last executing test programs: 1m16.088796505s ago: executing program 4 (id=597): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f00000001c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kmem_cache_free\x00', r0}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, 0x0, 0x1, 0x0, &(0x7f00000000c0)) 1m16.053240996s ago: executing program 4 (id=599): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001500)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r2, 0x0, 0x0) mount(0x0, &(0x7f0000000240)='.\x00', &(0x7f00000000c0)='nfs\x00', 0x0, &(0x7f0000000000)='\x06\x00\x00\x00\x04\xb0\xfe\x98\x9a!s\x91]\xab\xc9\xa2IV\xb6-\xd9z\x81\x91\x8aP}I\xc6\x0e\xd9\v\xda\xbfS\x16 \x04\r\xcd\xdb\x9a\xd4\xaf\r\x11\xa0\xd7\xd7\xb6\x9bz\x99\xaf\xfd\x87fN\xad\x90U\xb4A\xdf\xabB\xbba\x7f\xb8\x96\x1a\xe7\xc1\xab\x16\x02\x000xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000740)={r2, &(0x7f0000000000), &(0x7f00000000c0)=""/109}, 0x20) syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0x0) lseek(r5, 0x101, 0x0) getdents64(r5, &(0x7f0000000380)=""/99, 0x63) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f0000000980)='sys_enter\x00', r4}, 0x10) sync_file_range(0xffffffffffffffff, 0x80000000, 0xfffffffffffffffd, 0x6) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r6}, 0x4) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r7}, 0x10) r8 = mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x2, 0x40010, 0xffffffffffffffff, 0x10000000) r9 = syz_io_uring_setup(0xd2, &(0x7f0000000480)={0x0, 0x0, 0x0, 0xfffffffc}, &(0x7f0000000000)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r10, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) r12 = io_uring_register$IORING_REGISTER_PERSONALITY(r9, 0x9, 0x0, 0x0) syz_io_uring_submit(r10, r11, &(0x7f0000000200)=@IORING_OP_MSG_RING={0x28, 0x1, 0x0, r9, 0xffffffffffffbee7, 0x0, 0x0, 0x0, 0x1, {0x0, r12}}) syz_io_uring_submit(0x0, r8, &(0x7f0000000400)=@IORING_OP_STATX={0x15, 0x45, 0x0, r5, &(0x7f0000000880), &(0x7f0000000340)='./file1\x00', 0x200, 0x100, 0x0, {0x0, r12}}) 1m13.004902622s ago: executing program 4 (id=661): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000b80)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000b40)={&(0x7f0000000600)='kfree\x00', r0}, 0x10) r1 = syz_open_dev$evdev(&(0x7f0000000040), 0x3, 0x81f42) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000e00)={&(0x7f0000000980)='sys_exit\x00', r2}, 0x10) r4 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r3}, 0x8) write$cgroup_int(r4, &(0x7f00000001c0)=0x60ff20038000, 0xfffffdef) ioctl$TUNSETOFFLOAD(r4, 0x541b, 0x20004000) syz_usb_disconnect(r1) syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[], 0x0) ioctl$EVIOCGBITSW(r1, 0x40095505, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000000085000000730000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000002c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r7}, 0x10) socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x37, 0x0, 0x20000000) r8 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="0209000002"], 0x10}}, 0x0) syslog(0x2, &(0x7f0000001940)=""/94, 0x5e) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000280)={'wlan0\x00'}) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800}}, {@minixdf}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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") r9 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1334c2, 0x0) pwritev2(r9, &(0x7f00000001c0)=[{&(0x7f0000000080)="ff", 0xfdef}], 0x1, 0xe7b, 0x0, 0x0) 1m8.881833575s ago: executing program 1 (id=709): r0 = socket(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r1}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0xfffffc}, 0x10) write(r0, &(0x7f0000000000)="240000001a005f1114f9f407000901000000000000000001000000000800040001000000", 0x24) 1m8.881262206s ago: executing program 1 (id=710): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r1, 0x0, 0x30, &(0x7f0000000940)=ANY=[@ANYBLOB="020000000000000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000500000002000000e00000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000064010102000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000e000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002"], 0x310) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r0}, 0x10) mknod$loop(&(0x7f0000000300)='./file0\x00', 0x100000000000600d, 0x1) setxattr$security_capability(0x0, &(0x7f0000000280), 0x0, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="1200000008000000040000000200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000001000"/28], 0x50) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0b00000007000000010001000900000001", @ANYRES8=r0], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) io_setup(0x2007, &(0x7f0000000200)=0x0) r7 = eventfd2(0x0, 0x0) io_submit(r6, 0x2, &(0x7f0000000c80)=[&(0x7f0000000400)={0x0, 0x0, 0x0, 0x2, 0xaa, 0xffffffffffffffff, &(0x7f00000007c0)="69ce1e4524114332c147545b644cbdaf28a5a7c250414603da245c555c88fae7b2df4a39b5bdcc047bff49ea804403e8f1aa6e43ba8ea8149c4a626ef39b3e79c168e3fad76df1bdfde659877a12896a0220b400dff587350301332f86d2776becf024f9b6599be5868ce817715dca6dafaf647b6305a60d63b70c0b9cf751f613c04c7cf2f34ef876c70b81ea5c0dbff1e86177a199ecc13997e5b7e8d2922de9dff3b172", 0xa5, 0x0, 0x0, 0x1, r7}, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x5, 0x9, r5, &(0x7f0000000c00)="73a390c1efbe70ca40b059f25b74343e5b4574e84a67ec1b17d394c3ac3a188babe201a6794337aaf02b052e633222995adabad3924b8873cb70c25b0da008c33372e3a686cbfb879b7f2d18101d404e", 0x50, 0x200, 0x0, 0x3, r7}]) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000500)='page_pool_state_release\x00', r8}, 0x10) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r9, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) bpf$MAP_DELETE_ELEM(0x2, &(0x7f0000000080)={r3, &(0x7f0000000100), 0x20000000}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000100)={r3, &(0x7f0000000380)="4fef91b0bf6d98086df421fd6cda8b2e8018a5ec2b131b189cdd58ba3f619e73d90a741b791b7195cb23f6967c1efa44d52b79a51e7e37e965833002aae305"}, 0x20) openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x5, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0xfffffffd, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r10}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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"], 0x48) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x17, 0x7, &(0x7f0000000600)=ANY=[@ANYRESHEX=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x9, 0x0, 0x0, 0x41000, 0x4c, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f00000002c0)='contention_begin\x00', r11}, 0x18) utimes(&(0x7f0000000280)='./file0\x00', 0x0) 1m8.774149096s ago: executing program 1 (id=711): connect$can_bcm(0xffffffffffffffff, 0x0, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x4000000) sendmsg$can_bcm(0xffffffffffffffff, 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f00000000c0)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @random='`_2@Pu'}, 0x14) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r3, 0xffffffffffffffff, 0x0) 1m8.741250506s ago: executing program 1 (id=713): perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x34, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x20, &(0x7f0000000500)={&(0x7f0000001500)=@newsa={0x138, 0x10, 0x633, 0x0, 0x0, {{@in=@broadcast, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x2}, {@in6=@loopback, 0x0, 0x32}, @in=@remote, {0xfffffffffffffff2}, {}, {}, 0x0, 0x0, 0xa, 0x4}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}]}, 0x138}}, 0x0) r1 = inotify_init() r2 = creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10) r5 = inotify_add_watch(r1, &(0x7f0000000240)='./file0\x00', 0x8c7) write$binfmt_elf32(r2, &(0x7f0000000040)=ANY=[@ANYRES64=r5], 0x69) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) 1m8.663400377s ago: executing program 1 (id=714): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@nouid32}, {@minixdf}]}, 0x1, 0x504, &(0x7f0000001480)="$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") ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000000)) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000140)={0x15, 0x110, 0xfa00, {0xffffffffffffffff, 0x0, 0x30, 0x30, 0x0, @in6={0x1b, 0x0, 0x0, @empty}, @ib={0x1b, 0x0, 0x0, {"0e000000000000000000000004000001"}}}}, 0x118) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x22a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="020080000000000000000000aa0b000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000640), &(0x7f0000000200), 0xa7c, r1}, 0x38) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000000)={0xffffffffffffffff, 0xe0, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x6, 0xc9d7, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r2, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r2, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000740)={r2, &(0x7f0000000000), &(0x7f00000000c0)=""/109}, 0x20) syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0x0) lseek(r5, 0x101, 0x0) getdents64(r5, &(0x7f0000000380)=""/99, 0x63) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f0000000980)='sys_enter\x00', r4}, 0x10) sync_file_range(0xffffffffffffffff, 0x80000000, 0xfffffffffffffffd, 0x6) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r6}, 0x4) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r7}, 0x10) mmap$IORING_OFF_SQES(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x2, 0x40010, 0xffffffffffffffff, 0x10000000) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) 1m8.504438747s ago: executing program 1 (id=716): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000005c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) mbind(&(0x7f0000564000/0x2000)=nil, 0x2000, 0x3, &(0x7f0000000000)=0xffff, 0xc, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000) 1m2.005728674s ago: executing program 3 (id=760): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r1, 0x0, 0x30, &(0x7f0000000940)=ANY=[@ANYBLOB="020000000000000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000500000002000000e00000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000064010102000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000e000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002"], 0x310) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r0}, 0x10) mknod$loop(&(0x7f0000000300)='./file0\x00', 0x100000000000600d, 0x1) setxattr$security_capability(0x0, &(0x7f0000000280), 0x0, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="1200000008000000040000000200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000001000"/28], 0x50) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0b00000007000000010001000900000001", @ANYRES8=r0], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) io_setup(0x2007, &(0x7f0000000200)=0x0) r7 = eventfd2(0x0, 0x0) io_submit(r6, 0x2, &(0x7f0000000c80)=[&(0x7f0000000400)={0x0, 0x0, 0x0, 0x2, 0xaa, 0xffffffffffffffff, &(0x7f00000007c0)="69ce1e4524114332c147545b644cbdaf28a5a7c250414603da245c555c88fae7b2df4a39b5bdcc047bff49ea804403e8f1aa6e43ba8ea8149c4a626ef39b3e79c168e3fad76df1bdfde659877a12896a0220b400dff587350301332f86d2776becf024f9b6599be5868ce817715dca6dafaf647b6305a60d63b70c0b9cf751f613c04c7cf2f34ef876c70b81ea5c0dbff1e86177a199ecc13997e5b7e8d2922de9dff3b172", 0xa5, 0x0, 0x0, 0x1, r7}, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x5, 0x9, r5, &(0x7f0000000c00)="73a390c1efbe70ca40b059f25b74343e5b4574e84a67ec1b17d394c3ac3a188babe201a6794337aaf02b052e633222995adabad3924b8873cb70c25b0da008c33372e3a686cbfb879b7f2d18101d404e", 0x50, 0x200, 0x0, 0x3, r7}]) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000500)='page_pool_state_release\x00', r8}, 0x10) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r9, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) bpf$MAP_DELETE_ELEM(0x2, &(0x7f0000000080)={r3, &(0x7f0000000100), 0x20000000}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000100)={r3, &(0x7f0000000380)="4fef91b0bf6d98086df421fd6cda8b2e8018a5ec2b131b189cdd58ba3f619e73d90a741b791b7195cb23f6967c1efa44d52b79a51e7e37e965833002aae305"}, 0x20) openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000cc0)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x5, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0xfffffffd, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r10}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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"], 0x48) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x17, 0x7, &(0x7f0000000600)=ANY=[@ANYRESHEX=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x9, 0x0, 0x0, 0x41000, 0x4c, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f00000002c0)='contention_begin\x00', r11}, 0x18) utimes(&(0x7f0000000280)='./file0\x00', 0x0) 1m1.518203276s ago: executing program 3 (id=762): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000000140), 0x80, r0}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x66, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0xf, 0x0, 0x0, 0x0, 0x0, 0x9, 0x2000, 0x0, 0x0, 0x0, 0x0}, 0x50) 1m1.204038518s ago: executing program 3 (id=769): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000000000100000000000000000850000007d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x52) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000003c0)='kmem_cache_free\x00', r0}, 0x10) r1 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="df320600000004000000080000000800000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000009f910000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) fcntl$setlease(r4, 0x400, 0x0) fsetxattr$trusted_overlay_redirect(r4, &(0x7f0000000040), 0x0, 0x0, 0x0) r5 = socket$l2tp6(0xa, 0x2, 0x73) getsockname$l2tp6(r5, 0x0, &(0x7f00000000c0)) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01000000", @ANYRES32=0x1, @ANYBLOB="00000000000000000000000000000000000000003fc0d72723b0eb168c0a658ad34680fc1edbcb663f093c3daf1f", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r6}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r7, 0xf, 0x0, 0x0, 0x0, 0x0, 0x3f00, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x1c, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002ec0000850000008200000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7020000000000008500000008000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x9d, 0x1, 0x0, 0x0, 0x0, 0x5, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x6006, 0x0, 0x0, 0x3, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r10, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r11}, 0x10) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) sendto$inet(r1, &(0x7f0000001040)="8932ed209b230927", 0x8, 0x6000c804, 0x0, 0x0) 1m1.093088239s ago: executing program 3 (id=773): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000005c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) mbind(&(0x7f0000564000/0x2000)=nil, 0x2000, 0x3, 0x0, 0xc, 0x0) munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000) 1m1.043434649s ago: executing program 3 (id=774): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@nouid32}, {@minixdf}]}, 0x1, 0x504, &(0x7f0000001480)="$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") ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000000)) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000140)={0x15, 0x110, 0xfa00, {0xffffffffffffffff, 0x0, 0x30, 0x30, 0x0, @in6={0x1b, 0x0, 0x0, @empty}, @ib={0x1b, 0x0, 0x0, {"0e000000000000000000000004000001"}}}}, 0x118) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x22a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="020080000000000000000000aa0b000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000640), &(0x7f0000000200), 0xa7c, r1}, 0x38) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000000)={0xffffffffffffffff, 0xe0, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x6, 0xc9d7, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r2, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r2, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000740)={r2, &(0x7f0000000000), &(0x7f00000000c0)=""/109}, 0x20) syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0x0) lseek(r5, 0x101, 0x0) getdents64(r5, &(0x7f0000000380)=""/99, 0x63) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f0000000980)='sys_enter\x00', r4}, 0x10) sync_file_range(0xffffffffffffffff, 0x80000000, 0xfffffffffffffffd, 0x6) r6 = syz_io_uring_setup(0xd2, &(0x7f0000000480)={0x0, 0x0, 0x0, 0xfffffffc}, &(0x7f0000000000), &(0x7f00000001c0)) io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0) 1m0.664333941s ago: executing program 3 (id=779): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000007d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'lo\x00', 0x0}) bind$packet(r2, &(0x7f0000000100)={0x11, 0x0, r3}, 0x14) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/ptype\x00') preadv(r4, &(0x7f0000000180)=[{&(0x7f0000000400)=""/194, 0xc2}], 0x1, 0x37, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000040)=0x0) r6 = perf_event_open(&(0x7f0000000200)={0x0, 0x80, 0x15, 0x9, 0xf, 0xcc, 0x0, 0x8, 0x60, 0xf, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x5, 0x4, @perf_bp={&(0x7f00000001c0), 0x2}, 0x2408, 0x7, 0x6, 0x7, 0x8, 0x8, 0xfff7, 0x0, 0xff, 0x0, 0xffffffffffffffdd}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x6) perf_event_open(&(0x7f0000000140)={0x4, 0x80, 0xbe, 0x8, 0xeb, 0xa, 0x0, 0xffffffffffffffff, 0x20001, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xf74, 0x0, @perf_config_ext={0x5}, 0x4000, 0x8, 0x8, 0x0, 0x1, 0x9fb, 0x7fff, 0x0, 0x4, 0x0, 0x5f}, r5, 0x0, r6, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x11, 0x38}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) 57.827322927s ago: executing program 32 (id=661): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000b80)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000b40)={&(0x7f0000000600)='kfree\x00', r0}, 0x10) r1 = syz_open_dev$evdev(&(0x7f0000000040), 0x3, 0x81f42) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000e00)={&(0x7f0000000980)='sys_exit\x00', r2}, 0x10) r4 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r3}, 0x8) write$cgroup_int(r4, &(0x7f00000001c0)=0x60ff20038000, 0xfffffdef) ioctl$TUNSETOFFLOAD(r4, 0x541b, 0x20004000) syz_usb_disconnect(r1) syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[], 0x0) ioctl$EVIOCGBITSW(r1, 0x40095505, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000000085000000730000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000002c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r7}, 0x10) socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x37, 0x0, 0x20000000) r8 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="0209000002"], 0x10}}, 0x0) syslog(0x2, &(0x7f0000001940)=""/94, 0x5e) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000280)={'wlan0\x00'}) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800}}, {@minixdf}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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") r9 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1334c2, 0x0) pwritev2(r9, &(0x7f00000001c0)=[{&(0x7f0000000080)="ff", 0xfdef}], 0x1, 0xe7b, 0x0, 0x0) 57.821851307s ago: executing program 2 (id=784): bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x2, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x21081e, &(0x7f00000002c0), 0x1, 0x4f2, &(0x7f0000000600)="$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") 55.943849208s ago: executing program 2 (id=786): r0 = socket$packet(0x11, 0x2, 0x300) read(r0, &(0x7f0000000800)=""/203, 0xcb) 55.695523209s ago: executing program 2 (id=787): pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff"], 0x15) r2 = dup(r1) write$P9_RLERRORu(r2, 0x0, 0x53) io_cancel(0x0, 0x0, 0x0) sendmsg$NL80211_CMD_GET_WIPHY(r2, 0x0, 0x40800) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x4, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000080b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b7000000"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r4}, 0x18) getsockopt$inet_tcp_buf(r2, 0x6, 0xe, &(0x7f0000000000)=""/87, &(0x7f0000000100)=0x57) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) 55.360204381s ago: executing program 2 (id=788): syz_io_uring_setup(0x1fe8, &(0x7f0000000480)={0x0, 0x0, 0x1}, &(0x7f0000000000)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r0, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r0, r1, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x16, 0x0, @fd_index=0x9, 0x0, 0x0, 0x0, 0x4}) r2 = socket$kcm(0x21, 0x2, 0x2) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r4 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000340)=@base={0x12, 0x2, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) close(r3) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001540)={{r4, 0xffffffffffffffff}, &(0x7f00000014c0), &(0x7f0000001500)=r3}, 0x20) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000001c0)='mm_page_free\x00', r6}, 0x18) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/kernel/warn_count', 0xa0800, 0x10) r7 = dup(r3) bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x12, 0x29, &(0x7f00000005c0)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, @tail_call={{0x18, 0x2, 0x1, 0x0, r4}}, @initr0={0x18, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x7fff}, @printk={@lld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfffffe00}}, @map_fd={0x18, 0x1, 0x1, 0x0, r5}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3ff}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @map_idx_val={0x18, 0xb, 0x6, 0x0, 0x5, 0x0, 0x0, 0x0, 0xc}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @map_idx_val={0x18, 0x1, 0x6, 0x0, 0x6, 0x0, 0x0, 0x0, 0x6}], &(0x7f0000000440)='GPL\x00', 0x8, 0xcb, &(0x7f0000000740)=""/203, 0x40f00, 0x14, '\x00', 0x0, @fallback=0x25, r7, 0x8, &(0x7f0000000840)={0x7, 0x5}, 0x8, 0x10, &(0x7f0000000880)={0x1, 0x4, 0x401}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000008c0)=[r5, r5], 0x0, 0x10, 0x7, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sendmsg$kcm(r2, &(0x7f0000000080)={&(0x7f0000000140)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x80, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x0) recvmsg(r2, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001700)=""/134, 0x29}, 0x0) syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r8}, 0x10) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) mmap(&(0x7f0000200000/0x400000)=nil, 0x400000, 0xb, 0x2012, 0xffffffffffffffff, 0x0) 55.337121431s ago: executing program 2 (id=789): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@nouid32}, {@minixdf}]}, 0x1, 0x504, &(0x7f0000001480)="$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") ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000000)) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000140)={0x15, 0x110, 0xfa00, {0xffffffffffffffff, 0x0, 0x30, 0x30, 0x0, @in6={0x1b, 0x0, 0x0, @empty}, @ib={0x1b, 0x0, 0x0, {"0e000000000000000000000004000001"}}}}, 0x118) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x22a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="020080000000000000000000aa0b000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000640), &(0x7f0000000200), 0xa7c, r1}, 0x38) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000000)={0xffffffffffffffff, 0xe0, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x6, 0xc9d7, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r2, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r2, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000740)={r2, &(0x7f0000000000), &(0x7f00000000c0)=""/109}, 0x20) syz_mount_image$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0x0) lseek(r5, 0x101, 0x0) getdents64(r5, &(0x7f0000000380)=""/99, 0x63) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f0000000980)='sys_enter\x00', r4}, 0x10) r6 = syz_io_uring_setup(0xd2, &(0x7f0000000480)={0x0, 0x0, 0x0, 0xfffffffc}, &(0x7f0000000000), &(0x7f00000001c0)) io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0) 55.186604572s ago: executing program 2 (id=790): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="a0000000190a01"], 0xa0}}, 0x0) 50.435309658s ago: executing program 33 (id=716): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000005c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) mbind(&(0x7f0000564000/0x2000)=nil, 0x2000, 0x3, &(0x7f0000000000)=0xffff, 0xc, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000) 43.667681926s ago: executing program 34 (id=779): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000007d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'lo\x00', 0x0}) bind$packet(r2, &(0x7f0000000100)={0x11, 0x0, r3}, 0x14) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/ptype\x00') preadv(r4, &(0x7f0000000180)=[{&(0x7f0000000400)=""/194, 0xc2}], 0x1, 0x37, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000040)=0x0) r6 = perf_event_open(&(0x7f0000000200)={0x0, 0x80, 0x15, 0x9, 0xf, 0xcc, 0x0, 0x8, 0x60, 0xf, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x5, 0x4, @perf_bp={&(0x7f00000001c0), 0x2}, 0x2408, 0x7, 0x6, 0x7, 0x8, 0x8, 0xfff7, 0x0, 0xff, 0x0, 0xffffffffffffffdd}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x6) perf_event_open(&(0x7f0000000140)={0x4, 0x80, 0xbe, 0x8, 0xeb, 0xa, 0x0, 0xffffffffffffffff, 0x20001, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xf74, 0x0, @perf_config_ext={0x5}, 0x4000, 0x8, 0x8, 0x0, 0x1, 0x9fb, 0x7fff, 0x0, 0x4, 0x0, 0x5f}, r5, 0x0, r6, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x11, 0x38}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) 40.110793526s ago: executing program 35 (id=790): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="a0000000190a01"], 0xa0}}, 0x0) 3.027334413s ago: executing program 8 (id=2022): r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000001540)=[{&(0x7f0000000740)="48000000140081fb0500ae08060c040002ff0f03900000000000000000006fabca3b4e7d06a6bd7c4703c48f93020000000000461eb886a5e54f8f20b8dd680b6273d4e6b72731404e4e36beaad15d257136de39399419d3be3de6be8718fde04ca46ab929a0c782ddaf4e4c0d9c3775c09621dc7b9161ba22fa83f08bd266304bec13ad6c461f351a50c46e323c7f7c3abcf39ca4cdb98a784e82256989ad18b11e51bec19ec81fba38fcbf08c1e0df23f46261bf1a1818f8b9dbef1a8862469d57e500a1c2433550b790ecf46a39ffcfec1d2a311626d868b7d8e4c8601f2f10dcbe43b446ca8ee7cc6decf6", 0x48}], 0x1, 0x0, 0xe}, 0x8004) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x4, &(0x7f0000000040)=@framed={{0x18, 0x2, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x2}, [@call={0x85, 0x0, 0x0, 0x64}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2a, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="0200000004000000060000000500000000100000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000ff070000000009003ea2644072d283bd020ac8f6b2e3fc3ef542b7a09d97c1b0f320c5ce12e8102767b8240a179b20f42513fa5b000034db281a3d49eea6ca1740f450f4b22dc36b857429d53bd3c6cc30f9a452a42f4421da352e57fdf584e5789441ee2e9a85ff6530f4905214a10380fbfdd19bc626534d6879f3985f8ade63cec0c65f38bf063f3bc0d5dbd1a6bbc9e2b1104ce91a4fcefb340c4f4b208fe747cbfa62638aa789b71713cc442f513334c2838fa62e5316410010abe397042800038b464a8800"/233], 0x48) pipe(&(0x7f0000000100)) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0002001c0000001f000000060001000000000008000500", @ANYRES32=r4, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="0a000100000070"], 0x64}}, 0x0) 2.931363694s ago: executing program 8 (id=2025): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=@framed={{}, [@ringbuf_output={{0x18, 0x2, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x43}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYRES16=r1, @ANYRESOCT, @ANYRESOCT=r1, @ANYRESHEX, @ANYRES8=r1, @ANYRES64=r0, @ANYRES64=r0], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd5bd, @void, @value}, 0x94) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_TOL(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x68, r4, 0x1, 0x70bd2b, 0x25dfdbfe, {{}, {}, {0x4c, 0x18, {0x9, @media='ib\x00'}}}}, 0x68}, 0x1, 0x0, 0x0, 0x40000}, 0x8080) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r2}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r6, &(0x7f0000004cc0)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000040)='G', 0x1}], 0x1, &(0x7f0000000a40)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r5, @ANYBLOB="0000000014"], 0x30, 0x40400d1}}], 0x1, 0x10) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="190000000400000008000000ff"], 0x50) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r9}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r8}, &(0x7f0000000800), &(0x7f0000000840)=r9}, 0x20) readahead(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x11, 0x0, 0x0) splice(r5, 0x0, r7, 0x0, 0x400000, 0x0) 2.913815234s ago: executing program 8 (id=2027): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001800)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101804bc9555e1affd5020000000900010001797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a300000000009000300737975320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x48855}, 0x0) 2.896522494s ago: executing program 8 (id=2028): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000a850000000f000000c50000009e00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r1 = socket(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0xa00000000000000, 0x80, &(0x7f00000000c0)=@broute={'broute\x00', 0x20, 0x1, 0x990, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000e00], 0x0, 0x0, &(0x7f0000000e00)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff010000000b00000000000008200062726964676530000000000000000000766c616e300000000000000000000000736974300000000000000000000000007465716c3000000000000000000000000000000000000000000000000180c20000000000000000000000b8080000b808000030090000616d6f6e670000000000000000000000000000002000000000000000000000002008000000000000140400000c000000000000000a000000000000040000000000000000000000000000080000000000000000000000000000b085da05d603888318a0cce400000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000fdffffffff00000000000000000000e4ff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005000000000000000000000000000000000000000000000000000000000000000000006fb7cd02b734bcce41ef6e95bd000000008000000000000000000000000000000000000000000000000000000000000000eeff3f000000008fc7660c490587b3ab213098a6767c000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001f8f0000000000000000dbd5a834b3ab2a0cc27081310000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000440a05000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000f18a0afe993500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f4f016fa70c1255400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008c7f8f1b44f000000000feffffff00000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000062f75a00627f34dd71012eed00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e0ffffff00000000000000000000000000000000000000000000001b00000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000f200000000000000000000000000000000000000000000000000000000000000fffffff90000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f2573bd04a330000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000ff7f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000cb33322c9c564ae5f8eef74d5aa7cc9c000000000000000000000000000000000000000000000000000000000500000000000000000000000000000000000000003f7f1c00000000000000000000000000000000ecffffffffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000afe96d981b6f119c000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d3d2e85100000000000000000000000000000000000000000000000000844caab24e79bd260000000000000000000000000000000000000000005080000000000000000000000000000000010000a600a9e85725d89818472e65aba21d9bbc1b20e8331c6fd24a5aceaeefe102e42a013ac2c00eeb782c34eab997013e0506220c21a44cc58ff5bc83d5e4066c7700"/2448]}, 0xa08) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x18) (async, rerun: 64) syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x0, &(0x7f0000000c00), 0x1, 0xb80, &(0x7f0000000c40)="$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") (rerun: 64) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.numa_stat\x00', 0x275a, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r2, 0x8004587d, &(0x7f0000000080)) 2.347401637s ago: executing program 5 (id=2040): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = socket$inet_tcp(0x2, 0x1, 0x0) mmap(&(0x7f0000abb000/0x1000)=nil, 0x1000, 0x0, 0x102000200032, 0xffffffffffffffff, 0x80e4b000) setsockopt$sock_timeval(r1, 0x1, 0xd, &(0x7f0000abaff9)={0x77359400}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00'], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = msgget(0x2, 0x801) msgrcv(r3, &(0x7f0000000000)={0x0, ""/33}, 0x29, 0x1, 0x800) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r2}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10) socket(0x2, 0x80805, 0x0) r5 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r6 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r6, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) r7 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r7, 0x10f, 0x87, &(0x7f0000000180)={0x42, 0x0, 0x2}, 0x10) sendmsg$tipc(r7, &(0x7f0000000540)={&(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x4}}, 0x10, 0x0}, 0x10) syz_emit_ethernet(0x42, &(0x7f0000000000)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f, 0x0, @loopback, @multicast1}, "04000000"}}}}}, 0x0) 1.489551982s ago: executing program 5 (id=2050): r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000009f910000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000080000000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) sendto$inet(r0, &(0x7f0000001040)="8932ed209b230927", 0x8, 0x6000c804, 0x0, 0x0) 1.439554292s ago: executing program 5 (id=2051): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) kexec_load(0x0, 0x0, 0x0, 0x0) munmap(&(0x7f0000e29000/0x1000)=nil, 0x1000) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="0000000000000000000000000000000000020000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f00000004c0)={'ip6gre0\x00', 0x0, 0x2f, 0xc, 0x7, 0x400, 0x45, @mcast2, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, 0x1, 0x10, 0x1, 0x1}}) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000008c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="9feb010018000000000000007c0100007c010000050000000c00000000000007000000000000000000000003000000000300000003000000ffffffff0200000003000085800000000700000002000000050000000e00000004000000010000800900000001000000ff070000100000000000001102000000080000000500000005000005040000002c2f241060528007ee0600000000000000050000000f00000005000000000000001000000005000000000000000d00000002000000080000000d0000000100000002000000020000000000000e02000000000000000500000007000084000100000600000003000000008000000000000005000000090000000600000001000000010000000400000002000000810000000e00000003000000040000000000ffff0100000005000000050000000100000007000085370600000000000002000000050000000a00000000000000020000000300000002fffffeff00000002000000040000000100000010000080040000000f0000000e00000005000000020000000a00000003000000"], &(0x7f00000007c0)=""/235, 0x199, 0xeb, 0x1, 0x3, 0x0, @void, @value}, 0x28) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1e0000000b000800070000000500000000010000", @ANYRES32=r0, @ANYBLOB="0d008000"/20, @ANYRES32=r1, @ANYRES32=r2, @ANYBLOB="ff0003000000000000000000010000f5000078b60a90000000000000"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="0b00000007000000d7c900000900000001000000", @ANYRES32, @ANYBLOB="a41fb96600000000000000000900871289b0e0a1", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r5, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r5, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r7}, 0x10) utimes(&(0x7f0000000200)='./control\x00', 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r4}, 0x10) getrandom(0x0, 0x0, 0x4) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, 0x0) pselect6(0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0), 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000900), 0x0, 0x0) munmap(&(0x7f0000694000/0x3000)=nil, 0x3000) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000940)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRESHEX=r5, @ANYRES8=r7], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kmem_cache_free\x00', r8}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file3\x00', 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000180)='./file1/file3\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) 1.404949572s ago: executing program 5 (id=2052): perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x36, 0x1, 0x0, 0x0, 0x0, 0x0, 0x82, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0xc0ed0006, &(0x7f0000000140)={[{@discard}, {@quota}, {@bh}, {@noload}, {@data_err_ignore}, {@usrjquota}]}, 0xfe, 0x452, &(0x7f0000000980)="$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") openat(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x3e, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000800)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 1.299377953s ago: executing program 5 (id=2055): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x62, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60000, @void, @value}, 0x94) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={0x0}}, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x35, 0x0, "317f83735b4bb1eadc74dde27798c831eec04c24eeec7ff3d3137a508003d2d5c89ab0220cefebd4687636457b9822766c1bfea4e01ff23c6a4caeaf049a572a9774d3b882eb3b4a66c5ec48c29f065d"}, 0xd8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', 0xffffffffffffffff, 0x0, 0x7cf7}, 0x18) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f00000000c0)=@gcm_256={{0x303}, '\x00', "5171bb672965593497418688ac68cb126474cd3660dab9e2086e246728d7a040", "05e2e505", "12000700"}, 0x38) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x0, 0x0, @loopback, 0x2}, 0x1c) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000040)) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={&(0x7f00000002c0)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c0000000c000000080000000200200604000000050000009000000002000400ff07000000405f61005f2e2e5f305f00"], &(0x7f0000000580)=""/249, 0x40, 0xf9, 0x1, 0x0, 0x0, @void, @value}, 0x28) socket$netlink(0x10, 0x3, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r1, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="020e0000150000000000000000000000030005000000000002004e24ac1e00010000000000000000030006003c000000020000fc34000000000000000000000001001800000000000800120000000200fcffffff0000000006003300000000000000000000000000fe8000000000000000000000000000aa00000000000000000000000000000000040003"], 0xa8}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$BTRFS_IOC_QUOTA_RESCAN(0xffffffffffffffff, 0x4040942c, &(0x7f0000000080)={0x0, 0x8000000000000001, [0x4, 0x3, 0x10001, 0x5, 0x7, 0x800]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) 477.390147ms ago: executing program 0 (id=2071): socket$kcm(0x10, 0x2, 0x4) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="0200000004000000060000000500000000100000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000ff070000000009003ea2644072d283bd020ac8f6b2e3fc3ef542b7a09d97c1b0f320c5ce12e8102767b8240a179b20f42513fa5b000034db281a3d49eea6ca1740f450f4b22dc36b857429d53bd3c6cc30f9a452a42f4421da352e57fdf584e5789441ee2e9a85ff6530f4905214a10380fbfdd19bc626534d6879f3985f8ade63cec0c65f38bf063f3bc0d5dbd1a6bbc9e2b1104ce91a4fcefb340c4f4b208fe747cbfa62638aa789b71713cc442f513334c2838fa62e5316410010abe397042800038b464a8800"/233], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000013007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) pipe(&(0x7f0000000100)) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0002001c0000001f000000060001000000000008000500", @ANYRES32=r6, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="0a000100000070"], 0x64}}, 0x0) 429.028937ms ago: executing program 7 (id=2072): syz_mount_image$vfat(&(0x7f0000000ec0), &(0x7f0000000180)='./file2\x00', 0x420c, &(0x7f0000003240)=ANY=[], 0xe, 0x35d, &(0x7f00000007c0)="$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") r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = open(&(0x7f00000001c0)='./file2\x00', 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='kmem_cache_free\x00', r2}, 0x10) dup3(r1, r0, 0x0) io_setup(0x2, &(0x7f0000000400)=0x0) io_submit(r3, 0x3f0a, &(0x7f0000000540)=[&(0x7f00000000c0)={0xf04aef, 0x3d8, 0x4, 0x0, 0x0, r0, &(0x7f0000000000), 0x200a00}]) 391.791998ms ago: executing program 5 (id=2074): r0 = io_uring_setup(0x521b, &(0x7f0000000000)={0x0, 0x31d8, 0x200, 0x1, 0x3ae}) io_uring_register$IORING_UNREGISTER_BUFFERS(r0, 0x1, 0x0, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000080)=0x9, 0x12) syz_emit_ethernet(0x56, &(0x7f00000000c0)={@random="8fbc3cb25e2d", @remote, @void, {@canfd={0xd, {{0x1, 0x0, 0x1, 0x1}, 0x4, 0x1, 0x0, 0x0, "5fe761a37a81f3f1b3971a2c3e035ff884ce1ce2b608302596264785e014b6a199f7b0f991c7eb8c5fe59da38409536e462785b87bbc427a218cd47294fc3305"}}}}, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000140)={0x1b, 0x0, 0x0, 0x2cf9, 0x0, 0x1, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x2, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r2 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000200)=@o_path={&(0x7f00000001c0)='./file0\x00', 0x0, 0x8010, r0}, 0x18) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000540)={&(0x7f0000000400)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x60, 0x60, 0x5, [@type_tag={0x4, 0x0, 0x0, 0x12, 0x4}, @enum64={0x3, 0x2, 0x0, 0x13, 0x0, 0x1, [{0xe, 0x5, 0x4}, {0xb, 0x40000, 0x8}]}, @ptr={0xc, 0x0, 0x0, 0x2, 0x2}, @enum64={0x6, 0x2, 0x0, 0x13, 0x0, 0x1c, [{0x1, 0x2, 0x1}, {0x1, 0x0, 0x2}]}]}, {0x0, [0x2e, 0x2e, 0x2e]}}, &(0x7f0000000480)=""/147, 0x7d, 0x93, 0x1, 0x7e, 0x10000, @value}, 0x28) r5 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000600), 0x200040, 0x0) r6 = fsmount(0xffffffffffffffff, 0x0, 0x82) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000006c0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000640), &(0x7f0000000680)}, 0x20) r8 = dup2(r0, r0) pipe2$watch_queue(&(0x7f0000000700)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x15, &(0x7f0000000280)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x200}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@map_val={0x18, 0x8, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0x2}, @ldst={0x3, 0x3, 0x4, 0x7, 0x4, 0x40}, @exit, @map_fd={0x18, 0x4, 0x1, 0x0, r3}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000340)='syzkaller\x00', 0x2, 0x6f, &(0x7f0000000380)=""/111, 0x41000, 0x1b, '\x00', 0x0, @fallback=0x31, r4, 0x8, &(0x7f0000000580)={0x7, 0x2}, 0x8, 0x10, &(0x7f00000005c0)={0x4, 0xc, 0x5, 0xff}, 0x10, 0x0, 0xffffffffffffffff, 0x5, &(0x7f0000000740)=[r5, r6, r7, 0x1, 0x1, r8, 0xffffffffffffffff, 0x1, r9], &(0x7f0000000780)=[{0x3, 0x3, 0x9, 0x7e883eae35762a97}, {0x1, 0x5, 0x5, 0xc}, {0x4, 0x3, 0x10}, {0x2, 0x2, 0xd}, {0x4, 0x2, 0xb, 0x2}], 0x10, 0x2, @void, @value}, 0x94) unshare(0x10000000) fcntl$getown(r0, 0x9) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r8, 0x84, 0x1d, &(0x7f00000008c0)={0x2, [0x0, 0x0]}, &(0x7f0000000900)=0xc) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000b00)={r3, &(0x7f0000000940)="cb71c8a7f42b310d8e2c6be7afda2876f79b1b26606cba8bedcdfa0ec8e360eba7852d3f0ba0945fcb2d0100e76f420f210943e937db829bb255c79a267dc27515bc14c0da587b3566ee712ec98012cafd3fed305811200ca9bc6bc1689c6ad57bd9318cd67af28a268fe11d961d10847c0622b4ac18aca540e1e239f346a2c3ff9e58f3341aeb6447eba162d912285ed44f35a4d09857f20024785f11bfae90270bad4ce2435f4cbf68e9", &(0x7f0000000a00)=""/199}, 0x20) syz_io_uring_setup(0x4ac9, &(0x7f0000000b40)={0x0, 0xe699, 0x2, 0x0, 0x29c, 0x0, r5}, &(0x7f0000000bc0), &(0x7f0000000c00)) r10 = openat$full(0xffffffffffffff9c, &(0x7f0000000c80), 0x0, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000c40), r10) openat$selinux_member(0xffffffffffffff9c, &(0x7f0000000cc0), 0x2, 0x0) pause() ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r10, 0x89f1, &(0x7f0000000d80)={'syztnl2\x00', &(0x7f0000000d00)={'ip6tnl0\x00', 0x0, 0x2f, 0x10, 0x7f, 0x100, 0x10, @dev={0xfe, 0x80, '\x00', 0x39}, @dev={0xfe, 0x80, '\x00', 0x30}, 0x0, 0x700, 0x4, 0xfffffffc}}) r12 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000dc0)={0x2, 0x4, 0x8, 0x1, 0x80, r6, 0x7cd4, '\x00', r11, r9, 0x2, 0x2, 0x2, 0x0, @void, @value, @void, @value}, 0x50) readv(r12, &(0x7f0000001440)=[{&(0x7f0000000e40)=""/57, 0x39}, {&(0x7f0000000e80)=""/159, 0x9f}, {&(0x7f0000000f40)=""/132, 0x84}, {&(0x7f0000001000)=""/78, 0x4e}, {&(0x7f0000001080)}, {&(0x7f00000010c0)=""/137, 0x89}, {&(0x7f0000001180)=""/180, 0xb4}, {&(0x7f0000001240)=""/252, 0xfc}, {&(0x7f0000001340)=""/240, 0xf0}], 0x9) ioctl$TIOCSETD(r10, 0x5423, &(0x7f0000001500)=0x7) getsockname$packet(r9, &(0x7f0000001540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000001580)=0x14) setsockopt$sock_int(r10, 0x1, 0x22, &(0x7f00000015c0)=0x35b, 0x4) syz_open_dev$mouse(&(0x7f0000001600), 0xba2a, 0x2801) 390.454828ms ago: executing program 0 (id=2075): r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000009f910000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) sendto$inet(r0, &(0x7f0000001040)="8932ed209b230927", 0x8, 0x6000c804, 0x0, 0x0) 324.319358ms ago: executing program 0 (id=2077): bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000000)={0xffffffffffffffff, 0xe0, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x6, 0xc9d7, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r0, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB, @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000740)={r0, &(0x7f0000000000), &(0x7f00000000c0)=""/109}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f0000000980)='sys_enter\x00', r2}, 0x10) r3 = syz_io_uring_setup(0xd2, &(0x7f0000000480)={0x0, 0x0, 0x0, 0xfffffffc}, &(0x7f0000000000), &(0x7f00000001c0)) io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) 272.611179ms ago: executing program 0 (id=2078): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000080)={0xa, 0x5, 0x0, 0x0, 0x0, 0x0, 0x2f, 0x0, 0xc0, 0x9, 0x0, 0x5, 0x0, 0xff}, 0xe) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e20, @remote}]}, &(0x7f0000000240)=0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r3}, 0xc) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000140)={r1}, &(0x7f00000002c0)=0x8) 271.859599ms ago: executing program 6 (id=2079): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_int(r1, 0x29, 0x19, &(0x7f0000000000)=0x84, 0xfde1) sendto$inet6(r1, 0x0, 0x0, 0x200c8004, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @mcast2}, 0x1c) sendto$inet6(r1, &(0x7f00000009c0)="c7cfcaaa22e10542fca5c0195350f15147657e0bfc59d383a47190db88690e6fedc3040ab5809ae02a54cd429cc3338c5afa0c9dce3f91950d1f567f358ac21154159130e88cbb6c43197813b2f23f3e442f80877490b393408142ebcfea6821f543e5ee9e27032e2b75d78f1b79f5a6bb6f0645e267770ef7e8f3a92148091217450ce8581e54223eeb6486205a209bf1fe854d211c03f8c3140fc3979d824082990d119473d20e94f253c9621fac339560ae46cb24b88bf2d01559bb658e343257b90f233b81bc5c398be3bbddb23a1e", 0xffd6, 0xc001, 0x0, 0xffffffffffffff0c) sendmsg$inet6(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000ac0)="2f6c62fdf406a1a017d356c35c10e4d1be87033978d275293527325d1cd47e250c86", 0x22}], 0x1}, 0x0) setsockopt$inet6_int(r1, 0x29, 0x19, &(0x7f0000000340)=0xffa4, 0x4) 198.848509ms ago: executing program 8 (id=2080): syz_mount_image$vfat(&(0x7f0000000ec0), &(0x7f0000000180)='./file2\x00', 0x420c, &(0x7f0000003240)=ANY=[], 0xe, 0x35d, &(0x7f00000007c0)="$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") r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = open(&(0x7f00000001c0)='./file2\x00', 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='kmem_cache_free\x00', r2}, 0x10) dup3(r1, r0, 0x0) io_setup(0x2, &(0x7f0000000400)=0x0) io_submit(r3, 0x3f0a, &(0x7f0000000540)=[&(0x7f00000000c0)={0xf04aef, 0x3d8, 0x4, 0x0, 0x0, r0, &(0x7f0000000000), 0x200a00}]) 198.350429ms ago: executing program 0 (id=2081): bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) 198.122809ms ago: executing program 6 (id=2082): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001800)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014"], 0x7c}}, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x35, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101804bc9555e1affd5020000000900010001797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a300000000009000300737975320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x48855}, 0x0) 197.785959ms ago: executing program 0 (id=2083): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = socket$inet_tcp(0x2, 0x1, 0x0) mmap(&(0x7f0000abb000/0x1000)=nil, 0x1000, 0x0, 0x102000200032, 0xffffffffffffffff, 0x80e4b000) setsockopt$sock_timeval(r1, 0x1, 0xd, &(0x7f0000abaff9)={0x77359400}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00'], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = msgget(0x2, 0x801) msgrcv(r3, &(0x7f0000000000)={0x0, ""/33}, 0x29, 0x1, 0x800) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r2}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10) socket(0x2, 0x80805, 0x0) r5 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r6 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r6, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) r7 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r7, 0x10f, 0x87, &(0x7f0000000180)={0x42, 0x0, 0x2}, 0x10) sendmsg$tipc(r7, &(0x7f0000000540)={&(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x4}}, 0x10, 0x0}, 0x10) syz_emit_ethernet(0x42, &(0x7f0000000000)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f, 0x0, @loopback, @multicast1}, "04000000"}}}}}, 0x0) 176.160449ms ago: executing program 7 (id=2084): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000003b810100850000006d0000008500000050"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=@newqdisc={0x45c, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0x2}, {0xffff, 0xffff}, {0x4}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x430, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x9, 0x45, 0x3ff, 0x10000, 0x3, 0x8, 0x4, 0xa0000, 0x5, 0xa0000001, 0x59bc9fd6, 0x2, 0x2, 0x8000, 0x8, 0x4, 0x8, 0x6, 0x114b6000, 0xfffffffe, 0x2a70, 0xffff73cc, 0x81, 0x5, 0x0, 0xa, 0x45, 0x0, 0x8, 0x5, 0xba44, 0x3, 0x60b, 0x80000000, 0x5, 0x4, 0x5, 0x3, 0xffff, 0x3, 0xfffffff8, 0x5, 0x8, 0x1a0055ee, 0x1, 0x1, 0xffff4226, 0x7, 0x0, 0x5, 0x101, 0x4, 0x1, 0x1, 0x800, 0xf9, 0x9, 0x9, 0x2, 0x8, 0x2f, 0xfffffff8, 0x0, 0x101, 0x9, 0x7, 0xc5, 0x4, 0x5, 0x0, 0x5, 0x2, 0x5, 0x5, 0x2, 0x9b58, 0x4, 0xb, 0x4be, 0x6, 0x100, 0xa, 0x1a, 0x9fa7, 0xfffeffff, 0x38, 0x4, 0x0, 0x7, 0x44d, 0x7, 0x200, 0x8, 0x401, 0x7, 0x45, 0x3, 0x9, 0x0, 0x7, 0x6, 0x9, 0x3, 0x7, 0x4, 0x6, 0x7, 0x8002, 0x7, 0x7, 0xa43f, 0xc3c, 0x3, 0x28000000, 0x8, 0x30c7, 0xfad, 0x7, 0x8, 0x0, 0x5, 0x10, 0x400, 0x4, 0x4, 0x422dd3f4, 0x4, 0x8, 0x2, 0x8, 0x10000, 0xea, 0x0, 0x45ba, 0x9, 0x864b, 0x0, 0x7, 0x9, 0x1, 0x7, 0x3, 0x3, 0x800, 0xb, 0xffffff80, 0x43, 0xc22, 0x1, 0x6, 0x9, 0x9, 0x7fffffff, 0x4, 0xfff, 0x6, 0x0, 0x7c1, 0x136, 0x6, 0x5, 0x4, 0x3ff, 0x4, 0xb, 0x2, 0x10001, 0x0, 0x5, 0x4, 0x400, 0x101, 0xffffffff, 0x1b, 0xd589, 0xffffff81, 0x0, 0x4, 0x0, 0x300, 0x8, 0x60000000, 0xd3d, 0x0, 0xfffffffe, 0x0, 0x81, 0x2, 0x55, 0x4000004, 0xbc6, 0x2, 0x8, 0x28a6a52, 0x1ff, 0xb, 0x7fff, 0x9, 0x2e4c20b9, 0xb, 0x4, 0xc, 0x7, 0x4, 0x8, 0x3, 0x6, 0x8, 0x3, 0x7, 0x4, 0x9, 0x8, 0xfffffffa, 0x76e8e800, 0x800, 0x9, 0x6, 0x0, 0xcc6, 0xfffffffb, 0x8000, 0xffffff01, 0x894, 0x7, 0xfb3, 0x6, 0x6, 0x2, 0x6, 0x10001, 0x2, 0x4, 0x8, 0x5d, 0x1000000, 0x7, 0x656, 0x8, 0x80000001, 0x384, 0x9, 0x58a, 0x80000000, 0xe08, 0x0, 0x1, 0x2c821159, 0x0, 0x9, 0x7, 0x0, 0x6, 0x0, 0x7f]}, @TCA_TBF_PARMS={0x28, 0x1, {{0x6, 0x0, 0x2, 0x8, 0x0, 0xc}, {0xff, 0x1, 0x0, 0x5, 0x5e1d, 0x8}, 0x3ff, 0x8, 0x99}}]}}]}, 0x45c}}, 0x8840) 145.916609ms ago: executing program 6 (id=2085): r0 = socket$rxrpc(0x21, 0x2, 0xa) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) getgroups(0x0, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000080)={0x0, r0}, 0x8) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000100)={'syztnl1\x00', &(0x7f0000000340)={'ip_vti0\x00', 0x0, 0x7800, 0x7, 0x0, 0x0, {{0x44, 0x4, 0x3, 0x7, 0x110, 0x64, 0x0, 0x7, 0x2b, 0x0, @broadcast, @empty, {[@timestamp_prespec={0x44, 0x44, 0x9e, 0x3, 0x1, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x1}, {@private=0xa010101, 0x9}, {@empty, 0x2}, {@rand_addr=0x64010100, 0x5}, {@rand_addr=0x64010101, 0x4}, {@dev={0xac, 0x14, 0x14, 0x27}, 0x9}, {@local, 0x4}, {@empty, 0x4}]}, @timestamp_addr={0x44, 0x2c, 0xb7, 0x1, 0x4, [{@remote, 0x2}, {@multicast2, 0x1}, {@private=0xa010102, 0x9}, {@remote, 0x5}, {@remote, 0x2}]}, @cipso={0x86, 0x34, 0x1, [{0x0, 0x7, "40dcb7965b"}, {0x0, 0x12, "c2012db62c2eb28da984a43ce99f2d16"}, {0x5, 0x7, "0c9f508c51"}, {0x7, 0x4, "066a"}, {0x7, 0xa, "d2c3c5b7621e805a"}]}, @timestamp={0x44, 0x24, 0x5f, 0x0, 0x4, [0xc, 0x0, 0x6, 0xa, 0x5, 0x9, 0xcd73, 0x4]}, @timestamp={0x44, 0x24, 0x1c, 0x0, 0x3, [0x9, 0x8, 0x80000001, 0x3, 0x1, 0x4dd7, 0x5, 0x71f63e0e]}, @timestamp={0x44, 0xc, 0x59, 0x0, 0x9, [0x200, 0x0]}, @end]}}}}}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', r1, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='sys_enter\x00', r2}, 0x10) ppoll(0x0, 0x0, &(0x7f0000000000)={0x0, 0x3938700}, 0x0, 0x0) sendto$rxrpc(r0, 0x0, 0x0, 0x800, &(0x7f0000001040)=@in4={0x21, 0x2, 0x2, 0x10, {0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x24) 131.807969ms ago: executing program 7 (id=2086): socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = open(&(0x7f0000000280)='.\x00', 0x0, 0x50) fcntl$notify(r2, 0x402, 0x5) r3 = openat$nci(0xffffffffffffff9c, &(0x7f0000001a40), 0x2, 0x0) splice(r0, &(0x7f0000001a00)=0x9, r3, &(0x7f0000001a80)=0xcfb, 0x3, 0x0) r4 = inotify_init1(0x0) inotify_add_watch(r4, &(0x7f0000002c40)='./file0\x00', 0x100) r5 = open(&(0x7f0000001ac0)='./bus\x00', 0x24c0, 0x26) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r7, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) r8 = dup(r7) write$P9_RLERRORu(r8, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_tos={&(0x7f0000001b40)=0x87, 0xffffffffffffffff, 0x0, 0x0, 0x1}}, 0x20) write$binfmt_elf64(r8, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./bus\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRES64=r2, @ANYRES64=r6, @ANYRESHEX=r8]) unlink(&(0x7f0000000000)='./file0\x00') open(&(0x7f0000000040)='./bus\x00', 0x4e142, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kmem_cache_free\x00', r9}, 0x10) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000400)=@generic={&(0x7f00000003c0)='./file0\x00'}, 0x18) sendmsg$tipc(r1, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4004080}, 0x0) shmget(0x0, 0x1000, 0x210, &(0x7f0000ffc000/0x1000)=nil) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x2150, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r10}, 0x10) sendmsg$tipc(r1, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$inet(r1, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) sendmmsg$inet(r1, &(0x7f0000000400)=[{{&(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10, &(0x7f0000000780)=[{&(0x7f0000000080)="38680b84d75acc4c70a277fa63706866db73ed2742afca6d6427c284645c615b37591742b82484a161a9248aae996ce837719b", 0x33}, {&(0x7f0000000300)="6a6945a2581ff35ce47672f07d96d4a8e6025f2b2320ba246b6b3c5c649428fb63351f841e4632d8d748d6f63d6839ba4a606f6eedb1915b028d17130749014aceee520933b3d5f9c0b0415389b26223c3c6aa53e79036fb805ecfa4451660a20250c4bc320ed4460762819e46815310084568d370eba96e831517acb9da1a507d8dd34b0012e87156ae20b768a83664b8669ef4d4fbef0070c146b0051f01d3f6520459a5befd483f0ab80e36f0872b25f1eca49be78de80ecfa67421fd611d2f7c07da47e43f8a3bde26c512d4022fef8c910bf695c88992b3bda7f72b53be4bba2d659c40c2261f7852208957856cb7", 0xf1}, {&(0x7f0000000500)="e7a45c74025c5a1d239a17c84c40540ae44bef980ee61fbbd059b990091516af441dbc199a76d06fcdeae48f52ae0d41d9949d46385412e3e4fb274f3f59ab2987f6218c71d9da496be9efd8da9fe233bc7ab7d71188fe56", 0x58}, {&(0x7f0000001900)="6630f0d61dffc7c1ee68beb6e81abcf5ecc62f03a8f768417b744c781ec90a905c7bb1b381a378160d5b5673d140581d6a07dce80c4b38fdf77769a1f6689c20073d9c03ad6ec4cb28e69d2f40523ae2496a527e553c9ec2daa27adde55bcb35ffc6fca1268761fb1efd323b05c72ee847a8200400000090684b32417b241d6a8df7fa53787ac559cdb964cbf3cd6114aedb7171d9f9f1d6a9a68a149725edfd72810fe5a338a54a6cab2b321284d9f44236b958fb6a8a4329a5a1d93d8ea404a66d36e14fecbe94ce6bded7517f54", 0xcf}, {&(0x7f0000000580)="2dbd50fd80c93ba72cbc0f054139e2607ac56b2088a24a85926fb069cc4d313bdd689f1af83ea9e0184d0acaf5724cb3baccbf94fceefac9211f08f6304635176448b6ec10d3d13e3883bd43a22dd3aa461f14658834d82f933007f4f8286a1a2822492415af02d0209147d6caffa9de1d91742e4f7b5ede563b96540b3816f5910a6ab69c5740bdbe656757f0c25cbf47f721373eddaaff9f5bc1a6ac9ed37b78070d644cde4cd3dedb810b44b0dcc350853c3c0406ad13c7ff0a26aaf2bda3816dadeb5383e8a932f18c230d747a3b4806bd6a1323bf48f99a88f0e19bcf75922e56a024", 0xe5}, {&(0x7f0000000680)="ae347eef65dbee265b26c8b28cace7b1a9ddb2f106f4929a35d1c7d650ee55314cb13a7912856300531a6ee158835652ba3405104f0f283469ad79411a48528bd81c22138c9014dc8fc5f8d615799d78855e636a6df7c21170eddb93db03517c6868a15c07388c9eead433605a94e8e8ebf25ed7931fbba7f64631fcd7dee2f9e7fbd83e59b18f090efd1e39248570488125b048aac152ae38c25071778f8517ed8d2c1d7f312a029a2df1f89eab27e631df63c875203e649a8edc60c27abbd0c4b230c3d69b2b65876f9dd5eede920a7ad607d5ca906b0928ed", 0xda}, {&(0x7f0000000900)="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", 0x1000}], 0x7, &(0x7f0000000800)=[@ip_tos_u8={{0x11}}, @ip_tos_int={{0x14, 0x0, 0x1, 0xfff}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x44}}, @ip_tos_u8={{0x11}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x5}}, @ip_ttl={{0x14, 0x0, 0x2, 0xffff}}, @ip_tos_u8={{0x11}}], 0xa8}}], 0x1, 0x0) close(r0) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002c80)=ANY=[@ANYBLOB="140000001000010003000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000020900020073797a31000000000900010073797a30000000000800054000000025400100000c0a01010000000000000000070000040900020073797a31000000000900010073797a30000000001401038010011bb7d39e6f7a2b55257bd900800800034000000002030106", @ANYBLOB="a7b6d107fc022658a002a6418146a32bd5ff78914b26db89fad5ce9c19fe626b43f24f0dec46832f4f289086665e7aba9bbb8594f8038aad40cf2fb7ccbf58e4478a730fe99ffe9b63f1de295e3453964957d1861dd09b901d39d1bc6f90e17d666303bceea6249b281e902a4c2840d3f1b06a52e8ba8c5138c6a776c99bf42d74a6fdcb478f719a65316ecb695573b0b5d798f92c81f812a27326c59ae5bf8ec23e898232377e54671bffc2234f81874aa4df9d0a22a4d24fc719f74d1a841e78b25a7e407b808354865e1b04dfd3e95120d07b912de8d9000d7a169882872787391b70998cb75144ced33abf732a67744dc92502d7b6a6fced34fffd6a7439ba7b3a928d6a7b437505ac08d7e5ac7ffbeaed8b5ff86cb19bc9a7471a9cd548307b6caf729b12991dc840ac745c7db691c8cd1b2b47c3df464167fc73b783ca2aa3902f686721ddb66ec9ef368b3e2544dad60b998fa6726187e919a533dd0e78ce52c0e4194b31b8f786b433c0b7e803ced2a83cd0d21a1f0f4b1b33b410ebdbd603cf120ce0af8e38e8059988a0ded2c4826b7beff97e95fdfe6c3d7b605b9c046e9ef80a698041181b99c1fc67ae64dad5723dcea73f2ffbc96850948a75e99d5f687c8a9d754419bdf68e303dfc0b6c74d2f8ea77ab1437e26755b79d3218a857e9d782c91e64c2fbf1105b1ddf13da2a00b3be967bef5ae5e9070edc85dbbfd9968d3565a21e795d692850ad27cd3c1a8f8bafc3e3a45ece7c13924f85a75609e334726812e07e21aeaa24b9806ba6c280ecfe8613b3f4bcc10979bc1ca44559cbd7e16d076dbc2a3a4cc0748c84ad4c57720792b9de93129c17dc91e6dc15e1d30ec0e7467508c86a60485fb20df1609de6c0a345078694a0b3962cfada53dcbeefc0002242af96b179ad6eaba7616bfcd29db9207ebeefb4c5f16ce86946d36b0a7a8b5c6f73275ca09111a9b26e8a8c6f949a87b912d58a2aa27ace126797c419616ad05ebf26159191687c2653f0472308dbd53beb8f8691835db2a30938bb616984dddd83024bbdc8675209b1a2836acf946c918b8796d6cfe9e01e9d5d5c373212fd96ee1d09398996262abb5ce4b93207b56a3770aa84ac6e25d928ba5b0a0c3318690379d35be67ba0a677d19b111c4c68205b94ba31324b40b986165b0ca34fcae2872e7b3534e0306a6e6a5ba38d886af4a2bc28a4c1f92f07be3fdac2ed4a07bf8a9be982c35b8dd0c9a041cb7b7282101c4fe30735918f2e7aa0d338f959c10e473209fd304cbec2a86e0706b29f4764a9ac0969fd78984f3891d364f47a708f47ad253f0317b1c340526dfab1edede4588dcc907ea08a78042e6fa6bbc6527f40c7084be18b7d9ce410d394ec7b8ae0aada59c9a17c43522a22035404b86a0e24f1280e326130762574b4ab5ae819dadbef40c71d24045778509a8ed44fd685ad2549923e7e4ebaf4109a2bdf7141f95f576d9dc3fe7fc48a23d96e57a74cce272effdac2a979924efab34582b7484f4c6bcf8af9199449fd60a81dda3ab12a1b4ca5154e125e1ae387ca19a31e3e25c870368a11babcef4405f8900930a6e3510ce47851e8c76b214eca8a85d0ef658e06af7cd14902e3daacd5b4348d520132cafa07c0b5fc35f0fa8cd1be0c0db5ca093c82b94df1031b7346e973ba0d038ee3f8cade89fc459b8f03daf6ae5803a2e4c502d1eaf3c7a414602de2f862f5adc3ed15ef30ad7bd9a2152f4901cdd814e17a9e78db65d178a3ff93940ebe39765b5406384d23a5be26f5a00d243629fed8b71a7b1bcb7649907f2f36b7578c023890d1d8c7d772e205bf2f295b09e85a374fec0d0c90b651b829fc96afd0011f75e9fe054025d3b5d147e2492de3385daebf8338744c83ca095b1dca5f94cb52972897f24b2246eb81cb78b247cc3cb2b12275ff2e31fb7840befc2ca1b42d42d1a9bf2038e4784c28be2b98be9bde54fc9091e677c2ef267d59d7bd9e3af3df616296f872f07ab575bef2009dadad96ecfb2d53016e834b4c072f2189ef94e4463e7063eab75f6e7617d471ddafafbfb787bac30e90ba857652f025fe6de39e8c67895d5ebabd68e6e0db9f64097f4590ca22a67e5e281bacdb0f890b0f150b1ddeabeb369e0e3f80a9b232dc7267e580c5517ed09c5b36918ae91b7eb47ed72417bb322dde0bc9b68b311c249cb019cec80e72623fdca151ab7af57bda4ab0638331778ba975c6244d167820907adc783f8b7b49924ff5b9264b9ab43b072a86bdf2e568ea71f77fb5b605e43a70ba925f46bcf6a39b9686109fc788cc7962fb4361f34de8260b126b9e6d6e9a1485af6f6dbda0fd6e9c269616d3e48cc20c54d6523a600911e9dac2db8f05ed865eaeec5baf8dbceedb5e93992db2c8c8fa3c014a3fb21c520a1566aa4e5faeb7041ad04f2a1fdafb656707200417c101bba42fd9a38b7ab2084f00d8c11464fbe94e0839d26042956a3e9a1469f2663b4940988ad7a3b34e22a77d9a1c97c0da1e479f97f8dc3aba8185691d6d40df014bde4aa4da7b1638eb396c8197748156639c26e9a526f4831f29e46d297f19497307e4b73e1fdd187fb781f57bc354ee2b2b01fb0cdd5c2119c6b7e225365906d6307f77d89fee5075ea5a3470d1de39e0e1a0390eb0df340277aeeb6e5d713ca84a64370d946885a055b639fbd17126b1b1e7516e83033ade350e024e3d6fb98a6eae75ade273b240e308e043b71ce971ccd70ec787e3d41b45f78d3a23d0401e8746dfa7d1d3a770a7d645e0f9ef7a7a1db1007871ad9492c912924b038cf189aed9f1870f97262424929fde9ff516fd4c351650667ba02f6127bd76fc07435d4ce400abc3dbf70a28309ab116a0fd27456deb8b4626ff9b29d79e230b2ba4215cb70382b03ca8319959dbfa1cef9fb8d3980eb26b369bae3d2a917f055720e3cb25844760e35d69ff0583d232ff5fd93e298a369d47f9c55ac60b008bd8600c09d6ed32abeb9ca2c379eabe989e3f879b82fe4874fb25e200d475b22450b55df89cd266edbca8eb8da8cb0f0a0e8b0b7158d69a4d700ad74cd0acb5d61b228934e25fdc17f9ca5e2c4b8722deb84b32c9f929bf4032696c662ea3947ebe466f2fbfbd77b2f8db53d0fbfd7175948bd27ecd02d54b6d692e80469ecead735176be7ea44e6197b9a6fe678001e61711a1f91b9792847d344dba3a66846a62026bd49f70775a77657bf23db6c3648366f149a8938e68b1b6559ec15e4d79df9a39298fad9da898311501d325fed2c330bef2abe2225caca11038ba5ef3bc1daa43e8ac3b9a2c1d3eebae16eba6e400416eeb04f8e48af54d9b04136f75386d489f72c8012deaec6aa043f5e2a2c165f6a7aca1cfc96c666d210ce0e62a9e99e91dd1405d795face65e4e816be9337bb35284e141f95b71dbd2cffad14b29538192ef2997f67866efc158414c6f0ac5474d8b30ef3c39391290160e70bd7ce48e7cb241d1c8ae91a854c69a9f7472b89f281068cd6d56e6fb5302bb695be2b13dd537b6db963ed00dbfe5b942703fd324025e0fec28519b76efb500b5bd709fa1804f6ec8790637be17569a7d1da154d4ce43e366f85b2e92aa737f77da94a4a2ed382850656110215e2ce3a2583cf459b7ea29081e4b3c2bfb27941f288bc44cde98e433f1ba83d0c6a2d898fee9d31af679fefda115cd4da0136c8ce8ae285e8d52ecb0bcc0810076cb9ec5861535948e0d5e544754ea879478e219eecd6586535faf2380061597067be7db021a3d52bdb6e0f2c8affb5a2489e0017040535e7e780829a1dcb8dbdbd852cd044a882dc0bb795f343e722c4a876442d7486ad1502478629b27d5dbd50a01cd095cbb6c29feb08946c3d373a8283b4cc3c4281697c4e3cfba29ffd188fbcdcb73696dbdae2e0e50290748a75990916e188b615d59e5bdec03221bfaa23a3c239476bcd26b79782d08ac6fa32446f92ffcdce8c4038d005a18f0378262a670f1ec6e1f7720ba3afe9bd2ca3ea1a4cab24fcb8d6a18358e776ab605e22963a795053f9d6545f92f76b76feed08b00095d0361eb3eee96ea7657197a493fddc92ff06b1419a736e57a186d77d79e382aec3f66b06fbd1ebafcfce085ff88679de0ecb1fe2478ff42d1802ca725d0c0dada971fc5803a69f17a1fe6eee6093a7586e67182c14a8270edb3972a54dfef47c805729328a088bda74a21a8126f406906033d3f117df2f342ce0194f7e7b6f12c6ba246d93e695b29e8f2aa32c22a94247f3f787a9a7905dc2b2c05d1a083cd19f5c7eb00acd7c604c98ff709009bdc0179ddd2afe889d4f9253c34ac11b1abfaa079043884ac4b40db9954c369bee56ea1b47b10d56c5b6eb1feeb8a841e0fccd49eabf5aed695d13d6bdf8a245be73af123f08fc82722b7c9062cf4982a186506a5e11db4b4c2a97cee2d0626257e26fe5835b982d2fce2d186ab24bcbf55a3c4940d0152d0864bdc288fd50382da822833bf6759e726d948390b81261d87c56cb0fedcbc5c32338c03fd6dc8a959d8c36b3abbfa3967938fed348ff975c75d350ed00f1437332dad3597a0207eb4cdde3b072235fedd04fb34a83c8a515a57d469c392712c167448e4989b73cf91f346a8f5038f1e5c24d9e34dcebba22c0565d39ef7f2a2a2a7b9e407e0aaf351d2637ef4abbb2637fb433bbb429164deb349e3ae23d361eb7020fa180ab7137eb5565be52d3735359104ae0dfdeca40ba933c9ca13d4b83b1597b0d0748652ea8335425b5a24bc27bed98513391ab5caffc653804975851326d9e500cf2fd44dacdbc2784c972ce1ca55ec92514c20547a02e61d3847822c14d309080dca2db14212e30b2dbc8dcf211da767307ace342a4eb59dd79de85f918f4d1b34e4ceb28c05091543d5ecd3eaa37bd4886ed1065c39afa92951e4afbead0936736cc3a5b7c849287746fab24b9a240c36d94a6af3338eaac440f0fadae5813431a428324609d28e3c91b3fe96a0f009685b4da929130b29306d81997c0ac7ca560930291277e795e879638f563fe338e6cff1bb5644f7a6943478cd821cec4e2b82fb6be1f088f52c16c7a4ba71b5f1ffc0a83fe9589d352397925f1e84aee1d02781c88be8ab44658cda9567419c8270f8546bdf4b20420832eac1f04ed08f14d5f6b743dc990269d34a7f39630e911280dbcfed26dffbfcf9e36dbd64a9b0fb10318ef62f7df6f2a5a2f0dd13bf938d2cdaf985e1bed8ba03525f0c8dfd318b8c6109264d3e4466ffbf9f2997bc42b45efd33b832e627c9f8979550d9d081faaeecf705b56f692bfb4ec68145582ef233c267694cd64b7a48cc458e7329f910b8b3cc9227f3f504ac67c94313f0025a4e2ced9ef607ae4b99c4e78b999e5ed211b4266d944ec72369d41428693e56c4ccd08e5e2047f7a920ac903c8bd684586484bf9a924b19dc93127dc9b7c529d97ddc533f4bb41b66582c3bec9f095064ce529c85924da0c441f4b63802d17d9c7253862e5f87a236072f824f4b497d2c644926cf5e40cbfe2f69e5042c0a132079b3aa01268bbdd6cbbfbaa0337b194925ff9026490b0d32312f74716c72a79d9f1cdac1c0f990cbabe0b8888ee4331adf165e2ec73d18fd762b113892a0374c415660cf79cd88baeb13e6790e988b7189acaa0e7baa33bef6da62eb3d6b22cd1a0366f9ebd2a8b0ae28639a8b4d66f920e4057a4d5803080717ed6235da5a73deedde1b47c4cb93ec0cf859902f25e72901b8f2a80c4b84376daf8a066e26", @ANYRES64=r0], 0x1c4}, 0x1, 0x0, 0x0, 0x4044005}, 0x0) 98.921529ms ago: executing program 7 (id=2087): r0 = inotify_init1(0x0) inotify_add_watch(r0, &(0x7f0000000200)='.\x00', 0x810004b4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000180000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000f0850000002d0000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) close(0x3) 85.869859ms ago: executing program 7 (id=2088): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x6, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0xb7) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000100)='mm_lru_insertion\x00', r0}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000100)='mm_lru_insertion\x00', r1}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r2, &(0x7f0000000180), 0x40010) 69.00085ms ago: executing program 6 (id=2089): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x6, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000200000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0xb7) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000100)='mm_lru_insertion\x00', r1}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r2, &(0x7f0000000180), 0x40010) 68.18573ms ago: executing program 7 (id=2090): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000000180), 0x4) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x200, 0x10441, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffe, 0x0, 0x0, @buffer={0x2, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x7, 0x3, 0x0}) r3 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, r2, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f0000000a80)=ANY=[@ANYBLOB="180000000000002000000000ff000000850000000f000000850000000500000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='netlink_extack\x00', r6}, 0x10) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r5, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r7 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST2(r7, 0x40383d0c, &(0x7f0000000200)={{0x80000002000000, 0x200}, {0x0, 0x7}, 0x40000, 0x7}) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x10, &(0x7f0000000680), 0xfe, 0x244, &(0x7f0000000400)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='devices.list\x00', 0x275a, 0x0) quotactl_fd$Q_QUOTAOFF(r6, 0xffffffff80000302, 0x0, 0x0) sendmsg$kcm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="2e00000010008188e6b62aa73f72cc9f0ba1f848140000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r3, 0x0) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r8, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r9}, 0x10) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000000140)={0x2, 0x4, 0x0, 0x0, @vifc_lcl_addr=@empty, @private=0xa010100}, 0x10) close(r0) 62.81949ms ago: executing program 6 (id=2091): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x6, 0xc9d7, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r0}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f00000002c0)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f0000000980)='sys_enter\x00', r1}, 0x10) r2 = syz_io_uring_setup(0xd2, &(0x7f0000000480)={0x0, 0x0, 0x0, 0xfffffffc}, &(0x7f0000000000), &(0x7f00000001c0)) io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) 53.80072ms ago: executing program 8 (id=2092): syz_mount_image$vfat(&(0x7f0000000ec0), &(0x7f0000000180)='./file2\x00', 0x420c, &(0x7f0000003240)=ANY=[], 0xe, 0x35d, &(0x7f00000007c0)="$eJzs3c1rO0UYwPEnaZImKW1yEEVBOtiLXpY2ehaDtCAELG0jtoKwbTcasiYlG6oRse3Jq3j3JHgovVnwUND+A71404sI3noRPNiDurJvyeatLzFpfr/2+4GSycw8u7OZSXk27WYv3/3yo0rJ0kp6Q6JJJRERkSuRrEQlEPEfo245IWGH8srMnz+/uL5ZTHoVaiW/8WpOKTU3/8PHn6X8bmfTcpF9//KP3O8Xz148f/nvxodlS5UtVa01lK62a7829G3TULtlq6IptWoaumWoctUy6l77d/52zNreXlPp1d3Z9F7dsCylV5uqYjRVo6Ya9abSP9DLVaVpmppNC25SPF5b0/NDBu+MeDAYk3o9r0+JSKqnpXg8kQEBAICJ6s7/o05KP0z+vyVzhcLymnI6t/P/k5fOGzPvnM75+f9Zol/+/9ov3rY68n/ndKKd/9e884PSzfn/13KH/L83I3pchs7/s2MYDIYzn+ipinQ8c/L/tP/+dR29d7LoFsj/AQAAAAAAAAAAAAAAAAAAAAB4GlzZdsa27UzwGPy0LyHwn+NBGjT/0yKSdGbfZv4fsvXNLUm6F+45c2x+sV/cL3qPfodzETHF+Mfu5qyN4Moj5cjKj+aBH3+wX5xyW/IlKTvxsiQZybrrKRRv2ytvFZaXlMePb12mlA7H5yQjz4Tjv3dXpxOf64z395+QlxdC8Zpk5KcdqYkpu25ke/+fLyn15tuFrviU209Efrv3SQEAAAAAYMQ01dL3/F3TBrV73zKSL7kfExmyKBn5u//5/WLf8/NY5oXYpI8eAAAAAIDHwWp+WtElatTdgmn2K6RkYNMICrGOmriI9O2c6KqJX7flqdAR3nY8CfHuYPJ/j+ub4FW9S1TwjxTOwFtN/h1VZLjxBMfv1kRiw09T5FDcBXAYborKLcJj3YOfdypU384LA7dz5B9Iqyb42Cgx4HWW1d7tRK9ZCfGeGjsy3AJ47qtv/xrdG+T1U38FfHJz5yPTsA/kNpPSVXB20dsUH/svHgAAAAD3rp30BzVvhJvDNxIJ3yyHv9wDAAAAAAAAAAAAAAAAAAAAAAAAAAAAADBCY/lKv67CpI8RAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeFL8FwAA//8GuPOT") r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = open(&(0x7f00000001c0)='./file2\x00', 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='kmem_cache_free\x00', r2}, 0x10) dup3(r1, r0, 0x0) io_setup(0x2, &(0x7f0000000400)=0x0) io_submit(r3, 0x3f0a, &(0x7f0000000540)=[&(0x7f00000000c0)={0xf04aef, 0x3d8, 0x4, 0x0, 0x0, r0, &(0x7f0000000000), 0x200a00}]) 0s ago: executing program 6 (id=2093): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000010000000000000000030000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r1 = socket$unix(0x1, 0x5, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000300)={'vxcan1\x00', 0x0}) r5 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r5, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r5, &(0x7f0000000200)={&(0x7f0000000340)={0x1d, r4, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="0100000003ece1e40ad8871461ab0800", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r3, @ANYBLOB="3bf81bb9f9"], 0x20000600}}, 0x0) sendmsg$can_bcm(r5, &(0x7f0000000080)={&(0x7f0000000340)={0x1d, r2, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[], 0x4640}, 0x2}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='kmem_cache_free\x00', r7}, 0x10) openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x2d41, 0x0) link(&(0x7f0000001240)='./file0\x00', &(0x7f0000000bc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') utime(&(0x7f0000000600)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000040)={0x5, 0x4}) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r9}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) r10 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r10, &(0x7f0000000040)={0xa, 0x0, &(0x7f0000000340)={&(0x7f0000000b00)=ANY=[@ANYBLOB="020300000b0000000000000000000000030006000000000002000000e000000100000000000000000200010000001c000000fb18000000000300050000000000020000007f0000010000000000000000010018"], 0x58}, 0x1, 0x7}, 0x0) r11 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000440)={'veth0_virt_wifi\x00', 0x0}) sendmsg$ETHTOOL_MSG_PAUSE_SET(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000080)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r6, @ANYBLOB="0100000010651fbe347b2c2b00000c00018008000100", @ANYRES32=r12], 0x20}}, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000180)='./bus\x00', 0xc008, &(0x7f0000000b40)=ANY=[], 0x41, 0x304, &(0x7f00000001c0)="$eJzs3M9LG1sUwPGTGE2MaLJ4PHjv8fDSXTeD2n0hFIXSQIs1pT+gMJpJGzJNQiYoKaWmq277bzS4dFOE1v4BUuiuq25KN24K3QitTZnMjSaaaIyNUfL9gNzj3Hvm5004E5jZvvvqSSblGCmzKP6QEr9IWXZFom6kLY2LiE98UmtGvIUhrynL5bHvn/5XIhKLx2fnlZqLLVyZUUpNTL5debZ2abM4dmd9YiMoW9GH299mvmz9vfXP9q+Fx2lHpR2VzRWVqRZzn4vmom2pZNrJGErdsi3TsVQ661gFrz9X1JuVfL6kzGxyPJwvWI6jzGxJZaySKuZUsVBS5iMznVWGYajxsAyOnclakz9pXqIyP2/GutzoUpd5+OM2j+wtFOofnvfV5p5EpXf7BAAAzqt6/R9srP93mut/n279jfW/VpayW//fvnf/Rgf1/8ZIm/o/d6j+1/cX0tSfsnPU/90KHV6UqAx1X//jgiiMilTWRH+iV0RePFibqk0I6n8AAAAAAAAAAAAAAAAAAAAAAC6CnWo1Uq1WI27rFy92/4L6gZH6//3eT/RG4/X3rnXAvepc/wHR8OBeSMR+uZxYTnit1x9LSVpssWRKIvKzNh80L567Hp/1qZqovLNXdf7qcmKoMf+DTEtEoq3zp7181Zw/LOGG7buzUv5qnT/TIr/+9OLe/hsSkY9LkhNbkrV5vZ//fFqpazfjB7Y/KskWT8wBAAAAAHARGWpPy/t3w2jX7+V38vvAVMv7+4D8G+jvsQMAAAAAMCic0tOMadtW4djgtc44dvBXPbDjNZ82GO7gKEInXPObWuBrt+bQiU5dD4L6O5mPHDyqBzV16Z9nVvu4890Gk6dJj3Y7IQPupG9YEm47eGKo1Qk/KgjqtzK7S3arB8ZcXf/vR/9OeNPXhM93Bt9FAAAAAHprv+jv954AAAAAAAAAAAAAAAAAAAAAAAAAAAAAADC4zuJ1Yv0+RgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOC8+B0AAP//Nu8Unw==") r13 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r13) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000500)) kernel console output (not intermixed with test programs): connect device [ 108.696358][ T6439] dccp_close: ABORT with 72 bytes unread [ 108.708375][ T6457] loop5: detected capacity change from 0 to 128 [ 108.715818][ T5658] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.740656][ T6457] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 108.755131][ T6457] ext4 filesystem being mounted at /80/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 108.792082][ T6470] FAULT_INJECTION: forcing a failure. [ 108.792082][ T6470] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 108.796974][ T6457] netlink: 'syz.5.1068': attribute type 10 has an invalid length. [ 108.805282][ T6470] CPU: 0 UID: 0 PID: 6470 Comm: syz.6.1072 Not tainted 6.12.0-syzkaller-00971-g158f238aa69d #0 [ 108.823431][ T6470] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 108.833515][ T6470] Call Trace: [ 108.835930][ T6475] loop7: detected capacity change from 0 to 512 [ 108.836792][ T6470] [ 108.836804][ T6470] dump_stack_lvl+0xf2/0x150 [ 108.850570][ T6470] dump_stack+0x15/0x20 [ 108.854736][ T6470] should_fail_ex+0x223/0x230 [ 108.859506][ T6470] should_fail+0xb/0x10 [ 108.863687][ T6470] should_fail_usercopy+0x1a/0x20 [ 108.868732][ T6470] strncpy_from_user+0x25/0x210 [ 108.873616][ T6470] ? kmem_cache_alloc_noprof+0x10c/0x290 [ 108.879296][ T6470] getname_flags+0xb0/0x3b0 [ 108.883818][ T6470] user_path_at+0x26/0x120 [ 108.888308][ T6470] __se_sys_fspick+0x9f/0x260 [ 108.892999][ T6470] __x64_sys_fspick+0x43/0x50 [ 108.897691][ T6470] x64_sys_call+0x2806/0x2dc0 [ 108.902388][ T6470] do_syscall_64+0xc9/0x1c0 [ 108.906903][ T6470] ? clear_bhb_loop+0x55/0xb0 [ 108.911597][ T6470] ? clear_bhb_loop+0x55/0xb0 [ 108.916333][ T6470] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 108.922243][ T6470] RIP: 0033:0x7f517630e759 [ 108.926728][ T6470] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 108.946411][ T6470] RSP: 002b:00007f5174f81038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b1 [ 108.954833][ T6470] RAX: ffffffffffffffda RBX: 00007f51764c5f80 RCX: 00007f517630e759 [ 108.962808][ T6470] RDX: 0000000000000000 RSI: 0000000020009280 RDI: ffffffffffffff9c [ 108.970805][ T6470] RBP: 00007f5174f81090 R08: 0000000000000000 R09: 0000000000000000 [ 108.978855][ T6470] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 108.986834][ T6470] R13: 0000000000000000 R14: 00007f51764c5f80 R15: 00007ffe5affbdf8 [ 108.994817][ T6470] [ 109.010208][ T6478] pimreg: entered allmulticast mode [ 109.018623][ T6457] pimreg: left allmulticast mode [ 109.025026][ T6481] loop6: detected capacity change from 0 to 512 [ 109.026973][ T6475] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 109.043950][ T6481] EXT4-fs (loop6): feature flags set on rev 0 fs, running e2fsck is recommended [ 109.054225][ T6475] ext4 filesystem being mounted at /32/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 109.068018][ T6481] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 109.081741][ T6481] EXT4-fs error (device loop6): ext4_do_update_inode:5153: inode #2: comm syz.6.1076: corrupted inode contents [ 109.095676][ T6481] EXT4-fs error (device loop6): ext4_dirty_inode:6041: inode #2: comm syz.6.1076: mark_inode_dirty error [ 109.110525][ T5662] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.123287][ T6481] EXT4-fs error (device loop6): ext4_do_update_inode:5153: inode #2: comm syz.6.1076: corrupted inode contents [ 109.136997][ T5620] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 109.158494][ T5658] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.188892][ T6491] loop8: detected capacity change from 0 to 2048 [ 109.219003][ T6491] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 109.280550][ T6508] loop6: detected capacity change from 0 to 8192 [ 109.300018][ T6490] dccp_close: ABORT with 40 bytes unread [ 109.319753][ T6512] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1087'. [ 109.375138][ T6518] loop5: detected capacity change from 0 to 512 [ 109.383204][ T5750] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.406823][ T6518] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 109.445850][ T6518] ext4 filesystem being mounted at /85/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 109.492045][ T5620] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.533136][ T6538] loop8: detected capacity change from 0 to 2048 [ 109.566927][ T6541] FAULT_INJECTION: forcing a failure. [ 109.566927][ T6541] name fail_futex, interval 1, probability 0, space 0, times 1 [ 109.579871][ T6541] CPU: 0 UID: 0 PID: 6541 Comm: syz.0.1093 Not tainted 6.12.0-syzkaller-00971-g158f238aa69d #0 [ 109.590242][ T6541] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 109.600303][ T6541] Call Trace: [ 109.603602][ T6541] [ 109.606636][ T6541] dump_stack_lvl+0xf2/0x150 [ 109.611257][ T6541] dump_stack+0x15/0x20 [ 109.615416][ T6541] should_fail_ex+0x223/0x230 [ 109.620115][ T6541] should_fail+0xb/0x10 [ 109.624297][ T6541] get_futex_key+0x135/0x720 [ 109.628965][ T6541] ? _parse_integer+0x27/0x30 [ 109.633813][ T6541] futex_requeue+0x14f/0xea0 [ 109.638416][ T6541] do_futex+0x304/0x370 [ 109.642675][ T6541] __se_sys_futex+0x25d/0x3a0 [ 109.647525][ T6541] ? fput+0x1c4/0x200 [ 109.651520][ T6541] __x64_sys_futex+0x78/0x90 [ 109.656155][ T6541] x64_sys_call+0x2d6a/0x2dc0 [ 109.660843][ T6541] do_syscall_64+0xc9/0x1c0 [ 109.665351][ T6541] ? clear_bhb_loop+0x55/0xb0 [ 109.670120][ T6541] ? clear_bhb_loop+0x55/0xb0 [ 109.674951][ T6541] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 109.681076][ T6541] RIP: 0033:0x7fe83100e759 [ 109.685494][ T6541] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 109.705116][ T6541] RSP: 002b:00007fe82fc3f038 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 109.713687][ T6541] RAX: ffffffffffffffda RBX: 00007fe8311c6130 RCX: 00007fe83100e759 [ 109.721840][ T6541] RDX: 0000000000000801 RSI: 0000000000000003 RDI: 000000002000cffc [ 109.729818][ T6541] RBP: 00007fe82fc3f090 R08: 0000000020000040 R09: 0000000000000000 [ 109.737795][ T6541] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 109.745780][ T6541] R13: 0000000000000001 R14: 00007fe8311c6130 R15: 00007ffd50167508 [ 109.753770][ T6541] [ 109.766055][ T6538] loop8: p3 p4 < > [ 109.770000][ T6538] loop8: p3 start 4284289 is beyond EOD, truncated [ 109.860798][ T6555] FAULT_INJECTION: forcing a failure. [ 109.860798][ T6555] name failslab, interval 1, probability 0, space 0, times 0 [ 109.873584][ T6555] CPU: 0 UID: 0 PID: 6555 Comm: syz.8.1102 Not tainted 6.12.0-syzkaller-00971-g158f238aa69d #0 [ 109.883929][ T6555] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 109.894048][ T6555] Call Trace: [ 109.897341][ T6555] [ 109.900288][ T6555] dump_stack_lvl+0xf2/0x150 [ 109.904962][ T6555] dump_stack+0x15/0x20 [ 109.909129][ T6555] should_fail_ex+0x223/0x230 [ 109.913828][ T6555] ? set_task_ioprio+0x16a/0x260 [ 109.918842][ T6555] should_failslab+0x8f/0xb0 [ 109.923448][ T6555] kmem_cache_alloc_node_noprof+0x51/0x2b0 [ 109.929358][ T6555] set_task_ioprio+0x16a/0x260 [ 109.934140][ T6555] __se_sys_ioprio_set+0x30d/0x580 [ 109.939304][ T6555] __x64_sys_ioprio_set+0x43/0x50 [ 109.944419][ T6555] x64_sys_call+0x26e4/0x2dc0 [ 109.949112][ T6555] do_syscall_64+0xc9/0x1c0 [ 109.953621][ T6555] ? clear_bhb_loop+0x55/0xb0 [ 109.958338][ T6555] ? clear_bhb_loop+0x55/0xb0 [ 109.963035][ T6555] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 109.968946][ T6555] RIP: 0033:0x7f5df6b1e759 [ 109.973438][ T6555] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 109.993055][ T6555] RSP: 002b:00007f5df5797038 EFLAGS: 00000246 ORIG_RAX: 00000000000000fb [ 110.001477][ T6555] RAX: ffffffffffffffda RBX: 00007f5df6cd5f80 RCX: 00007f5df6b1e759 [ 110.009474][ T6555] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 110.017447][ T6555] RBP: 00007f5df5797090 R08: 0000000000000000 R09: 0000000000000000 [ 110.025506][ T6555] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 110.033491][ T6555] R13: 0000000000000000 R14: 00007f5df6cd5f80 R15: 00007ffd6982ece8 [ 110.041473][ T6555] [ 110.107706][ T6545] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1096'. [ 110.135266][ T6563] loop8: detected capacity change from 0 to 512 [ 110.164225][ T6565] loop5: detected capacity change from 0 to 164 [ 110.173357][ T6563] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 110.187518][ T6565] Unable to read rock-ridge attributes [ 110.193418][ T6565] Unable to read rock-ridge attributes [ 110.206874][ T6565] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 110.216593][ T6563] ext4 filesystem being mounted at /44/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 110.291224][ T5750] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.449941][ T6588] hub 9-0:1.0: USB hub found [ 110.454746][ T6588] hub 9-0:1.0: 8 ports detected [ 110.504074][ T6590] netlink: 88 bytes leftover after parsing attributes in process `syz.5.1117'. [ 110.550484][ T6595] loop8: detected capacity change from 0 to 2048 [ 110.574512][ T6599] loop6: detected capacity change from 0 to 512 [ 110.608417][ T6595] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 110.625182][ T6603] FAULT_INJECTION: forcing a failure. [ 110.625182][ T6603] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 110.638275][ T6603] CPU: 1 UID: 0 PID: 6603 Comm: syz.5.1122 Not tainted 6.12.0-syzkaller-00971-g158f238aa69d #0 [ 110.648619][ T6603] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 110.658681][ T6603] Call Trace: [ 110.661967][ T6603] [ 110.664904][ T6603] dump_stack_lvl+0xf2/0x150 [ 110.669571][ T6603] dump_stack+0x15/0x20 [ 110.673736][ T6603] should_fail_ex+0x223/0x230 [ 110.678437][ T6603] should_fail+0xb/0x10 [ 110.682650][ T6603] should_fail_usercopy+0x1a/0x20 [ 110.687749][ T6603] _copy_from_user+0x1e/0xb0 [ 110.692512][ T6603] do_ip6t_set_ctl+0x42c/0x8c0 [ 110.697384][ T6603] ? kstrtouint+0x77/0xc0 [ 110.701857][ T6603] nf_setsockopt+0x195/0x1b0 [ 110.706533][ T6603] ipv6_setsockopt+0x10f/0x130 [ 110.711366][ T6603] tcp_setsockopt+0x93/0xb0 [ 110.715881][ T6603] sock_common_setsockopt+0x64/0x80 [ 110.721109][ T6603] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 110.727079][ T6603] __sys_setsockopt+0x187/0x200 [ 110.731948][ T6603] __x64_sys_setsockopt+0x66/0x80 [ 110.736999][ T6603] x64_sys_call+0x282e/0x2dc0 [ 110.741696][ T6603] do_syscall_64+0xc9/0x1c0 [ 110.746271][ T6603] ? clear_bhb_loop+0x55/0xb0 [ 110.751094][ T6603] ? clear_bhb_loop+0x55/0xb0 [ 110.755789][ T6603] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 110.761730][ T6603] RIP: 0033:0x7fc5ba3de759 [ 110.766151][ T6603] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 110.785871][ T6603] RSP: 002b:00007fc5b9051038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 110.794370][ T6603] RAX: ffffffffffffffda RBX: 00007fc5ba595f80 RCX: 00007fc5ba3de759 [ 110.802385][ T6603] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000003 [ 110.810470][ T6603] RBP: 00007fc5b9051090 R08: 0000000000000520 R09: 0000000000000000 [ 110.818448][ T6603] R10: 0000000020000c80 R11: 0000000000000246 R12: 0000000000000001 [ 110.826422][ T6603] R13: 0000000000000000 R14: 00007fc5ba595f80 R15: 00007ffe4f9d2458 [ 110.834401][ T6603] [ 110.898742][ T6599] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 110.911521][ T6599] ext4 filesystem being mounted at /77/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 110.941684][ T5658] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.967027][ T5750] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.983572][ T29] kauditd_printk_skb: 333 callbacks suppressed [ 110.983590][ T29] audit: type=1326 audit(1732057425.499:4284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6608 comm="syz.0.1123" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe83100e759 code=0x7ffc0000 [ 111.014127][ T6609] FAULT_INJECTION: forcing a failure. [ 111.014127][ T6609] name failslab, interval 1, probability 0, space 0, times 0 [ 111.026838][ T6609] CPU: 0 UID: 0 PID: 6609 Comm: syz.0.1123 Not tainted 6.12.0-syzkaller-00971-g158f238aa69d #0 [ 111.037227][ T6609] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 111.047304][ T6609] Call Trace: [ 111.050656][ T6609] [ 111.053598][ T6609] dump_stack_lvl+0xf2/0x150 [ 111.058206][ T6609] dump_stack+0x15/0x20 [ 111.062510][ T6609] should_fail_ex+0x223/0x230 [ 111.067360][ T6609] ? __alloc_skb+0x10b/0x310 [ 111.071997][ T6609] should_failslab+0x8f/0xb0 [ 111.076599][ T6609] kmem_cache_alloc_node_noprof+0x51/0x2b0 [ 111.082544][ T6609] __alloc_skb+0x10b/0x310 [ 111.087153][ T6609] audit_log_start+0x368/0x6b0 [ 111.091943][ T6609] audit_seccomp+0x4b/0x130 [ 111.096470][ T6609] __seccomp_filter+0x6fa/0x1180 [ 111.101533][ T6609] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 111.107221][ T6609] ? vfs_write+0x596/0x920 [ 111.111662][ T6609] ? putname+0xcf/0xf0 [ 111.115779][ T6609] __secure_computing+0x9f/0x1c0 [ 111.120737][ T6609] syscall_trace_enter+0xd1/0x1f0 [ 111.125783][ T6609] ? fpregs_assert_state_consistent+0x83/0xa0 [ 111.132006][ T6609] do_syscall_64+0xaa/0x1c0 [ 111.136612][ T6609] ? clear_bhb_loop+0x55/0xb0 [ 111.141343][ T6609] ? clear_bhb_loop+0x55/0xb0 [ 111.146043][ T6609] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 111.151979][ T6609] RIP: 0033:0x7fe83100e759 [ 111.156405][ T6609] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 111.176092][ T6609] RSP: 002b:00007fe82fc81038 EFLAGS: 00000246 ORIG_RAX: 0000000000000048 [ 111.184540][ T6609] RAX: ffffffffffffffda RBX: 00007fe8311c5f80 RCX: 00007fe83100e759 [ 111.192593][ T6609] RDX: 0000000000000029 RSI: 0000000000000402 RDI: 0000000000000006 [ 111.200572][ T6609] RBP: 00007fe82fc81090 R08: 0000000000000000 R09: 0000000000000000 [ 111.208550][ T6609] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 111.216532][ T6609] R13: 0000000000000000 R14: 00007fe8311c5f80 R15: 00007ffd50167508 [ 111.224538][ T6609] [ 111.227709][ T6609] audit: audit_lost=7 audit_rate_limit=0 audit_backlog_limit=64 [ 111.235361][ T6609] audit: out of memory in audit_log_start [ 111.241703][ T29] audit: type=1326 audit(1732057425.499:4285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6608 comm="syz.0.1123" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe83100e759 code=0x7ffc0000 [ 111.265169][ T29] audit: type=1326 audit(1732057425.539:4286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6608 comm="syz.0.1123" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fe83100e759 code=0x7ffc0000 [ 111.288656][ T29] audit: type=1326 audit(1732057425.539:4287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6608 comm="syz.0.1123" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe83100e759 code=0x7ffc0000 [ 111.312198][ T29] audit: type=1326 audit(1732057425.539:4288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6608 comm="syz.0.1123" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe83100e759 code=0x7ffc0000 [ 111.335702][ T29] audit: type=1326 audit(1732057425.539:4289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6608 comm="syz.0.1123" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fe83100d0f0 code=0x7ffc0000 [ 111.359169][ T29] audit: type=1326 audit(1732057425.539:4290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6608 comm="syz.0.1123" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fe83100d23f code=0x7ffc0000 [ 111.382558][ T29] audit: type=1400 audit(1732057425.829:4291): avc: denied { read } for pid=6612 comm="syz.5.1127" path="socket:[16051]" dev="sockfs" ino=16051 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 111.385516][ T6614] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1127'. [ 111.569432][ T6635] hub 9-0:1.0: USB hub found [ 111.574207][ T6635] hub 9-0:1.0: 8 ports detected [ 111.681636][ T6645] loop8: detected capacity change from 0 to 1024 [ 111.690362][ T6645] EXT4-fs (loop8): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 111.701729][ T6645] JBD2: no valid journal superblock found [ 111.707600][ T6645] EXT4-fs (loop8): Could not load journal inode [ 111.860517][ T6660] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1146'. [ 111.932558][ T6666] loop8: detected capacity change from 0 to 512 [ 111.935672][ T6660] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1146'. [ 111.958332][ T6666] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 111.972263][ T6666] ext4 filesystem being mounted at /55/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 112.006914][ T5750] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.043380][ T6672] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1151'. [ 112.060782][ T6672] FAULT_INJECTION: forcing a failure. [ 112.060782][ T6672] name failslab, interval 1, probability 0, space 0, times 0 [ 112.073441][ T6672] CPU: 1 UID: 0 PID: 6672 Comm: syz.8.1151 Not tainted 6.12.0-syzkaller-00971-g158f238aa69d #0 [ 112.083863][ T6672] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 112.093931][ T6672] Call Trace: [ 112.097251][ T6672] [ 112.100183][ T6672] dump_stack_lvl+0xf2/0x150 [ 112.104784][ T6672] dump_stack+0x15/0x20 [ 112.108943][ T6672] should_fail_ex+0x223/0x230 [ 112.113636][ T6672] ? __alloc_skb+0x10b/0x310 [ 112.118244][ T6672] should_failslab+0x8f/0xb0 [ 112.122846][ T6672] kmem_cache_alloc_node_noprof+0x51/0x2b0 [ 112.128798][ T6672] __alloc_skb+0x10b/0x310 [ 112.133304][ T6672] netlink_alloc_large_skb+0xad/0xe0 [ 112.138712][ T6672] netlink_sendmsg+0x3b4/0x6e0 [ 112.143504][ T6672] ? __pfx_netlink_sendmsg+0x10/0x10 [ 112.148980][ T6672] __sock_sendmsg+0x140/0x180 [ 112.153744][ T6672] ____sys_sendmsg+0x312/0x410 [ 112.158526][ T6672] __sys_sendmsg+0x19d/0x230 [ 112.163474][ T6672] __x64_sys_sendmsg+0x46/0x50 [ 112.168326][ T6672] x64_sys_call+0x2734/0x2dc0 [ 112.173039][ T6672] do_syscall_64+0xc9/0x1c0 [ 112.177545][ T6672] ? clear_bhb_loop+0x55/0xb0 [ 112.182274][ T6672] ? clear_bhb_loop+0x55/0xb0 [ 112.187094][ T6672] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 112.193001][ T6672] RIP: 0033:0x7f5df6b1e759 [ 112.197485][ T6672] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 112.217255][ T6672] RSP: 002b:00007f5df5797038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 112.225681][ T6672] RAX: ffffffffffffffda RBX: 00007f5df6cd5f80 RCX: 00007f5df6b1e759 [ 112.233765][ T6672] RDX: 0000000000000000 RSI: 0000000020000280 RDI: 0000000000000006 [ 112.241812][ T6672] RBP: 00007f5df5797090 R08: 0000000000000000 R09: 0000000000000000 [ 112.249787][ T6672] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 112.257804][ T6672] R13: 0000000000000000 R14: 00007f5df6cd5f80 R15: 00007ffd6982ece8 [ 112.265789][ T6672] [ 112.336698][ T6676] netlink: 40 bytes leftover after parsing attributes in process `syz.8.1153'. [ 112.423493][ T6680] sctp: [Deprecated]: syz.0.1154 (pid 6680) Use of struct sctp_assoc_value in delayed_ack socket option. [ 112.423493][ T6680] Use struct sctp_sack_info instead [ 112.788081][ T6682] bridge0: port 3(erspan0) entered blocking state [ 112.794566][ T6682] bridge0: port 3(erspan0) entered disabled state [ 112.833439][ T6682] erspan0: entered allmulticast mode [ 112.852667][ T6682] erspan0: entered promiscuous mode [ 112.876585][ T6689] IPVS: set_ctl: invalid protocol: 94 255.255.255.255:20000 [ 112.904487][ T6682] bridge0: port 3(erspan0) entered blocking state [ 112.910997][ T6682] bridge0: port 3(erspan0) entered forwarding state [ 113.064194][ T3392] usb 15-1: enqueue for inactive port 0 [ 113.069146][ T6698] loop7: detected capacity change from 0 to 512 [ 113.069817][ T3392] usb 15-1: enqueue for inactive port 0 [ 113.099335][ T6698] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 113.120795][ T6698] ext4 filesystem being mounted at /39/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 113.151421][ T3392] vhci_hcd: vhci_device speed not set [ 113.161616][ T5662] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 113.255075][ T6707] loop8: detected capacity change from 0 to 764 [ 113.282172][ T6705] netlink: 'syz.0.1163': attribute type 10 has an invalid length. [ 113.294007][ T6705] hsr_slave_0: left promiscuous mode [ 113.299978][ T6705] hsr_slave_1: left promiscuous mode [ 113.325760][ T6707] netlink: 'syz.8.1164': attribute type 10 has an invalid length. [ 113.337028][ T6707] hsr_slave_0: left promiscuous mode [ 113.347375][ T6707] hsr_slave_1: left promiscuous mode [ 113.408606][ T6717] hub 9-0:1.0: USB hub found [ 113.416359][ T6719] loop7: detected capacity change from 0 to 128 [ 113.420543][ T6717] hub 9-0:1.0: 8 ports detected [ 113.428929][ T6707] FAULT_INJECTION: forcing a failure. [ 113.428929][ T6707] name failslab, interval 1, probability 0, space 0, times 0 [ 113.441701][ T6707] CPU: 0 UID: 0 PID: 6707 Comm: syz.8.1164 Not tainted 6.12.0-syzkaller-00971-g158f238aa69d #0 [ 113.452162][ T6707] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 113.462266][ T6707] Call Trace: [ 113.465621][ T6707] [ 113.468694][ T6707] dump_stack_lvl+0xf2/0x150 [ 113.473296][ T6707] dump_stack+0x15/0x20 [ 113.477525][ T6707] should_fail_ex+0x223/0x230 [ 113.482288][ T6707] ? audit_log_start+0x34c/0x6b0 [ 113.487241][ T6707] should_failslab+0x8f/0xb0 [ 113.491882][ T6707] kmem_cache_alloc_noprof+0x4c/0x290 [ 113.497432][ T6707] audit_log_start+0x34c/0x6b0 [ 113.502242][ T6707] audit_seccomp+0x4b/0x130 [ 113.506822][ T6707] __seccomp_filter+0x6fa/0x1180 [ 113.511820][ T6707] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 113.517462][ T6707] ? vfs_write+0x596/0x920 [ 113.521923][ T6707] __secure_computing+0x9f/0x1c0 [ 113.526899][ T6707] syscall_trace_enter+0xd1/0x1f0 [ 113.532002][ T6707] ? fpregs_assert_state_consistent+0x83/0xa0 [ 113.538128][ T6707] do_syscall_64+0xaa/0x1c0 [ 113.542658][ T6707] ? clear_bhb_loop+0x55/0xb0 [ 113.547423][ T6707] ? clear_bhb_loop+0x55/0xb0 [ 113.552117][ T6707] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 113.558051][ T6707] RIP: 0033:0x7f5df6b1e759 [ 113.562473][ T6707] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 113.582093][ T6707] RSP: 002b:00007f5df5797038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 113.590594][ T6707] RAX: ffffffffffffffda RBX: 00007f5df6cd5f80 RCX: 00007f5df6b1e759 [ 113.598581][ T6707] RDX: 0000000000000002 RSI: 0000000020005a40 RDI: 0000000000000005 [ 113.606741][ T6707] RBP: 00007f5df5797090 R08: 0000000000000000 R09: 0000000000000000 [ 113.614713][ T6707] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 113.622766][ T6707] R13: 0000000000000000 R14: 00007f5df6cd5f80 R15: 00007ffd6982ece8 [ 113.630746][ T6707] [ 113.666670][ T6719] FAT-fs (loop7): error, invalid access to FAT (entry 0x00000100) [ 113.674572][ T6719] FAT-fs (loop7): Filesystem has been set read-only [ 113.700436][ T6719] syz.7.1169: attempt to access beyond end of device [ 113.700436][ T6719] loop7: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 113.754888][ T6719] FAT-fs (loop7): error, invalid access to FAT (entry 0x00000100) [ 113.762827][ T6719] FAT-fs (loop7): error, invalid access to FAT (entry 0x00000100) [ 113.790482][ T6726] netlink: 'syz.8.1172': attribute type 4 has an invalid length. [ 113.807704][ T6719] syz.7.1169: attempt to access beyond end of device [ 113.807704][ T6719] loop7: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 113.825755][ T6719] syz.7.1169: attempt to access beyond end of device [ 113.825755][ T6719] loop7: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 113.866648][ T6726] loop8: detected capacity change from 0 to 512 [ 113.873832][ T6726] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 113.893483][ T6726] EXT4-fs error (device loop8): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 113.913496][ T6726] EXT4-fs (loop8): 1 truncate cleaned up [ 113.923625][ T6726] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 113.996685][ T6746] FAULT_INJECTION: forcing a failure. [ 113.996685][ T6746] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 113.996853][ T6726] syz.8.1172[6726] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 114.009800][ T6746] CPU: 0 UID: 0 PID: 6746 Comm: syz.7.1179 Not tainted 6.12.0-syzkaller-00971-g158f238aa69d #0 [ 114.009836][ T6746] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 114.041556][ T6746] Call Trace: [ 114.044843][ T6746] [ 114.045763][ T6726] syz.8.1172[6726] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 114.047775][ T6746] dump_stack_lvl+0xf2/0x150 [ 114.047806][ T6746] dump_stack+0x15/0x20 [ 114.067902][ T6746] should_fail_ex+0x223/0x230 [ 114.072626][ T6746] should_fail+0xb/0x10 [ 114.076858][ T6746] should_fail_usercopy+0x1a/0x20 [ 114.081921][ T6746] _copy_from_user+0x1e/0xb0 [ 114.086542][ T6746] memdup_user+0x64/0xc0 [ 114.090800][ T6746] strndup_user+0x68/0xa0 [ 114.095145][ T6746] __se_sys_mount+0x4e/0x2d0 [ 114.099747][ T6746] ? fput+0x1c4/0x200 [ 114.103801][ T6746] ? ksys_write+0x176/0x1b0 [ 114.108411][ T6746] __x64_sys_mount+0x67/0x80 [ 114.113090][ T6746] x64_sys_call+0x2c84/0x2dc0 [ 114.117821][ T6746] do_syscall_64+0xc9/0x1c0 [ 114.122359][ T6746] ? clear_bhb_loop+0x55/0xb0 [ 114.127055][ T6746] ? clear_bhb_loop+0x55/0xb0 [ 114.131932][ T6746] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 114.137921][ T6746] RIP: 0033:0x7ff2eb70e759 [ 114.142338][ T6746] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 114.161960][ T6746] RSP: 002b:00007ff2ea381038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 114.170388][ T6746] RAX: ffffffffffffffda RBX: 00007ff2eb8c5f80 RCX: 00007ff2eb70e759 [ 114.178365][ T6746] RDX: 0000000020000180 RSI: 0000000020000000 RDI: 0000000000000000 [ 114.186393][ T6746] RBP: 00007ff2ea381090 R08: 0000000020000280 R09: 0000000000000000 [ 114.194403][ T6746] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 114.202376][ T6746] R13: 0000000000000000 R14: 00007ff2eb8c5f80 R15: 00007ffc8287ec48 [ 114.210359][ T6746] [ 114.228219][ T5750] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 114.276773][ T6755] bridge0: entered promiscuous mode [ 114.282035][ T6755] vlan2: entered promiscuous mode [ 114.305724][ T6755] bridge0: left promiscuous mode [ 114.371810][ T6753] loop7: detected capacity change from 0 to 128 [ 114.393782][ T6753] ext4 filesystem being mounted at /46/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 114.439582][ T6753] netlink: 'syz.7.1184': attribute type 10 has an invalid length. [ 114.459659][ T6753] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 114.495439][ T6753] pimreg: entered allmulticast mode [ 114.511420][ T6753] pimreg: left allmulticast mode [ 114.525002][ T6778] loop8: detected capacity change from 0 to 512 [ 114.560347][ T6783] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1195'. [ 114.581754][ T6778] ext4 filesystem being mounted at /65/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 114.789994][ T6805] loop8: detected capacity change from 0 to 128 [ 114.821320][ T6809] loop5: detected capacity change from 0 to 128 [ 114.837449][ T6809] ext4 filesystem being mounted at /100/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 114.877816][ T6811] netlink: 40 bytes leftover after parsing attributes in process `syz.7.1208'. [ 114.887705][ T6805] FAT-fs (loop8): error, invalid access to FAT (entry 0x00000100) [ 114.895598][ T6805] FAT-fs (loop8): Filesystem has been set read-only [ 114.919657][ T6805] syz.8.1204: attempt to access beyond end of device [ 114.919657][ T6805] loop8: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 114.955046][ T6809] netlink: 'syz.5.1207': attribute type 10 has an invalid length. [ 114.969614][ T6805] FAT-fs (loop8): error, invalid access to FAT (entry 0x00000100) [ 114.977614][ T6805] FAT-fs (loop8): error, invalid access to FAT (entry 0x00000100) [ 114.993893][ T6809] pimreg: entered allmulticast mode [ 115.010331][ T6809] pimreg: left allmulticast mode [ 115.034246][ T6805] syz.8.1204: attempt to access beyond end of device [ 115.034246][ T6805] loop8: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 115.063027][ T6805] syz.8.1204: attempt to access beyond end of device [ 115.063027][ T6805] loop8: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 115.099985][ T6816] loop7: detected capacity change from 0 to 128 [ 115.118758][ T6816] ext4 filesystem being mounted at /53/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 115.168706][ T6816] netlink: 'syz.7.1210': attribute type 10 has an invalid length. [ 115.186607][ T6816] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 115.214017][ T6823] loop8: detected capacity change from 0 to 1024 [ 115.224110][ T6816] pimreg: entered allmulticast mode [ 115.230951][ T6816] pimreg: left allmulticast mode [ 115.242250][ T6823] EXT4-fs (loop8): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 115.258177][ T6821] pim6reg1: entered promiscuous mode [ 115.263521][ T6821] pim6reg1: entered allmulticast mode [ 115.270314][ T6823] EXT4-fs error (device loop8): ext4_map_blocks:705: inode #3: block 2: comm syz.8.1213: lblock 2 mapped to illegal pblock 2 (length 1) [ 115.285486][ T6823] EXT4-fs error (device loop8): ext4_acquire_dquot:6938: comm syz.8.1213: Failed to acquire dquot type 0 [ 115.317813][ T6823] EXT4-fs error (device loop8): ext4_map_blocks:671: inode #3: block 2: comm syz.8.1213: lblock 2 mapped to illegal pblock 2 (length 1) [ 115.339796][ T6832] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1217'. [ 115.358889][ T6823] EXT4-fs error (device loop8): ext4_acquire_dquot:6938: comm syz.8.1213: Failed to acquire dquot type 0 [ 115.361204][ T35] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 115.377769][ T35] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 115.385328][ T35] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 115.393460][ T6823] EXT4-fs error (device loop8): ext4_free_blocks:6589: comm syz.8.1213: Freeing blocks not in datazone - block = 0, count = 4096 [ 115.395211][ T35] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 115.414346][ T35] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 115.421411][ T6823] EXT4-fs error (device loop8): ext4_map_blocks:671: inode #3: block 2: comm syz.8.1213: lblock 2 mapped to illegal pblock 2 (length 1) [ 115.421893][ T35] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 115.436166][ T6839] sch_tbf: peakrate 8 is lower than or equals to rate 12 ! [ 115.443014][ T35] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 115.456086][ T6823] EXT4-fs error (device loop8): ext4_acquire_dquot:6938: comm syz.8.1213: Failed to acquire dquot type 0 [ 115.457812][ T35] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 115.476472][ T35] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 115.484039][ T35] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 115.491532][ T35] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 115.494832][ T6823] EXT4-fs (loop8): 1 orphan inode deleted [ 115.499029][ T35] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 115.512208][ T35] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 115.519644][ T35] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 115.525382][ T6844] netlink: 'syz.6.1222': attribute type 1 has an invalid length. [ 115.527138][ T35] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 115.527167][ T35] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 115.549702][ T35] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 115.549730][ T35] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 115.549852][ T35] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 115.549878][ T35] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 115.549903][ T35] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 115.549969][ T35] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 115.549996][ T35] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 115.550022][ T35] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 115.550047][ T35] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 115.550068][ T35] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 115.550088][ T35] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 115.550108][ T35] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 115.550157][ T35] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 115.550184][ T35] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 115.550208][ T35] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 115.550231][ T35] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 115.550372][ T35] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 115.550463][ T35] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 115.551037][ T35] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz0] on syz0 [ 115.699041][ T6823] EXT4-fs error (device loop8): ext4_map_blocks:671: inode #2: block 5: comm syz.8.1213: lblock 0 mapped to illegal pblock 5 (length 1) [ 115.746950][ T6852] netlink: 36 bytes leftover after parsing attributes in process `syz.6.1224'. [ 115.756022][ T6852] netlink: 36 bytes leftover after parsing attributes in process `syz.6.1224'. [ 115.775729][ T6852] netlink: 36 bytes leftover after parsing attributes in process `syz.6.1224'. [ 115.793802][ T6852] netlink: 36 bytes leftover after parsing attributes in process `syz.6.1224'. [ 115.803198][ T6852] netlink: 36 bytes leftover after parsing attributes in process `syz.6.1224'. [ 115.813387][ T6852] netlink: 36 bytes leftover after parsing attributes in process `syz.6.1224'. [ 115.858981][ T6852] netlink: 36 bytes leftover after parsing attributes in process `syz.6.1224'. [ 115.868277][ T6867] loop6: detected capacity change from 0 to 2048 [ 115.893014][ T6878] loop7: detected capacity change from 0 to 512 [ 115.893544][ T6875] loop5: detected capacity change from 0 to 512 [ 115.907480][ T6852] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 115.924253][ T6878] ext4 filesystem being mounted at /58/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 115.949162][ T6875] ext4 filesystem being mounted at /108/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 116.029385][ T6888] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 116.036881][ T6888] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 116.056019][ T6888] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 116.063585][ T6888] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 116.073909][ T6888] bond0: (slave batadv0): Releasing backup interface [ 116.093119][ T6886] loop7: detected capacity change from 0 to 512 [ 116.102853][ T6886] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 116.124284][ T6886] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 116.141302][ T6886] EXT4-fs (loop7): 1 truncate cleaned up [ 116.156354][ T6891] loop6: detected capacity change from 0 to 512 [ 116.169251][ T6891] EXT4-fs (loop6): too many log groups per flexible block group [ 116.176975][ T6891] EXT4-fs (loop6): failed to initialize mballoc (-12) [ 116.183838][ T6891] EXT4-fs (loop6): mount failed [ 116.217272][ T29] kauditd_printk_skb: 467 callbacks suppressed [ 116.217286][ T29] audit: type=1326 audit(1732057430.739:4752): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6894 comm="syz.5.1240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5ba3de759 code=0x7ffc0000 [ 116.252423][ T29] audit: type=1326 audit(1732057430.739:4753): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6894 comm="syz.5.1240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5ba3de759 code=0x7ffc0000 [ 116.264795][ T6902] loop6: detected capacity change from 0 to 512 [ 116.275885][ T29] audit: type=1326 audit(1732057430.739:4754): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6894 comm="syz.5.1240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc5ba3de759 code=0x7ffc0000 [ 116.275920][ T29] audit: type=1326 audit(1732057430.739:4755): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6894 comm="syz.5.1240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5ba3de759 code=0x7ffc0000 [ 116.275954][ T29] audit: type=1326 audit(1732057430.739:4756): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6894 comm="syz.5.1240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc5ba3de759 code=0x7ffc0000 [ 116.352904][ T29] audit: type=1326 audit(1732057430.739:4757): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6894 comm="syz.5.1240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5ba3de759 code=0x7ffc0000 [ 116.376374][ T29] audit: type=1326 audit(1732057430.739:4758): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6894 comm="syz.5.1240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5ba3de759 code=0x7ffc0000 [ 116.399815][ T29] audit: type=1326 audit(1732057430.739:4759): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6894 comm="syz.5.1240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc5ba3de759 code=0x7ffc0000 [ 116.422039][ T6902] ext4 filesystem being mounted at /104/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 116.423637][ T29] audit: type=1326 audit(1732057430.739:4760): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6894 comm="syz.5.1240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5ba3de759 code=0x7ffc0000 [ 116.457215][ T29] audit: type=1326 audit(1732057430.739:4761): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6894 comm="syz.5.1240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5ba3de759 code=0x7ffc0000 [ 116.549762][ T6922] loop5: detected capacity change from 0 to 512 [ 116.596738][ T6924] netlink: 'syz.0.1250': attribute type 10 has an invalid length. [ 116.622215][ T6924] pimreg: entered allmulticast mode [ 116.648556][ T6924] pimreg: left allmulticast mode [ 116.649920][ T6932] loop7: detected capacity change from 0 to 128 [ 116.728497][ T6932] FAT-fs (loop7): error, invalid access to FAT (entry 0x00000100) [ 116.736591][ T6932] FAT-fs (loop7): Filesystem has been set read-only [ 116.748635][ T6932] syz.7.1255: attempt to access beyond end of device [ 116.748635][ T6932] loop7: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 116.781759][ T6932] FAT-fs (loop7): error, invalid access to FAT (entry 0x00000100) [ 116.789728][ T6932] FAT-fs (loop7): error, invalid access to FAT (entry 0x00000100) [ 116.824559][ T6942] loop8: detected capacity change from 0 to 1024 [ 116.831631][ T6932] syz.7.1255: attempt to access beyond end of device [ 116.831631][ T6932] loop7: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 116.857342][ T6932] syz.7.1255: attempt to access beyond end of device [ 116.857342][ T6932] loop7: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 117.275324][ T6979] loop8: detected capacity change from 0 to 2048 [ 117.314264][ T6986] loop7: detected capacity change from 0 to 512 [ 117.349063][ T6986] ext4 filesystem being mounted at /70/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 117.413257][ T7001] loop8: detected capacity change from 0 to 128 [ 117.446897][ T7001] ext4 filesystem being mounted at /78/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 117.542434][ T7001] netlink: 'syz.8.1284': attribute type 10 has an invalid length. [ 117.579402][ T7001] pimreg: entered allmulticast mode [ 117.594277][ T7001] pimreg: left allmulticast mode [ 117.717404][ T7038] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 117.725211][ T7038] batadv_slave_0: entered promiscuous mode [ 117.827260][ T7049] pim6reg1: entered promiscuous mode [ 117.832601][ T7049] pim6reg1: entered allmulticast mode [ 117.863363][ T7051] netlink: 'syz.0.1307': attribute type 10 has an invalid length. [ 117.877051][ T1035] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 117.877511][ T7057] loop5: detected capacity change from 0 to 128 [ 117.884566][ T1035] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 117.898338][ T1035] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 117.902861][ T7051] pimreg: entered allmulticast mode [ 117.905783][ T1035] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 117.918533][ T1035] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 117.926072][ T1035] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 117.933531][ T1035] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 117.940996][ T1035] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 117.948451][ T1035] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 117.956007][ T1035] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 117.963413][ T1035] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 117.970941][ T1035] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 117.978437][ T1035] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 117.985922][ T1035] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 117.993380][ T1035] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 118.000812][ T1035] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 118.008303][ T1035] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 118.015761][ T1035] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 118.017395][ T7057] ext4 filesystem being mounted at /124/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 118.023149][ T1035] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 118.062428][ T1035] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 118.069916][ T1035] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 118.077368][ T1035] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 118.084812][ T1035] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 118.092276][ T1035] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 118.099700][ T1035] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 118.107168][ T1035] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 118.114645][ T1035] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 118.122086][ T1035] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 118.129533][ T1035] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 118.136944][ T1035] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 118.144335][ T1035] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 118.151724][ T1035] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 118.159178][ T1035] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 118.166705][ T1035] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 118.174322][ T1035] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 118.181764][ T1035] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 118.189181][ T1035] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 118.196725][ T1035] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 118.204126][ T1035] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 118.211540][ T1035] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 118.218924][ T1035] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 118.226316][ T1035] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 118.233685][ T1035] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 118.241085][ T1035] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 118.248470][ T1035] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 118.255864][ T1035] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 118.263362][ T1035] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 118.270876][ T1035] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 118.278321][ T1035] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 118.285904][ T1035] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 118.293298][ T1035] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 118.300924][ T1035] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 118.309326][ T1035] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz0] on syz0 [ 118.319798][ T7057] netlink: 'syz.5.1310': attribute type 10 has an invalid length. [ 118.336603][ T7061] pimreg: entered allmulticast mode [ 118.379342][ T7061] pimreg: left allmulticast mode [ 118.515945][ T7083] loop5: detected capacity change from 0 to 2048 [ 118.545633][ T7095] loop7: detected capacity change from 0 to 128 [ 118.563642][ T7100] loop6: detected capacity change from 0 to 128 [ 118.572138][ T7095] ext4 filesystem being mounted at /83/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 118.573714][ T7083] loop5: p1 < p5 p6 p7 p8 p9 p10 p11 p12 p13 p14 p15 p16 p17 p18 p19 p20 p21 p22 p23 p24 p25 p26 p27 p28 p29 p30 p31 p32 p33 p34 p35 p36 p37 p38 p39 p40 p41 p42 p43 p44 p45 p46 p47 p48 p49 p50 p51 p52 p53 p54 p55 p56 p57 p58 p59 p60 p61 p62 p63 p64 p65 p66 p67 p68 p69 p70 p71 p72 p73 p74 p75 p76 p77 p78 p79 p80 p81 p82 p83 p84 p85 p86 p87 p88 p89 p90 p91 p92 p93 p94 p95 p96 p97 p98 p99 p100 p101 p102 p103 p104 p105 p106 p107 p108 p109 p110 p111 p112 p113 p114 p115 p116 p117 p118 p119 p120 p121 p122 p123 p124 p125 p126 p127 p128 p129 p130 p131 p132 p133 p134 p135 p136 p137 p138 p139 p140 p141 p142 p143 p144 p145 p146 p147 p148 p149 p150 p151 p152 p153 p154 p155 p156 p157 p158 p159 p160 p161 p162 p163 p164 p165 p166 p167 p168 p169 p170 p171 p172 p173 p174 p175 p176 p177 p178 p179 p180 p181 p182 p183 p184 p185 p186 p187 p188 p189 p190 p191 p192 p193 p194 p195 p196 p197 p198 p199 p200 p201 p202 p203 p204 p205 p206 p207 p208 p209 p210 p211 p212 p213 p214 p215 p216 p217 p218 p219 p220 p221 p222 p223 p224 p225 p22 [ 118.607629][ T7100] ext4 filesystem being mounted at /118/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 118.715386][ T7100] EXT4-fs (loop6): re-mounted 76b65be2-f6da-4727-8c75-0525a5b65a09 ro. Quota mode: none. [ 118.727914][ T7106] netlink: 'syz.7.1324': attribute type 10 has an invalid length. [ 118.736831][ T7106] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 118.767224][ T7095] pimreg: entered allmulticast mode [ 118.928195][ T7124] 9pnet_fd: Insufficient options for proto=fd [ 119.035164][ T7127] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 119.042756][ T7127] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 119.056223][ T7127] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 119.063777][ T7127] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 119.086070][ T7140] loop5: detected capacity change from 0 to 128 [ 119.110856][ T7140] ext4 filesystem being mounted at /132/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 119.155302][ T7140] netlink: 'syz.5.1339': attribute type 10 has an invalid length. [ 119.168271][ T7140] pimreg: entered allmulticast mode [ 119.321192][ T7153] loop5: detected capacity change from 0 to 1024 [ 119.337362][ T7153] EXT4-fs: Ignoring removed nomblk_io_submit option [ 119.346745][ T7153] EXT4-fs (loop5): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 119.464334][ T7171] loop8: detected capacity change from 0 to 512 [ 119.470953][ T7171] EXT4-fs: Ignoring removed bh option [ 119.525830][ T7171] EXT4-fs (loop8): mounting ext3 file system using the ext4 subsystem [ 119.548400][ T7171] EXT4-fs (loop8): 1 truncate cleaned up [ 119.588750][ T7171] SELinux: security_context_str_to_sid (u) failed with errno=-22 [ 119.710682][ T7203] loop7: detected capacity change from 0 to 128 [ 119.729637][ T7203] ext4 filesystem being mounted at /86/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 119.767415][ T7203] netlink: 'syz.7.1367': attribute type 10 has an invalid length. [ 119.783085][ T7203] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 119.869505][ T7230] netlink: 'syz.5.1379': attribute type 1 has an invalid length. [ 119.901399][ T7238] loop6: detected capacity change from 0 to 1024 [ 119.912262][ T7238] EXT4-fs: Ignoring removed nomblk_io_submit option [ 119.919837][ T7238] EXT4-fs (loop6): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 119.958244][ T7245] loop7: detected capacity change from 0 to 128 [ 119.967509][ T7245] ext4 filesystem being mounted at /89/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 120.006042][ T7245] netlink: 'syz.7.1387': attribute type 10 has an invalid length. [ 120.015125][ T7245] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 120.040554][ T7255] loop5: detected capacity change from 0 to 2048 [ 120.091859][ T7264] __nla_validate_parse: 5 callbacks suppressed [ 120.091875][ T7264] netlink: 36 bytes leftover after parsing attributes in process `syz.6.1394'. [ 120.107146][ T7264] netlink: 36 bytes leftover after parsing attributes in process `syz.6.1394'. [ 120.116338][ T7264] netlink: 36 bytes leftover after parsing attributes in process `syz.6.1394'. [ 120.139398][ T7264] netlink: 36 bytes leftover after parsing attributes in process `syz.6.1394'. [ 120.148470][ T7264] netlink: 36 bytes leftover after parsing attributes in process `syz.6.1394'. [ 120.158448][ T7264] netlink: 36 bytes leftover after parsing attributes in process `syz.6.1394'. [ 120.179859][ T7274] loop6: detected capacity change from 0 to 2048 [ 120.197151][ T7264] netlink: 36 bytes leftover after parsing attributes in process `syz.6.1394'. [ 120.206330][ T7264] netlink: 36 bytes leftover after parsing attributes in process `syz.6.1394'. [ 120.215390][ T7264] netlink: 36 bytes leftover after parsing attributes in process `syz.6.1394'. [ 120.304113][ T7290] loop5: detected capacity change from 0 to 2048 [ 120.352883][ T7296] loop5: detected capacity change from 0 to 512 [ 120.359770][ T7296] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 120.380019][ T7296] EXT4-fs error (device loop5): ext4_xattr_ibody_find:2240: inode #15: comm syz.5.1405: corrupted in-inode xattr: e_name out of bounds [ 120.398985][ T7296] EXT4-fs (loop5): 1 truncate cleaned up [ 120.408479][ T7296] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 120.419813][ T7296] sch_tbf: peakrate 8 is lower than or equals to rate 12 ! [ 120.449471][ T7305] ip6gretap0: entered promiscuous mode [ 120.455229][ T7305] vlan2: entered promiscuous mode [ 120.462898][ T7305] ip6gretap0: left promiscuous mode [ 120.492863][ T7311] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1412'. [ 120.537779][ T7317] loop5: detected capacity change from 0 to 1024 [ 120.542325][ T7322] loop7: detected capacity change from 0 to 512 [ 120.552642][ T7317] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 120.572482][ T7322] ext4 filesystem being mounted at /98/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 120.587606][ T7317] EXT4-fs error (device loop5): ext4_map_blocks:705: inode #3: block 2: comm syz.5.1414: lblock 2 mapped to illegal pblock 2 (length 1) [ 120.601876][ T7317] EXT4-fs error (device loop5): ext4_acquire_dquot:6938: comm syz.5.1414: Failed to acquire dquot type 0 [ 120.621216][ T7317] EXT4-fs error (device loop5): ext4_map_blocks:671: inode #3: block 2: comm syz.5.1414: lblock 2 mapped to illegal pblock 2 (length 1) [ 120.646864][ T7317] EXT4-fs error (device loop5): ext4_acquire_dquot:6938: comm syz.5.1414: Failed to acquire dquot type 0 [ 120.658697][ T7317] EXT4-fs error (device loop5): ext4_free_blocks:6589: comm syz.5.1414: Freeing blocks not in datazone - block = 0, count = 4096 [ 120.673244][ T7317] EXT4-fs error (device loop5): ext4_map_blocks:671: inode #3: block 2: comm syz.5.1414: lblock 2 mapped to illegal pblock 2 (length 1) [ 120.681896][ T7337] loop7: detected capacity change from 0 to 128 [ 120.688625][ T7317] EXT4-fs error (device loop5): ext4_acquire_dquot:6938: comm syz.5.1414: Failed to acquire dquot type 0 [ 120.705318][ T7317] EXT4-fs (loop5): 1 orphan inode deleted [ 120.725351][ T7317] EXT4-fs error (device loop5): ext4_map_blocks:671: inode #2: block 5: comm syz.5.1414: lblock 0 mapped to illegal pblock 5 (length 1) [ 120.729336][ T7340] loop7: detected capacity change from 0 to 512 [ 120.746351][ T7340] EXT4-fs: Ignoring removed bh option [ 120.756357][ T7340] EXT4-fs (loop7): mounting ext3 file system using the ext4 subsystem [ 120.777171][ T7340] EXT4-fs (loop7): 1 truncate cleaned up [ 120.788016][ T7340] SELinux: security_context_str_to_sid (u) failed with errno=-22 [ 120.880384][ T7362] bond_slave_0: entered promiscuous mode [ 120.886177][ T7362] bond_slave_1: entered promiscuous mode [ 120.892223][ T7362] macvtap1: entered promiscuous mode [ 120.897573][ T7362] bond0: entered promiscuous mode [ 120.902868][ T7362] macvtap1: entered allmulticast mode [ 120.908296][ T7362] bond0: entered allmulticast mode [ 120.913405][ T7362] bond_slave_0: entered allmulticast mode [ 120.919153][ T7362] bond_slave_1: entered allmulticast mode [ 120.925872][ T7362] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 120.935108][ T7362] FAULT_INJECTION: forcing a failure. [ 120.935108][ T7362] name failslab, interval 1, probability 0, space 0, times 0 [ 120.947827][ T7362] CPU: 1 UID: 0 PID: 7362 Comm: syz.6.1431 Not tainted 6.12.0-syzkaller-00971-g158f238aa69d #0 [ 120.958180][ T7362] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 120.968360][ T7362] Call Trace: [ 120.971654][ T7362] [ 120.974600][ T7362] dump_stack_lvl+0xf2/0x150 [ 120.979295][ T7362] dump_stack+0x15/0x20 [ 120.983546][ T7362] should_fail_ex+0x223/0x230 [ 120.988258][ T7362] ? rtnl_newlink+0x5d/0x1690 [ 120.992963][ T7362] should_failslab+0x8f/0xb0 [ 120.997606][ T7362] __kmalloc_cache_noprof+0x4b/0x2a0 [ 121.002935][ T7362] rtnl_newlink+0x5d/0x1690 [ 121.007553][ T7362] ? __rcu_read_unlock+0x34/0x70 [ 121.012553][ T7362] ? bpf_trace_run3+0x12b/0x1d0 [ 121.017429][ T7362] ? __memcg_slab_free_hook+0xc9/0x1e0 [ 121.022977][ T7362] ? __rcu_read_unlock+0x4e/0x70 [ 121.027968][ T7362] ? avc_has_perm_noaudit+0x1cc/0x210 [ 121.033495][ T7362] ? selinux_capable+0x1f2/0x260 [ 121.038528][ T7362] ? security_capable+0x81/0x90 [ 121.043431][ T7362] ? ns_capable+0x7d/0xb0 [ 121.047774][ T7362] ? __pfx_rtnl_newlink+0x10/0x10 [ 121.052879][ T7362] rtnetlink_rcv_msg+0x6aa/0x710 [ 121.057933][ T7362] ? ref_tracker_free+0x3a5/0x410 [ 121.063105][ T7362] ? __dev_queue_xmit+0x161/0x2040 [ 121.068244][ T7362] ? skb_clone+0x154/0x1f0 [ 121.072811][ T7362] netlink_rcv_skb+0x12c/0x230 [ 121.077603][ T7362] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 121.083161][ T7362] rtnetlink_rcv+0x1c/0x30 [ 121.087671][ T7362] netlink_unicast+0x599/0x670 [ 121.092468][ T7362] netlink_sendmsg+0x5cc/0x6e0 [ 121.097334][ T7362] ? __pfx_netlink_sendmsg+0x10/0x10 [ 121.102730][ T7362] __sock_sendmsg+0x140/0x180 [ 121.107482][ T7362] ____sys_sendmsg+0x312/0x410 [ 121.112278][ T7362] __sys_sendmsg+0x19d/0x230 [ 121.116998][ T7362] __x64_sys_sendmsg+0x46/0x50 [ 121.121809][ T7362] x64_sys_call+0x2734/0x2dc0 [ 121.126529][ T7362] do_syscall_64+0xc9/0x1c0 [ 121.131099][ T7362] ? clear_bhb_loop+0x55/0xb0 [ 121.135890][ T7362] ? clear_bhb_loop+0x55/0xb0 [ 121.140615][ T7362] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 121.146554][ T7362] RIP: 0033:0x7f517630e759 [ 121.151066][ T7362] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 121.170908][ T7362] RSP: 002b:00007f5174f81038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 121.179433][ T7362] RAX: ffffffffffffffda RBX: 00007f51764c5f80 RCX: 00007f517630e759 [ 121.187420][ T7362] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000005 [ 121.195433][ T7362] RBP: 00007f5174f81090 R08: 0000000000000000 R09: 0000000000000000 [ 121.203670][ T7362] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 121.211680][ T7362] R13: 0000000000000000 R14: 00007f51764c5f80 R15: 00007ffe5affbdf8 [ 121.219693][ T7362] [ 121.259287][ T29] kauditd_printk_skb: 580 callbacks suppressed [ 121.259303][ T29] audit: type=1400 audit(1732057435.749:5337): avc: denied { write } for pid=7353 comm="syz.8.1428" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 121.286330][ T29] audit: type=1400 audit(1732057435.749:5338): avc: denied { nlmsg_read } for pid=7353 comm="syz.8.1428" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 121.314695][ T7370] loop6: detected capacity change from 0 to 128 [ 121.322308][ T29] audit: type=1400 audit(1732057435.789:5339): avc: denied { setopt } for pid=7368 comm="syz.6.1433" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 121.324888][ T7370] ext4 filesystem being mounted at /136/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 121.379116][ T7370] netlink: 'syz.6.1433': attribute type 10 has an invalid length. [ 121.390343][ T7370] pimreg: entered allmulticast mode [ 121.414005][ T29] audit: type=1326 audit(1732057435.929:5340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7374 comm="syz.6.1435" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f517630e759 code=0x0 [ 121.466840][ T29] audit: type=1400 audit(1732057435.989:5341): avc: denied { read write } for pid=7374 comm="+}[@" name="nvram" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 121.490318][ T29] audit: type=1400 audit(1732057435.989:5342): avc: denied { open } for pid=7374 comm="+}[@" path="/dev/nvram" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 121.529083][ T7378] ip6gretap0: entered promiscuous mode [ 121.534725][ T7378] vlan2: entered promiscuous mode [ 121.541230][ T7378] ip6gretap0: left promiscuous mode [ 121.631519][ T29] audit: type=1400 audit(1732057436.149:5343): avc: denied { execmem } for pid=7391 comm="syz.5.1443" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 121.668904][ T29] audit: type=1400 audit(1732057436.149:5344): avc: denied { create } for pid=7393 comm="syz.0.1444" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 121.689235][ T29] audit: type=1400 audit(1732057436.149:5345): avc: denied { write } for pid=7393 comm="syz.0.1444" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 121.709420][ T29] audit: type=1400 audit(1732057436.149:5346): avc: denied { compute_member } for pid=7393 comm="syz.0.1444" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 121.847802][ T7404] loop5: detected capacity change from 0 to 1024 [ 121.854818][ T7404] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 121.866902][ T7404] EXT4-fs error (device loop5): ext4_map_blocks:705: inode #3: block 2: comm syz.5.1448: lblock 2 mapped to illegal pblock 2 (length 1) [ 121.881627][ T7404] EXT4-fs error (device loop5): ext4_acquire_dquot:6938: comm syz.5.1448: Failed to acquire dquot type 0 [ 121.893683][ T7404] EXT4-fs error (device loop5): ext4_map_blocks:671: inode #3: block 2: comm syz.5.1448: lblock 2 mapped to illegal pblock 2 (length 1) [ 121.908357][ T7404] EXT4-fs error (device loop5): ext4_acquire_dquot:6938: comm syz.5.1448: Failed to acquire dquot type 0 [ 121.921028][ T7404] EXT4-fs error (device loop5): ext4_free_blocks:6589: comm syz.5.1448: Freeing blocks not in datazone - block = 0, count = 4096 [ 121.935416][ T7404] EXT4-fs error (device loop5): ext4_map_blocks:671: inode #3: block 2: comm syz.5.1448: lblock 2 mapped to illegal pblock 2 (length 1) [ 121.951604][ T7404] EXT4-fs error (device loop5): ext4_acquire_dquot:6938: comm syz.5.1448: Failed to acquire dquot type 0 [ 121.964494][ T7404] EXT4-fs (loop5): 1 orphan inode deleted [ 121.980631][ T7404] EXT4-fs error (device loop5): ext4_map_blocks:671: inode #2: block 5: comm syz.5.1448: lblock 0 mapped to illegal pblock 5 (length 1) [ 122.165727][ T7435] loop8: detected capacity change from 0 to 512 [ 122.269903][ T7445] loop8: detected capacity change from 0 to 8192 [ 122.277518][ T7445] FAT-fs (loop8): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 122.290309][ T7453] loop7: detected capacity change from 0 to 512 [ 122.297926][ T7453] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 122.319711][ T7453] EXT4-fs (loop7): 1 truncate cleaned up [ 122.330374][ T7453] EXT4-fs error (device loop7): ext4_xattr_ibody_find:2240: inode #15: comm syz.7.1471: corrupted in-inode xattr: overlapping e_value [ 122.346557][ T7453] EXT4-fs warning (device loop7): ext4_xattr_set_entry:1772: inode #15: comm syz.7.1471: unable to update i_inline_off [ 122.359821][ T7453] EXT4-fs error (device loop7): ext4_xattr_ibody_find:2240: inode #15: comm syz.7.1471: corrupted in-inode xattr: overlapping e_value [ 122.375526][ T7453] EXT4-fs error (device loop7): ext4_xattr_ibody_find:2240: inode #15: comm syz.7.1471: corrupted in-inode xattr: overlapping e_value [ 122.555648][ T7467] sch_tbf: peakrate 8 is lower than or equals to rate 12 ! [ 122.642931][ T7477] loop7: detected capacity change from 0 to 128 [ 122.652698][ T7475] SELinux: security_context_str_to_sid (u) failed with errno=-22 [ 122.784551][ T7487] netlink: 'syz.0.1485': attribute type 10 has an invalid length. [ 122.850954][ T7496] loop5: detected capacity change from 0 to 512 [ 122.910025][ T7510] loop7: detected capacity change from 0 to 128 [ 122.929002][ T7510] ext4 filesystem being mounted at /123/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 122.964082][ T7510] netlink: 'syz.7.1495': attribute type 10 has an invalid length. [ 122.973136][ T7510] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 122.983954][ T7520] loop5: detected capacity change from 0 to 512 [ 123.007959][ T7520] ext4 filesystem being mounted at /174/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 123.071039][ T7530] loop5: detected capacity change from 0 to 512 [ 123.071900][ T7532] loop7: detected capacity change from 0 to 512 [ 123.078506][ T7530] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 123.109099][ T7530] EXT4-fs error (device loop5): ext4_xattr_ibody_find:2240: inode #15: comm syz.5.1503: corrupted in-inode xattr: e_name out of bounds [ 123.125944][ T7530] EXT4-fs (loop5): 1 truncate cleaned up [ 123.134198][ T7530] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 123.144858][ T7530] sch_tbf: peakrate 8 is lower than or equals to rate 12 ! [ 123.164030][ T7535] syz_tun: entered promiscuous mode [ 123.172742][ T7535] vlan2: entered promiscuous mode [ 123.181804][ T7535] syz_tun: left promiscuous mode [ 123.270138][ T7546] loop5: detected capacity change from 0 to 512 [ 123.282037][ T7546] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 123.283204][ T7550] loop7: detected capacity change from 0 to 512 [ 123.301499][ T7546] EXT4-fs error (device loop5): ext4_xattr_ibody_find:2240: inode #15: comm syz.5.1510: corrupted in-inode xattr: e_name out of bounds [ 123.317050][ T7546] EXT4-fs (loop5): 1 truncate cleaned up [ 123.325718][ T7546] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 123.336789][ T7546] sch_tbf: peakrate 8 is lower than or equals to rate 12 ! [ 123.344997][ T7550] ext4 filesystem being mounted at /129/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 123.368778][ T7559] loop6: detected capacity change from 0 to 512 [ 123.581416][ T7587] loop6: detected capacity change from 0 to 128 [ 123.590957][ T7587] ext4 filesystem being mounted at /144/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 123.628335][ T7587] netlink: 'syz.6.1528': attribute type 10 has an invalid length. [ 123.759753][ T7608] netlink: 'syz.6.1538': attribute type 13 has an invalid length. [ 123.769063][ T7608] syz_tun: refused to change device tx_queue_len [ 123.775487][ T7608] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 123.803217][ T7608] loop6: detected capacity change from 0 to 2048 [ 123.812735][ T7614] loop7: detected capacity change from 0 to 128 [ 123.851832][ T7608] Alternate GPT is invalid, using primary GPT. [ 123.858211][ T7608] loop6: p2 p3 p7 [ 123.912700][ T7631] loop6: detected capacity change from 0 to 128 [ 123.923276][ T7631] ext4 filesystem being mounted at /148/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 123.949143][ T7635] loop7: detected capacity change from 0 to 2048 [ 123.967007][ T7631] netlink: 'syz.6.1547': attribute type 10 has an invalid length. [ 124.014883][ T7645] loop6: detected capacity change from 0 to 512 [ 124.180732][ T7661] loop6: detected capacity change from 0 to 2048 [ 124.340740][ T7685] loop5: detected capacity change from 0 to 512 [ 124.348164][ T7685] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 124.379036][ T7685] EXT4-fs error (device loop5): ext4_xattr_ibody_find:2240: inode #15: comm syz.5.1569: corrupted in-inode xattr: e_name out of bounds [ 124.394139][ T7685] EXT4-fs (loop5): 1 truncate cleaned up [ 124.424524][ T7693] loop7: detected capacity change from 0 to 128 [ 124.434887][ T7685] sch_tbf: peakrate 8 is lower than or equals to rate 12 ! [ 124.504939][ T7693] FAT-fs (loop7): error, invalid access to FAT (entry 0x00000100) [ 124.512917][ T7693] FAT-fs (loop7): Filesystem has been set read-only [ 124.530625][ T7693] syz.7.1572: attempt to access beyond end of device [ 124.530625][ T7693] loop7: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 124.545101][ T7693] FAT-fs (loop7): error, invalid access to FAT (entry 0x00000100) [ 124.552981][ T7693] FAT-fs (loop7): error, invalid access to FAT (entry 0x00000100) [ 124.581040][ T7693] syz.7.1572: attempt to access beyond end of device [ 124.581040][ T7693] loop7: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 124.603797][ T7693] syz.7.1572: attempt to access beyond end of device [ 124.603797][ T7693] loop7: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 124.624494][ T7697] ip6gre0: entered promiscuous mode [ 124.630109][ T7697] vlan2: entered promiscuous mode [ 124.638201][ T7697] ip6gre0: left promiscuous mode [ 124.672438][ T7699] ip6gre0: entered promiscuous mode [ 124.677999][ T7699] vlan1: entered promiscuous mode [ 124.684855][ T7699] ip6gre0: left promiscuous mode [ 124.902951][ T7708] loop7: detected capacity change from 0 to 128 [ 124.945020][ T7714] loop7: detected capacity change from 0 to 512 [ 124.969229][ T7714] ext4 filesystem being mounted at /154/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 125.110446][ T7725] loop7: detected capacity change from 0 to 2048 [ 125.321975][ T7748] loop7: detected capacity change from 0 to 512 [ 125.408623][ T7769] __nla_validate_parse: 29 callbacks suppressed [ 125.408640][ T7769] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1607'. [ 125.430133][ T7769] loop7: detected capacity change from 0 to 512 [ 125.439909][ T7771] loop5: detected capacity change from 0 to 512 [ 125.455903][ T7771] EXT4-fs: Ignoring removed bh option [ 125.466011][ T7771] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 125.496725][ T7771] EXT4-fs (loop5): 1 truncate cleaned up [ 125.504814][ T7769] ext4 filesystem being mounted at /161/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 125.516229][ T7771] SELinux: security_context_str_to_sid (u) failed with errno=-22 [ 125.529997][ T7769] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1607'. [ 125.599413][ T7795] netlink: 64 bytes leftover after parsing attributes in process `syz.6.1616'. [ 125.659702][ T7801] netlink: 'syz.6.1619': attribute type 1 has an invalid length. [ 125.669920][ T7803] loop7: detected capacity change from 0 to 128 [ 125.704144][ T7803] FAT-fs (loop7): error, invalid access to FAT (entry 0x00000100) [ 125.712039][ T7803] FAT-fs (loop7): Filesystem has been set read-only [ 125.723163][ T7803] syz.7.1620: attempt to access beyond end of device [ 125.723163][ T7803] loop7: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 125.742236][ T7803] FAT-fs (loop7): error, invalid access to FAT (entry 0x00000100) [ 125.750260][ T7803] FAT-fs (loop7): error, invalid access to FAT (entry 0x00000100) [ 125.764213][ T7803] syz.7.1620: attempt to access beyond end of device [ 125.764213][ T7803] loop7: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 125.778534][ T7803] syz.7.1620: attempt to access beyond end of device [ 125.778534][ T7803] loop7: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 125.841667][ T7819] loop5: detected capacity change from 0 to 512 [ 125.848428][ T7819] EXT4-fs: Ignoring removed bh option [ 125.854882][ T7819] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 125.871957][ T7828] netlink: 'syz.0.1632': attribute type 1 has an invalid length. [ 125.875327][ T7819] EXT4-fs (loop5): 1 truncate cleaned up [ 125.894599][ T7819] SELinux: security_context_str_to_sid (u) failed with errno=-22 [ 125.914826][ T7833] 9pnet_fd: Insufficient options for proto=fd [ 126.008484][ T7854] 9pnet: Could not find request transport: 0xffffffffffffffff [ 126.049659][ T7859] sch_tbf: peakrate 8 is lower than or equals to rate 12 ! [ 126.104499][ T7863] loop5: detected capacity change from 0 to 512 [ 126.141248][ T7863] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 126.171282][ T7863] EXT4-fs (loop5): 1 truncate cleaned up [ 126.187471][ T7874] loop6: detected capacity change from 0 to 128 [ 126.202860][ T7874] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x00067272 (sector = 1) [ 126.243177][ T5264] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x00067272 (sector = 1) [ 126.270639][ T29] kauditd_printk_skb: 589 callbacks suppressed [ 126.270657][ T29] audit: type=1326 audit(1732057440.789:5929): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7876 comm="syz.6.1653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f517630e759 code=0x7ffc0000 [ 126.300816][ T29] audit: type=1326 audit(1732057440.789:5930): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7876 comm="syz.6.1653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f517630e759 code=0x7ffc0000 [ 126.324318][ T29] audit: type=1326 audit(1732057440.789:5931): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7876 comm="syz.6.1653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f517630e759 code=0x7ffc0000 [ 126.348233][ T29] audit: type=1326 audit(1732057440.789:5932): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7876 comm="syz.6.1653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f517630e759 code=0x7ffc0000 [ 126.372192][ T29] audit: type=1326 audit(1732057440.789:5933): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7876 comm="syz.6.1653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f517630e759 code=0x7ffc0000 [ 126.395850][ T29] audit: type=1326 audit(1732057440.789:5934): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7876 comm="syz.6.1653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f517630e759 code=0x7ffc0000 [ 126.419331][ T29] audit: type=1326 audit(1732057440.789:5935): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7876 comm="syz.6.1653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f517630e759 code=0x7ffc0000 [ 126.442853][ T29] audit: type=1326 audit(1732057440.789:5936): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7876 comm="syz.6.1653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f517630e759 code=0x7ffc0000 [ 126.466322][ T29] audit: type=1326 audit(1732057440.789:5937): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7876 comm="syz.6.1653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f517630e759 code=0x7ffc0000 [ 126.489768][ T29] audit: type=1326 audit(1732057440.789:5938): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7876 comm="syz.6.1653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=187 compat=0 ip=0x7f517630e759 code=0x7ffc0000 [ 126.562512][ T7893] loop6: detected capacity change from 0 to 512 [ 126.647597][ T7903] loop6: detected capacity change from 0 to 512 [ 126.658744][ T7903] EXT4-fs: Ignoring removed bh option [ 126.665541][ T7903] EXT4-fs (loop6): mounting ext3 file system using the ext4 subsystem [ 126.688085][ T7903] EXT4-fs (loop6): 1 truncate cleaned up [ 126.708202][ T7903] SELinux: security_context_str_to_sid (u) failed with errno=-22 [ 126.768365][ T7915] sch_tbf: peakrate 8 is lower than or equals to rate 12 ! [ 126.834317][ T7924] sch_tbf: peakrate 8 is lower than or equals to rate 12 ! [ 126.849372][ T7925] loop8: detected capacity change from 0 to 2048 [ 127.040428][ T7945] loop8: detected capacity change from 0 to 512 [ 127.047798][ T7945] EXT4-fs: Ignoring removed bh option [ 127.053532][ T7945] EXT4-fs (loop8): mounting ext3 file system using the ext4 subsystem [ 127.066162][ T7945] EXT4-fs (loop8): 1 truncate cleaned up [ 127.075283][ T7945] SELinux: security_context_str_to_sid (u) failed with errno=-22 [ 127.123873][ T7952] loop6: detected capacity change from 0 to 512 [ 127.154771][ T7954] loop8: detected capacity change from 0 to 128 [ 127.169176][ T7954] ext4 filesystem being mounted at /143/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 127.208095][ T7954] netlink: 'syz.8.1688': attribute type 10 has an invalid length. [ 127.220096][ T7954] pimreg: entered allmulticast mode [ 127.227415][ T7954] pimreg: left allmulticast mode [ 127.272733][ T7975] ip6gretap0: entered promiscuous mode [ 127.279460][ T7975] vlan1: entered promiscuous mode [ 127.279686][ T7973] loop6: detected capacity change from 0 to 2048 [ 127.292367][ T7975] ip6gretap0: left promiscuous mode [ 127.483729][ T8012] ip6gretap0: entered promiscuous mode [ 127.489481][ T8012] vlan2: entered promiscuous mode [ 127.497155][ T8012] ip6gretap0: left promiscuous mode [ 127.520892][ T8009] loop8: detected capacity change from 0 to 2048 [ 127.807422][ T8058] loop7: detected capacity change from 0 to 2048 [ 127.832268][ T8062] sch_tbf: peakrate 8 is lower than or equals to rate 12 ! [ 127.907641][ T8069] loop5: detected capacity change from 0 to 512 [ 127.914695][ T8069] EXT4-fs: Ignoring removed bh option [ 127.915417][ T8065] SELinux: Context BUTprS~wbR]Nj>.rVgXP 1XD#+ĵ- o_A,#Lk-4PŖUyDvRq)9hOO*o is not valid (left unmapped). [ 127.926396][ T8069] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 127.952923][ T8069] EXT4-fs (loop5): 1 truncate cleaned up [ 127.959413][ T8072] loop7: detected capacity change from 0 to 512 [ 127.970743][ T8069] SELinux: security_context_str_to_sid (u) failed with errno=-22 [ 127.987658][ T8072] ext4 filesystem being mounted at /182/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 128.033714][ T8080] loop7: detected capacity change from 0 to 128 [ 128.045923][ T8080] FAT-fs (loop7): error, invalid access to FAT (entry 0x00000100) [ 128.053836][ T8080] FAT-fs (loop7): Filesystem has been set read-only [ 128.053979][ T8080] syz.7.1744: attempt to access beyond end of device [ 128.053979][ T8080] loop7: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 128.074453][ T8080] FAT-fs (loop7): error, invalid access to FAT (entry 0x00000100) [ 128.082453][ T8080] FAT-fs (loop7): error, invalid access to FAT (entry 0x00000100) [ 128.090566][ T8080] syz.7.1744: attempt to access beyond end of device [ 128.090566][ T8080] loop7: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 128.103922][ T8080] syz.7.1744: attempt to access beyond end of device [ 128.103922][ T8080] loop7: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 128.172388][ T8092] loop5: detected capacity change from 0 to 2048 [ 128.293136][ T8106] ip6gretap0: entered promiscuous mode [ 128.299062][ T8106] vlan1: entered promiscuous mode [ 128.306180][ T8106] ip6gretap0: left promiscuous mode [ 128.520788][ T8127] ip6gretap0: entered promiscuous mode [ 128.530130][ T8127] vlan2: entered promiscuous mode [ 128.539676][ T8127] ip6gretap0: left promiscuous mode [ 128.569839][ T8133] loop8: detected capacity change from 0 to 2048 [ 128.619200][ T8148] loop7: detected capacity change from 0 to 128 [ 128.630177][ T8148] FAT-fs (loop7): error, invalid access to FAT (entry 0x00000100) [ 128.638173][ T8148] FAT-fs (loop7): Filesystem has been set read-only [ 128.644885][ T8148] syz.7.1776: attempt to access beyond end of device [ 128.644885][ T8148] loop7: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 128.661169][ T8148] FAT-fs (loop7): error, invalid access to FAT (entry 0x00000100) [ 128.669159][ T8148] FAT-fs (loop7): error, invalid access to FAT (entry 0x00000100) [ 128.688018][ T8153] ip6gre0: entered promiscuous mode [ 128.693353][ T8153] vlan2: entered promiscuous mode [ 128.710690][ T8153] ip6gre0: left promiscuous mode [ 128.783464][ T8169] loop5: detected capacity change from 0 to 2048 [ 128.803952][ T8173] netlink: 'syz.8.1787': attribute type 1 has an invalid length. [ 128.803973][ T8173] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1787'. [ 128.813102][ T8173] SELinux: Context @ is not valid (left unmapped). [ 128.857200][ T8178] netlink: 'syz.7.1788': attribute type 9 has an invalid length. [ 128.867694][ T8178] bond_slave_0: entered promiscuous mode [ 128.873411][ T8178] bond_slave_1: entered promiscuous mode [ 128.879939][ T8178] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 128.888313][ T8182] netlink: 'syz.7.1788': attribute type 9 has an invalid length. [ 128.901383][ T8182] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 128.922576][ T8187] veth3: entered promiscuous mode [ 128.927872][ T8187] veth3: entered allmulticast mode [ 129.002185][ T8203] FAULT_INJECTION: forcing a failure. [ 129.002185][ T8203] name failslab, interval 1, probability 0, space 0, times 0 [ 129.014871][ T8203] CPU: 0 UID: 0 PID: 8203 Comm: syz.7.1801 Not tainted 6.12.0-syzkaller-00971-g158f238aa69d #0 [ 129.025256][ T8203] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 129.035379][ T8203] Call Trace: [ 129.038699][ T8203] [ 129.041651][ T8203] dump_stack_lvl+0xf2/0x150 [ 129.046361][ T8203] dump_stack+0x15/0x20 [ 129.050519][ T8203] should_fail_ex+0x223/0x230 [ 129.055213][ T8203] ? prepare_creds+0x37/0x480 [ 129.059899][ T8203] should_failslab+0x8f/0xb0 [ 129.064584][ T8203] kmem_cache_alloc_noprof+0x4c/0x290 [ 129.070027][ T8203] prepare_creds+0x37/0x480 [ 129.074585][ T8203] selinux_lsm_setattr+0x198/0x640 [ 129.079726][ T8203] selinux_setprocattr+0x4e/0x70 [ 129.084672][ T8203] security_setprocattr+0x198/0x1c0 [ 129.089963][ T8203] proc_pid_attr_write+0x1e7/0x220 [ 129.095301][ T8203] vfs_writev+0x3fb/0x880 [ 129.099647][ T8203] ? __pfx_proc_pid_attr_write+0x10/0x10 [ 129.105326][ T8203] ? mutex_lock+0xd/0x40 [ 129.109583][ T8203] do_writev+0xf4/0x220 [ 129.113826][ T8203] __x64_sys_writev+0x45/0x50 [ 129.118510][ T8203] x64_sys_call+0x1fab/0x2dc0 [ 129.123278][ T8203] do_syscall_64+0xc9/0x1c0 [ 129.127795][ T8203] ? clear_bhb_loop+0x55/0xb0 [ 129.132548][ T8203] ? clear_bhb_loop+0x55/0xb0 [ 129.137241][ T8203] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 129.143152][ T8203] RIP: 0033:0x7ff2eb70e759 [ 129.147665][ T8203] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 129.167368][ T8203] RSP: 002b:00007ff2ea381038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 129.175788][ T8203] RAX: ffffffffffffffda RBX: 00007ff2eb8c5f80 RCX: 00007ff2eb70e759 [ 129.183785][ T8203] RDX: 0000000000000008 RSI: 00000000200000c0 RDI: 0000000000000004 [ 129.191824][ T8203] RBP: 00007ff2ea381090 R08: 0000000000000000 R09: 0000000000000000 [ 129.199973][ T8203] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 129.207949][ T8203] R13: 0000000000000000 R14: 00007ff2eb8c5f80 R15: 00007ffc8287ec48 [ 129.215930][ T8203] [ 129.241227][ T8212] sch_tbf: peakrate 8 is lower than or equals to rate 12 ! [ 129.285983][ T8219] Zero length message leads to an empty skb [ 129.391611][ T8234] sch_tbf: peakrate 8 is lower than or equals to rate 12 ! [ 129.486972][ T8247] loop5: detected capacity change from 0 to 2048 [ 129.519978][ T8252] syz_tun: entered promiscuous mode [ 129.530733][ T8252] vlan2: entered promiscuous mode [ 129.531332][ T8247] EXT4-fs mount: 122 callbacks suppressed [ 129.531348][ T8247] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 129.554708][ T8252] syz_tun: left promiscuous mode [ 129.598076][ T5620] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 129.623437][ T8269] sch_tbf: peakrate 8 is lower than or equals to rate 12 ! [ 129.800288][ T8292] loop6: detected capacity change from 0 to 1024 [ 129.807702][ T8292] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 129.833843][ T8292] EXT4-fs error (device loop6): ext4_map_blocks:705: inode #3: block 2: comm syz.6.1841: lblock 2 mapped to illegal pblock 2 (length 1) [ 129.867833][ T8292] EXT4-fs error (device loop6): ext4_acquire_dquot:6938: comm syz.6.1841: Failed to acquire dquot type 0 [ 129.879914][ T8292] EXT4-fs error (device loop6): ext4_map_blocks:671: inode #3: block 2: comm syz.6.1841: lblock 2 mapped to illegal pblock 2 (length 1) [ 129.897118][ T8292] EXT4-fs error (device loop6): ext4_acquire_dquot:6938: comm syz.6.1841: Failed to acquire dquot type 0 [ 129.909161][ T8292] EXT4-fs error (device loop6): ext4_free_blocks:6589: comm syz.6.1841: Freeing blocks not in datazone - block = 0, count = 4096 [ 129.923201][ T8292] EXT4-fs error (device loop6): ext4_map_blocks:671: inode #3: block 2: comm syz.6.1841: lblock 2 mapped to illegal pblock 2 (length 1) [ 129.942813][ T8292] EXT4-fs error (device loop6): ext4_acquire_dquot:6938: comm syz.6.1841: Failed to acquire dquot type 0 [ 129.965635][ T8292] EXT4-fs (loop6): 1 orphan inode deleted [ 129.979541][ T8292] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 130.025304][ T8292] EXT4-fs error (device loop6): ext4_map_blocks:671: inode #2: block 5: comm syz.6.1841: lblock 0 mapped to illegal pblock 5 (length 1) [ 130.066066][ T8312] ip6gre0: entered promiscuous mode [ 130.072045][ T8312] vlan2: entered promiscuous mode [ 130.078721][ T8312] ip6gre0: left promiscuous mode [ 130.179604][ T8320] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 130.187248][ T8320] vhci_hcd: SetHubDepth req not supported for USB 2.0 roothub [ 130.213943][ T8323] FAULT_INJECTION: forcing a failure. [ 130.213943][ T8323] name failslab, interval 1, probability 0, space 0, times 0 [ 130.226868][ T8323] CPU: 1 UID: 0 PID: 8323 Comm: syz.8.1855 Not tainted 6.12.0-syzkaller-00971-g158f238aa69d #0 [ 130.237338][ T8323] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 130.237373][ T8323] Call Trace: [ 130.237379][ T8323] [ 130.237385][ T8323] dump_stack_lvl+0xf2/0x150 [ 130.237407][ T8323] dump_stack+0x15/0x20 [ 130.237422][ T8323] should_fail_ex+0x223/0x230 [ 130.237456][ T8323] ? alloc_empty_file+0xd0/0x200 [ 130.237567][ T8323] should_failslab+0x8f/0xb0 [ 130.237597][ T8323] kmem_cache_alloc_noprof+0x4c/0x290 [ 130.237630][ T8323] alloc_empty_file+0xd0/0x200 [ 130.237656][ T8323] dentry_open+0x2d/0x90 [ 130.237744][ T8323] __se_sys_fsmount+0x564/0x6a0 [ 130.237777][ T8323] __x64_sys_fsmount+0x43/0x50 [ 130.237804][ T8323] x64_sys_call+0x1c13/0x2dc0 [ 130.237837][ T8323] do_syscall_64+0xc9/0x1c0 [ 130.237855][ T8323] ? clear_bhb_loop+0x55/0xb0 [ 130.237895][ T8323] ? clear_bhb_loop+0x55/0xb0 [ 130.237966][ T8323] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 130.238005][ T8323] RIP: 0033:0x7f5df6b1e759 [ 130.238023][ T8323] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 130.238097][ T8323] RSP: 002b:00007f5df5797038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b0 [ 130.238122][ T8323] RAX: ffffffffffffffda RBX: 00007f5df6cd5f80 RCX: 00007f5df6b1e759 [ 130.238135][ T8323] RDX: 0000000000000006 RSI: 0000000000000000 RDI: 0000000000000005 [ 130.238146][ T8323] RBP: 00007f5df5797090 R08: 0000000000000000 R09: 0000000000000000 [ 130.238233][ T8323] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 130.238266][ T8323] R13: 0000000000000000 R14: 00007f5df6cd5f80 R15: 00007ffd6982ece8 [ 130.238290][ T8323] [ 130.289624][ T8327] loop8: detected capacity change from 0 to 512 [ 130.427874][ T8327] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 130.441045][ T8327] ext4 filesystem being mounted at /181/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 130.465015][ T8333] loop5: detected capacity change from 0 to 512 [ 130.472087][ T5750] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 130.472542][ T8333] EXT4-fs: Ignoring removed bh option [ 130.487740][ T8333] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 130.498194][ T8333] EXT4-fs (loop5): 1 truncate cleaned up [ 130.504464][ T8333] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 130.572830][ T5658] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 130.590061][ T8342] loop7: detected capacity change from 0 to 512 [ 130.596780][ T8342] EXT4-fs: Ignoring removed bh option [ 130.605731][ T8342] EXT4-fs (loop7): mounting ext3 file system using the ext4 subsystem [ 130.622012][ T8342] EXT4-fs (loop7): 1 truncate cleaned up [ 130.622443][ T5620] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 130.628075][ T8288] dccp_close: ABORT with 72 bytes unread [ 130.642989][ T8342] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 130.684239][ T8346] tmpfs: Bad value for 'mpol' [ 130.694100][ T8349] syz_tun: entered promiscuous mode [ 130.699569][ T8349] vlan1: entered promiscuous mode [ 130.706639][ T8349] syz_tun: left promiscuous mode [ 130.735520][ T8358] netlink: 256 bytes leftover after parsing attributes in process `syz.8.1869'. [ 130.742238][ T5662] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 130.809969][ T8373] loop6: detected capacity change from 0 to 512 [ 130.826233][ T8373] EXT4-fs: Ignoring removed bh option [ 130.835296][ T8373] EXT4-fs (loop6): mounting ext3 file system using the ext4 subsystem [ 130.868193][ T8373] EXT4-fs (loop6): 1 truncate cleaned up [ 130.875319][ T8373] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 130.909688][ T5658] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 130.976710][ T8399] syz_tun: entered promiscuous mode [ 130.981973][ T8399] vlan2: entered promiscuous mode [ 131.005693][ T8399] syz_tun: left promiscuous mode [ 131.017808][ T8411] netlink: 'syz.0.1893': attribute type 2 has an invalid length. [ 131.025635][ T8411] netlink: 'syz.0.1893': attribute type 8 has an invalid length. [ 131.033437][ T8411] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1893'. [ 131.041886][ T8413] loop6: detected capacity change from 0 to 512 [ 131.049597][ T8413] EXT4-fs: Ignoring removed bh option [ 131.057398][ T8413] EXT4-fs (loop6): mounting ext3 file system using the ext4 subsystem [ 131.079461][ T8413] EXT4-fs (loop6): 1 truncate cleaned up [ 131.088400][ T8413] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 131.102388][ T8421] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1897'. [ 131.133656][ T5658] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 131.155839][ T8430] ip6gre0: entered promiscuous mode [ 131.161246][ T8430] vlan2: entered promiscuous mode [ 131.170470][ T8430] ip6gre0: left promiscuous mode [ 131.180070][ T8434] sch_tbf: peakrate 8 is lower than or equals to rate 12 ! [ 131.248558][ T8442] loop6: detected capacity change from 0 to 2048 [ 131.267233][ T8442] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 131.293375][ T5658] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 131.302474][ T29] kauditd_printk_skb: 671 callbacks suppressed [ 131.302489][ T29] audit: type=1400 audit(1732057445.809:6603): avc: denied { create } for pid=8453 comm="syz.7.1911" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 131.310749][ T8454] rdma_op ffff888110f77180 conn xmit_rdma 0000000000000000 [ 131.348799][ T29] audit: type=1400 audit(1732057445.829:6604): avc: denied { bind } for pid=8453 comm="syz.7.1911" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 131.364755][ T8454] 9pnet: Could not find request transport: 0xffffffffffffffff [ 131.368110][ T29] audit: type=1400 audit(1732057445.829:6605): avc: denied { write } for pid=8453 comm="syz.7.1911" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 131.394994][ T29] audit: type=1400 audit(1732057445.859:6606): avc: denied { create } for pid=8453 comm="syz.7.1911" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 131.415796][ T29] audit: type=1400 audit(1732057445.859:6607): avc: denied { mounton } for pid=8453 comm="syz.7.1911" path="/212/file0" dev="tmpfs" ino=1160 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 131.438924][ T29] audit: type=1400 audit(1732057445.859:6608): avc: denied { module_request } for pid=8453 comm="syz.7.1911" kmod="9p-0xffffffffffffffff" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 131.463349][ T29] audit: type=1400 audit(1732057445.869:6609): avc: denied { ioctl } for pid=8456 comm="syz.0.1913" path="socket:[22915]" dev="sockfs" ino=22915 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 131.519078][ T29] audit: type=1400 audit(1732057445.989:6610): avc: denied { unlink } for pid=5662 comm="syz-executor" name="file0" dev="tmpfs" ino=1160 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 131.555679][ T8459] loop6: detected capacity change from 0 to 1764 [ 131.584035][ T29] audit: type=1400 audit(1732057446.099:6611): avc: denied { mount } for pid=8457 comm="syz.6.1912" name="/" dev="loop6" ino=1920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 131.611278][ T8459] block device autoloading is deprecated and will be removed. [ 131.613495][ T29] audit: type=1400 audit(1732057446.129:6612): avc: denied { write } for pid=8469 comm="syz.7.1916" name="event2" dev="devtmpfs" ino=245 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 131.643312][ T8459] bio_check_eod: 2 callbacks suppressed [ 131.643328][ T8459] syz.6.1912: attempt to access beyond end of device [ 131.643328][ T8459] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 131.793405][ T8496] loop0: detected capacity change from 0 to 128 [ 131.802230][ T8493] FAULT_INJECTION: forcing a failure. [ 131.802230][ T8493] name failslab, interval 1, probability 0, space 0, times 0 [ 131.814912][ T8493] CPU: 0 UID: 0 PID: 8493 Comm: syz.8.1928 Not tainted 6.12.0-syzkaller-00971-g158f238aa69d #0 [ 131.825267][ T8493] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 131.835383][ T8493] Call Trace: [ 131.838670][ T8493] [ 131.841651][ T8493] dump_stack_lvl+0xf2/0x150 [ 131.846304][ T8493] dump_stack+0x15/0x20 [ 131.850467][ T8493] should_fail_ex+0x223/0x230 [ 131.855224][ T8493] ? security_inode_alloc+0x37/0x100 [ 131.860520][ T8493] should_failslab+0x8f/0xb0 [ 131.865227][ T8493] kmem_cache_alloc_noprof+0x4c/0x290 [ 131.870619][ T8493] security_inode_alloc+0x37/0x100 [ 131.875745][ T8493] inode_init_always_gfp+0x4a2/0x4f0 [ 131.881104][ T8493] ? __pfx_shmem_alloc_inode+0x10/0x10 [ 131.886587][ T8493] alloc_inode+0x82/0x160 [ 131.890929][ T8493] new_inode+0x1e/0x100 [ 131.895128][ T8493] shmem_get_inode+0x24e/0x730 [ 131.899925][ T8493] __shmem_file_setup+0x127/0x1f0 [ 131.905107][ T8493] shmem_file_setup+0x3b/0x50 [ 131.909898][ T8493] __se_sys_memfd_create+0x31d/0x5c0 [ 131.915205][ T8493] __x64_sys_memfd_create+0x31/0x40 [ 131.920448][ T8493] x64_sys_call+0x2d4c/0x2dc0 [ 131.925198][ T8493] do_syscall_64+0xc9/0x1c0 [ 131.929809][ T8493] ? clear_bhb_loop+0x55/0xb0 [ 131.934508][ T8493] ? clear_bhb_loop+0x55/0xb0 [ 131.939279][ T8493] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 131.945296][ T8493] RIP: 0033:0x7f5df6b1e759 [ 131.949750][ T8493] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 131.969372][ T8493] RSP: 002b:00007f5df5796e18 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 131.977843][ T8493] RAX: ffffffffffffffda RBX: 0000000000000a36 RCX: 00007f5df6b1e759 [ 131.985829][ T8493] RDX: 00007f5df5796ef0 RSI: 0000000000000000 RDI: 00007f5df6b91fca [ 131.993841][ T8493] RBP: 0000000020001580 R08: 00007f5df5796bb7 R09: 00007f5df5796e40 [ 132.001880][ T8493] R10: 000000000000000a R11: 0000000000000202 R12: 0000000020000540 [ 132.009856][ T8493] R13: 00007f5df5796ef0 R14: 00007f5df5796eb0 R15: 00000000200006c0 [ 132.017967][ T8493] [ 132.037782][ T8488] loop7: detected capacity change from 0 to 2048 [ 132.045172][ T8496] /dev/loop0: Can't open blockdev [ 132.074588][ T8488] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 132.108089][ T8503] sch_tbf: peakrate 8 is lower than or equals to rate 12 ! [ 132.118289][ T5662] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 132.161771][ T8511] loop7: detected capacity change from 0 to 512 [ 132.175426][ T8511] EXT4-fs: Ignoring removed bh option [ 132.182829][ T8514] netlink: 'syz.0.1935': attribute type 4 has an invalid length. [ 132.191107][ T8511] EXT4-fs (loop7): mounting ext3 file system using the ext4 subsystem [ 132.207265][ T8514] netlink: 'syz.0.1935': attribute type 4 has an invalid length. [ 132.211926][ T8511] EXT4-fs (loop7): 1 truncate cleaned up [ 132.222574][ T8514] netlink: 'syz.0.1935': attribute type 3 has an invalid length. [ 132.236320][ T8511] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 132.255835][ T8514] 9pnet: Could not find request transport: t [ 132.258340][ T8518] ip6gre0: entered promiscuous mode [ 132.267277][ T8518] vlan1: entered promiscuous mode [ 132.273946][ T8518] ip6gre0: left promiscuous mode [ 132.283260][ T5662] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 132.293276][ T8514] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1935'. [ 132.384887][ T8529] loop5: detected capacity change from 0 to 1024 [ 132.396736][ T8538] loop6: detected capacity change from 0 to 128 [ 132.407017][ T8529] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 132.421129][ T8538] FAT-fs (loop6): error, invalid access to FAT (entry 0x00000100) [ 132.429079][ T8538] FAT-fs (loop6): Filesystem has been set read-only [ 132.437180][ T8538] syz.6.1945: attempt to access beyond end of device [ 132.437180][ T8538] loop6: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 132.451093][ T8538] FAT-fs (loop6): error, invalid access to FAT (entry 0x00000100) [ 132.459197][ T8538] FAT-fs (loop6): error, invalid access to FAT (entry 0x00000100) [ 132.465626][ T8543] ip6gre0: entered promiscuous mode [ 132.472713][ T8543] vlan2: entered promiscuous mode [ 132.478319][ T8529] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 132.483173][ T8538] syz.6.1945: attempt to access beyond end of device [ 132.483173][ T8538] loop6: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 132.493831][ T8529] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 132.513762][ T8543] ip6gre0: left promiscuous mode [ 132.515357][ T8538] syz.6.1945: attempt to access beyond end of device [ 132.515357][ T8538] loop6: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 132.527052][ T8548] loop7: detected capacity change from 0 to 512 [ 132.558447][ T8548] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 132.571245][ T8548] ext4 filesystem being mounted at /223/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 132.615073][ T8548] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 132.723593][ T8574] bridge0: entered promiscuous mode [ 132.728895][ T8574] vlan2: entered promiscuous mode [ 132.736075][ T8574] bridge0: left promiscuous mode [ 132.748545][ T8581] sch_tbf: peakrate 8 is lower than or equals to rate 12 ! [ 132.764564][ T8583] ip6gre0: entered promiscuous mode [ 132.770343][ T8583] vlan2: entered promiscuous mode [ 132.780062][ T8585] loop6: detected capacity change from 0 to 512 [ 132.785688][ T8583] ip6gre0: left promiscuous mode [ 132.786796][ T8585] EXT4-fs: Ignoring removed bh option [ 132.797941][ T8585] EXT4-fs (loop6): mounting ext3 file system using the ext4 subsystem [ 132.811571][ T8585] EXT4-fs (loop6): 1 truncate cleaned up [ 132.817929][ T8585] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 132.855433][ T8596] loop8: detected capacity change from 0 to 1024 [ 132.872016][ T8596] EXT4-fs (loop8): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 132.886805][ T5658] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 132.897030][ T8596] EXT4-fs error (device loop8): ext4_map_blocks:705: inode #3: block 2: comm syz.8.1971: lblock 2 mapped to illegal pblock 2 (length 1) [ 132.911996][ T8596] EXT4-fs error (device loop8): ext4_acquire_dquot:6938: comm syz.8.1971: Failed to acquire dquot type 0 [ 132.925397][ T8596] EXT4-fs error (device loop8): ext4_map_blocks:671: inode #3: block 2: comm syz.8.1971: lblock 2 mapped to illegal pblock 2 (length 1) [ 132.929148][ T8604] loop5: detected capacity change from 0 to 512 [ 132.946425][ T8604] EXT4-fs: Ignoring removed bh option [ 132.952069][ T8596] EXT4-fs error (device loop8): ext4_acquire_dquot:6938: comm syz.8.1971: Failed to acquire dquot type 0 [ 132.964226][ T8604] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 132.965637][ T8596] EXT4-fs error (device loop8): ext4_free_blocks:6589: comm syz.8.1971: Freeing blocks not in datazone - block = 0, count = 4096 [ 132.986830][ T8596] EXT4-fs error (device loop8): ext4_map_blocks:671: inode #3: block 2: comm syz.8.1971: lblock 2 mapped to illegal pblock 2 (length 1) [ 132.991830][ T8604] EXT4-fs (loop5): 1 truncate cleaned up [ 133.007065][ T8604] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 133.013558][ T8611] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1977'. [ 133.024470][ T8596] EXT4-fs error (device loop8): ext4_acquire_dquot:6938: comm syz.8.1971: Failed to acquire dquot type 0 [ 133.040520][ T8596] EXT4-fs (loop8): 1 orphan inode deleted [ 133.046853][ T8596] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 133.062126][ T5620] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 133.087675][ T8596] EXT4-fs error (device loop8): ext4_map_blocks:671: inode #2: block 5: comm syz.8.1971: lblock 0 mapped to illegal pblock 5 (length 1) [ 133.153212][ T8626] loop6: detected capacity change from 0 to 512 [ 133.161386][ T8626] EXT4-fs (loop6): inodes count not valid: 15 vs 32 [ 133.243712][ T8639] loop6: detected capacity change from 0 to 128 [ 133.256771][ T8639] FAT-fs (loop6): error, invalid access to FAT (entry 0x00000100) [ 133.264651][ T8639] FAT-fs (loop6): Filesystem has been set read-only [ 133.271515][ T8639] syz.6.1988: attempt to access beyond end of device [ 133.271515][ T8639] loop6: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 133.285364][ T8639] FAT-fs (loop6): error, invalid access to FAT (entry 0x00000100) [ 133.293252][ T8639] FAT-fs (loop6): error, invalid access to FAT (entry 0x00000100) [ 133.301260][ T8639] syz.6.1988: attempt to access beyond end of device [ 133.301260][ T8639] loop6: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 133.314551][ T8639] syz.6.1988: attempt to access beyond end of device [ 133.314551][ T8639] loop6: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 133.462101][ T8645] ip6tnl0: entered promiscuous mode [ 133.467638][ T8645] vlan2: entered promiscuous mode [ 133.473964][ T8645] ip6tnl0: left promiscuous mode [ 133.582483][ T8659] sch_tbf: peakrate 8 is lower than or equals to rate 12 ! [ 133.602666][ T8661] loop0: detected capacity change from 0 to 128 [ 133.614582][ T8661] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 133.622634][ T8661] FAT-fs (loop0): Filesystem has been set read-only [ 133.629776][ T8661] syz.0.1999: attempt to access beyond end of device [ 133.629776][ T8661] loop0: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 133.643755][ T8661] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 133.644403][ T5750] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 133.651685][ T8661] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 133.669380][ T8661] syz.0.1999: attempt to access beyond end of device [ 133.669380][ T8661] loop0: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 133.682863][ T8661] syz.0.1999: attempt to access beyond end of device [ 133.682863][ T8661] loop0: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 133.772041][ T8678] ip6tnl0: entered promiscuous mode [ 133.782869][ T8678] vlan2: entered promiscuous mode [ 133.793307][ T8678] ip6tnl0: left promiscuous mode [ 133.803018][ T8684] loop8: detected capacity change from 0 to 512 [ 133.809741][ T8684] EXT4-fs: Ignoring removed bh option [ 133.815425][ T8684] EXT4-fs (loop8): mounting ext3 file system using the ext4 subsystem [ 133.826898][ T8684] EXT4-fs (loop8): 1 truncate cleaned up [ 133.833133][ T8684] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 133.837982][ T8689] loop7: detected capacity change from 0 to 1024 [ 133.853067][ T8689] EXT4-fs (loop7): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 133.866768][ T8689] EXT4-fs error (device loop7): ext4_map_blocks:705: inode #3: block 2: comm syz.7.2010: lblock 2 mapped to illegal pblock 2 (length 1) [ 133.881537][ T5750] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 133.885077][ T8689] EXT4-fs error (device loop7): ext4_acquire_dquot:6938: comm syz.7.2010: Failed to acquire dquot type 0 [ 133.905661][ T8689] EXT4-fs error (device loop7): ext4_map_blocks:671: inode #3: block 2: comm syz.7.2010: lblock 2 mapped to illegal pblock 2 (length 1) [ 133.922763][ T8689] EXT4-fs error (device loop7): ext4_acquire_dquot:6938: comm syz.7.2010: Failed to acquire dquot type 0 [ 133.934622][ T8689] EXT4-fs error (device loop7): ext4_free_blocks:6589: comm syz.7.2010: Freeing blocks not in datazone - block = 0, count = 4096 [ 133.950907][ T8689] EXT4-fs error (device loop7): ext4_map_blocks:671: inode #3: block 2: comm syz.7.2010: lblock 2 mapped to illegal pblock 2 (length 1) [ 133.965273][ T8689] EXT4-fs error (device loop7): ext4_acquire_dquot:6938: comm syz.7.2010: Failed to acquire dquot type 0 [ 133.977521][ T8689] EXT4-fs (loop7): 1 orphan inode deleted [ 133.983763][ T8689] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 134.011701][ T8689] EXT4-fs error (device loop7): ext4_map_blocks:671: inode #2: block 5: comm syz.7.2010: lblock 0 mapped to illegal pblock 5 (length 1) [ 134.027708][ T8705] loop8: detected capacity change from 0 to 128 [ 134.038846][ T8705] FAT-fs (loop8): error, invalid access to FAT (entry 0x00000100) [ 134.046786][ T8705] FAT-fs (loop8): Filesystem has been set read-only [ 134.054278][ T8705] FAT-fs (loop8): error, invalid access to FAT (entry 0x00000100) [ 134.062192][ T8705] FAT-fs (loop8): error, invalid access to FAT (entry 0x00000100) [ 134.133039][ T8711] ip6gretap0: entered promiscuous mode [ 134.138969][ T8711] vlan1: entered promiscuous mode [ 134.146095][ T8711] ip6gretap0: left promiscuous mode [ 134.179746][ T8715] ip6tnl0: entered promiscuous mode [ 134.185055][ T8715] vlan2: entered promiscuous mode [ 134.192240][ T8715] ip6tnl0: left promiscuous mode [ 134.210937][ T8719] loop5: detected capacity change from 0 to 512 [ 134.217668][ T8719] EXT4-fs: Ignoring removed bh option [ 134.223442][ T8719] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 134.233011][ T8719] EXT4-fs (loop5): 1 truncate cleaned up [ 134.239103][ T8719] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 134.262658][ T5620] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 134.285956][ T8724] loop5: detected capacity change from 0 to 512 [ 134.292755][ T8724] EXT4-fs: Ignoring removed bh option [ 134.299248][ T8724] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 134.308996][ T8724] EXT4-fs (loop5): 1 truncate cleaned up [ 134.315103][ T8724] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 134.340892][ T8730] loop8: detected capacity change from 0 to 4096 [ 134.350370][ T5620] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 134.362528][ T8730] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 134.376603][ T8733] FAULT_INJECTION: forcing a failure. [ 134.376603][ T8733] name failslab, interval 1, probability 0, space 0, times 0 [ 134.389303][ T8733] CPU: 0 UID: 0 PID: 8733 Comm: syz.5.2029 Not tainted 6.12.0-syzkaller-00971-g158f238aa69d #0 [ 134.399836][ T8733] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 134.409994][ T8733] Call Trace: [ 134.413367][ T8733] [ 134.416320][ T8733] dump_stack_lvl+0xf2/0x150 [ 134.420936][ T8733] dump_stack+0x15/0x20 [ 134.425238][ T8733] should_fail_ex+0x223/0x230 [ 134.429959][ T8733] ? __alloc_skb+0x10b/0x310 [ 134.434580][ T8733] should_failslab+0x8f/0xb0 [ 134.439253][ T8733] kmem_cache_alloc_node_noprof+0x51/0x2b0 [ 134.445188][ T8733] ? __alloc_skb+0x1b5/0x310 [ 134.449887][ T8733] __alloc_skb+0x10b/0x310 [ 134.454337][ T8733] ? ip_generic_getfrag+0x138/0x1a0 [ 134.459627][ T8733] __ip_append_data+0x18ee/0x2350 [ 134.464735][ T8733] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 134.470465][ T8733] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 134.476095][ T8733] ip_append_data+0x11f/0x150 [ 134.480811][ T8733] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 134.486394][ T8733] udp_sendmsg+0x366/0x12f0 [ 134.490917][ T8733] ? mntput_no_expire+0x70/0x3c0 [ 134.495898][ T8733] ? __rcu_read_unlock+0x4e/0x70 [ 134.500892][ T8733] ? avc_has_perm_noaudit+0x1cc/0x210 [ 134.506370][ T8733] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 134.512026][ T8733] ? avc_has_perm+0xd4/0x160 [ 134.516701][ T8733] ? __pfx_udp_sendmsg+0x10/0x10 [ 134.521674][ T8733] inet_sendmsg+0xaf/0xd0 [ 134.526062][ T8733] __sock_sendmsg+0x102/0x180 [ 134.530807][ T8733] sock_write_iter+0x15e/0x1a0 [ 134.535608][ T8733] vfs_write+0x77f/0x920 [ 134.539921][ T8733] ? __pfx_sock_write_iter+0x10/0x10 [ 134.545348][ T8733] ksys_write+0xe8/0x1b0 [ 134.549627][ T8733] __x64_sys_write+0x42/0x50 [ 134.554364][ T8733] x64_sys_call+0x287e/0x2dc0 [ 134.559107][ T8733] do_syscall_64+0xc9/0x1c0 [ 134.563727][ T8733] ? clear_bhb_loop+0x55/0xb0 [ 134.568459][ T8733] ? clear_bhb_loop+0x55/0xb0 [ 134.573201][ T8733] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 134.579170][ T8733] RIP: 0033:0x7fc5ba3de759 [ 134.583695][ T8733] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 134.603535][ T8733] RSP: 002b:00007fc5b9051038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 134.611957][ T8733] RAX: ffffffffffffffda RBX: 00007fc5ba595f80 RCX: 00007fc5ba3de759 [ 134.619944][ T8733] RDX: 000000000000fdef RSI: 0000000020000300 RDI: 0000000000000007 [ 134.627987][ T8733] RBP: 00007fc5b9051090 R08: 0000000000000000 R09: 0000000000000000 [ 134.635964][ T8733] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 134.643941][ T8733] R13: 0000000000000000 R14: 00007fc5ba595f80 R15: 00007ffe4f9d2458 [ 134.651932][ T8733] [ 134.781013][ T5662] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 134.814380][ T8750] ip6tnl0: entered promiscuous mode [ 134.830650][ T8754] loop6: detected capacity change from 0 to 512 [ 134.837539][ T8754] EXT4-fs: Ignoring removed bh option [ 134.844005][ T8750] vlan2: entered promiscuous mode [ 134.853774][ T8754] EXT4-fs (loop6): mounting ext3 file system using the ext4 subsystem [ 134.865443][ T8750] ip6tnl0: left promiscuous mode [ 134.876158][ T8754] EXT4-fs (loop6): 1 truncate cleaned up [ 134.882258][ T8754] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 134.978590][ T5658] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 135.140239][ T8772] loop6: detected capacity change from 0 to 1024 [ 135.152970][ T8772] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 135.187737][ T8772] EXT4-fs error (device loop6): ext4_map_blocks:705: inode #3: block 2: comm syz.6.2046: lblock 2 mapped to illegal pblock 2 (length 1) [ 135.203631][ T8772] EXT4-fs error (device loop6): ext4_acquire_dquot:6938: comm syz.6.2046: Failed to acquire dquot type 0 [ 135.217667][ T8772] EXT4-fs error (device loop6): ext4_map_blocks:671: inode #3: block 2: comm syz.6.2046: lblock 2 mapped to illegal pblock 2 (length 1) [ 135.241519][ T8772] EXT4-fs error (device loop6): ext4_acquire_dquot:6938: comm syz.6.2046: Failed to acquire dquot type 0 [ 135.254093][ T8772] EXT4-fs error (device loop6): ext4_free_blocks:6589: comm syz.6.2046: Freeing blocks not in datazone - block = 0, count = 4096 [ 135.269711][ T8772] EXT4-fs error (device loop6): ext4_map_blocks:671: inode #3: block 2: comm syz.6.2046: lblock 2 mapped to illegal pblock 2 (length 1) [ 135.285181][ T8772] EXT4-fs error (device loop6): ext4_acquire_dquot:6938: comm syz.6.2046: Failed to acquire dquot type 0 [ 135.298894][ T8772] EXT4-fs (loop6): 1 orphan inode deleted [ 135.305490][ T8772] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 135.335798][ T8772] EXT4-fs error (device loop6): ext4_map_blocks:671: inode #2: block 5: comm syz.6.2046: lblock 0 mapped to illegal pblock 5 (length 1) [ 135.684350][ T8780] loop7: detected capacity change from 0 to 128 [ 135.719732][ T8780] FAT-fs (loop7): error, invalid access to FAT (entry 0x00000100) [ 135.727638][ T8780] FAT-fs (loop7): Filesystem has been set read-only [ 135.735196][ T8780] FAT-fs (loop7): error, invalid access to FAT (entry 0x00000100) [ 135.743196][ T8780] FAT-fs (loop7): error, invalid access to FAT (entry 0x00000100) [ 135.804420][ T8786] loop5: detected capacity change from 0 to 512 [ 135.812274][ T8786] EXT4-fs: Ignoring removed bh option [ 135.822763][ T8786] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 135.843382][ T8786] EXT4-fs (loop5): 1 truncate cleaned up [ 135.850258][ T8786] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 135.873939][ T5658] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 135.904729][ T5620] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 135.957449][ T8795] loop6: detected capacity change from 0 to 512 [ 135.964156][ T8795] EXT4-fs: Ignoring removed bh option [ 135.974282][ T8795] EXT4-fs (loop6): mounting ext3 file system using the ext4 subsystem [ 135.992174][ T8795] EXT4-fs (loop6): 1 truncate cleaned up [ 135.999037][ T8795] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 136.063646][ T8800] loop0: detected capacity change from 0 to 512 [ 136.084904][ T8800] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2240: inode #15: comm syz.0.2057: corrupted in-inode xattr: invalid ea_ino [ 136.108555][ T8800] EXT4-fs error (device loop0): ext4_orphan_get:1394: comm syz.0.2057: couldn't read orphan inode 15 (err -117) [ 136.122182][ T5658] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 136.122744][ T8800] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 136.198307][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 136.315508][ T29] kauditd_printk_skb: 951 callbacks suppressed [ 136.315526][ T29] audit: type=1400 audit(1732057450.829:7549): avc: denied { create } for pid=8812 comm="syz.6.2063" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 136.342350][ T29] audit: type=1400 audit(1732057450.829:7550): avc: denied { read } for pid=8813 comm="syz.0.2062" dev="nsfs" ino=4026532514 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 136.366558][ T29] audit: type=1400 audit(1732057450.889:7551): avc: denied { open } for pid=8813 comm="syz.0.2062" path="net:[4026532514]" dev="nsfs" ino=4026532514 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 136.390077][ T8814] ip6tnl0: entered promiscuous mode [ 136.390083][ T29] audit: type=1400 audit(1732057450.889:7552): avc: denied { create } for pid=8813 comm="syz.0.2062" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 136.405759][ T8814] vlan2: entered promiscuous mode [ 136.416645][ T29] audit: type=1400 audit(1732057450.889:7553): avc: denied { create } for pid=8812 comm="syz.6.2063" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 136.446547][ T8814] ip6tnl0: left promiscuous mode [ 136.465232][ T8818] loop0: detected capacity change from 0 to 128 [ 136.472534][ T29] audit: type=1400 audit(1732057450.999:7554): avc: denied { mounton } for pid=8817 comm="syz.0.2064" path="/422/file2" dev="tmpfs" ino=2224 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 136.499067][ T29] audit: type=1400 audit(1732057451.019:7555): avc: denied { mount } for pid=8817 comm="syz.0.2064" name="/" dev="loop0" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 136.504791][ T8818] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 136.529206][ T8818] FAT-fs (loop0): Filesystem has been set read-only [ 136.536363][ T8818] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 136.544210][ T8818] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 136.590776][ T29] audit: type=1400 audit(1732057451.109:7556): avc: denied { create } for pid=8819 comm="syz.6.2065" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 136.614743][ T29] audit: type=1400 audit(1732057451.109:7557): avc: denied { map } for pid=8819 comm="syz.6.2065" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=24074 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 136.639321][ T29] audit: type=1400 audit(1732057451.109:7558): avc: denied { read write } for pid=8819 comm="syz.6.2065" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=24074 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 136.732064][ T8830] ip6gre0: entered promiscuous mode [ 136.737706][ T8830] vlan2: entered promiscuous mode [ 136.745954][ T8830] ip6gre0: left promiscuous mode [ 136.760721][ T8824] sch_tbf: peakrate 8 is lower than or equals to rate 12 ! [ 136.777527][ T8832] loop7: detected capacity change from 0 to 128 [ 136.816007][ T8832] FAT-fs (loop7): error, invalid access to FAT (entry 0x00000100) [ 136.823919][ T8832] FAT-fs (loop7): Filesystem has been set read-only [ 136.835175][ T8832] bio_check_eod: 9 callbacks suppressed [ 136.835189][ T8832] syz.7.2072: attempt to access beyond end of device [ 136.835189][ T8832] loop7: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 136.856004][ T8832] FAT-fs (loop7): error, invalid access to FAT (entry 0x00000100) [ 136.863875][ T8832] FAT-fs (loop7): error, invalid access to FAT (entry 0x00000100) [ 136.876133][ T8728] EXT4-fs (loop8): shut down requested (0) [ 136.882241][ T8832] syz.7.2072: attempt to access beyond end of device [ 136.882241][ T8832] loop7: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 136.897108][ T8832] syz.7.2072: attempt to access beyond end of device [ 136.897108][ T8832] loop7: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 136.950112][ T5750] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 136.973158][ T8855] loop8: detected capacity change from 0 to 128 [ 136.983560][ T8855] FAT-fs (loop8): error, invalid access to FAT (entry 0x00000100) [ 136.991607][ T8855] FAT-fs (loop8): Filesystem has been set read-only [ 136.998665][ T8855] syz.8.2080: attempt to access beyond end of device [ 136.998665][ T8855] loop8: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 137.012504][ T8855] FAT-fs (loop8): error, invalid access to FAT (entry 0x00000100) [ 137.020680][ T8855] FAT-fs (loop8): error, invalid access to FAT (entry 0x00000100) [ 137.030200][ T8859] sch_tbf: peakrate 8 is lower than or equals to rate 12 ! [ 137.037887][ T8855] syz.8.2080: attempt to access beyond end of device [ 137.037887][ T8855] loop8: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 137.051811][ T8855] syz.8.2080: attempt to access beyond end of device [ 137.051811][ T8855] loop8: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 137.077571][ T8863] 9pnet_fd: Insufficient options for proto=fd [ 137.151929][ T8880] loop8: detected capacity change from 0 to 128 [ 137.161535][ T8876] loop7: detected capacity change from 0 to 128 [ 137.174495][ T8880] FAT-fs (loop8): error, invalid access to FAT (entry 0x00000100) [ 137.182424][ T8880] FAT-fs (loop8): Filesystem has been set read-only [ 137.192933][ C0] ================================================================== [ 137.201050][ C0] BUG: KCSAN: data-race in can_receive / can_receive [ 137.207758][ C0] [ 137.210096][ C0] read-write to 0xffff888115611d88 of 8 bytes by interrupt on cpu 1: [ 137.213183][ T8880] syz.8.2092: attempt to access beyond end of device [ 137.213183][ T8880] loop8: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 137.218163][ C0] can_receive+0x4e/0x1f0 [ 137.218193][ C0] canfd_rcv+0xe7/0x180 [ 137.218212][ C0] __netif_receive_skb+0x123/0x280 [ 137.218246][ C0] process_backlog+0x22e/0x440 [ 137.218282][ C0] __napi_poll+0x63/0x3c0 [ 137.218315][ C0] net_rx_action+0x3a1/0x7f0 [ 137.218350][ C0] handle_softirqs+0xbf/0x280 [ 137.218371][ C0] run_ksoftirqd+0x1c/0x30 [ 137.218400][ C0] smpboot_thread_fn+0x31c/0x4c0 [ 137.218423][ C0] kthread+0x1d1/0x210 [ 137.218449][ C0] ret_from_fork+0x4b/0x60 [ 137.218477][ C0] ret_from_fork_asm+0x1a/0x30 [ 137.218509][ C0] [ 137.218513][ C0] read-write to 0xffff888115611d88 of 8 bytes by interrupt on cpu 0: [ 137.218532][ C0] can_receive+0x4e/0x1f0 [ 137.218556][ C0] canfd_rcv+0xe7/0x180 [ 137.218578][ C0] __netif_receive_skb+0x123/0x280 [ 137.218613][ C0] process_backlog+0x22e/0x440 [ 137.218653][ C0] __napi_poll+0x63/0x3c0 [ 137.218686][ C0] net_rx_action+0x3a1/0x7f0 [ 137.218723][ C0] handle_softirqs+0xbf/0x280 [ 137.218748][ C0] do_softirq+0x5e/0x90 [ 137.218772][ C0] __local_bh_enable_ip+0x6e/0x70 [ 137.218797][ C0] _raw_spin_unlock_bh+0x36/0x40 [ 137.218823][ C0] batadv_nc_purge_paths+0x220/0x270 [ 137.218857][ C0] batadv_nc_worker+0x3db/0xad0 [ 137.218892][ C0] process_scheduled_works+0x483/0x9a0 [ 137.218933][ C0] worker_thread+0x51d/0x6f0 [ 137.218954][ C0] kthread+0x1d1/0x210 [ 137.218976][ C0] ret_from_fork+0x4b/0x60 [ 137.219003][ C0] ret_from_fork_asm+0x1a/0x30 [ 137.219035][ C0] [ 137.219039][ C0] value changed: 0x000000000000066f -> 0x0000000000000670 [ 137.219052][ C0] [ 137.219056][ C0] Reported by Kernel Concurrency Sanitizer on: [ 137.219065][ C0] CPU: 0 UID: 0 PID: 155 Comm: kworker/u8:5 Not tainted 6.12.0-syzkaller-00971-g158f238aa69d #0 [ 137.219095][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 137.219112][ C0] Workqueue: bat_events batadv_nc_worker [ 137.219149][ C0] ================================================================== [ 137.475075][ C0] ================================================================== [ 137.483199][ C0] BUG: KCSAN: data-race in can_receive / can_receive [ 137.489905][ C0] [ 137.492239][ C0] read-write to 0xffff888115611de8 of 8 bytes by interrupt on cpu 1: [ 137.500319][ C0] can_receive+0x62/0x1f0 [ 137.504677][ C0] canfd_rcv+0xe7/0x180 [ 137.508850][ C0] __netif_receive_skb+0x123/0x280 [ 137.513994][ C0] process_backlog+0x22e/0x440 [ 137.518795][ C0] __napi_poll+0x63/0x3c0 [ 137.523158][ C0] net_rx_action+0x3a1/0x7f0 [ 137.527823][ C0] handle_softirqs+0xbf/0x280 [ 137.532701][ C0] run_ksoftirqd+0x1c/0x30 [ 137.537138][ C0] smpboot_thread_fn+0x31c/0x4c0 [ 137.542103][ C0] kthread+0x1d1/0x210 [ 137.546213][ C0] ret_from_fork+0x4b/0x60 [ 137.550661][ C0] ret_from_fork_asm+0x1a/0x30 [ 137.555463][ C0] [ 137.557802][ C0] read-write to 0xffff888115611de8 of 8 bytes by interrupt on cpu 0: [ 137.565892][ C0] can_receive+0x62/0x1f0 [ 137.570264][ C0] canfd_rcv+0xe7/0x180 [ 137.574438][ C0] __netif_receive_skb+0x123/0x280 [ 137.579582][ C0] process_backlog+0x22e/0x440 [ 137.584410][ C0] __napi_poll+0x63/0x3c0 [ 137.588772][ C0] net_rx_action+0x3a1/0x7f0 [ 137.593402][ C0] handle_softirqs+0xbf/0x280 [ 137.598103][ C0] run_ksoftirqd+0x1c/0x30 [ 137.602544][ C0] smpboot_thread_fn+0x31c/0x4c0 [ 137.607516][ C0] kthread+0x1d1/0x210 [ 137.611608][ C0] ret_from_fork+0x4b/0x60 [ 137.616052][ C0] ret_from_fork_asm+0x1a/0x30 [ 137.620847][ C0] [ 137.623182][ C0] value changed: 0x00000000000006c7 -> 0x00000000000006c8 [ 137.630296][ C0] [ 137.632642][ C0] Reported by Kernel Concurrency Sanitizer on: [ 137.638804][ C0] CPU: 0 UID: 0 PID: 15 Comm: ksoftirqd/0 Not tainted 6.12.0-syzkaller-00971-g158f238aa69d #0 [ 137.649063][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 137.659140][ C0] ================================================================== [ 137.670805][ C0] ================================================================== [ 137.678912][ C0] BUG: KCSAN: data-race in can_send / can_send [ 137.685105][ C0] [ 137.687434][ C0] read-write to 0xffff888115611d90 of 8 bytes by interrupt on cpu 1: [ 137.695609][ C0] can_send+0x562/0x5d0 [ 137.699792][ C0] bcm_can_tx+0x314/0x420 [ 137.704146][ C0] bcm_tx_timeout_handler+0xdb/0x260 [ 137.709458][ C0] __hrtimer_run_queues+0x20d/0x5e0 [ 137.714686][ C0] hrtimer_run_softirq+0xe4/0x2c0 [ 137.719746][ C0] handle_softirqs+0xbf/0x280 [ 137.724474][ C0] irq_exit_rcu+0x3e/0x90 [ 137.728828][ C0] sysvec_apic_timer_interrupt+0x73/0x80 [ 137.734495][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 137.740507][ C0] __sanitizer_cov_trace_pc+0x37/0x70 [ 137.745909][ C0] smpboot_thread_fn+0x2fb/0x4c0 [ 137.750868][ C0] kthread+0x1d1/0x210 [ 137.754994][ C0] ret_from_fork+0x4b/0x60 [ 137.759447][ C0] ret_from_fork_asm+0x1a/0x30 [ 137.764245][ C0] [ 137.766582][ C0] read-write to 0xffff888115611d90 of 8 bytes by interrupt on cpu 0: [ 137.774663][ C0] can_send+0x562/0x5d0 [ 137.778841][ C0] bcm_can_tx+0x314/0x420 [ 137.783194][ C0] bcm_tx_timeout_handler+0xdb/0x260 [ 137.788514][ C0] __hrtimer_run_queues+0x20d/0x5e0 [ 137.793746][ C0] hrtimer_run_softirq+0xe4/0x2c0 [ 137.798806][ C0] handle_softirqs+0xbf/0x280 [ 137.803505][ C0] run_ksoftirqd+0x1c/0x30 [ 137.807948][ C0] smpboot_thread_fn+0x31c/0x4c0 [ 137.812907][ C0] kthread+0x1d1/0x210 [ 137.817002][ C0] ret_from_fork+0x4b/0x60 [ 137.821456][ C0] ret_from_fork_asm+0x1a/0x30 [ 137.826244][ C0] [ 137.828580][ C0] value changed: 0x0000000000004067 -> 0x0000000000004068 [ 137.835693][ C0] [ 137.838028][ C0] Reported by Kernel Concurrency Sanitizer on: [ 137.844182][ C0] CPU: 0 UID: 0 PID: 15 Comm: ksoftirqd/0 Not tainted 6.12.0-syzkaller-00971-g158f238aa69d #0 [ 137.854543][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 137.864615][ C0] ================================================================== [ 137.873379][ T8876] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 137.911600][ T8880] FAT-fs (loop8): error, invalid access to FAT (entry 0x00000100) [ 137.919637][ T8880] FAT-fs (loop8): error, invalid access to FAT (entry 0x00000100) [ 137.927878][ T8876] ext4 filesystem being mounted at /241/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 137.960836][ T8880] syz.8.2092: attempt to access beyond end of device [ 137.960836][ T8880] loop8: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 137.974349][ T8880] syz.8.2092: attempt to access beyond end of device [ 137.974349][ T8880] loop8: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 138.039409][ C0] ================================================================== [ 138.047534][ C0] BUG: KCSAN: data-race in can_send / can_send [ 138.053709][ C0] [ 138.056039][ C0] read-write to 0xffff888115611df0 of 8 bytes by interrupt on cpu 1: [ 138.064130][ C0] can_send+0x576/0x5d0 [ 138.068306][ C0] bcm_can_tx+0x314/0x420 [ 138.072675][ C0] bcm_tx_timeout_handler+0xdb/0x260 [ 138.077990][ C0] __hrtimer_run_queues+0x20d/0x5e0 [ 138.083224][ C0] hrtimer_run_softirq+0xe4/0x2c0 [ 138.088285][ C0] handle_softirqs+0xbf/0x280 [ 138.093016][ C0] run_ksoftirqd+0x1c/0x30 [ 138.097459][ C0] smpboot_thread_fn+0x31c/0x4c0 [ 138.102413][ C0] kthread+0x1d1/0x210 [ 138.106504][ C0] ret_from_fork+0x4b/0x60 [ 138.111030][ C0] ret_from_fork_asm+0x1a/0x30 [ 138.115815][ C0] [ 138.118151][ C0] read-write to 0xffff888115611df0 of 8 bytes by interrupt on cpu 0: [ 138.126237][ C0] can_send+0x576/0x5d0 [ 138.130499][ C0] bcm_can_tx+0x314/0x420 [ 138.134854][ C0] bcm_tx_timeout_handler+0xdb/0x260 [ 138.140258][ C0] __hrtimer_run_queues+0x20d/0x5e0 [ 138.145496][ C0] hrtimer_run_softirq+0xe4/0x2c0 [ 138.150560][ C0] handle_softirqs+0xbf/0x280 [ 138.155265][ C0] run_ksoftirqd+0x1c/0x30 [ 138.159713][ C0] smpboot_thread_fn+0x31c/0x4c0 [ 138.164669][ C0] kthread+0x1d1/0x210 [ 138.168756][ C0] ret_from_fork+0x4b/0x60 [ 138.173196][ C0] ret_from_fork_asm+0x1a/0x30 [ 138.177988][ C0] [ 138.180331][ C0] value changed: 0x000000000000545f -> 0x0000000000005460 [ 138.187450][ C0] [ 138.189779][ C0] Reported by Kernel Concurrency Sanitizer on: [ 138.195937][ C0] CPU: 0 UID: 0 PID: 15 Comm: ksoftirqd/0 Not tainted 6.12.0-syzkaller-00971-g158f238aa69d #0 [ 138.206192][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 138.216264][ C0] ================================================================== [ 138.407426][ T8885] netlink: 'syz.7.2090': attribute type 10 has an invalid length. [ 138.451856][ T8885] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 138.505761][ T8885] batadv0: entered promiscuous mode [ 139.057890][ T8889] loop6: detected capacity change from 0 to 128 [ 139.064325][ T8889] vfat: Unknown parameter '' [ 139.789324][ T5662] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.