, 0x6, 0x6}], 0x10, 0x1, @void, @value}, 0x94) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000700)={'wg0\x00', 0x0}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000800000000000", @ANYRES8=r0, @ANYBLOB="0000000000000000b7080000000000027b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r3, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffde, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000000)='kfree\x00', r4}, 0x10) syz_mount_image$iso9660(&(0x7f0000000140), &(0x7f0000000d40)='./file1\x00', 0x3200010, &(0x7f0000000200)=ANY=[], 0x1, 0x7b9, &(0x7f0000000d80)="$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") ioperm(0x3, 0xf, 0xe7a) mkdir(&(0x7f0000000380)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x104) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = open(&(0x7f0000000000)='./bus\x00', 0x141b42, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r8, 0x0, r7, 0x0, 0x1000, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x34, 0x1, 0x0, 0x0, 0x0, 0x200000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) add_key$keyring(&(0x7f0000002840), &(0x7f0000002880)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) splice(r5, 0x0, r9, 0x0, 0x80, 0x0) write$binfmt_aout(r6, &(0x7f00000000c0)=ANY=[], 0x81) creat(&(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) 1m12.659812724s ago: executing program 5 (id=1255): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008f0085000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r0, 0x0, 0xfffffffffffffdfc}, 0x18) newfstatat(0xffffffffffffff9c, &(0x7f00000121c0)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0/file0\x00', 0x0, 0x4000) arch_prctl$ARCH_GET_XCOMP_SUPP(0x1021, &(0x7f0000000340)) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_FLUSH(r2, 0x0, 0xd0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000180)='./file0\x00', 0x2010480, &(0x7f0000000080), 0x1, 0x775, &(0x7f0000001cc0)="$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") r3 = syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0x2010480, &(0x7f00000001c0), 0x45, 0x775, &(0x7f0000001cc0)="$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") r4 = openat(r3, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) write$binfmt_elf64(r4, &(0x7f0000000400)=ANY=[@ANYRES64=r2, @ANYRES64=r1, @ANYRES64=r4, @ANYBLOB="2d3b1368d720412fcca40d5db5f8845592e7d2ebe98e5c4f2403fb7370783abd2a52bd59e82ee44a892e93c6b6a8b23651578bfaadcd310f134295448359ae96fd2494eb96f7cbc1e23ecea7620d568dc441e1a9d7a8884c7424d678b9362bc60c054b0f6444e517915f30bbdc75f0a846e4a430ce90194f0b45090b67bd03d34949de29101c4c2ae7d0e4f6e54842c3ceb09c0d72e0bb5e1dca247359e406d007e23ec6"], 0x78) close(r4) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0) sched_rr_get_interval(0x0, &(0x7f0000000180)) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r5, &(0x7f00000000c0)='a', 0x1, 0x9000) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0xe0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000080), 0x20840, 0x0) eventfd(0xf) syz_open_dev$ttys(0xc, 0x2, 0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) r7 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r8 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r7}, 0x8) close(r8) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r7, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) syz_clone(0x40800000, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000009c0)={r8, 0x0, 0x0}, 0x10) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) dup2(0xffffffffffffffff, r9) 1m12.345681772s ago: executing program 2 (id=1259): keyctl$KEYCTL_MOVE(0x4, 0x0, 0x0, 0x0, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) readv(r1, &(0x7f0000000400)=[{0x0}], 0x1) 1m12.333722112s ago: executing program 33 (id=1259): keyctl$KEYCTL_MOVE(0x4, 0x0, 0x0, 0x0, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) readv(r1, &(0x7f0000000400)=[{0x0}], 0x1) 1m12.242937692s ago: executing program 5 (id=1264): bind$netlink(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) preadv(0xffffffffffffffff, 0x0, 0x0, 0x202, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r1 = openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000100)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r1, &(0x7f00000001c0)=ANY=[], 0xa) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB, @ANYRES16=r2, @ANYBLOB="0100000000000500000018"], 0x2c}}, 0x0) 1m11.950307151s ago: executing program 5 (id=1265): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r1, &(0x7f0000000040)={0x23, 0x4, 0x4}, 0x10) ioctl$SIOCPNENABLEPIPE(r1, 0x89ed, 0x0) 1m11.950014261s ago: executing program 34 (id=1265): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r1, &(0x7f0000000040)={0x23, 0x4, 0x4}, 0x10) ioctl$SIOCPNENABLEPIPE(r1, 0x89ed, 0x0) 2.40260677s ago: executing program 6 (id=2737): r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_MPATH(r0, &(0x7f0000001340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000001c0)={&(0x7f0000001280)={0xa0, 0x0, 0x800, 0x70bd27, 0x4, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x1, 0x4c}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}]}, 0xa0}, 0x1, 0x0, 0x0, 0x8001}, 0x40800) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) r3 = io_uring_setup(0x410f, &(0x7f0000000200)={0x0, 0x0, 0x0, 0xfffffffc}) io_uring_register$IORING_REGISTER_BUFFERS2(r3, 0xf, &(0x7f0000001580)={0x3, 0x0, 0x0, &(0x7f00000014c0)=[{0x0}, {0x0}, {&(0x7f0000000280)=""/4094, 0xffe}], &(0x7f0000001540)=[0x0, 0x0, 0x4]}, 0x20) 2.364202989s ago: executing program 6 (id=2739): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='task_newtask\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x7, &(0x7f0000000040)=ANY=[@ANYRES8=r1, @ANYRESOCT=r0, @ANYRES32=r0, @ANYRES8=r0, @ANYRES8=0x0, @ANYRES8=r0, @ANYRES32=r0, @ANYRESDEC=r0], &(0x7f0000000200)='GPL\x00', 0x0, 0xffffffe3, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r2}, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYRES8=0x0], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r4}, 0x10) r5 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) syz_usb_connect$hid(0x4, 0x36, &(0x7f0000000640)=ANY=[], 0x0) close_range(r5, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x0) r6 = syz_io_uring_setup(0x10b, 0x0, &(0x7f00000003c0)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r7, r8, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x29c780}) io_uring_enter(r6, 0x3516, 0x0, 0x0, 0x0, 0xfffffdcf) memfd_secret(0x80000) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x3000002, 0x42032, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000, 0x0, &(0x7f00008b5000/0x1000)=nil) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000008000000010001000900000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r9, &(0x7f0000000080), &(0x7f0000001540)=""/155}, 0x20) 2.105645348s ago: executing program 1 (id=2752): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) readv(r0, &(0x7f00000001c0)=[{&(0x7f0000003140)=""/4096, 0x1000}], 0x1) 1.838475587s ago: executing program 6 (id=2761): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='kmem_cache_free\x00', r1, 0x0, 0x5}, 0x18) r2 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000dc0), 0x1, 0x0) writev(r2, &(0x7f00000025c0)=[{&(0x7f0000000240)='4', 0x1}], 0x1) 1.819655857s ago: executing program 6 (id=2762): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r0}, 0x10) getpid() syz_mount_image$ext4(&(0x7f0000000540)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x88, &(0x7f00000005c0)={[{@nogrpid}, {@min_batch_time}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@nobarrier}, {@nodiscard}, {@quota}]}, 0x3, 0x42f, &(0x7f0000000940)="$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") lsetxattr$trusted_overlay_upper(0x0, &(0x7f00000000c0), &(0x7f0000000180)=ANY=[], 0xfe37, 0x0) unlink(&(0x7f0000000180)='./file1\x00') bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000640)={0xffffffffffffffff, 0xe0, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000280)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, &(0x7f0000000340)=[0x0, 0x0, 0x0], &(0x7f0000000380)=[0x0], 0x0, 0xd1, &(0x7f00000003c0)=[{}, {}], 0x10, 0x10, &(0x7f0000000400), &(0x7f0000000440), 0x8, 0x67, 0x8, 0x8, &(0x7f0000000580)}}, 0x10) 1.654066966s ago: executing program 6 (id=2763): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtaction={0x70, 0x30, 0x0, 0x870bd2b, 0x0, {0x9}, [{0x5c, 0x1, [@m_sample={0x58, 0x0, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_TRUNC_SIZE={0x0, 0x4, 0xec8}, @TCA_SAMPLE_RATE={0x8}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x800, 0x21, 0x4, 0x0, 0x80003}}]}, {}, {0xc, 0x7, {0x1}}, {0xc}}}]}]}, 0x70}}, 0x24040840) socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000400000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='dlm_ast\x00', r0, 0x0, 0x400000000000040}, 0x18) connect$unix(0xffffffffffffffff, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) ioctl$TCSETSW2(0xffffffffffffffff, 0x402c542c, 0x0) clock_adjtime(0x3, &(0x7f0000000a00)={0xb17, 0x3ff, 0x1c2, 0x100, 0x9, 0xb, 0x400, 0x587, 0x9, 0x0, 0x8, 0x7fff, 0x1000, 0x6, 0x100000000, 0x2, 0x8, 0x91, 0x6e6b, 0xcb, 0xe82c, 0x0, 0x3, 0x4, 0x5, 0x7}) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70200001400001cb7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x10) r3 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r4 = dup(r3) ioctl$PTP_EXTTS_REQUEST2(r4, 0x43403d05, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x2) mknod(&(0x7f0000000140)='./file0\x00', 0x8001420, 0x0) mount$9p_tcp(0x0, &(0x7f0000000540)='./file0\x00', &(0x7f0000000580), 0x0, &(0x7f0000000940)=ANY=[@ANYBLOB='trans=tcp']) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r5 = syz_io_uring_setup(0x5c2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x3, 0x3d9}, &(0x7f0000000240)=0x0, &(0x7f0000000340)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f00000004c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x38, 0x3, r5, 0x0, 0x0, 0x0, 0x1, 0x1, {0x3}}) io_uring_enter(r5, 0x6e2, 0x3900, 0x1, 0x0, 0x0) 1.606808656s ago: executing program 0 (id=2764): openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wlan0\x00'}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = io_uring_setup(0x410f, &(0x7f0000000200)={0x0, 0x0, 0x0, 0xfffffffc}) io_uring_register$IORING_REGISTER_BUFFERS2(r2, 0xf, &(0x7f0000001580)={0x3, 0x0, 0x0, &(0x7f00000014c0)=[{0x0}, {0x0}, {&(0x7f0000000280)=""/4094, 0xffe}], &(0x7f0000001540)=[0x0, 0x0, 0x4]}, 0x20) 1.492213076s ago: executing program 0 (id=2765): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x40, 0x7ffc0002}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x7, 0xfc, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, 0x0, &(0x7f00000002c0)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r1}, 0x18) tkill(0x0, 0x7) mkdir(0x0, 0x10) utime(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={0x1ff, 0x1}) 1.491704646s ago: executing program 0 (id=2766): r0 = open_tree(0xffffffffffffff9c, &(0x7f00000006c0)='.\x00', 0x0) symlinkat(&(0x7f0000000480)='./file0/file0\x00', r0, &(0x7f00000000c0)='./file0\x00') bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x20000000000000f4, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) newfstatat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) 1.470512426s ago: executing program 0 (id=2767): mkdirat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x50) r0 = getpgid(0x0) process_vm_readv(r0, &(0x7f0000000100)=[{0xffffffffffffffff}, {&(0x7f0000000040)=""/182, 0xb6}], 0x2, &(0x7f0000000440)=[{&(0x7f0000000140)=""/136, 0x88}, {&(0x7f0000000200)=""/239, 0xef}, {&(0x7f0000000300)=""/174, 0xae}, {&(0x7f00000003c0)=""/117, 0x75}], 0x4, 0x0) process_vm_readv(r0, &(0x7f0000000540)=[{&(0x7f0000000480)=""/33, 0x21}, {&(0x7f00000004c0)=""/99, 0x63}], 0x2, &(0x7f0000000680)=[{&(0x7f0000000580)=""/195, 0xc3}], 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000700), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_GET(r1, &(0x7f0000000b40)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000b00)={&(0x7f0000000740)={0x3b0, r2, 0x10, 0x70bd28, 0x25dfdbff, {}, [@TIPC_NLA_LINK={0x40, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffffff24}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x29f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7ff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x14021557}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}]}]}, @TIPC_NLA_BEARER={0x3c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x10, @mcast1, 0x9}}, {0x14, 0x2, @in={0x2, 0x4e21, @private=0xa010100}}}}]}, @TIPC_NLA_MEDIA={0x28, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x800}]}]}, @TIPC_NLA_LINK={0x10, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_MEDIA={0x5c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}]}, @TIPC_NLA_MEDIA_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6c}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xd6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}]}]}, @TIPC_NLA_PUBL={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1ff}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xffffffff}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x40}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x9}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x1ff}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x3}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x4d92}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x9}]}, @TIPC_NLA_MEDIA={0x28, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}, @TIPC_NLA_BEARER={0x78, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_PROP={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x100}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x101}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x665d328e}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x40}]}, @TIPC_NLA_BEARER_NAME={0xf, 0x1, @l2={'eth', 0x3a, 'nicvf0\x00'}}]}, @TIPC_NLA_NODE={0x1a8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_NODE_ID={0xb4, 0x3, "b0ab417c23ecc4c7e222ea8166fa746b369b214b03ac8f0189aef4aba650e30d4fbc8706c247779914cd262bb8abc612ef787e22b1427db96ea3d41e22d15288db0c18cf1a347be512a51014a027248a8b7f1fe778e7ce67b96867729b95c08356a5a6d251fabb5d3bb96e97f81da94e18d14e82eaf9ece612603abdc0790e3069bfa51678bd04ea5d04dd40f42fa4910159799e2808de4e9b0c2812144d52346cea9c33add168af6b5cff626b088fec"}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x8001}, @TIPC_NLA_NODE_ID={0xcf, 0x3, "15c87261d9d17ab5e316e586f7a197ce7841aa678080babd5811f13b8c9c9708259c40542580280f65463c2cb8f05c1d79c288741dddf4c0cb1c6121f77b9484b1bab4ddf1ef5ae877089083f86ee7e18a4e4d9acfc2e63269dcd7d22cc3ed8f9ff17e2e8bf8d263e7a7362409f7f0e0070c495323a51b314050702cce628c8f72e9515a63c86eb049921a6d18610b2fa4d29378181520761564e48d3b0420903eac55a13f736b64e74f92ab744261de92b148f98ce7bb896fc7a180182f99ac52083aa14a7479b4d5f347"}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}]}, 0x3b0}, 0x1, 0x0, 0x0, 0x80}, 0x4c001) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000b80), 0x8080, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000c00), r1) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000c40)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SCAN(r3, &(0x7f0000000d00)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c80)={0x28, r4, 0x1, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x9, 0x22}}}}, ["", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x2800c0c5}, 0x0) getsockname$packet(r3, &(0x7f0000000d40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000d80)=0x14) socket$nl_xfrm(0x10, 0x3, 0x6) bpf$MAP_CREATE(0x0, &(0x7f0000001a00)=@base={0x15, 0xe, 0x7, 0x1, 0x2200, r3, 0x3f41, '\x00', r6, r3, 0x4, 0x5, 0x5, 0x0, @void, @value, @void, @value}, 0x50) setsockopt$sock_int(r1, 0x1, 0x2e, &(0x7f0000001a80)=0x7f, 0x4) process_vm_writev(r0, &(0x7f0000002d00)=[{&(0x7f0000001ac0)=""/132, 0x84}, {&(0x7f0000001b80)=""/35, 0x23}, {&(0x7f0000001bc0)=""/115, 0x73}, {&(0x7f0000001c40)=""/4096, 0x1000}, {&(0x7f0000002c40)=""/124, 0x7c}, {&(0x7f0000002cc0)=""/8, 0x8}], 0x6, &(0x7f0000004100)=[{&(0x7f0000002d80)=""/208, 0xd0}, {&(0x7f0000002e80)=""/171, 0xab}, {&(0x7f0000002f40)=""/47, 0x2f}, {&(0x7f0000002f80)=""/4096, 0x1000}, {&(0x7f0000003f80)=""/110, 0x6e}, {&(0x7f0000004000)=""/85, 0x55}, {&(0x7f0000004080)=""/105, 0x69}], 0x7, 0x0) preadv2(0xffffffffffffffff, &(0x7f00000044c0)=[{&(0x7f0000004240)=""/98, 0x62}, {&(0x7f00000042c0)=""/82, 0x52}, {&(0x7f0000004340)=""/54, 0x36}, {&(0x7f0000004400)=""/142, 0x8e}], 0x4, 0x6, 0x1, 0x18) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000000, 0x10010, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) fstat(0xffffffffffffffff, &(0x7f0000004700)) 1.435771946s ago: executing program 0 (id=2768): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x21081e, &(0x7f0000000780)={[{@grpquota}, {@nombcache}, {@minixdf}]}, 0x1, 0x502, &(0x7f0000000fc0)="$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") truncate(&(0x7f0000000040)='./file1\x00', 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@file={0x1, './bus\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a50000000060a0b0400000000000000000200000024000480200001800d01010073796e70726f7879000000000c00028008000340000000010900010073797a30000000000900020073797a3200000000140000001100010000000000000000000000000a"], 0x78}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000001000000ff0f000007"], 0x48) r5 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r5, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="e8ffffffffffffff0000000000000000000000000000000048b2db510b72e256271ec5d82315f9434598537b4d4e8e8c0901b64ca01cdad31c509005ee0de160a626761cf71750fba136cbf3befb183c9e757affb90585ee647b0a872897dc90d911a15d447c1f9058be8c3d1f70e81bf2df0225edcc9156515937a5c4a354b102d3a01fb01def1ac455c4ba4a33b4537f"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x13, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYRES64], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r7}, 0x10) close(r5) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0x0, 0x0, 0x1) keyctl$instantiate_iov(0x14, 0x0, &(0x7f0000000640)=[{&(0x7f0000001680)="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", 0x1000}, {&(0x7f0000000480)="77733549ac03e53fb372f628003fdd00f64cd7ff0bc5dd2b840d8e4c5cd189f2692c9c70f563721cc1d77683a5aa3e6e86b8601ae02328a0be77c07901ba35c0101a007f601cd46981074bdd4e06a2a69b9c1edf3b66c8d2c6bb28ba9ec2f5f409882772a0563370f141506a3a8b343551849bc6821b47f7c17bebba952ede1892b8c72a0e3bab49cdee4462affdfa3e52752e1752ca0c9c7c7a5de34ed1071f858d735a", 0xa4}, {&(0x7f0000000540)="349a3038083a01231c4c485c02daf4b611a11fa0", 0x14}, {&(0x7f0000000580)="4fba7a0edc78a07e64a88b79662d27288029f34191ceeb5bff89d2f09280bdb1664d5872a605991ed7cd678bb25d9f3306c176b91ea761d4f1a36b92c3a67913296856594a1a5dd4dabc4e1ec284f0de8876adc70f01da15d6c4c95bbae08d454dd59569ec4273c8cf28755510c114647829d188ff2c9b2b73d70cc3167aff12d26d95613f521dbbea", 0x89}], 0x4, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000100)='kmem_cache_free\x00', r8}, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000140)={@local, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x2, 0x0, 0x11, 0x0, @empty, @empty}, {0x4e24, 0x0, 0x8}}}}}, 0x0) 1.267163045s ago: executing program 1 (id=2769): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000000400000000dfffff1918120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) getsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000300)={0x0, 0x1, 0x4870, 0x6, 0x4, 0x10001}, &(0x7f0000000340)=0x14) r1 = openat$pidfd(0xffffffffffffff9c, 0x0, 0x8000, 0x0) fchdir(r1) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/ipc\x00') bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) set_tid_address(0x0) r2 = mq_open(&(0x7f00005a1ffb)='eth0\x00', 0x42, 0x0, 0x0) mq_timedreceive(r2, 0x0, 0xffffffffffffffe7, 0x20004000, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) open(&(0x7f0000000740)='./bus\x00', 0x143c62, 0x0) mount(&(0x7f0000000100), &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x0, &(0x7f0000000300)='trans=rdma,') 874.220553ms ago: executing program 7 (id=2774): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r0}, 0x10) getpid() syz_mount_image$ext4(&(0x7f0000000540)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x88, &(0x7f00000005c0)={[{@nogrpid}, {@min_batch_time}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@nobarrier}, {@nodiscard}, {@quota}]}, 0x3, 0x42f, &(0x7f0000000940)="$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") lsetxattr$trusted_overlay_upper(0x0, &(0x7f00000000c0), &(0x7f0000000180)=ANY=[], 0xfe37, 0x0) unlink(&(0x7f0000000180)='./file1\x00') bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000640)={0xffffffffffffffff, 0xe0, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000280)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, &(0x7f0000000340)=[0x0, 0x0, 0x0], &(0x7f0000000380)=[0x0], 0x0, 0xd1, &(0x7f00000003c0)=[{}, {}], 0x10, 0x10, &(0x7f0000000400), &(0x7f0000000440), 0x8, 0x67, 0x8, 0x8, &(0x7f0000000580)}}, 0x10) 831.304433ms ago: executing program 7 (id=2775): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r0}, 0x10) 814.469833ms ago: executing program 7 (id=2776): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) r1 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) write$selinux_attr(r1, &(0x7f0000000100)='system_u:object_r:hugetlbfs_t:s0\x00', 0x1d) 801.003313ms ago: executing program 7 (id=2777): r0 = open_tree(0xffffffffffffff9c, &(0x7f00000006c0)='.\x00', 0x0) symlinkat(&(0x7f0000000480)='./file0/file0\x00', r0, &(0x7f00000000c0)='./file0\x00') r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x20000000000000f4, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) newfstatat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) 784.819513ms ago: executing program 7 (id=2778): mkdirat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x50) r0 = getpgid(0x0) process_vm_readv(r0, &(0x7f0000000100)=[{0xffffffffffffffff}, {&(0x7f0000000040)=""/182, 0xb6}], 0x2, &(0x7f0000000440)=[{&(0x7f0000000140)=""/136, 0x88}, {&(0x7f0000000200)=""/239, 0xef}, {&(0x7f0000000300)=""/174, 0xae}, {&(0x7f00000003c0)=""/117, 0x75}], 0x4, 0x0) process_vm_readv(r0, &(0x7f0000000540)=[{&(0x7f0000000480)=""/33, 0x21}, {&(0x7f00000004c0)=""/99, 0x63}], 0x2, &(0x7f0000000680)=[{&(0x7f0000000580)=""/195, 0xc3}], 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000700), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_GET(r1, &(0x7f0000000b40)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000b00)={&(0x7f0000000740)={0x3b0, r2, 0x10, 0x70bd28, 0x25dfdbff, {}, [@TIPC_NLA_LINK={0x40, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffffff24}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x29f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7ff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x14021557}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}]}]}, @TIPC_NLA_BEARER={0x3c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x10, @mcast1, 0x9}}, {0x14, 0x2, @in={0x2, 0x4e21, @private=0xa010100}}}}]}, @TIPC_NLA_MEDIA={0x28, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x800}]}]}, @TIPC_NLA_LINK={0x10, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_MEDIA={0x5c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}]}, @TIPC_NLA_MEDIA_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6c}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xd6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}]}]}, @TIPC_NLA_PUBL={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1ff}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xffffffff}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x40}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x9}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x1ff}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x3}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x4d92}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x9}]}, @TIPC_NLA_MEDIA={0x28, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}, @TIPC_NLA_BEARER={0x78, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_PROP={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x100}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x101}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x665d328e}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x40}]}, @TIPC_NLA_BEARER_NAME={0xf, 0x1, @l2={'eth', 0x3a, 'nicvf0\x00'}}]}, @TIPC_NLA_NODE={0x1a8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_NODE_ID={0xb4, 0x3, "b0ab417c23ecc4c7e222ea8166fa746b369b214b03ac8f0189aef4aba650e30d4fbc8706c247779914cd262bb8abc612ef787e22b1427db96ea3d41e22d15288db0c18cf1a347be512a51014a027248a8b7f1fe778e7ce67b96867729b95c08356a5a6d251fabb5d3bb96e97f81da94e18d14e82eaf9ece612603abdc0790e3069bfa51678bd04ea5d04dd40f42fa4910159799e2808de4e9b0c2812144d52346cea9c33add168af6b5cff626b088fec"}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x8001}, @TIPC_NLA_NODE_ID={0xcf, 0x3, "15c87261d9d17ab5e316e586f7a197ce7841aa678080babd5811f13b8c9c9708259c40542580280f65463c2cb8f05c1d79c288741dddf4c0cb1c6121f77b9484b1bab4ddf1ef5ae877089083f86ee7e18a4e4d9acfc2e63269dcd7d22cc3ed8f9ff17e2e8bf8d263e7a7362409f7f0e0070c495323a51b314050702cce628c8f72e9515a63c86eb049921a6d18610b2fa4d29378181520761564e48d3b0420903eac55a13f736b64e74f92ab744261de92b148f98ce7bb896fc7a180182f99ac52083aa14a7479b4d5f347"}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}]}, 0x3b0}, 0x1, 0x0, 0x0, 0x80}, 0x4c001) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000b80), 0x8080, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000c00), r1) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000c40)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SCAN(r3, &(0x7f0000000d00)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c80)={0x28, r4, 0x1, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x9, 0x22}}}}, ["", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x2800c0c5}, 0x0) getsockname$packet(r3, &(0x7f0000000d40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000d80)=0x14) socket$nl_xfrm(0x10, 0x3, 0x6) bpf$MAP_CREATE(0x0, &(0x7f0000001a00)=@base={0x15, 0xe, 0x7, 0x1, 0x2200, r3, 0x3f41, '\x00', r6, r3, 0x4, 0x5, 0x5, 0x0, @void, @value, @void, @value}, 0x50) setsockopt$sock_int(r1, 0x1, 0x2e, &(0x7f0000001a80)=0x7f, 0x4) process_vm_writev(r0, &(0x7f0000002d00)=[{&(0x7f0000001ac0)=""/132, 0x84}, {&(0x7f0000001b80)=""/35, 0x23}, {&(0x7f0000001bc0)=""/115, 0x73}, {&(0x7f0000001c40)=""/4096, 0x1000}, {&(0x7f0000002c40)=""/124, 0x7c}, {&(0x7f0000002cc0)=""/8, 0x8}], 0x6, &(0x7f0000004100)=[{&(0x7f0000002d80)=""/208, 0xd0}, {&(0x7f0000002e80)=""/171, 0xab}, {&(0x7f0000002f40)=""/47, 0x2f}, {&(0x7f0000002f80)=""/4096, 0x1000}, {&(0x7f0000003f80)=""/110, 0x6e}, {&(0x7f0000004000)=""/85, 0x55}, {&(0x7f0000004080)=""/105, 0x69}], 0x7, 0x0) preadv2(0xffffffffffffffff, &(0x7f00000044c0)=[{&(0x7f0000004240)=""/98, 0x62}, {&(0x7f00000042c0)=""/82, 0x52}, {&(0x7f0000004340)=""/54, 0x36}, {&(0x7f0000004400)=""/142, 0x8e}], 0x4, 0x6, 0x1, 0x18) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000000, 0x10010, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) fstat(0xffffffffffffffff, &(0x7f0000004700)) 746.833323ms ago: executing program 7 (id=2779): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000021b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r3}, 0x10) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) readv(r0, &(0x7f00000001c0)=[{&(0x7f0000003140)=""/4096, 0x1000}], 0x1) 728.173443ms ago: executing program 6 (id=2780): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) readv(r0, &(0x7f00000001c0)=[{&(0x7f0000003140)=""/4096, 0x1000}], 0x1) 560.150932ms ago: executing program 0 (id=2781): syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000180)='./file0\x00', 0x2010480, &(0x7f0000000080), 0x1, 0x775, &(0x7f0000001cc0)="$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") openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000018000000b225e73197d9bd1a"], 0x48) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket(0x10, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000100)={'syz_tun\x00', &(0x7f0000000040)=@ethtool_pauseparam={0x1}}) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) r5 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r5, &(0x7f0000000140)="1ba0000016001d0d89fdc5cbdd045798707bed4dca141a780f0f8e", 0xff3b, 0x0, 0x0, 0x0) recvfrom$inet6(r5, &(0x7f0000000000)=""/45, 0x44, 0x0, 0x0, 0xffffffffffffffc3) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000000)="48050000150019", 0x7}], 0x1) write$binfmt_misc(r2, &(0x7f0000000000), 0xfffffecc) splice(r1, 0x0, r4, 0x0, 0x200000000622c, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000072000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r6 = socket$inet(0x2, 0x80001, 0x84) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000240)=ANY=[@ANYBLOB="1801000000000000000000004b84ffec850000006d000000850000002a00000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000003c0)='kfree\x00', r7}, 0x10) r8 = perf_event_open(&(0x7f0000000380)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x4}, 0x10220}, 0x0, 0x0, 0xffffffffffffffff, 0x8) mmap$perf(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x11, r8, 0x0) perf_event_open(&(0x7f0000000040)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, r8, 0x3) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) close_range(r6, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="45ed4e39e221ad48dc81fb73b83cb460baa38e8a0d38ad", @ANYBLOB], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c0000000101010300000000000000000a0000000c00198008"], 0x5c}}, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r9}, 0x10) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000240)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r10}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) 410.198682ms ago: executing program 1 (id=2782): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) readahead(0xffffffffffffffff, 0x8533, 0x3) 395.377231ms ago: executing program 1 (id=2783): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={0x0, r0}, 0x18) getpid() syz_mount_image$ext4(&(0x7f0000000540)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x88, &(0x7f00000005c0)={[{@nogrpid}, {@min_batch_time}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@nobarrier}, {@nodiscard}, {@quota}]}, 0x3, 0x42f, &(0x7f0000000940)="$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") lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file1\x00', &(0x7f00000000c0), &(0x7f0000000180)=ANY=[], 0xfe37, 0x0) unlink(&(0x7f0000000180)='./file1\x00') bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000640)={0xffffffffffffffff, 0xe0, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000280)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, &(0x7f0000000340)=[0x0, 0x0, 0x0], &(0x7f0000000380)=[0x0], 0x0, 0xd1, &(0x7f00000003c0)=[{}, {}], 0x10, 0x10, &(0x7f0000000400), &(0x7f0000000440), 0x8, 0x67, 0x8, 0x8, &(0x7f0000000580)}}, 0x10) 332.449721ms ago: executing program 1 (id=2784): bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$selinux_attr(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000059487bb7dcb799000000000000000020993d77509080392aa668956585616ae9526dff64a277f1240364816549e9c45b8494c410403e18583d0f83ed233dd717fffdf207e3d73f45b00b00e3c782ffd7efea426344c5277e9a6c1432659286cd6a4ea6fdde3ce40a1cb64d633bff3c0ee5ab5bc1612046b12f76f11e7a1a337405fad4aac3e654a5e9eff774e105ea8dfb105844f6b1f5ec1392266f1c85e94b9c9e"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) socket$key(0xf, 0x3, 0x2) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x8, 0x8, 0x8, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000200), 0x4) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000002000000fd0f000003"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kmem_cache_free\x00', r6}, 0x10) tkill(0x0, 0x1) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) sendmsg$DEVLINK_CMD_RATE_NEW(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x34, r3, 0x1, 0x0, 0x1, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x4040004) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) mount$9p_rdma(&(0x7f0000002f80), &(0x7f0000002fc0)='./file0\x00', &(0x7f0000003000), 0x0, &(0x7f0000003040)=ANY=[@ANYBLOB='trans=rdma']) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000040)='kmem_cache_free\x00', r7}, 0x10) 275.477771ms ago: executing program 4 (id=2785): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) mmap(&(0x7f0000c4a000/0x3000)=nil, 0x3000, 0x4, 0x31, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000280)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbb025aa18f009c0b0000000000006410a60000000000000000000000000000c9afa848aaf34fd08184b28badffff00"], 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000640)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000006c0)={0xffffffffffffffff}, 0x13f, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, &(0x7f0000000140)={0x15, 0x110, 0xfa00, {r2, 0xffffffff, 0x30, 0x30, 0x0, @in6={0x1b, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x23}}, @ib={0x1b, 0xfffc, 0x0, {}, 0x0, 0x2}}}, 0x118) r3 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x8}, 0x8080, 0x2, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xafffffffffffffff, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3e, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x800000000003}, 0x1100, 0x1, 0x3, 0x5, 0x0, 0x8, 0x5d, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0xa000, 0x0, 0x0, 0x7ffc1ffb}]}) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) rt_sigqueueinfo(r4, 0x21, &(0x7f0000002d00)={0x0, 0x0, 0xffffffff}) flock(r3, 0x2) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r3, &(0x7f0000000440)={0xb, 0x10, 0xfa00, {&(0x7f0000000380), r2, 0x6}}, 0x18) ioctl$VT_DISALLOCATE(r0, 0x5608) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000060c55515850000002a000000180100002020702500000000002020207b1af8ff00000000bfa10000000000000701c900000000000000000008000f00b70300000000000085000000b000000095"], 0x0, 0x6, 0x0, 0x0, 0x0, 0x41, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x1000410, &(0x7f0000000340)={[{@nojournal_checksum}, {}]}, 0x0, 0x4ee, &(0x7f0000000c40)="$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") bpf$PROG_LOAD(0x5, 0x0, 0x55b8095716856db7) mkdir(&(0x7f0000000000)='./control\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) open(&(0x7f00000001c0)='./file0\x00', 0x8100, 0x4) mount$bind(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)='./control\x00', 0x0, 0x2000, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000080)={0xffffffffffffffff, 0xa, 0x18}, 0xc) ioctl$sock_FIOGETOWN(r3, 0x8903, &(0x7f0000000540)=0x0) syz_open_procfs$pagemap(r5, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="600000000206050000000700000000000000000905000100070000000900020073797a3000000000140007800800130000200000080012400000000914000300686173683a69702c706f72742c6970000500050002000000050004"], 0x60}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 166.1519ms ago: executing program 4 (id=2786): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000001000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = io_uring_setup(0xaab, 0x0) r3 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r3, &(0x7f000047b000)={0xa, 0x4e20, 0x4, @loopback}, 0x1c) listen(r3, 0x20000005) r4 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r4, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) close_range(r2, 0xffffffffffffffff, 0x0) 108.02986ms ago: executing program 4 (id=2787): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000600)='sys_enter\x00', r1}, 0x10) prctl$PR_SET_MM(0x23, 0x7, &(0x7f0000ffc000/0x4000)=nil) brk(0x20001000) 107.68818ms ago: executing program 4 (id=2788): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000600)='sys_enter\x00', r1}, 0x10) prctl$PR_SET_MM(0x23, 0x7, &(0x7f0000ffc000/0x4000)=nil) brk(0x20001000) 107.26549ms ago: executing program 4 (id=2789): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b7040000000000008500000057000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000640)='kfree\x00', r2, 0x0, 0x3}, 0x18) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000030427bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="a5fdad8800000000140012800b00010062617461647600000400028008000a00", @ANYRES32], 0x3c}}, 0x0) 15.99884ms ago: executing program 1 (id=2790): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, 0x0, &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1200051300000000000000198988003ccaa986004b5e3fa7beb6ec1f44d71aac98bff4f27ff65b729c55b07e9f2efd681c5c8ee133f44d29", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1200051300000000000000198988003ccaa986004b5e3fa7beb6ec1f44d71aac98bff4f27ff65b729c55b07e9f2efd681c5c8ee133f44d29", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r1}, &(0x7f0000000180), &(0x7f0000000100)=r0}, 0x20) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f0000000c00), 0x6) syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000005c0)='./bus\x00', 0x418484, &(0x7f0000000600)={[{@acl}]}, 0x1, 0x775, &(0x7f0000001180)="$eJzs3c9rXNUeAPDvnSRNm/a95MGD9+oqIGigdGJqbBVcVFyIYKGga9thMg01k0zJTEoTAlpEcCOouBB007U/6s6tP7b6X7gQS9W0WHEhkTu5t502M2mSJpnqfD5wM+fceyfnfOf+OGfmHu4NoGeNpn8KEYcj4t0kYjibn0TEQDPVH3Fybb1bK8vldEpidfXlX5LmOjdXlsvR8p7UwSzz/4j45q2II4X15dYXl2ZK1WplPsuPN2YvjNcXl46eny1NV6Yrc8cnJiePnXjqxPGdi/W375cOXXvvhcc/P/nHm/+7+s63SZyMQ9my1jh2ymiMZp/JQPoR3uX5nS6sy5JuV4BtSQ/NvrWjPA7HcPQ1UwDAP9nrEbEKAPSYRPsPAD0m/x3g5spyOZ+6+4vE3rr+XETsX4s/v765tqQ/u2a3v3kddOhmcteVkSQiRnag/NGI+PjLVz9Np9il65AA7bxxOSLOjoyuP/8n68YsbNUTGyzbl72O3jPf+Q/2zldp/+fpdv2/wu3+T7Tp/wy2OXa3477H/4EdKGQDaf/v2Zaxbbda4s+M9GW5fzX7fAPJufPVSnpu+3dEjMXAYJqf2KCMsRt/3ui0rLX/9+v7r32Slp++3lmj8FP/4N3vmSo1Sg8Sc6vrlyMe6W8Xf3J7+ycd+r+nN1nGi8+8/VGnZWn8abz5tD7+yEYn7Y7VKxGPtd3+d0a0JRuOTxxv7g7j+U7Rxhc/fDjUqfzW7Z9Oafn5d4G9kG7/oY3jH0lax2vWt17Gd1eGv+607P7xt9//9yWvNNN5P+JSqdGYn4jYl7y0fv6xO+/N8/n6afxjj7Y//jfa/9PvhGc3GX//tZ8/2378uyuNf2pL23/riau3Zvo6lb+57T/ZTI1lczZz/ttsBR/kswMAAAAAAAAAAAAAAAAAAAAAAACAzSpExKFICsXb6UKhWFx7hvd/Y6hQrdUbR87VFuamovms7JEYKOS3uhxuuR/qRHY//Dx/7J78kxHxn4j4YPBAkt9HcarLsQMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABA7mCH5/+nfhzsdu0AgF2zv9sVAAD2nPYfAHqP9h8Aeo/2HwB6j/YfAHqP9h8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIBddvrUqXRa/X1luZzmpy4uLszULh6dqtRnirML5WK5Nn+hOF2rTVcrxXJt9n7/r1qrXZiMuYVL441KvTFeX1w6M1tbmGucOT9bmq6cqQzsSVQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAsDX1xaWZUrVamZfYRmL14ahG9xN92e70sNRnTxPJw1GNHU50+cQEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8DfxVwAAAP//02Ii/w==") connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e22, @private=0xa010101}, 0x10) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet6_sctp(0xa, 0x1, 0x84) (async) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r4, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x54) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x84, &(0x7f0000000180)={r5, @in={{0x2, 0x0, @empty}}}, 0x90) creat(&(0x7f0000000100)='./bus\x00', 0x0) syz_read_part_table(0x59d, &(0x7f0000000000)="$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") (async) syz_read_part_table(0x59d, &(0x7f0000000000)="$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") syz_open_dev$tty1(0xc, 0x4, 0x4) (async) r6 = syz_open_dev$tty1(0xc, 0x4, 0x4) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0}, 0x18) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$VT_RESIZEX(r6, 0x560a, &(0x7f0000000000)={0x5, 0x0, 0x7fff, 0x0, 0x4, 0xfffc}) ioctl$KDSKBMODE(r6, 0x4b45, &(0x7f0000000040)=0x2) (async) ioctl$KDSKBMODE(r6, 0x4b45, &(0x7f0000000040)=0x2) r7 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r7}, 0x10) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r7}, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f0000000500)='\a\x99[@%\xe6l\xef\x86\xce\xe9\xf0\xd40\x11\\d3\xdcL0\xae\x0e\x1c\xea\x9e\fLx\xdd\xca\xe4\xed\xeeD \\\rfJ\xdc\xad_\v\x7f\x8b\x92a.,\xe0|@\xff\v\x85\xd4t\'[f\x89f!t\xea\xa4\t\xadp\xb3\xf0\x00?\xae\x87\x9fr\x0e\xfc\xc8m\xcd\xe5\xbb\xc1H\xdbG\xa94\x05\x1a\x9b1\xaeg\xa4!\x7fN2kQ\x04\xff\t\x9d\x9a\xfa\xc9\xdb\x87B\x14\x8c\x8c\x05\xe7\xfc\xb2\x18\x85\x87\xde\xcf\xa9\x99S\xae\x01l<\xda\xc4#H\a\x87\xa2L@Q\xafx\xc4\xe7\xb7?\x8e\x1f\x1c\x1c2e\'\xc5\xbd\x8ai\xdf\r\x95x\x8d\xff\x8e}k\x96\xaf\x9f\x05\xe6\xd4\xfc\x98\xbc3\x85\x96\x8a-\xe0\x84\r\xe9\xb8mv\x02') perf_event_open(&(0x7f0000000040)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x2000000}, 0x0, 0x0, 0xffffffffffffffff, 0x3) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec8500000050000000850000000f00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec8500000050000000850000000f00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r8}, 0x10) getpid() (async) r9 = getpid() setreuid(0xee00, 0x0) (async) setreuid(0xee00, 0x0) syz_pidfd_open(r9, 0x0) getegid() 0s ago: executing program 4 (id=2791): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x21081e, &(0x7f0000000780)={[{@grpquota}, {@nombcache}, {@minixdf}]}, 0x1, 0x502, &(0x7f0000000fc0)="$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") truncate(&(0x7f0000000040)='./file1\x00', 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@file={0x1, './bus\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a50000000060a0b0400000000000000000200000024000480200001800d01010073796e70726f7879000000000c00028008000340000000010900010073797a30000000000900020073797a3200000000140000001100010000000000000000000000000a"], 0x78}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000001000000ff0f000007"], 0x48) r5 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r5, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="e8ffffffffffffff0000000000000000000000000000000048b2db510b72e256271ec5d82315f9434598537b4d4e8e8c0901b64ca01cdad31c509005ee0de160a626761cf71750fba136cbf3befb183c9e757affb90585ee647b0a872897dc90d911a15d447c1f9058be8c3d1f70e81bf2df0225edcc9156515937a5c4a354b102d3a01fb01def1ac455c4ba4a33b4537f"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x13, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYRES64], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r7}, 0x10) close(r5) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0x0, 0x0, 0x1) keyctl$instantiate_iov(0x14, 0x0, &(0x7f0000000640)=[{&(0x7f0000001680)="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", 0x1000}, {&(0x7f0000000480)="77733549ac03e53fb372f628003fdd00f64cd7ff0bc5dd2b840d8e4c5cd189f2692c9c70f563721cc1d77683a5aa3e6e86b8601ae02328a0be77c07901ba35c0101a007f601cd46981074bdd4e06a2a69b9c1edf3b66c8d2c6bb28ba9ec2f5f409882772a0563370f141506a3a8b343551849bc6821b47f7c17bebba952ede1892b8c72a0e3bab49cdee4462affdfa3e52752e1752ca0c9c7c7a5de34ed1071f858d735a", 0xa4}, {&(0x7f0000000540)="349a3038083a01231c4c485c02daf4b611a11fa0", 0x14}, {&(0x7f0000000580)="4fba7a0edc78a07e64a88b79662d27288029f34191ceeb5bff89d2f09280bdb1664d5872a605991ed7cd678bb25d9f3306c176b91ea761d4f1a36b92c3a67913296856594a1a5dd4dabc4e1ec284f0de8876adc70f01da15d6c4c95bbae08d454dd59569ec4273c8cf28755510c114647829d188ff2c9b2b73d70cc3167aff12d26d95613f521dbbea", 0x89}], 0x4, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000100)='kmem_cache_free\x00', r8}, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000140)={@local, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x2, 0x0, 0x11, 0x0, @empty, @empty}, {0x4e24, 0x0, 0x8}}}}}, 0x0) kernel console output (not intermixed with test programs): butes in process `syz.4.1820'. [ 109.754558][ T9148] netlink: 1272 bytes leftover after parsing attributes in process `syz.0.1818'. [ 109.828998][ T9150] netlink: 80 bytes leftover after parsing attributes in process `syz.4.1821'. [ 109.844419][ T9150] batadv1: entered promiscuous mode [ 109.850388][ T9150] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 110.006419][ T9157] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1824'. [ 110.040507][ T29] kauditd_printk_skb: 445 callbacks suppressed [ 110.040523][ T29] audit: type=1326 audit(1734527212.262:6896): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9160 comm="syz.4.1826" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b0fda5d29 code=0x7ffc0000 [ 110.077334][ T29] audit: type=1326 audit(1734527212.302:6897): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9160 comm="syz.4.1826" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1b0fda5d29 code=0x7ffc0000 [ 110.083282][ T9163] loop6: detected capacity change from 0 to 1024 [ 110.100793][ T29] audit: type=1326 audit(1734527212.302:6898): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9160 comm="syz.4.1826" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b0fda5d29 code=0x7ffc0000 [ 110.113884][ T9163] EXT4-fs: Ignoring removed orlov option [ 110.130743][ T29] audit: type=1326 audit(1734527212.302:6899): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9160 comm="syz.4.1826" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b0fda5d29 code=0x7ffc0000 [ 110.159851][ T9163] journal_path: Non-blockdev passed as './file1' [ 110.166242][ T9163] EXT4-fs: error: could not find journal device path [ 110.185712][ T29] audit: type=1326 audit(1734527212.302:6900): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9160 comm="syz.4.1826" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1b0fda5d29 code=0x7ffc0000 [ 110.209205][ T29] audit: type=1326 audit(1734527212.302:6901): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9160 comm="syz.4.1826" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b0fda5d29 code=0x7ffc0000 [ 110.232628][ T29] audit: type=1326 audit(1734527212.302:6902): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9160 comm="syz.4.1826" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b0fda5d29 code=0x7ffc0000 [ 110.256150][ T29] audit: type=1326 audit(1734527212.302:6903): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9160 comm="syz.4.1826" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1b0fda5d29 code=0x7ffc0000 [ 110.279732][ T29] audit: type=1326 audit(1734527212.302:6904): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9160 comm="syz.4.1826" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b0fda5d29 code=0x7ffc0000 [ 110.303214][ T29] audit: type=1326 audit(1734527212.302:6905): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9160 comm="syz.4.1826" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1b0fda5d29 code=0x7ffc0000 [ 110.349128][ T9175] syz.1.1832[9175] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 110.373092][ T9178] batadv1: entered promiscuous mode [ 110.390404][ T9178] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 110.509506][ T3300] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.532168][ T9184] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 110.541027][ T9184] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 110.556185][ T9184] loop0: detected capacity change from 0 to 1024 [ 110.565791][ T9184] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (1764!=20869) [ 110.575412][ T9184] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 110.585650][ T9184] EXT4-fs (loop0): invalid journal inode [ 110.591296][ T9184] EXT4-fs (loop0): can't get journal size [ 110.597629][ T9184] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 110.973116][ T9201] loop6: detected capacity change from 0 to 512 [ 110.981249][ T9201] EXT4-fs (loop6): 1 truncate cleaned up [ 110.987916][ T9201] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 111.009199][ T7049] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.124950][ T3300] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.197128][ T9215] loop6: detected capacity change from 0 to 1024 [ 111.203914][ T9215] EXT4-fs: Ignoring removed orlov option [ 111.212517][ T9215] journal_path: Non-blockdev passed as './file1' [ 111.218926][ T9215] EXT4-fs: error: could not find journal device path [ 111.337015][ T9222] loop4: detected capacity change from 0 to 512 [ 111.355402][ T9222] EXT4-fs warning (device loop4): ext4_enable_quotas:7156: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 111.370251][ T9222] EXT4-fs (loop4): mount failed [ 111.423388][ T9229] loop1: detected capacity change from 0 to 128 [ 111.430735][ T9229] FAT-fs (loop1): Directory bread(block 162) failed [ 111.437865][ T9229] FAT-fs (loop1): Directory bread(block 163) failed [ 111.444678][ T9229] FAT-fs (loop1): Directory bread(block 164) failed [ 111.451418][ T9229] FAT-fs (loop1): Directory bread(block 165) failed [ 111.458476][ T9229] FAT-fs (loop1): Directory bread(block 166) failed [ 111.465910][ T9229] FAT-fs (loop1): Directory bread(block 167) failed [ 111.472865][ T9229] FAT-fs (loop1): Directory bread(block 168) failed [ 111.479990][ T9229] FAT-fs (loop1): Directory bread(block 169) failed [ 111.490140][ T9229] FAT-fs (loop1): Directory bread(block 162) failed [ 111.497043][ T9229] FAT-fs (loop1): Directory bread(block 163) failed [ 111.504417][ T9229] bio_check_eod: 26 callbacks suppressed [ 111.504432][ T9229] syz.1.1855: attempt to access beyond end of device [ 111.504432][ T9229] loop1: rw=3, sector=226, nr_sectors = 6 limit=128 [ 111.523661][ T9229] syz.1.1855: attempt to access beyond end of device [ 111.523661][ T9229] loop1: rw=2051, sector=232, nr_sectors = 2 limit=128 [ 111.582111][ T9239] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 111.590758][ T9239] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 111.603017][ T9239] loop4: detected capacity change from 0 to 1024 [ 111.610089][ T9239] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (1764!=20869) [ 111.619995][ T9239] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 111.631041][ T9239] EXT4-fs (loop4): invalid journal inode [ 111.636948][ T9239] EXT4-fs (loop4): can't get journal size [ 111.643668][ T9239] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 111.876806][ T9251] loop1: detected capacity change from 0 to 512 [ 111.895480][ T9251] EXT4-fs warning (device loop1): ext4_enable_quotas:7156: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 111.910467][ T9251] EXT4-fs (loop1): mount failed [ 112.061357][ T9264] batadv1: entered promiscuous mode [ 112.067782][ T9264] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 112.165957][ T3306] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.256909][ T9287] loop6: detected capacity change from 0 to 1024 [ 112.263659][ T9287] EXT4-fs: Ignoring removed orlov option [ 112.269596][ T9287] journal_path: Non-blockdev passed as './file1' [ 112.276154][ T9287] EXT4-fs: error: could not find journal device path [ 112.913232][ T9340] loop1: detected capacity change from 0 to 2048 [ 112.935397][ T9340] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 113.035604][ T9345] loop4: detected capacity change from 0 to 512 [ 113.042414][ T9345] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 113.053661][ T9345] EXT4-fs (loop4): 1 truncate cleaned up [ 113.059530][ T9345] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 113.106635][ T3306] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 113.517031][ T9372] loop0: detected capacity change from 0 to 512 [ 113.523701][ T9372] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 113.534740][ T9372] EXT4-fs (loop0): 1 orphan inode deleted [ 113.540486][ T9372] EXT4-fs (loop0): 1 truncate cleaned up [ 113.547148][ T9372] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 113.564403][ T9372] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 113.662150][ T9378] loop7: detected capacity change from 0 to 512 [ 113.669992][ T9378] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 113.680970][ T9378] EXT4-fs (loop7): 1 truncate cleaned up [ 113.687216][ T9378] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 113.725033][ T7088] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 113.735211][ T3300] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 113.762070][ T3298] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 113.779905][ T9382] loop7: detected capacity change from 0 to 512 [ 113.797170][ T9382] EXT4-fs (loop7): 1 truncate cleaned up [ 113.804914][ T9382] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 113.852807][ T7088] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 113.936650][ T9401] loop7: detected capacity change from 0 to 512 [ 113.946532][ T9401] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 113.975482][ T9401] EXT4-fs (loop7): 1 orphan inode deleted [ 113.981240][ T9401] EXT4-fs (loop7): 1 truncate cleaned up [ 113.992141][ T9401] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 114.013454][ T9401] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 114.163598][ T9414] syz.4.1932[9414] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 114.175850][ T7088] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 114.301674][ T9432] __nla_validate_parse: 17 callbacks suppressed [ 114.301686][ T9432] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1940'. [ 114.439169][ T9444] loop4: detected capacity change from 0 to 2048 [ 114.465799][ T9444] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 114.533522][ T9448] netlink: 1276 bytes leftover after parsing attributes in process `syz.4.1944'. [ 114.756127][ T9456] loop1: detected capacity change from 0 to 2048 [ 114.769553][ T9456] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 114.838542][ T9465] netlink: 1272 bytes leftover after parsing attributes in process `syz.1.1948'. [ 115.019817][ T9468] loop6: detected capacity change from 0 to 512 [ 115.045314][ T9468] __quota_error: 296 callbacks suppressed [ 115.045332][ T9468] Quota error (device loop6): v2_read_file_info: Number of blocks too big for quota file size (2103296 > 6144). [ 115.063252][ T9468] EXT4-fs warning (device loop6): ext4_enable_quotas:7156: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 115.078137][ T9468] EXT4-fs (loop6): mount failed [ 115.129155][ T29] audit: type=1326 audit(1734527217.352:7200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9474 comm="syz.7.1954" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fddb4bb5d29 code=0x7ffc0000 [ 115.152582][ T29] audit: type=1326 audit(1734527217.352:7201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9474 comm="syz.7.1954" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fddb4bb5d29 code=0x7ffc0000 [ 115.183606][ T29] audit: type=1326 audit(1734527217.372:7202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9474 comm="syz.7.1954" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fddb4bb5d29 code=0x7ffc0000 [ 115.183821][ T9477] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1955'. [ 115.207077][ T29] audit: type=1326 audit(1734527217.372:7203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9474 comm="syz.7.1954" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fddb4bb5d29 code=0x7ffc0000 [ 115.239329][ T29] audit: type=1326 audit(1734527217.372:7204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9474 comm="syz.7.1954" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fddb4bb5d29 code=0x7ffc0000 [ 115.262758][ T29] audit: type=1326 audit(1734527217.372:7205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9474 comm="syz.7.1954" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fddb4bb5d29 code=0x7ffc0000 [ 115.286150][ T29] audit: type=1326 audit(1734527217.372:7206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9474 comm="syz.7.1954" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fddb4bb5d29 code=0x7ffc0000 [ 115.309575][ T29] audit: type=1326 audit(1734527217.372:7207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9474 comm="syz.7.1954" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fddb4bb5d29 code=0x7ffc0000 [ 115.333092][ T29] audit: type=1326 audit(1734527217.372:7208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9474 comm="syz.7.1954" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fddb4bb5d29 code=0x7ffc0000 [ 115.370840][ T9489] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1960'. [ 115.422402][ T9497] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1963'. [ 115.457303][ T9501] loop6: detected capacity change from 0 to 512 [ 115.475178][ T9501] EXT4-fs warning (device loop6): ext4_enable_quotas:7156: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 115.489929][ T9501] EXT4-fs (loop6): mount failed [ 115.619191][ T9513] loop6: detected capacity change from 0 to 512 [ 115.633257][ T9513] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 115.650627][ T9513] EXT4-fs (loop6): 1 orphan inode deleted [ 115.656435][ T9513] EXT4-fs (loop6): 1 truncate cleaned up [ 115.668258][ T9518] loop1: detected capacity change from 0 to 128 [ 115.678476][ T9518] FAT-fs (loop1): Directory bread(block 162) failed [ 115.679649][ T9513] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 115.685517][ T9518] FAT-fs (loop1): Directory bread(block 163) failed [ 115.708755][ T9518] FAT-fs (loop1): Directory bread(block 164) failed [ 115.716105][ T9518] FAT-fs (loop1): Directory bread(block 165) failed [ 115.722713][ T9518] FAT-fs (loop1): Directory bread(block 166) failed [ 115.734929][ T9518] FAT-fs (loop1): Directory bread(block 167) failed [ 115.741629][ T9518] FAT-fs (loop1): Directory bread(block 168) failed [ 115.748370][ T9518] FAT-fs (loop1): Directory bread(block 169) failed [ 115.771662][ T9518] FAT-fs (loop1): Directory bread(block 162) failed [ 115.778557][ T9518] FAT-fs (loop1): Directory bread(block 163) failed [ 115.785595][ T9518] syz.1.1970: attempt to access beyond end of device [ 115.785595][ T9518] loop1: rw=3, sector=226, nr_sectors = 6 limit=128 [ 115.798797][ T9518] syz.1.1970: attempt to access beyond end of device [ 115.798797][ T9518] loop1: rw=2051, sector=232, nr_sectors = 2 limit=128 [ 115.835596][ T9526] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1973'. [ 116.460343][ T9554] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1984'. [ 116.496008][ T9560] syz.0.1986[9560] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 116.510568][ T9561] netlink: 40 bytes leftover after parsing attributes in process `syz.6.1975'. [ 116.571953][ T9569] loop0: detected capacity change from 0 to 128 [ 116.579831][ T9569] FAT-fs (loop0): Directory bread(block 162) failed [ 116.588624][ T9569] FAT-fs (loop0): Directory bread(block 163) failed [ 116.596370][ T9569] FAT-fs (loop0): Directory bread(block 164) failed [ 116.603031][ T9569] FAT-fs (loop0): Directory bread(block 165) failed [ 116.610044][ T9569] FAT-fs (loop0): Directory bread(block 166) failed [ 116.617527][ T9569] FAT-fs (loop0): Directory bread(block 167) failed [ 116.621706][ T9574] loop7: detected capacity change from 0 to 512 [ 116.624544][ T9569] FAT-fs (loop0): Directory bread(block 168) failed [ 116.632852][ T9574] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 116.638091][ T9569] FAT-fs (loop0): Directory bread(block 169) failed [ 116.655739][ T9574] EXT4-fs (loop7): 1 truncate cleaned up [ 116.661681][ T9569] FAT-fs (loop0): Directory bread(block 162) failed [ 116.668712][ T9569] FAT-fs (loop0): Directory bread(block 163) failed [ 116.675871][ T9569] syz.0.1991: attempt to access beyond end of device [ 116.675871][ T9569] loop0: rw=3, sector=226, nr_sectors = 6 limit=128 [ 116.689501][ T9569] syz.0.1991: attempt to access beyond end of device [ 116.689501][ T9569] loop0: rw=2051, sector=232, nr_sectors = 2 limit=128 [ 116.739826][ T9579] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1994'. [ 116.782235][ T9585] loop0: detected capacity change from 0 to 512 [ 116.789074][ T9585] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 116.800312][ T9585] EXT4-fs (loop0): 1 orphan inode deleted [ 116.806211][ T9585] EXT4-fs (loop0): 1 truncate cleaned up [ 116.824895][ T9585] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 116.892230][ T9591] loop6: detected capacity change from 0 to 2048 [ 116.936528][ T9603] loop1: detected capacity change from 0 to 512 [ 116.944345][ T9603] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 116.955197][ T9603] EXT4-fs (loop1): 1 truncate cleaned up [ 116.987063][ T9608] loop4: detected capacity change from 0 to 512 [ 116.995375][ T9608] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 117.013237][ T9608] EXT4-fs (loop4): 1 truncate cleaned up [ 117.065558][ T9616] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.107712][ T9616] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.166078][ T9616] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.205399][ T9616] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.261434][ T9616] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.271907][ T9616] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.282764][ T9616] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.293605][ T9616] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.641375][ T9638] loop7: detected capacity change from 0 to 512 [ 117.648629][ T9638] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 117.659703][ T9638] EXT4-fs (loop7): 1 truncate cleaned up [ 117.698002][ T9642] loop7: detected capacity change from 0 to 512 [ 117.705469][ T9642] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 117.717877][ T9642] EXT4-fs (loop7): 1 orphan inode deleted [ 117.723703][ T9642] EXT4-fs (loop7): 1 truncate cleaned up [ 117.741776][ T9642] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 117.767065][ T9647] loop6: detected capacity change from 0 to 2048 [ 117.956691][ T9666] loop7: detected capacity change from 0 to 2048 [ 118.009067][ T9672] loop1: detected capacity change from 0 to 2048 [ 119.089716][ T9718] loop7: detected capacity change from 0 to 256 [ 119.096707][ T9718] FAT-fs (loop7): bogus number of FAT sectors [ 119.102793][ T9718] FAT-fs (loop7): Can't find a valid FAT filesystem [ 119.301527][ T9750] syz.7.2055[9750] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 119.451031][ T9768] loop7: detected capacity change from 0 to 1024 [ 119.683803][ T9779] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.736068][ T9779] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.785980][ T9779] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.845871][ T9779] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.920454][ T9779] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.945112][ T9779] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.969106][ T9779] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.970318][ T9790] loop0: detected capacity change from 0 to 512 [ 119.995272][ T9779] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.009436][ T9790] EXT4-fs warning (device loop0): ext4_enable_quotas:7156: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 120.024658][ T9790] EXT4-fs (loop0): mount failed [ 120.050633][ T9797] loop6: detected capacity change from 0 to 512 [ 120.057522][ T9797] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 120.066195][ T29] kauditd_printk_skb: 437 callbacks suppressed [ 120.066208][ T29] audit: type=1326 audit(1734527222.292:7644): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9798 comm="syz.1.2071" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc392045d29 code=0x7ffc0000 [ 120.097494][ T29] audit: type=1326 audit(1734527222.292:7645): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9798 comm="syz.1.2071" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc392045d29 code=0x7ffc0000 [ 120.106634][ T9797] EXT4-fs (loop6): 1 orphan inode deleted [ 120.120974][ T29] audit: type=1326 audit(1734527222.292:7646): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9798 comm="syz.1.2071" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc392045d29 code=0x7ffc0000 [ 120.126740][ T9797] EXT4-fs (loop6): 1 truncate cleaned up [ 120.150075][ T29] audit: type=1326 audit(1734527222.292:7647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9798 comm="syz.1.2071" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc392045d29 code=0x7ffc0000 [ 120.150101][ T29] audit: type=1326 audit(1734527222.292:7648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9798 comm="syz.1.2071" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc392045d29 code=0x7ffc0000 [ 120.202497][ T29] audit: type=1326 audit(1734527222.292:7649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9798 comm="syz.1.2071" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc392045d29 code=0x7ffc0000 [ 120.202520][ T29] audit: type=1326 audit(1734527222.292:7650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9798 comm="syz.1.2071" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc392045d29 code=0x7ffc0000 [ 120.202549][ T29] audit: type=1326 audit(1734527222.292:7651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9798 comm="syz.1.2071" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc392045d29 code=0x7ffc0000 [ 120.202569][ T29] audit: type=1326 audit(1734527222.292:7652): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9798 comm="syz.1.2071" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc392045d29 code=0x7ffc0000 [ 120.254469][ T9804] loop7: detected capacity change from 0 to 512 [ 120.272707][ T29] audit: type=1326 audit(1734527222.292:7653): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9798 comm="syz.1.2071" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc392045d29 code=0x7ffc0000 [ 120.329780][ T9802] loop1: detected capacity change from 0 to 128 [ 120.345665][ T9804] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 120.354573][ T9802] FAT-fs (loop1): Directory bread(block 162) failed [ 120.377115][ T9797] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 120.396257][ T9802] FAT-fs (loop1): Directory bread(block 163) failed [ 120.403635][ T9802] FAT-fs (loop1): Directory bread(block 164) failed [ 120.406871][ T9804] EXT4-fs (loop7): 1 orphan inode deleted [ 120.410563][ T9802] FAT-fs (loop1): Directory bread(block 165) failed [ 120.415989][ T9804] EXT4-fs (loop7): 1 truncate cleaned up [ 120.428483][ T9802] FAT-fs (loop1): Directory bread(block 166) failed [ 120.433034][ T9804] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 120.435407][ T9802] FAT-fs (loop1): Directory bread(block 167) failed [ 120.458163][ T9802] FAT-fs (loop1): Directory bread(block 168) failed [ 120.465016][ T9802] FAT-fs (loop1): Directory bread(block 169) failed [ 120.489526][ T9802] FAT-fs (loop1): Directory bread(block 162) failed [ 120.496436][ T9802] FAT-fs (loop1): Directory bread(block 163) failed [ 120.503581][ T9802] syz.1.2072: attempt to access beyond end of device [ 120.503581][ T9802] loop1: rw=3, sector=226, nr_sectors = 6 limit=128 [ 120.530249][ T9802] syz.1.2072: attempt to access beyond end of device [ 120.530249][ T9802] loop1: rw=2051, sector=232, nr_sectors = 2 limit=128 [ 120.596960][ T9824] __nla_validate_parse: 12 callbacks suppressed [ 120.596976][ T9824] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2080'. [ 120.658977][ T9826] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2082'. [ 120.721662][ T9837] loop1: detected capacity change from 0 to 512 [ 120.738028][ T9843] loop7: detected capacity change from 0 to 512 [ 120.748332][ T9843] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 120.771127][ T9837] EXT4-fs warning (device loop1): ext4_enable_quotas:7156: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 120.798682][ T9837] EXT4-fs (loop1): mount failed [ 120.812444][ T9843] EXT4-fs (loop7): 1 orphan inode deleted [ 120.818265][ T9843] EXT4-fs (loop7): 1 truncate cleaned up [ 120.854110][ T9843] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 120.933631][ T9862] FAULT_INJECTION: forcing a failure. [ 120.933631][ T9862] name failslab, interval 1, probability 0, space 0, times 0 [ 120.943234][ T9865] xt_hashlimit: max too large, truncated to 1048576 [ 120.946351][ T9862] CPU: 0 UID: 0 PID: 9862 Comm: +}[@ Not tainted 6.13.0-rc3-syzkaller-00044-gaef25be35d23 #0 [ 120.963138][ T9862] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 120.973191][ T9862] Call Trace: [ 120.976482][ T9862] [ 120.979425][ T9862] dump_stack_lvl+0xf2/0x150 [ 120.984018][ T9862] dump_stack+0x15/0x1a [ 120.988177][ T9862] should_fail_ex+0x223/0x230 [ 120.992856][ T9862] should_failslab+0x8f/0xb0 [ 120.997500][ T9862] kmem_cache_alloc_node_noprof+0x59/0x320 [ 121.003300][ T9862] ? __alloc_skb+0x10b/0x310 [ 121.007892][ T9862] __alloc_skb+0x10b/0x310 [ 121.012359][ T9862] ? audit_log_start+0x34c/0x6b0 [ 121.017290][ T9862] audit_log_start+0x368/0x6b0 [ 121.022161][ T9862] audit_seccomp+0x4b/0x130 [ 121.026736][ T9862] __seccomp_filter+0x6fa/0x1180 [ 121.031673][ T9862] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 121.037397][ T9862] ? vfs_write+0x596/0x920 [ 121.041943][ T9862] ? putname+0xcf/0xf0 [ 121.046024][ T9862] __secure_computing+0x9f/0x1c0 [ 121.051004][ T9862] syscall_trace_enter+0xd1/0x1f0 [ 121.056023][ T9862] ? fpregs_assert_state_consistent+0x83/0xa0 [ 121.062141][ T9862] do_syscall_64+0xaa/0x1c0 [ 121.066633][ T9862] ? clear_bhb_loop+0x55/0xb0 [ 121.071338][ T9862] ? clear_bhb_loop+0x55/0xb0 [ 121.076142][ T9862] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 121.082059][ T9862] RIP: 0033:0x7fc392045d29 [ 121.086464][ T9862] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 121.106213][ T9862] RSP: 002b:00007fc3906b7038 EFLAGS: 00000246 ORIG_RAX: 00000000000000bb [ 121.114689][ T9862] RAX: ffffffffffffffda RBX: 00007fc392235fa0 RCX: 00007fc392045d29 [ 121.122674][ T9862] RDX: ffffffffffffffff RSI: 0000000000000000 RDI: ffffffffffffffff [ 121.130640][ T9862] RBP: 00007fc3906b7090 R08: 0000000000000000 R09: 0000000000000000 [ 121.138603][ T9862] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 121.146562][ T9862] R13: 0000000000000000 R14: 00007fc392235fa0 R15: 00007fffad6eb0f8 [ 121.154543][ T9862] [ 121.311550][ T9889] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2101'. [ 121.333116][ T9883] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2104'. [ 121.342042][ T9883] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2104'. [ 121.375635][ T9894] ieee802154 phy0 wpan0: encryption failed: -22 [ 121.404523][ T9900] netlink: 3 bytes leftover after parsing attributes in process `syz.4.2112'. [ 121.431992][ T9900] batadv1: entered promiscuous mode [ 121.437293][ T9900] batadv1: entered allmulticast mode [ 121.487363][ T9909] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2116'. [ 121.534946][ T9913] loop6: detected capacity change from 0 to 512 [ 121.560495][ T9919] netlink: 156 bytes leftover after parsing attributes in process `syz.1.2120'. [ 121.571795][ T9915] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2119'. [ 121.587185][ T9921] loop4: detected capacity change from 0 to 512 [ 121.603825][ T9913] EXT4-fs warning (device loop6): ext4_enable_quotas:7156: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 121.626981][ T9913] EXT4-fs (loop6): mount failed [ 121.646194][ T9921] ext4 filesystem being mounted at /401/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 121.798320][ T9943] syz.1.2129[9943] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 121.798700][ T9940] loop7: detected capacity change from 0 to 512 [ 121.868727][ T9940] ext4 filesystem being mounted at /143/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 121.907460][ T9941] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2121'. [ 121.987835][ T9957] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.045954][ T9957] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.102084][ T9964] loop0: detected capacity change from 0 to 2048 [ 122.125926][ T9957] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.166944][ T9957] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.321522][ T9985] batadv1: entered promiscuous mode [ 122.328570][ T9985] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 122.790041][ T9999] loop7: detected capacity change from 0 to 512 [ 122.805430][ T9999] EXT4-fs warning (device loop7): ext4_enable_quotas:7156: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 122.820829][ T9999] EXT4-fs (loop7): mount failed [ 122.939687][T10006] syz.0.2150[10006] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 123.121237][T10030] loop7: detected capacity change from 0 to 512 [ 123.155765][T10030] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 123.177631][T10030] EXT4-fs (loop7): 1 truncate cleaned up [ 123.256192][T10046] loop7: detected capacity change from 0 to 512 [ 123.290708][T10046] ext4 filesystem being mounted at /150/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 123.729867][ T9957] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.757324][ T9957] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.785439][ T9957] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.801339][ T9957] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.898566][T10094] batadv1: entered promiscuous mode [ 123.915795][T10094] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 124.006879][T10104] loop4: detected capacity change from 0 to 128 [ 124.014557][T10104] FAT-fs (loop4): Directory bread(block 162) failed [ 124.032170][T10106] loop0: detected capacity change from 0 to 512 [ 124.033777][T10104] FAT-fs (loop4): Directory bread(block 163) failed [ 124.046118][T10104] FAT-fs (loop4): Directory bread(block 164) failed [ 124.050151][T10106] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 124.056399][T10104] FAT-fs (loop4): Directory bread(block 165) failed [ 124.072828][T10104] FAT-fs (loop4): Directory bread(block 166) failed [ 124.083775][T10106] EXT4-fs (loop0): 1 truncate cleaned up [ 124.090236][T10104] FAT-fs (loop4): Directory bread(block 167) failed [ 124.097018][T10104] FAT-fs (loop4): Directory bread(block 168) failed [ 124.105329][T10104] FAT-fs (loop4): Directory bread(block 169) failed [ 124.139562][T10104] FAT-fs (loop4): Directory bread(block 162) failed [ 124.146339][T10104] FAT-fs (loop4): Directory bread(block 163) failed [ 124.153576][T10104] syz.4.2179: attempt to access beyond end of device [ 124.153576][T10104] loop4: rw=3, sector=226, nr_sectors = 6 limit=128 [ 124.165422][T10111] loop6: detected capacity change from 0 to 512 [ 124.166833][T10104] syz.4.2179: attempt to access beyond end of device [ 124.166833][T10104] loop4: rw=2051, sector=232, nr_sectors = 2 limit=128 [ 124.210654][T10116] ieee802154 phy0 wpan0: encryption failed: -22 [ 124.256463][T10125] loop7: detected capacity change from 0 to 2048 [ 124.264523][T10111] ext4 filesystem being mounted at /175/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 124.321294][T10136] FAULT_INJECTION: forcing a failure. [ 124.321294][T10136] name failslab, interval 1, probability 0, space 0, times 0 [ 124.334018][T10136] CPU: 0 UID: 0 PID: 10136 Comm: syz.1.2191 Not tainted 6.13.0-rc3-syzkaller-00044-gaef25be35d23 #0 [ 124.344802][T10136] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 124.354990][T10136] Call Trace: [ 124.358268][T10136] [ 124.361255][T10136] dump_stack_lvl+0xf2/0x150 [ 124.365858][T10136] dump_stack+0x15/0x1a [ 124.370050][T10136] should_fail_ex+0x223/0x230 [ 124.374734][T10136] should_failslab+0x8f/0xb0 [ 124.379328][T10136] kmem_cache_alloc_node_noprof+0x59/0x320 [ 124.385218][T10136] ? __alloc_skb+0x10b/0x310 [ 124.389878][T10136] __alloc_skb+0x10b/0x310 [ 124.394303][T10136] ? audit_log_start+0x34c/0x6b0 [ 124.399284][T10136] audit_log_start+0x368/0x6b0 [ 124.404070][T10136] audit_seccomp+0x4b/0x130 [ 124.408596][T10136] __seccomp_filter+0x6fa/0x1180 [ 124.413554][T10136] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 124.419272][T10136] ? vfs_write+0x596/0x920 [ 124.423708][T10136] __secure_computing+0x9f/0x1c0 [ 124.428674][T10136] syscall_trace_enter+0xd1/0x1f0 [ 124.433687][T10136] ? fpregs_assert_state_consistent+0x83/0xa0 [ 124.439816][T10136] do_syscall_64+0xaa/0x1c0 [ 124.444304][T10136] ? clear_bhb_loop+0x55/0xb0 [ 124.448963][T10136] ? clear_bhb_loop+0x55/0xb0 [ 124.453640][T10136] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 124.459549][T10136] RIP: 0033:0x7fc392045d29 [ 124.463955][T10136] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 124.483557][T10136] RSP: 002b:00007fc3906b7038 EFLAGS: 00000246 ORIG_RAX: 00000000000000c8 [ 124.491950][T10136] RAX: ffffffffffffffda RBX: 00007fc392235fa0 RCX: 00007fc392045d29 [ 124.499914][T10136] RDX: 0000000000000000 RSI: 0000000000000012 RDI: 0000000000000000 [ 124.507870][T10136] RBP: 00007fc3906b7090 R08: 0000000000000000 R09: 0000000000000000 [ 124.515830][T10136] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 124.523844][T10136] R13: 0000000000000000 R14: 00007fc392235fa0 R15: 00007fffad6eb0f8 [ 124.531804][T10136] [ 124.577439][T10148] program syz.0.2194 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 124.653668][T10156] loop1: detected capacity change from 0 to 512 [ 124.661842][T10156] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 124.675230][T10156] EXT4-fs (loop1): 1 orphan inode deleted [ 124.680991][T10156] EXT4-fs (loop1): 1 truncate cleaned up [ 124.693359][T10156] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 124.799865][T10168] FAULT_INJECTION: forcing a failure. [ 124.799865][T10168] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 124.813050][T10168] CPU: 1 UID: 0 PID: 10168 Comm: syz.0.2202 Not tainted 6.13.0-rc3-syzkaller-00044-gaef25be35d23 #0 [ 124.823818][T10168] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 124.833952][T10168] Call Trace: [ 124.837220][T10168] [ 124.840140][T10168] dump_stack_lvl+0xf2/0x150 [ 124.844809][T10168] dump_stack+0x15/0x1a [ 124.848967][T10168] should_fail_ex+0x223/0x230 [ 124.853644][T10168] should_fail+0xb/0x10 [ 124.857789][T10168] should_fail_usercopy+0x1a/0x20 [ 124.862807][T10168] strncpy_from_user+0x25/0x210 [ 124.867687][T10168] ? kstrtouint_from_user+0xb0/0xe0 [ 124.872964][T10168] path_setxattrat+0xed/0x310 [ 124.877672][T10168] __x64_sys_setxattr+0x6e/0x90 [ 124.882564][T10168] x64_sys_call+0x2247/0x2dc0 [ 124.887289][T10168] do_syscall_64+0xc9/0x1c0 [ 124.891787][T10168] ? clear_bhb_loop+0x55/0xb0 [ 124.896467][T10168] ? clear_bhb_loop+0x55/0xb0 [ 124.901130][T10168] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 124.907059][T10168] RIP: 0033:0x7f9fd0fc5d29 [ 124.911522][T10168] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 124.931196][T10168] RSP: 002b:00007f9fcf637038 EFLAGS: 00000246 ORIG_RAX: 00000000000000bc [ 124.939622][T10168] RAX: ffffffffffffffda RBX: 00007f9fd11b5fa0 RCX: 00007f9fd0fc5d29 [ 124.947634][T10168] RDX: 0000000000000000 RSI: 0000000020000280 RDI: 0000000000000000 [ 124.955609][T10168] RBP: 00007f9fcf637090 R08: 0000000000000000 R09: 0000000000000000 [ 124.963666][T10168] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 124.971654][T10168] R13: 0000000000000000 R14: 00007f9fd11b5fa0 R15: 00007ffddd083648 [ 124.979623][T10168] [ 125.099265][T10179] loop0: detected capacity change from 0 to 1024 [ 125.127588][T10179] ext4: Unknown parameter 'nouser_xattr' [ 125.224116][T10183] loop7: detected capacity change from 0 to 1024 [ 125.234617][T10183] EXT4-fs: Ignoring removed bh option [ 125.258815][T10183] EXT4-fs mount: 50 callbacks suppressed [ 125.258831][T10183] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 125.304945][ T29] kauditd_printk_skb: 728 callbacks suppressed [ 125.304959][ T29] audit: type=1400 audit(1734527227.522:8375): avc: denied { setattr } for pid=10182 comm="syz.7.2209" name="file1" dev="loop7" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 125.344791][T10195] FAULT_INJECTION: forcing a failure. [ 125.344791][T10195] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 125.357946][T10195] CPU: 0 UID: 0 PID: 10195 Comm: syz.6.2211 Not tainted 6.13.0-rc3-syzkaller-00044-gaef25be35d23 #0 [ 125.368768][T10195] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 125.378816][T10195] Call Trace: [ 125.382123][T10195] [ 125.385051][T10195] dump_stack_lvl+0xf2/0x150 [ 125.389645][T10195] dump_stack+0x15/0x1a [ 125.393795][T10195] should_fail_ex+0x223/0x230 [ 125.398465][T10195] should_fail+0xb/0x10 [ 125.402692][T10195] should_fail_usercopy+0x1a/0x20 [ 125.407707][T10195] _copy_to_user+0x20/0xa0 [ 125.412118][T10195] simple_read_from_buffer+0xa0/0x110 [ 125.417492][T10195] proc_fail_nth_read+0xf9/0x140 [ 125.422487][T10195] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 125.428050][T10195] vfs_read+0x1a2/0x700 [ 125.432196][T10195] ? __rcu_read_unlock+0x4e/0x70 [ 125.437195][T10195] ? __fget_files+0x17c/0x1c0 [ 125.441888][T10195] ksys_read+0xe8/0x1b0 [ 125.446118][T10195] __x64_sys_read+0x42/0x50 [ 125.450621][T10195] x64_sys_call+0x2874/0x2dc0 [ 125.455287][T10195] do_syscall_64+0xc9/0x1c0 [ 125.459789][T10195] ? clear_bhb_loop+0x55/0xb0 [ 125.464489][T10195] ? clear_bhb_loop+0x55/0xb0 [ 125.469164][T10195] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 125.475137][T10195] RIP: 0033:0x7f39d865473c [ 125.479552][T10195] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 125.499148][T10195] RSP: 002b:00007f39d6ca6030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 125.507609][T10195] RAX: ffffffffffffffda RBX: 00007f39d8846080 RCX: 00007f39d865473c [ 125.515570][T10195] RDX: 000000000000000f RSI: 00007f39d6ca60a0 RDI: 0000000000000006 [ 125.523535][T10195] RBP: 00007f39d6ca6090 R08: 0000000000000000 R09: 0000000000000000 [ 125.531563][T10195] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 125.539546][T10195] R13: 0000000000000001 R14: 00007f39d8846080 R15: 00007fff77a8c698 [ 125.547516][T10195] [ 125.595637][ T7088] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 125.696981][ T29] audit: type=1326 audit(1734527227.922:8376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10205 comm="syz.0.2219" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9fd0fc5d29 code=0x7ffc0000 [ 125.720521][ T29] audit: type=1326 audit(1734527227.922:8377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10205 comm="syz.0.2219" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9fd0fc5d29 code=0x7ffc0000 [ 125.783376][T10211] __nla_validate_parse: 18 callbacks suppressed [ 125.783394][T10211] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2221'. [ 125.787832][ T29] audit: type=1326 audit(1734527227.972:8378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10205 comm="syz.0.2219" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9fd0fc5d29 code=0x7ffc0000 [ 125.822136][ T29] audit: type=1326 audit(1734527227.972:8379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10205 comm="syz.0.2219" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9fd0fc5d29 code=0x7ffc0000 [ 125.845649][ T29] audit: type=1326 audit(1734527227.972:8380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10205 comm="syz.0.2219" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9fd0fc5d29 code=0x7ffc0000 [ 125.869200][ T29] audit: type=1326 audit(1734527227.972:8381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10205 comm="syz.0.2219" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9fd0fc5d29 code=0x7ffc0000 [ 125.892793][ T29] audit: type=1326 audit(1734527227.972:8382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10205 comm="syz.0.2219" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9fd0fc5d29 code=0x7ffc0000 [ 125.916405][ T29] audit: type=1326 audit(1734527227.972:8383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10205 comm="syz.0.2219" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9fd0fc5d29 code=0x7ffc0000 [ 125.939877][ T29] audit: type=1326 audit(1734527227.972:8384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10205 comm="syz.0.2219" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9fd0fc5d29 code=0x7ffc0000 [ 125.940478][T10220] FAULT_INJECTION: forcing a failure. [ 125.940478][T10220] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 125.976477][T10220] CPU: 0 UID: 0 PID: 10220 Comm: syz.0.2224 Not tainted 6.13.0-rc3-syzkaller-00044-gaef25be35d23 #0 [ 125.987362][T10220] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 125.997426][T10220] Call Trace: [ 126.000756][T10220] [ 126.003691][T10220] dump_stack_lvl+0xf2/0x150 [ 126.008376][T10220] dump_stack+0x15/0x1a [ 126.012628][T10220] should_fail_ex+0x223/0x230 [ 126.017322][T10220] should_fail+0xb/0x10 [ 126.021490][T10220] should_fail_usercopy+0x1a/0x20 [ 126.026610][T10220] _copy_from_user+0x1e/0xb0 [ 126.031259][T10220] move_addr_to_kernel+0x82/0x120 [ 126.036330][T10220] __sys_sendto+0x12e/0x230 [ 126.040878][T10220] __x64_sys_sendto+0x78/0x90 [ 126.045607][T10220] x64_sys_call+0x29fa/0x2dc0 [ 126.050292][T10220] do_syscall_64+0xc9/0x1c0 [ 126.054807][T10220] ? clear_bhb_loop+0x55/0xb0 [ 126.059523][T10220] ? clear_bhb_loop+0x55/0xb0 [ 126.064216][T10220] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 126.070192][T10220] RIP: 0033:0x7f9fd0fc5d29 [ 126.074611][T10220] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 126.077312][T10243] loop6: detected capacity change from 0 to 1024 [ 126.094486][T10220] RSP: 002b:00007f9fcf637038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 126.094513][T10220] RAX: ffffffffffffffda RBX: 00007f9fd11b5fa0 RCX: 00007f9fd0fc5d29 [ 126.094525][T10220] RDX: 000000000000fdef RSI: 0000000020000080 RDI: 0000000000000005 [ 126.094537][T10220] RBP: 00007f9fcf637090 R08: 0000000020000040 R09: 000000000000001c [ 126.094548][T10220] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 126.094608][T10220] R13: 0000000000000000 R14: 00007f9fd11b5fa0 R15: 00007ffddd083648 [ 126.094627][T10220] [ 126.160322][T10243] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 126.198474][T10243] raw_sendmsg: syz.6.2227 forgot to set AF_INET. Fix it! [ 126.267059][T10243] netlink: 132 bytes leftover after parsing attributes in process `syz.6.2227'. [ 126.284707][T10243] netlink: 'syz.6.2227': attribute type 10 has an invalid length. [ 126.332714][T10243] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 126.375629][T10262] loop7: detected capacity change from 0 to 512 [ 126.382496][T10262] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 126.395784][ T7049] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 126.416941][T10262] EXT4-fs (loop7): 1 orphan inode deleted [ 126.422734][T10262] EXT4-fs (loop7): 1 truncate cleaned up [ 126.428960][T10262] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 126.568679][T10262] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 126.611315][T10294] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.631922][ T7088] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 126.649047][T10294] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.675746][T10301] geneve0: entered allmulticast mode [ 126.695855][T10294] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.756505][T10294] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.769466][T10309] loop7: detected capacity change from 0 to 512 [ 126.788301][T10309] EXT4-fs warning (device loop7): ext4_enable_quotas:7156: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 126.803592][T10309] EXT4-fs (loop7): mount failed [ 126.900278][T10328] syz.0.2256[10328] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 126.900323][T10328] syz.0.2256[10328] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 126.911987][T10328] syz.0.2256[10328] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 126.926705][T10328] FAULT_INJECTION: forcing a failure. [ 126.926705][T10328] name failslab, interval 1, probability 0, space 0, times 0 [ 126.950839][T10328] CPU: 1 UID: 0 PID: 10328 Comm: syz.0.2256 Not tainted 6.13.0-rc3-syzkaller-00044-gaef25be35d23 #0 [ 126.961604][T10328] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 126.971643][T10328] Call Trace: [ 126.974929][T10328] [ 126.977847][T10328] dump_stack_lvl+0xf2/0x150 [ 126.982428][T10328] dump_stack+0x15/0x1a [ 126.986573][T10328] should_fail_ex+0x223/0x230 [ 126.991291][T10328] should_failslab+0x8f/0xb0 [ 126.995883][T10328] kmem_cache_alloc_noprof+0x52/0x320 [ 127.001253][T10328] ? getname_flags+0x81/0x3b0 [ 127.005933][T10328] getname_flags+0x81/0x3b0 [ 127.010502][T10328] getname+0x17/0x20 [ 127.014456][T10328] do_sys_openat2+0x67/0x120 [ 127.019063][T10328] __x64_sys_openat+0xf3/0x120 [ 127.023926][T10328] x64_sys_call+0x2b30/0x2dc0 [ 127.028607][T10328] do_syscall_64+0xc9/0x1c0 [ 127.033254][T10328] ? clear_bhb_loop+0x55/0xb0 [ 127.038041][T10328] ? clear_bhb_loop+0x55/0xb0 [ 127.042801][T10328] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 127.048728][T10328] RIP: 0033:0x7f9fd0fc4690 [ 127.053145][T10328] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 49 94 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 9c 94 02 00 8b 44 [ 127.072845][T10328] RSP: 002b:00007f9fcf636f60 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 127.081271][T10328] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f9fd0fc4690 [ 127.089232][T10328] RDX: 0000000000000000 RSI: 00007f9fd1041b38 RDI: 00000000ffffff9c [ 127.097194][T10328] RBP: 00007f9fd1041b38 R08: 0000000000000000 R09: 0000000000000000 [ 127.105156][T10328] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 127.113172][T10328] R13: 0000000000000000 R14: 00007f9fd11b5fa0 R15: 00007ffddd083648 [ 127.121139][T10328] [ 127.127917][T10332] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2229'. [ 127.162480][T10331] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2257'. [ 127.247258][T10347] xt_l2tp: invalid flags combination: c [ 127.313545][T10361] loop1: detected capacity change from 0 to 512 [ 127.326686][T10361] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 127.338079][T10361] EXT4-fs error (device loop1): ext4_orphan_get:1415: comm syz.1.2269: bad orphan inode 16 [ 127.352278][T10361] ext4_test_bit(bit=15, block=4) = 0 [ 127.357619][T10361] EXT4-fs (loop1): 1 orphan inode deleted [ 127.363924][T10361] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 127.387363][T10361] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 127.397185][T10361] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 127.920432][ T3298] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 128.039616][T10294] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 128.051369][T10371] loop7: detected capacity change from 0 to 512 [ 128.052537][T10294] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 128.058012][T10371] journal_path: Non-blockdev passed as './bus' [ 128.070295][T10294] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 128.072068][T10371] EXT4-fs: error: could not find journal device path [ 128.090669][T10294] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 128.189994][T10381] loop0: detected capacity change from 0 to 2048 [ 128.225860][T10381] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 128.247352][T10390] loop4: detected capacity change from 0 to 512 [ 128.272773][T10394] loop7: detected capacity change from 0 to 128 [ 128.276191][T10390] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 128.284791][T10394] FAT-fs (loop7): Directory bread(block 162) failed [ 128.296320][T10390] ext4 filesystem being mounted at /443/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 128.307698][T10399] netlink: 1272 bytes leftover after parsing attributes in process `syz.0.2277'. [ 128.330563][T10394] FAT-fs (loop7): Directory bread(block 163) failed [ 128.344566][T10394] FAT-fs (loop7): Directory bread(block 164) failed [ 128.360957][T10394] FAT-fs (loop7): Directory bread(block 165) failed [ 128.374290][T10394] FAT-fs (loop7): Directory bread(block 166) failed [ 128.384231][T10394] FAT-fs (loop7): Directory bread(block 167) failed [ 128.392498][T10394] FAT-fs (loop7): Directory bread(block 168) failed [ 128.399375][T10394] FAT-fs (loop7): Directory bread(block 169) failed [ 128.399461][T10401] loop6: detected capacity change from 0 to 512 [ 128.417119][T10401] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 128.418169][T10394] FAT-fs (loop7): Directory bread(block 162) failed [ 128.434003][T10394] FAT-fs (loop7): Directory bread(block 163) failed [ 128.439012][T10401] EXT4-fs (loop6): 1 truncate cleaned up [ 128.441317][T10394] syz.7.2282: attempt to access beyond end of device [ 128.441317][T10394] loop7: rw=3, sector=226, nr_sectors = 6 limit=128 [ 128.459824][T10401] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 128.460708][T10394] syz.7.2282: attempt to access beyond end of device [ 128.460708][T10394] loop7: rw=2051, sector=232, nr_sectors = 2 limit=128 [ 128.486306][T10402] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2280'. [ 128.495363][T10402] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2280'. [ 128.513883][ T7049] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 128.728702][T10412] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2275'. [ 129.011917][ T3300] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 129.115570][T10420] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2291'. [ 129.127682][ T3306] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 129.168504][T10428] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2292'. [ 129.254582][T10440] loop4: detected capacity change from 0 to 512 [ 129.261393][T10440] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 129.272574][T10440] EXT4-fs (loop4): 1 truncate cleaned up [ 129.278632][T10440] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 129.313115][ T3306] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 129.421199][T10453] loop7: detected capacity change from 0 to 512 [ 129.433886][T10457] loop6: detected capacity change from 0 to 128 [ 129.448674][T10453] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 129.461502][T10457] FAT-fs (loop6): Directory bread(block 162) failed [ 129.468413][T10453] ext4 filesystem being mounted at /172/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 129.474762][T10457] FAT-fs (loop6): Directory bread(block 163) failed [ 129.495301][T10457] FAT-fs (loop6): Directory bread(block 164) failed [ 129.508979][T10457] FAT-fs (loop6): Directory bread(block 165) failed [ 129.518810][T10457] FAT-fs (loop6): Directory bread(block 166) failed [ 129.525901][T10457] FAT-fs (loop6): Directory bread(block 167) failed [ 129.532560][T10457] FAT-fs (loop6): Directory bread(block 168) failed [ 129.540530][T10457] FAT-fs (loop6): Directory bread(block 169) failed [ 129.549406][T10457] FAT-fs (loop6): Directory bread(block 162) failed [ 129.557446][T10457] FAT-fs (loop6): Directory bread(block 163) failed [ 129.565340][T10457] syz.6.2305: attempt to access beyond end of device [ 129.565340][T10457] loop6: rw=3, sector=226, nr_sectors = 6 limit=128 [ 129.579571][T10457] syz.6.2305: attempt to access beyond end of device [ 129.579571][T10457] loop6: rw=2051, sector=232, nr_sectors = 2 limit=128 [ 129.663282][T10476] loop6: detected capacity change from 0 to 1024 [ 129.669901][T10476] ext4: Unknown parameter 'nouser_xattr' [ 129.908444][T10487] loop1: detected capacity change from 0 to 512 [ 129.915341][T10487] EXT4-fs (loop1): VFS: Can't find ext4 filesystem [ 130.107388][T10502] batadv1: entered promiscuous mode [ 130.113447][T10502] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 130.192746][T10504] loop0: detected capacity change from 0 to 128 [ 130.200407][T10504] FAT-fs (loop0): Directory bread(block 162) failed [ 130.207313][T10504] FAT-fs (loop0): Directory bread(block 163) failed [ 130.214057][T10504] FAT-fs (loop0): Directory bread(block 164) failed [ 130.220842][T10504] FAT-fs (loop0): Directory bread(block 165) failed [ 130.227656][T10504] FAT-fs (loop0): Directory bread(block 166) failed [ 130.234471][T10504] FAT-fs (loop0): Directory bread(block 167) failed [ 130.241065][T10504] FAT-fs (loop0): Directory bread(block 168) failed [ 130.248139][T10504] FAT-fs (loop0): Directory bread(block 169) failed [ 130.256493][T10504] FAT-fs (loop0): Directory bread(block 162) failed [ 130.263836][T10504] FAT-fs (loop0): Directory bread(block 163) failed [ 130.272789][T10504] syz.0.2322: attempt to access beyond end of device [ 130.272789][T10504] loop0: rw=3, sector=226, nr_sectors = 6 limit=128 [ 130.286184][T10504] syz.0.2322: attempt to access beyond end of device [ 130.286184][T10504] loop0: rw=2051, sector=232, nr_sectors = 2 limit=128 [ 130.300603][ T7088] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 130.345879][T10506] loop7: detected capacity change from 0 to 512 [ 130.375213][T10506] __quota_error: 486 callbacks suppressed [ 130.375224][T10506] Quota error (device loop7): v2_read_file_info: Number of blocks too big for quota file size (2103296 > 6144). [ 130.393100][T10506] EXT4-fs warning (device loop7): ext4_enable_quotas:7156: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 130.407954][T10506] EXT4-fs (loop7): mount failed [ 130.474040][ T29] audit: type=1326 audit(1734527232.692:8870): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10518 comm="syz.7.2327" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fddb4bb5d29 code=0x7ffc0000 [ 130.519657][ T29] audit: type=1326 audit(1734527232.722:8871): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10518 comm="syz.7.2327" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fddb4bb5d29 code=0x7ffc0000 [ 130.543385][ T29] audit: type=1326 audit(1734527232.722:8872): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10518 comm="syz.7.2327" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fddb4bb5d29 code=0x7ffc0000 [ 130.566905][ T29] audit: type=1326 audit(1734527232.722:8873): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10518 comm="syz.7.2327" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fddb4bb5d29 code=0x7ffc0000 [ 130.590481][ T29] audit: type=1326 audit(1734527232.722:8874): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10518 comm="syz.7.2327" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fddb4bb5d29 code=0x7ffc0000 [ 130.613986][ T29] audit: type=1326 audit(1734527232.722:8875): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10518 comm="syz.7.2327" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fddb4bb5d29 code=0x7ffc0000 [ 130.637602][ T29] audit: type=1326 audit(1734527232.722:8876): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10518 comm="syz.7.2327" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fddb4bb5d29 code=0x7ffc0000 [ 130.651806][T10532] loop6: detected capacity change from 0 to 512 [ 130.661073][ T29] audit: type=1326 audit(1734527232.722:8877): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10518 comm="syz.7.2327" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fddb4bb5d29 code=0x7ffc0000 [ 130.672121][T10532] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 130.690806][ T29] audit: type=1326 audit(1734527232.722:8878): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10518 comm="syz.7.2327" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fddb4bb5d29 code=0x7ffc0000 [ 130.725580][T10524] FAULT_INJECTION: forcing a failure. [ 130.725580][T10524] name failslab, interval 1, probability 0, space 0, times 0 [ 130.725930][T10532] EXT4-fs (loop6): 1 truncate cleaned up [ 130.738282][T10524] CPU: 0 UID: 0 PID: 10524 Comm: syz.7.2329 Not tainted 6.13.0-rc3-syzkaller-00044-gaef25be35d23 #0 [ 130.738307][T10524] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 130.738318][T10524] Call Trace: [ 130.738324][T10524] [ 130.738402][T10524] dump_stack_lvl+0xf2/0x150 [ 130.746249][T10532] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 130.754671][T10524] dump_stack+0x15/0x1a [ 130.754702][T10524] should_fail_ex+0x223/0x230 [ 130.796802][T10524] should_failslab+0x8f/0xb0 [ 130.801393][T10524] kmem_cache_alloc_noprof+0x52/0x320 [ 130.806840][T10524] ? audit_log_start+0x34c/0x6b0 [ 130.811774][T10524] audit_log_start+0x34c/0x6b0 [ 130.816532][T10524] audit_seccomp+0x4b/0x130 [ 130.821054][T10524] __seccomp_filter+0x6fa/0x1180 [ 130.826096][T10524] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 130.831745][T10524] ? vfs_write+0x596/0x920 [ 130.836176][T10524] __secure_computing+0x9f/0x1c0 [ 130.841217][T10524] syscall_trace_enter+0xd1/0x1f0 [ 130.846319][T10524] ? fpregs_assert_state_consistent+0x83/0xa0 [ 130.852424][T10524] do_syscall_64+0xaa/0x1c0 [ 130.856925][T10524] ? clear_bhb_loop+0x55/0xb0 [ 130.861596][T10524] ? clear_bhb_loop+0x55/0xb0 [ 130.866285][T10524] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 130.872202][T10524] RIP: 0033:0x7fddb4bb5d29 [ 130.876753][T10524] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 130.896377][T10524] RSP: 002b:00007fddb3227038 EFLAGS: 00000246 ORIG_RAX: 000000000000008b [ 130.904782][T10524] RAX: ffffffffffffffda RBX: 00007fddb4da5fa0 RCX: 00007fddb4bb5d29 [ 130.912744][T10524] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 130.920781][T10524] RBP: 00007fddb3227090 R08: 0000000000000000 R09: 0000000000000000 [ 130.928747][T10524] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 130.936741][T10524] R13: 0000000000000000 R14: 00007fddb4da5fa0 R15: 00007ffefc14c618 [ 130.944745][T10524] [ 130.991444][T10537] loop7: detected capacity change from 0 to 1024 [ 130.998198][T10537] ext4: Unknown parameter 'nouser_xattr' [ 131.033254][ T7049] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 131.071468][T10544] loop7: detected capacity change from 0 to 512 [ 131.096441][T10544] EXT4-fs warning (device loop7): ext4_enable_quotas:7156: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 131.112892][T10544] EXT4-fs (loop7): mount failed [ 131.114905][T10549] loop6: detected capacity change from 0 to 512 [ 131.147076][T10549] EXT4-fs warning (device loop6): ext4_enable_quotas:7156: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 131.162077][T10549] EXT4-fs (loop6): mount failed [ 131.204758][T10563] loop7: detected capacity change from 0 to 256 [ 131.211671][T10563] FAT-fs (loop7): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 131.236988][T10563] FAT-fs (loop7): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 131.252289][T10563] __nla_validate_parse: 1 callbacks suppressed [ 131.252304][T10563] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2344'. [ 131.279841][T10563] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 131.377310][T10579] loop7: detected capacity change from 0 to 1024 [ 131.407781][T10579] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 131.422344][T10579] EXT4-fs error (device loop7): ext4_expand_extra_isize_ea:2793: inode #15: comm syz.7.2351: corrupted in-inode xattr: bad magic number in in-inode xattr [ 131.482847][ T7088] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 131.847223][T10611] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2362'. [ 131.876396][T10613] loop6: detected capacity change from 0 to 2048 [ 131.909613][T10613] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 131.980494][T10625] netlink: 1272 bytes leftover after parsing attributes in process `syz.6.2363'. [ 132.541363][T10629] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2369'. [ 132.636918][T10646] loop4: detected capacity change from 0 to 512 [ 132.643692][T10646] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 132.655143][T10646] EXT4-fs (loop4): 1 orphan inode deleted [ 132.660929][T10646] EXT4-fs (loop4): 1 truncate cleaned up [ 132.667364][T10646] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 132.694635][T10646] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 132.718675][ T7049] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 132.747291][T10652] syz.6.2378[10652] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 132.774995][T10656] loop6: detected capacity change from 0 to 512 [ 132.815390][ T3306] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 132.841558][T10656] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 132.854408][T10656] ext4 filesystem being mounted at /211/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 132.878168][T10660] loop4: detected capacity change from 0 to 2048 [ 132.926291][T10660] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 133.017794][T10668] loop0: detected capacity change from 0 to 512 [ 133.048635][T10668] EXT4-fs warning (device loop0): ext4_enable_quotas:7156: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 133.084307][T10668] EXT4-fs (loop0): mount failed [ 133.124609][T10675] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2379'. [ 133.330868][T10696] loop1: detected capacity change from 0 to 256 [ 133.337743][T10696] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 133.352636][T10696] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 133.499030][T10713] loop7: detected capacity change from 0 to 2048 [ 133.516692][T10713] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 133.560642][T10713] EXT4-fs (loop7): Delayed block allocation failed for inode 18 at logical offset 8 with max blocks 2 with error 28 [ 133.572892][T10713] EXT4-fs (loop7): This should not happen!! Data will be lost [ 133.572892][T10713] [ 133.582563][T10713] EXT4-fs (loop7): Total free blocks count 0 [ 133.588650][T10713] EXT4-fs (loop7): Free/Dirty block details [ 133.594569][T10713] EXT4-fs (loop7): free_blocks=0 [ 133.599519][T10713] EXT4-fs (loop7): dirty_blocks=0 [ 133.604549][T10713] EXT4-fs (loop7): Block reservation details [ 133.610644][T10713] EXT4-fs (loop7): i_reserved_data_blocks=0 [ 133.650807][ T7049] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 133.687199][ T3306] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 133.723918][T10731] loop4: detected capacity change from 0 to 512 [ 133.724705][ T7088] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 133.746348][T10731] EXT4-fs warning (device loop4): ext4_enable_quotas:7156: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 133.761939][T10731] EXT4-fs (loop4): mount failed [ 133.809210][T10738] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2397'. [ 133.828456][T10740] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2396'. [ 133.865973][T10748] loop7: detected capacity change from 0 to 512 [ 133.870128][T10752] loop6: detected capacity change from 0 to 128 [ 133.872900][T10748] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 133.889793][T10752] FAT-fs (loop6): Directory bread(block 162) failed [ 133.896628][T10752] FAT-fs (loop6): Directory bread(block 163) failed [ 133.903326][T10752] FAT-fs (loop6): Directory bread(block 164) failed [ 133.904708][T10748] EXT4-fs (loop7): 1 orphan inode deleted [ 133.911616][T10752] FAT-fs (loop6): Directory bread(block 165) failed [ 133.915684][T10748] EXT4-fs (loop7): 1 truncate cleaned up [ 133.916058][T10748] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 133.922847][T10752] FAT-fs (loop6): Directory bread(block 166) failed [ 133.941371][T10748] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 133.961361][T10752] FAT-fs (loop6): Directory bread(block 167) failed [ 133.968164][T10752] FAT-fs (loop6): Directory bread(block 168) failed [ 133.974955][T10752] FAT-fs (loop6): Directory bread(block 169) failed [ 133.984783][T10752] FAT-fs (loop6): Directory bread(block 162) failed [ 133.991484][T10752] FAT-fs (loop6): Directory bread(block 163) failed [ 133.998752][T10752] syz.6.2399: attempt to access beyond end of device [ 133.998752][T10752] loop6: rw=3, sector=226, nr_sectors = 6 limit=128 [ 134.012016][T10752] syz.6.2399: attempt to access beyond end of device [ 134.012016][T10752] loop6: rw=2051, sector=232, nr_sectors = 2 limit=128 [ 134.072413][T10757] loop6: detected capacity change from 0 to 512 [ 134.081169][T10757] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 134.092746][ T7088] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 134.093795][T10757] EXT4-fs (loop6): 1 truncate cleaned up [ 134.108172][T10757] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 134.151417][ T7049] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 134.184391][T10766] batadv1: entered promiscuous mode [ 134.196155][T10766] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 134.209973][T10770] xt_CT: No such helper "pptp" [ 134.270573][T10777] loop0: detected capacity change from 0 to 512 [ 134.297653][T10777] EXT4-fs warning (device loop0): ext4_enable_quotas:7156: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 134.314090][T10777] EXT4-fs (loop0): mount failed [ 134.337650][T10781] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2411'. [ 134.396457][T10794] loop6: detected capacity change from 0 to 2048 [ 134.410855][T10802] loop1: detected capacity change from 0 to 256 [ 134.436129][T10798] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2413'. [ 134.438439][T10802] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 134.470858][T10802] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 134.484004][T10794] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 134.554467][T10823] netlink: 1268 bytes leftover after parsing attributes in process `syz.6.2412'. [ 134.667712][T10843] loop7: detected capacity change from 0 to 512 [ 134.696632][T10843] EXT4-fs warning (device loop7): ext4_enable_quotas:7156: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 134.714095][T10843] EXT4-fs (loop7): mount failed [ 134.726893][T10852] batadv1: entered promiscuous mode [ 134.732124][T10852] batadv1: entered allmulticast mode [ 134.754895][T10856] pim6reg1: entered promiscuous mode [ 134.760215][T10856] pim6reg1: entered allmulticast mode [ 134.818257][T10860] loop7: detected capacity change from 0 to 512 [ 134.837883][T10860] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 134.849241][T10860] EXT4-fs (loop7): 1 orphan inode deleted [ 134.855107][T10860] EXT4-fs (loop7): 1 truncate cleaned up [ 134.861484][T10860] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 134.881487][T10860] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 135.016463][ T7088] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 135.119055][T10887] sd 0:0:1:0: device reset [ 135.211028][ T7049] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 135.250794][T10893] syz.4.2446[10893] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 135.293054][T10901] batadv1: entered promiscuous mode [ 135.310620][T10901] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 135.447200][ T29] kauditd_printk_skb: 890 callbacks suppressed [ 135.447250][ T29] audit: type=1326 audit(1734527237.672:9761): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10902 comm="syz.4.2450" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1b0fda5d29 code=0x0 [ 135.480888][ T29] audit: type=1326 audit(1734527237.672:9762): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10904 comm="syz.0.2451" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9fd0fc5d29 code=0x7ffc0000 [ 135.504592][ T29] audit: type=1326 audit(1734527237.672:9763): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10904 comm="syz.0.2451" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9fd0fc5d29 code=0x7ffc0000 [ 135.528172][ T29] audit: type=1326 audit(1734527237.702:9764): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10904 comm="syz.0.2451" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9fd0fc5d29 code=0x7ffc0000 [ 135.528203][ T29] audit: type=1326 audit(1734527237.702:9765): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10904 comm="syz.0.2451" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9fd0fc5d29 code=0x7ffc0000 [ 135.528278][ T29] audit: type=1326 audit(1734527237.702:9766): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10904 comm="syz.0.2451" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9fd0fc5d29 code=0x7ffc0000 [ 135.528339][ T29] audit: type=1326 audit(1734527237.702:9767): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10904 comm="syz.0.2451" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9fd0fc5d29 code=0x7ffc0000 [ 135.528360][ T29] audit: type=1326 audit(1734527237.702:9768): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10904 comm="syz.0.2451" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9fd0fc5d29 code=0x7ffc0000 [ 135.645758][ T29] audit: type=1326 audit(1734527237.702:9769): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10904 comm="syz.0.2451" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9fd0fc5d29 code=0x7ffc0000 [ 135.669335][ T29] audit: type=1326 audit(1734527237.702:9770): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10904 comm="syz.0.2451" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9fd0fc5d29 code=0x7ffc0000 [ 135.696582][T10909] loop6: detected capacity change from 0 to 512 [ 135.726828][T10909] EXT4-fs warning (device loop6): ext4_enable_quotas:7156: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 135.745727][T10909] EXT4-fs (loop6): mount failed [ 135.750492][T10921] loop1: detected capacity change from 0 to 2048 [ 135.769646][T10921] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 135.789405][T10927] IPv6: NLM_F_CREATE should be specified when creating new route [ 135.844579][T10931] loop6: detected capacity change from 0 to 256 [ 135.854979][T10931] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 135.869814][T10931] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 135.920700][T10935] loop6: detected capacity change from 0 to 256 [ 135.932217][T10935] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 135.945123][T10935] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 136.026361][T10942] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.065646][T10942] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.115517][T10942] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.155786][T10942] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.222959][T10942] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 136.234725][T10942] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 136.235135][T10947] loop4: detected capacity change from 0 to 512 [ 136.246867][T10942] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 136.260952][T10942] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 136.265556][T10947] EXT4-fs warning (device loop4): ext4_enable_quotas:7156: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 136.284001][T10947] EXT4-fs (loop4): mount failed [ 136.571219][ T3298] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 136.701209][T10972] loop1: detected capacity change from 0 to 512 [ 136.729301][T10976] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.737161][T10972] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 136.752085][T10972] ext4 filesystem being mounted at /489/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 136.788678][T10976] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.836260][T10976] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.896321][T10976] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.909696][T10988] batadv1: entered promiscuous mode [ 136.915922][T10988] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 136.943985][T10976] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 136.956640][T10976] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 136.968931][T10976] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 136.979584][T10989] __nla_validate_parse: 6 callbacks suppressed [ 136.979599][T10989] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2476'. [ 136.981450][T10976] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 137.173339][T10999] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2486'. [ 137.268242][T11009] loop0: detected capacity change from 0 to 512 [ 137.278288][T11009] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 137.299005][T11011] loop6: detected capacity change from 0 to 512 [ 137.310233][T11011] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 137.321637][T11009] EXT4-fs (loop0): 1 orphan inode deleted [ 137.327432][T11009] EXT4-fs (loop0): 1 truncate cleaned up [ 137.333397][T11009] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 137.356733][T11009] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 137.379259][T11011] EXT4-fs (loop6): 1 orphan inode deleted [ 137.385080][T11011] EXT4-fs (loop6): 1 truncate cleaned up [ 137.391380][T11011] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 137.410932][T11011] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 137.487150][ T3300] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 137.556853][ T7049] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 137.577067][ T3298] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 137.625385][T11031] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2496'. [ 137.740156][T11047] loop0: detected capacity change from 0 to 512 [ 137.755644][T11047] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 137.768458][T11047] ext4 filesystem being mounted at /578/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 137.949774][T11053] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2504'. [ 138.023671][T11057] loop7: detected capacity change from 0 to 512 [ 138.031440][T11057] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 138.053760][T11057] EXT4-fs (loop7): 1 truncate cleaned up [ 138.059989][T11057] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 138.106663][ T7088] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 138.422244][T11074] loop1: detected capacity change from 0 to 1024 [ 138.456756][T11074] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 138.502957][T11085] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2518'. [ 138.553329][T11088] debugfs: Directory 'ttyS3' with parent 'caif_serial' already present! [ 138.577742][T11088] loop7: detected capacity change from 0 to 164 [ 138.641363][T11088] Unable to read rock-ridge attributes [ 138.663667][T11088] Unable to read rock-ridge attributes [ 138.677707][ T3300] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 138.747133][T11095] loop0: detected capacity change from 0 to 128 [ 138.802796][T11095] FAT-fs (loop0): Directory bread(block 162) failed [ 138.826896][T11095] FAT-fs (loop0): Directory bread(block 163) failed [ 138.862771][T11105] loop7: detected capacity change from 0 to 1024 [ 138.869518][T11095] FAT-fs (loop0): Directory bread(block 164) failed [ 138.876902][T11105] EXT4-fs: Ignoring removed orlov option [ 138.882700][T11095] FAT-fs (loop0): Directory bread(block 165) failed [ 138.889656][T11105] journal_path: Non-blockdev passed as './file1' [ 138.896083][T11105] EXT4-fs: error: could not find journal device path [ 138.903051][T11095] FAT-fs (loop0): Directory bread(block 166) failed [ 138.926561][T11095] FAT-fs (loop0): Directory bread(block 167) failed [ 138.943040][T11095] FAT-fs (loop0): Directory bread(block 168) failed [ 138.950100][T11095] FAT-fs (loop0): Directory bread(block 169) failed [ 139.019707][T11095] FAT-fs (loop0): Directory bread(block 162) failed [ 139.043162][T11095] FAT-fs (loop0): Directory bread(block 163) failed [ 139.074796][T11095] syz.0.2521: attempt to access beyond end of device [ 139.074796][T11095] loop0: rw=3, sector=226, nr_sectors = 6 limit=128 [ 139.121140][T11095] syz.0.2521: attempt to access beyond end of device [ 139.121140][T11095] loop0: rw=2051, sector=232, nr_sectors = 2 limit=128 [ 139.234585][T11137] loop0: detected capacity change from 0 to 512 [ 139.252169][T11137] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 139.269835][T11137] EXT4-fs (loop0): 1 orphan inode deleted [ 139.275669][T11137] EXT4-fs (loop0): 1 truncate cleaned up [ 139.291838][T11137] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 139.302118][ T3298] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 139.313003][T11137] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 139.329321][T11142] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.342419][T11144] loop1: detected capacity change from 0 to 512 [ 139.365705][T11144] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 139.378530][T11144] ext4 filesystem being mounted at /495/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 139.395676][T11142] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.445654][T11142] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.505692][T11142] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.593790][T11158] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2532'. [ 139.741832][T11142] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 139.753584][T11142] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 139.766553][T11142] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 139.779595][T11142] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 139.843108][T11165] loop6: detected capacity change from 0 to 256 [ 139.850075][T11165] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 139.862634][T11165] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 140.083707][ T3300] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 140.104898][T11170] batadv1: entered promiscuous mode [ 140.110759][T11170] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 140.216286][ T3298] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 140.237991][T11174] batadv1: entered promiscuous mode [ 140.249503][T11174] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 140.288195][T11180] loop1: detected capacity change from 0 to 2048 [ 140.305764][T11180] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 140.321537][T11184] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2546'. [ 140.389569][T11187] netlink: 1268 bytes leftover after parsing attributes in process `syz.1.2545'. [ 140.448027][T11191] loop4: detected capacity change from 0 to 512 [ 140.461036][T11191] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 140.472486][T11191] EXT4-fs (loop4): 1 truncate cleaned up [ 140.478513][T11191] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 140.499289][ T29] kauditd_printk_skb: 799 callbacks suppressed [ 140.499305][ T29] audit: type=1400 audit(1734527242.722:10568): avc: denied { setattr } for pid=11190 comm="syz.4.2549" name="file1" dev="loop4" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 140.533369][ T29] audit: type=1400 audit(1734527242.762:10569): avc: denied { remove_name } for pid=11190 comm="syz.4.2549" name="file1" dev="loop4" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 140.556227][ T29] audit: type=1400 audit(1734527242.762:10570): avc: denied { unlink } for pid=11190 comm="syz.4.2549" name="file1" dev="loop4" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 140.580075][ T3306] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 140.598992][ T29] audit: type=1326 audit(1734527242.822:10571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11196 comm="syz.4.2551" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b0fda5d29 code=0x7ffc0000 [ 140.622832][ T29] audit: type=1326 audit(1734527242.822:10572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11196 comm="syz.4.2551" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b0fda5d29 code=0x7ffc0000 [ 140.646530][ T29] audit: type=1326 audit(1734527242.822:10573): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11196 comm="syz.4.2551" exe="/root/syz-executor" sig=0 arch=c000003e syscall=187 compat=0 ip=0x7f1b0fda5d29 code=0x7ffc0000 [ 140.670304][ T29] audit: type=1326 audit(1734527242.822:10574): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11196 comm="syz.4.2551" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b0fda5d29 code=0x7ffc0000 [ 140.694110][ T29] audit: type=1326 audit(1734527242.822:10575): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11196 comm="syz.4.2551" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b0fda5d29 code=0x7ffc0000 [ 140.738012][ T29] audit: type=1326 audit(1734527242.962:10576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11200 comm="syz.7.2553" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fddb4bb5d29 code=0x7ffc0000 [ 140.761803][ T29] audit: type=1326 audit(1734527242.962:10577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11200 comm="syz.7.2553" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fddb4bb5d29 code=0x7ffc0000 [ 140.817819][T11207] loop4: detected capacity change from 0 to 2048 [ 140.837983][T11207] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 140.844374][T11211] syz.6.2557[11211] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 140.895912][ T3306] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 140.908859][T11217] loop6: detected capacity change from 0 to 512 [ 140.931793][T11217] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 140.944058][T11217] EXT4-fs (loop6): 1 truncate cleaned up [ 140.952923][T11217] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 141.067174][T11230] loop6: detected capacity change from 0 to 256 [ 141.075247][T11230] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 141.096537][T11230] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 141.144244][T11236] loop1: detected capacity change from 0 to 512 [ 141.153396][T11236] EXT4-fs error (device loop1): ext4_get_journal_inode:5809: inode #32: comm syz.1.2568: iget: special inode unallocated [ 141.167701][T11236] EXT4-fs (loop1): Remounting filesystem read-only [ 141.174281][T11236] EXT4-fs (loop1): no journal found [ 141.179499][T11236] EXT4-fs (loop1): can't get journal size [ 141.189101][T11236] EXT4-fs (loop1): warning: mounting fs with errors, running e2fsck is recommended [ 141.201404][T11236] EXT4-fs (loop1): failed to initialize system zone (-117) [ 141.205859][T11241] syz.6.2570[11241] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 141.210333][T11236] EXT4-fs (loop1): mount failed [ 141.292103][T11245] loop6: detected capacity change from 0 to 2048 [ 141.312173][T11251] FAULT_INJECTION: forcing a failure. [ 141.312173][T11251] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 141.325313][T11251] CPU: 0 UID: 0 PID: 11251 Comm: syz.0.2575 Not tainted 6.13.0-rc3-syzkaller-00044-gaef25be35d23 #0 [ 141.336154][T11251] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 141.346210][T11251] Call Trace: [ 141.349477][T11251] [ 141.352399][T11251] dump_stack_lvl+0xf2/0x150 [ 141.357052][T11251] dump_stack+0x15/0x1a [ 141.361217][T11251] should_fail_ex+0x223/0x230 [ 141.365888][T11251] should_fail+0xb/0x10 [ 141.370036][T11251] should_fail_usercopy+0x1a/0x20 [ 141.375059][T11251] _copy_to_user+0x20/0xa0 [ 141.379525][T11251] simple_read_from_buffer+0xa0/0x110 [ 141.384892][T11251] proc_fail_nth_read+0xf9/0x140 [ 141.389822][T11251] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 141.395361][T11251] vfs_read+0x1a2/0x700 [ 141.399586][T11251] ? ip_setsockopt+0xa3/0x100 [ 141.404269][T11251] ? __sys_setsockopt+0x193/0x200 [ 141.409320][T11251] ? __traceiter_kfree+0x2b/0x50 [ 141.414285][T11251] ? __sys_setsockopt+0x193/0x200 [ 141.419331][T11251] ? kfree+0x247/0x2f0 [ 141.423419][T11251] ? sock_common_setsockopt+0x64/0x80 [ 141.428786][T11251] ksys_read+0xe8/0x1b0 [ 141.432949][T11251] __x64_sys_read+0x42/0x50 [ 141.437463][T11251] x64_sys_call+0x2874/0x2dc0 [ 141.442152][T11251] do_syscall_64+0xc9/0x1c0 [ 141.446713][T11251] ? clear_bhb_loop+0x55/0xb0 [ 141.451446][T11251] ? clear_bhb_loop+0x55/0xb0 [ 141.456177][T11251] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 141.462082][T11251] RIP: 0033:0x7f9fd0fc473c [ 141.466552][T11251] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 141.486218][T11251] RSP: 002b:00007f9fcf637030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 141.494834][T11251] RAX: ffffffffffffffda RBX: 00007f9fd11b5fa0 RCX: 00007f9fd0fc473c [ 141.502852][T11251] RDX: 000000000000000f RSI: 00007f9fcf6370a0 RDI: 0000000000000006 [ 141.510944][T11251] RBP: 00007f9fcf637090 R08: 0000000000000000 R09: 0000000000000000 [ 141.518983][T11251] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 141.526944][T11251] R13: 0000000000000000 R14: 00007f9fd11b5fa0 R15: 00007ffddd083648 [ 141.534909][T11251] [ 141.620895][T11266] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.622350][T11264] loop0: detected capacity change from 0 to 1024 [ 141.638534][T11264] EXT4-fs: Ignoring removed orlov option [ 141.647594][T11264] journal_path: Non-blockdev passed as './file1' [ 141.654026][T11264] EXT4-fs: error: could not find journal device path [ 141.665535][T11266] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.677895][T11268] loop6: detected capacity change from 0 to 2048 [ 141.717074][T11266] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.748510][T11272] netlink: 1272 bytes leftover after parsing attributes in process `syz.6.2581'. [ 141.765279][T11266] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.822187][T11266] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.837249][T11266] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.848651][T11266] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.849577][T11274] syz.4.2582[11274] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 141.859880][T11266] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.905285][T11276] loop4: detected capacity change from 0 to 512 [ 141.915609][T11276] EXT4-fs warning (device loop4): ext4_enable_quotas:7156: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 141.932616][T11276] EXT4-fs (loop4): mount failed [ 141.958058][T11283] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2585'. [ 142.000022][T11289] loop1: detected capacity change from 0 to 512 [ 142.015462][T11289] EXT4-fs warning (device loop1): ext4_enable_quotas:7156: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 142.030433][T11289] EXT4-fs (loop1): mount failed [ 142.102894][T11296] loop1: detected capacity change from 0 to 2048 [ 142.169548][T11304] loop1: detected capacity change from 0 to 2048 [ 142.188824][T11304] ext4 filesystem being mounted at /507/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 142.211879][T11310] syz.7.2593[11310] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 142.307535][T11312] loop7: detected capacity change from 0 to 128 [ 142.331132][T11312] EXT4-fs: Ignoring removed nobh option [ 142.347793][T11312] ext4 filesystem being mounted at /241/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 142.388023][T11324] loop1: detected capacity change from 0 to 128 [ 142.401028][T11324] EXT4-fs: Ignoring removed nobh option [ 142.428182][T11324] ext4 filesystem being mounted at /509/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 142.499489][T11343] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 142.510931][T11343] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 142.522610][T11345] loop4: detected capacity change from 0 to 512 [ 142.535483][T11345] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 142.563611][T11345] EXT4-fs (loop4): 1 orphan inode deleted [ 142.569561][T11345] EXT4-fs (loop4): 1 truncate cleaned up [ 142.589502][T11345] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 142.635253][T11353] loop0: detected capacity change from 0 to 2048 [ 142.650267][T11359] loop6: detected capacity change from 0 to 512 [ 142.659184][T11359] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 142.680727][T11359] EXT4-fs (loop6): 1 truncate cleaned up [ 142.720479][T11365] loop0: detected capacity change from 0 to 256 [ 142.727728][T11365] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 142.741309][T11365] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 142.777219][T11370] loop6: detected capacity change from 0 to 1024 [ 142.785395][T11370] EXT4-fs: Ignoring removed orlov option [ 142.791200][T11370] journal_path: Non-blockdev passed as './file1' [ 142.797616][T11370] EXT4-fs: error: could not find journal device path [ 143.262280][T11384] netdevsim netdevsim7 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 143.315554][T11384] netdevsim netdevsim7 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 143.365580][T11384] netdevsim netdevsim7 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 143.397938][T11394] loop0: detected capacity change from 0 to 512 [ 143.405733][T11394] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 143.427117][T11394] EXT4-fs (loop0): 1 truncate cleaned up [ 143.446873][T11384] netdevsim netdevsim7 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 143.471125][T11398] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2620'. [ 143.501531][T11384] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 143.512925][T11384] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 143.525437][T11384] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 143.545366][T11384] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 143.718933][T11408] loop0: detected capacity change from 0 to 2048 [ 144.211619][T11425] loop1: detected capacity change from 0 to 512 [ 144.238099][T11425] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 144.261234][T11427] batadv1: entered promiscuous mode [ 144.267184][T11425] EXT4-fs (loop1): 1 orphan inode deleted [ 144.272924][T11425] EXT4-fs (loop1): 1 truncate cleaned up [ 144.279492][T11427] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 144.315584][T11425] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 144.411970][T11433] loop4: detected capacity change from 0 to 1024 [ 144.421014][T11433] EXT4-fs: Ignoring removed orlov option [ 144.432260][T11433] journal_path: Non-blockdev passed as './file1' [ 144.438734][T11433] EXT4-fs: error: could not find journal device path [ 144.565361][T11442] loop1: detected capacity change from 0 to 256 [ 144.572259][T11442] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 144.584986][T11442] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 144.730464][T11447] loop7: detected capacity change from 0 to 512 [ 144.758726][T11447] EXT4-fs warning (device loop7): ext4_enable_quotas:7156: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 144.780971][T11447] EXT4-fs (loop7): mount failed [ 144.790752][T11467] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11467 comm=syz.1.2641 [ 144.842558][T11471] loop6: detected capacity change from 0 to 128 [ 144.851762][ T28] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.862917][T11471] FAT-fs (loop6): Directory bread(block 162) failed [ 144.885124][T11471] FAT-fs (loop6): Directory bread(block 163) failed [ 144.909304][T11471] FAT-fs (loop6): Directory bread(block 164) failed [ 144.917516][T11478] loop1: detected capacity change from 0 to 1024 [ 144.924013][T11471] FAT-fs (loop6): Directory bread(block 165) failed [ 144.931475][T11471] FAT-fs (loop6): Directory bread(block 166) failed [ 144.950509][T11471] FAT-fs (loop6): Directory bread(block 167) failed [ 144.957424][T11478] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 144.968699][T11471] FAT-fs (loop6): Directory bread(block 168) failed [ 144.978160][T11471] FAT-fs (loop6): Directory bread(block 169) failed [ 144.982723][T11478] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 144.987481][T11471] FAT-fs (loop6): Directory bread(block 162) failed [ 144.998169][T11478] EXT4-fs (loop1): orphan cleanup on readonly fs [ 145.008183][T11471] FAT-fs (loop6): Directory bread(block 163) failed [ 145.015844][T11471] syz.6.2643: attempt to access beyond end of device [ 145.015844][T11471] loop6: rw=3, sector=226, nr_sectors = 6 limit=128 [ 145.016087][ T28] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.029255][T11471] syz.6.2643: attempt to access beyond end of device [ 145.029255][T11471] loop6: rw=2051, sector=232, nr_sectors = 2 limit=128 [ 145.042333][T11478] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5837: Corrupt filesystem [ 145.086912][T11478] EXT4-fs (loop1): Remounting filesystem read-only [ 145.095480][T11478] EXT4-fs (loop1): 1 orphan inode deleted [ 145.101999][T11478] SELinux: (dev loop1, type ext4) getxattr errno 5 [ 145.102262][T11484] loop6: detected capacity change from 0 to 2048 [ 145.141099][ T28] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.174456][T11456] chnl_net:caif_netlink_parms(): no params data found [ 145.188212][ T28] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.209866][T11454] loop1: detected capacity change from 0 to 512 [ 145.218282][T11484] ext4 filesystem being mounted at /272/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 145.261433][T11497] syz.7.2647[11497] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 145.273248][T11454] ext4 filesystem being mounted at /522/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 145.309553][T11456] bridge0: port 1(bridge_slave_0) entered blocking state [ 145.316835][T11456] bridge0: port 1(bridge_slave_0) entered disabled state [ 145.326345][T11456] bridge_slave_0: entered allmulticast mode [ 145.333847][T11456] bridge_slave_0: entered promiscuous mode [ 145.342440][T11456] bridge0: port 2(bridge_slave_1) entered blocking state [ 145.349702][T11456] bridge0: port 2(bridge_slave_1) entered disabled state [ 145.357365][T11456] bridge_slave_1: entered allmulticast mode [ 145.364348][T11456] bridge_slave_1: entered promiscuous mode [ 145.407489][T11506] loop4: detected capacity change from 0 to 2048 [ 145.423620][T11456] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 145.522769][ T29] kauditd_printk_skb: 1305 callbacks suppressed [ 145.522785][ T29] audit: type=1326 audit(1734527247.742:11876): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11512 comm="syz.4.2653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b0fda5d29 code=0x7ffc0000 [ 145.526933][T11515] syz.4.2653[11515] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 145.529121][ T29] audit: type=1326 audit(1734527247.742:11877): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11512 comm="syz.4.2653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=63 compat=0 ip=0x7f1b0fda5d29 code=0x7ffc0000 [ 145.587730][ T29] audit: type=1326 audit(1734527247.742:11878): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11512 comm="syz.4.2653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b0fda5d29 code=0x7ffc0000 [ 145.611400][ T29] audit: type=1326 audit(1734527247.742:11879): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11512 comm="syz.4.2653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b0fda5d29 code=0x7ffc0000 [ 145.635073][ T29] audit: type=1326 audit(1734527247.742:11880): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11512 comm="syz.4.2653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1b0fda5d29 code=0x7ffc0000 [ 145.658704][ T29] audit: type=1326 audit(1734527247.742:11881): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11512 comm="syz.4.2653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b0fda5d29 code=0x7ffc0000 [ 145.682296][ T29] audit: type=1326 audit(1734527247.742:11882): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11512 comm="syz.4.2653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b0fda5d29 code=0x7ffc0000 [ 145.706045][ T29] audit: type=1326 audit(1734527247.742:11883): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11512 comm="syz.4.2653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f1b0fda5d29 code=0x7ffc0000 [ 145.729860][ T29] audit: type=1326 audit(1734527247.742:11884): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11512 comm="syz.4.2653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b0fda5d29 code=0x7ffc0000 [ 145.753425][ T29] audit: type=1326 audit(1734527247.742:11885): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11512 comm="syz.4.2653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b0fda5d29 code=0x7ffc0000 [ 145.799748][T11517] loop1: detected capacity change from 0 to 512 [ 145.815973][T11517] EXT4-fs warning (device loop1): ext4_enable_quotas:7156: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 145.830735][T11517] EXT4-fs (loop1): mount failed [ 145.837113][ T28] bond0 (unregistering): Released all slaves [ 145.854367][T11509] batadv1: entered promiscuous mode [ 145.860302][T11509] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 145.873244][T11456] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 145.914491][ T28] hsr_slave_0: left promiscuous mode [ 145.920387][ T28] hsr_slave_1: left promiscuous mode [ 145.928835][ T28] veth1_macvtap: left promiscuous mode [ 145.934399][ T28] veth0_macvtap: left promiscuous mode [ 145.940068][ T28] veth1_vlan: left promiscuous mode [ 145.945393][ T28] veth0_vlan: left promiscuous mode [ 146.106193][T11547] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2661'. [ 146.117104][T11456] team0: Port device team_slave_0 added [ 146.123622][T11456] team0: Port device team_slave_1 added [ 146.157017][T11456] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 146.164062][T11456] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 146.190235][T11456] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 146.203212][T11456] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 146.210203][T11456] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 146.236188][T11456] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 146.267143][T11456] hsr_slave_0: entered promiscuous mode [ 146.279728][T11456] hsr_slave_1: entered promiscuous mode [ 146.288453][T11456] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 146.304472][T11456] Cannot create hsr debugfs directory [ 146.365019][T11572] loop7: detected capacity change from 0 to 2048 [ 146.547845][T11600] batadv1: entered promiscuous mode [ 146.553759][T11600] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 146.670022][T11456] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 146.679823][T11456] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 146.693843][T11456] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 146.705891][T11456] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 146.778834][T11456] 8021q: adding VLAN 0 to HW filter on device bond0 [ 146.796703][T11456] 8021q: adding VLAN 0 to HW filter on device team0 [ 146.807624][ T28] bridge0: port 1(bridge_slave_0) entered blocking state [ 146.814712][ T28] bridge0: port 1(bridge_slave_0) entered forwarding state [ 146.829049][ T2377] bridge0: port 2(bridge_slave_1) entered blocking state [ 146.836206][ T2377] bridge0: port 2(bridge_slave_1) entered forwarding state [ 146.965792][T11456] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 146.987687][T11654] loop1: detected capacity change from 0 to 512 [ 146.997935][T11654] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 147.031348][T11654] EXT4-fs (loop1): 1 truncate cleaned up [ 147.145308][T11456] veth0_vlan: entered promiscuous mode [ 147.171998][T11456] veth1_vlan: entered promiscuous mode [ 147.198096][T11456] veth0_macvtap: entered promiscuous mode [ 147.206349][T11456] veth1_macvtap: entered promiscuous mode [ 147.218543][T11456] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 147.229240][T11456] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 147.242230][T11456] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 147.253248][T11456] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 147.263817][T11456] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 147.275787][T11456] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 147.286319][T11456] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 147.295086][T11456] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 147.303829][T11456] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 147.312638][T11456] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 147.740415][T11739] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 147.749058][T11739] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 147.762928][T11739] loop1: detected capacity change from 0 to 1024 [ 147.771014][T11739] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (1764!=20869) [ 147.783011][T11739] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 147.793981][T11739] EXT4-fs (loop1): invalid journal inode [ 147.800696][T11739] EXT4-fs (loop1): can't get journal size [ 148.035440][T11748] loop6: detected capacity change from 0 to 128 [ 148.042796][T11748] FAT-fs (loop6): Directory bread(block 162) failed [ 148.049617][T11748] FAT-fs (loop6): Directory bread(block 163) failed [ 148.056452][T11748] FAT-fs (loop6): Directory bread(block 164) failed [ 148.063210][T11748] FAT-fs (loop6): Directory bread(block 165) failed [ 148.070048][T11748] FAT-fs (loop6): Directory bread(block 166) failed [ 148.076878][T11748] FAT-fs (loop6): Directory bread(block 167) failed [ 148.083540][T11748] FAT-fs (loop6): Directory bread(block 168) failed [ 148.090258][T11748] FAT-fs (loop6): Directory bread(block 169) failed [ 148.098670][T11748] FAT-fs (loop6): Directory bread(block 162) failed [ 148.106489][T11748] FAT-fs (loop6): Directory bread(block 163) failed [ 148.113432][T11748] syz.6.2695: attempt to access beyond end of device [ 148.113432][T11748] loop6: rw=3, sector=226, nr_sectors = 6 limit=128 [ 148.127243][T11748] syz.6.2695: attempt to access beyond end of device [ 148.127243][T11748] loop6: rw=2051, sector=232, nr_sectors = 2 limit=128 [ 148.347744][T11762] loop6: detected capacity change from 0 to 2048 [ 148.366054][T11762] ext4 filesystem being mounted at /285/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 148.600692][T11782] loop7: detected capacity change from 0 to 512 [ 148.607963][T11782] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 148.619033][T11782] EXT4-fs (loop7): 1 truncate cleaned up [ 148.658737][T11785] loop7: detected capacity change from 0 to 512 [ 148.670038][T11785] EXT4-fs warning (device loop7): ext4_block_to_path:107: block 3279945729 > max in inode 13 [ 148.680518][T11785] EXT4-fs warning (device loop7): ext4_block_to_path:107: block 3279945730 > max in inode 13 [ 148.690988][T11785] EXT4-fs (loop7): 1 truncate cleaned up [ 148.698082][T11785] EXT4-fs warning (device loop7): ext4_lookup:1825: Inconsistent encryption contexts: 2/12 [ 148.708316][T11787] EXT4-fs warning (device loop7): ext4_lookup:1825: Inconsistent encryption contexts: 2/12 [ 148.872639][T11792] FAULT_INJECTION: forcing a failure. [ 148.872639][T11792] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 148.885834][T11792] CPU: 1 UID: 0 PID: 11792 Comm: syz.7.2711 Not tainted 6.13.0-rc3-syzkaller-00044-gaef25be35d23 #0 [ 148.896604][T11792] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 148.906722][T11792] Call Trace: [ 148.910004][T11792] [ 148.913002][T11792] dump_stack_lvl+0xf2/0x150 [ 148.917614][T11792] dump_stack+0x15/0x1a [ 148.921814][T11792] should_fail_ex+0x223/0x230 [ 148.926681][T11792] should_fail+0xb/0x10 [ 148.930841][T11792] should_fail_usercopy+0x1a/0x20 [ 148.935947][T11792] _copy_from_user+0x1e/0xb0 [ 148.940581][T11792] copy_msghdr_from_user+0x54/0x2a0 [ 148.945848][T11792] ? __fget_files+0x17c/0x1c0 [ 148.950617][T11792] __sys_sendmsg+0x13e/0x230 [ 148.955636][T11792] __x64_sys_sendmsg+0x46/0x50 [ 148.960396][T11792] x64_sys_call+0x2734/0x2dc0 [ 148.965113][T11792] do_syscall_64+0xc9/0x1c0 [ 148.969608][T11792] ? clear_bhb_loop+0x55/0xb0 [ 148.974277][T11792] ? clear_bhb_loop+0x55/0xb0 [ 148.978945][T11792] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 148.984841][T11792] RIP: 0033:0x7fddb4bb5d29 [ 148.989299][T11792] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 149.008913][T11792] RSP: 002b:00007fddb3227038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 149.017322][T11792] RAX: ffffffffffffffda RBX: 00007fddb4da5fa0 RCX: 00007fddb4bb5d29 [ 149.025341][T11792] RDX: 0000000000000000 RSI: 0000000020000400 RDI: 0000000000000003 [ 149.033303][T11792] RBP: 00007fddb3227090 R08: 0000000000000000 R09: 0000000000000000 [ 149.041416][T11792] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 149.049414][T11792] R13: 0000000000000000 R14: 00007fddb4da5fa0 R15: 00007ffefc14c618 [ 149.057384][T11792] [ 149.086910][T11798] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2714'. [ 149.198061][T11813] sd 0:0:1:0: device reset [ 149.203225][T11813] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2721'. [ 149.212187][T11813] netlink: 44 bytes leftover after parsing attributes in process `syz.7.2721'. [ 149.223994][T11813] bridge4: the hash_elasticity option has been deprecated and is always 16 [ 149.752419][T11831] batadv1: entered promiscuous mode [ 149.758500][T11831] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 149.856313][T11835] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2730'. [ 149.897298][T11843] loop0: detected capacity change from 0 to 2048 [ 150.044643][T11869] loop4: detected capacity change from 0 to 2048 [ 150.065492][T11869] ext4 filesystem being mounted at /527/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 150.136876][T11880] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2745'. [ 150.251690][T11898] loop4: detected capacity change from 0 to 2048 [ 150.335042][T11908] loop7: detected capacity change from 0 to 2048 [ 150.365549][T11908] ext4 filesystem being mounted at /276/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 150.523674][T11921] loop6: detected capacity change from 0 to 512 [ 150.530403][ T29] kauditd_printk_skb: 999 callbacks suppressed [ 150.530416][ T29] audit: type=1400 audit(1734527252.762:12884): avc: denied { mounton } for pid=11920 comm="syz.6.2762" path="/294/file2" dev="tmpfs" ino=1610 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 150.535895][T11921] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 150.538954][ T29] audit: type=1400 audit(1734527252.762:12885): avc: denied { append } for pid=2983 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=9 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 150.570682][T11921] EXT4-fs (loop6): 1 truncate cleaned up [ 150.598755][ T29] audit: type=1400 audit(1734527252.832:12886): avc: denied { mount } for pid=11920 comm="syz.6.2762" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 150.623306][ T29] audit: type=1400 audit(1734527252.832:12887): avc: denied { write } for pid=11920 comm="syz.6.2762" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 150.645256][ T29] audit: type=1400 audit(1734527252.832:12888): avc: denied { remove_name } for pid=11920 comm="syz.6.2762" name="file1" dev="loop6" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 150.668135][ T29] audit: type=1400 audit(1734527252.832:12889): avc: denied { unlink } for pid=11920 comm="syz.6.2762" name="file1" dev="loop6" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 150.690804][ T29] audit: type=1400 audit(1734527252.872:12890): avc: denied { unmount } for pid=7049 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 150.729794][ T29] audit: type=1400 audit(1734527252.952:12891): avc: denied { map_create } for pid=11923 comm="syz.6.2763" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 150.749167][ T29] audit: type=1400 audit(1734527252.952:12892): avc: denied { map_read map_write } for pid=11923 comm="syz.6.2763" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 150.796608][ T29] audit: type=1400 audit(1734527253.022:12893): avc: denied { create } for pid=11925 comm="syz.0.2764" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 150.903159][T11938] loop0: detected capacity change from 0 to 512 [ 150.917480][T11938] ext4 filesystem being mounted at /16/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 151.105826][T11945] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2768'. [ 151.218831][T11953] loop4: detected capacity change from 0 to 2048 [ 151.307533][T11956] netlink: 1272 bytes leftover after parsing attributes in process `syz.4.2773'. [ 151.463874][T11958] loop7: detected capacity change from 0 to 512 [ 151.471262][T11958] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 151.482663][T11958] EXT4-fs (loop7): 1 truncate cleaned up [ 151.786447][T11975] loop0: detected capacity change from 0 to 2048 [ 151.853603][T11978] netlink: 1276 bytes leftover after parsing attributes in process `syz.0.2781'. [ 151.943383][T11982] loop1: detected capacity change from 0 to 512 [ 151.951864][T11982] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 151.963372][T11982] EXT4-fs (loop1): 1 truncate cleaned up [ 152.011832][T11985] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.046531][T11985] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.085337][T11988] loop4: detected capacity change from 0 to 512 [ 152.096195][T11985] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.111943][T11988] EXT4-fs warning (device loop4): ext4_enable_quotas:7156: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 152.126963][T11988] EXT4-fs (loop4): mount failed [ 152.166701][T11985] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.224728][T11985] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.236141][T11985] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.247211][T11999] batadv1: entered promiscuous mode [ 152.253139][T11999] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 152.265906][T11985] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.276896][T11985] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.329490][T12001] loop1: detected capacity change from 0 to 2048 [ 152.340122][T12004] loop4: detected capacity change from 0 to 512 [ 152.376990][T12001] ================================================================== [ 152.385086][T12001] BUG: KCSAN: data-race in call_rcu / mtree_range_walk [ 152.385111][T12001] [ 152.385117][T12001] write to 0xffff888104d97b08 of 8 bytes by task 12000 on cpu 0: [ 152.385132][T12001] call_rcu+0x47/0x430 [ 152.385148][T12001] mas_replace_node+0x2fa/0x430 [ 152.385166][T12001] mas_wr_store_entry+0x1fbf/0x2d10 [ 152.385191][T12001] mas_store_prealloc+0x6bf/0x960 [ 152.385206][T12001] __mmap_region+0xdca/0x13f0 [ 152.385228][T12001] mmap_region+0x164/0x1e0 [ 152.385254][T12001] do_mmap+0x718/0xb60 [ 152.385279][T12001] vm_mmap_pgoff+0x133/0x290 [ 152.385306][T12001] ksys_mmap_pgoff+0xd0/0x330 [ 152.385330][T12001] x64_sys_call+0x1940/0x2dc0 [ 152.385350][T12001] do_syscall_64+0xc9/0x1c0 [ 152.385369][T12001] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 152.385398][T12001] [ 152.385403][T12001] read to 0xffff888104d97b08 of 8 bytes by task 12001 on cpu 1: [ 152.385416][T12001] mtree_range_walk+0x140/0x460 [ 152.385431][T12001] mas_walk+0x16e/0x320 [ 152.385453][T12001] lock_vma_under_rcu+0x95/0x260 [ 152.385470][T12001] exc_page_fault+0x150/0x650 [ 152.385492][T12001] asm_exc_page_fault+0x26/0x30 [ 152.385521][T12001] [ 152.385525][T12001] Reported by Kernel Concurrency Sanitizer on: [ 152.385531][T12001] CPU: 1 UID: 0 PID: 12001 Comm: syz.1.2790 Not tainted 6.13.0-rc3-syzkaller-00044-gaef25be35d23 #0 [ 152.385556][T12001] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 152.385567][T12001] ================================================================== [ 152.387003][T12004] ext4 filesystem being mounted at /542/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 152.616529][T12012] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2791'.