last executing test programs: 1m44.354258293s ago: executing program 0 (id=326): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3e, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, @perf_config_ext={0x2, 0x800000000003}, 0x100000, 0x5dd8, 0x3, 0x0, 0x0, 0x8, 0xfffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x98, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x6c, 0x4, 0x0, 0x1, [{0x68, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x58, 0x2, 0x0, 0x1, [@NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0x84}, @NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0x7}, @NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0xf}, @NFTA_INNER_NUM={0x8}, @NFTA_INNER_EXPR={0x34, 0x5, 0x0, 0x1, @payload={{0xc}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_LEN={0x8, 0x4, 0x1, 0x0, 0x56}, @NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0xb9}, @NFTA_PAYLOAD_DREG={0x8, 0x1, 0x1, 0x0, 0xa}, @NFTA_PAYLOAD_BASE={0x8, 0x2, 0x1, 0x0, 0x1}]}}}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0xc0}}, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000dc0)='/proc/tty/drivers\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000100)=[{&(0x7f0000000000)=""/221, 0xdd}], 0x1, 0x1c0, 0x0) ioctl$HIDIOCGVERSION(r1, 0x80044801, &(0x7f00000001c0)) r2 = socket(0x1e, 0x805, 0x0) connect$tipc(r2, &(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{}, 0x2}}, 0x10) r3 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$GIO_CMAP(r3, 0x4b70, &(0x7f0000000200)) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000140)=ANY=[@ANYRESOCT=r2], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xfffffffffffffebf, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) connect$tipc(r2, &(0x7f0000000000)=@id={0x1e, 0x3, 0x1}, 0x10) close(r2) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r2, 0x89f4, &(0x7f00000000c0)={'sit0\x00', &(0x7f0000000340)={@initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x0, 0x50, 0x0, [{@dev}, {@broadcast}, {@dev}, {@remote}, {@broadcast}]}}) 1m44.177171724s ago: executing program 0 (id=329): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) sendmsg$unix(r2, &(0x7f0000000040)={0x0, 0xfffffffffffffd51, &(0x7f00000003c0)=[{&(0x7f0000000080)}, {&(0x7f0000000140)="ec", 0x1}, {0x0}], 0x308}, 0x0) setsockopt$llc_int(r1, 0x10c, 0x9, &(0x7f0000000000)=0x400001, 0x4) syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_LBT_MODE(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000740)={0x14, 0x0, 0x4}, 0x14}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000cc0), r3) r4 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000012c0), r3) sendmsg$NLBL_MGMT_C_REMOVEDEF(r0, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000340)={0x14, r4, 0x1, 0x70bd2a, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x20040004}, 0x8) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x1c, r5, 0x48212b8952c3affd, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x1c}}, 0x0) 1m44.074308394s ago: executing program 0 (id=330): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0x10, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000032500000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000850000000f000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x1c, 0x0, 0x0, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r1}, 0x10) get_robust_list(0x0, &(0x7f0000000500)=&(0x7f0000000400)={&(0x7f0000000200)={&(0x7f0000000000)}}, &(0x7f0000000540)=0x18) 1m43.914123526s ago: executing program 0 (id=332): r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x3d, 0x1, 0x0, 0x0, 0x0, 0x5, 0x62200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffff, 0x100000000}, 0x100000, 0x0, 0x0, 0x6, 0x40, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000280)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000580)='./file1\x00', 0x40, &(0x7f0000000340), 0x1, 0x58c, &(0x7f00000005c0)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) pwritev2(r1, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfb}], 0x1, 0x5412, 0x0, 0x0) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[], 0x48) r4 = socket$can_raw(0x1d, 0x3, 0x1) sendmmsg(r4, &(0x7f0000000c40)=[{{&(0x7f0000000680)=@generic={0x2, "155ccdc1905c8a8c4cb9160939fc5bee2af684e7f3fd4b75a5a3688b28d8bdf9d910f2e94bebe6889f1f22796aee76f614e4dd3824e5582f893749936877f96c9d958f598e5e30ca10cecd1df6772f63d43b00b7f5b828b97b387d16881abe4ad6e876ee722f5e3e9685e136f279e93ce150de821623d8f34b2f03379892"}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000700)="8691cee8917fd2183f3847271559", 0xe}], 0x1}}, {{0x0, 0x0, &(0x7f0000000bc0)=[{&(0x7f0000000a40)="8cfd526bb0360ce0315dffad38e9d111dd53fa7c91af5834e8cbcab83fedd4e233117d3fbfaa46411fae34b41d22e48bfbd2917fc1caeaf771b6e4e3186306565801cf4d33e9136abf0e61b6ad416fc022ec5085dcaac480671c924c71fdfa0a934887cccc0a61d095a98146e098a558e53f135df24265b2115190b0fdd188a5d69612cee35615b36fe64fb4bb533d6ac74767dbd8baeeef68339dd025e73509b9c4fc4fb45a2f4223d1ef73b95c1d950f61c41e456a78548d3e184c688e335df638646e3b3020c4b1ee54dc93a63c691e7510b37cf8cc04db4296f56ee9404331956d07e0f146631cf7a4f3d0d0308728ae", 0xf2}, {&(0x7f0000000240)="4f5f1c7718c66e5d767ccd7cee249d5e2189e5ac802c62cce3d68a30ac522f5cadd626ada2459f15ed482fc23b781cc0171d83fbc79cbe69f52e10dc3def08", 0x3f}, {&(0x7f0000000880)="05b75caf616b769bfaee1696e65faef9da99c13b72957c127a64c04bbff8f0746b8600a1d97a21c45391f77369aa64b49838fd119f2e79b82c23bdd7621f847274a4090bfcb5b33a3a39da6415ca17af8a55a38ef2350fb7a5cc6e6a8a5556d90b1c87a50a13aedabde961bb92dbd9ed8c1572a8c77cf99337ce7ba4863b0e467ccd1be7296a9874412c807cbd8028629d9a2b8d406fa0800151c0649ba2eb37263bd9fc7adab4397125a762b24ec24c0fe947", 0xb3}, {&(0x7f0000000b40)="6600af2c67a7a7107a136953ea9fe92f6d76d7a0ada5a2333571cb08865d4a920a006f58606c75d8f2847c393e539c29302dc086019d7ec23f473bd69d39626dfebe62cb6d83a591f5f96a0873da653e4d294003eeacf76460d5a64bdbbbea41fdb560249f02b3cb820c40187409a979cb6f9e78b72bfcf504d1a5", 0x7b}, {&(0x7f0000002100)="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", 0x1000}], 0x5, &(0x7f0000000d40)=ANY=[@ANYBLOB="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"], 0x268}}], 0x2, 0x20000040) bpf$TOKEN_CREATE(0x24, &(0x7f0000000340)={0x0, r3}, 0x8) io_setup(0x4, &(0x7f00000014c0)=0x0) r6 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r6}, &(0x7f0000bbdffc)) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=@framed={{}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r7}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f00000001c0)='mm_page_alloc\x00', r8}, 0x10) syz_clone(0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f0000000cc0), 0x8000, 0x0) r9 = syz_open_procfs(0x0, &(0x7f0000000d00)='mounts\x00') io_submit(r5, 0x1, &(0x7f0000000180)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x5, 0x0, r9, 0x0}]) syz_mount_image$ext4(&(0x7f0000000300)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800700, &(0x7f0000000940)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x5}}, {@journal_dev={'journal_dev', 0x3d, 0x8000}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@min_batch_time={'min_batch_time', 0x3d, 0xfffffffffffffc00}}, {@resgid}, {@test_dummy_encryption}, {@noload}]}, 0x3, 0x44a, &(0x7f0000000400)="$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") bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x18, 0x4, 0x0, &(0x7f0000000140)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x72, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r10 = socket$key(0xf, 0x3, 0x2) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) capset(&(0x7f0000000080)={0x20080522}, &(0x7f00000000c0)={0x200000, 0x200000}) mount$9p_tcp(&(0x7f0000000000), &(0x7f0000000540)='./file0\x00', &(0x7f0000000580), 0x808088, &(0x7f0000000040)=ANY=[@ANYRESDEC=r5]) bpf$PROG_LOAD(0x5, 0x0, 0x0) r11 = fcntl$dupfd(r3, 0x406, r10) io_uring_register$IORING_REGISTER_FILES(r9, 0x2, &(0x7f0000000200)=[r11, r2, r4], 0x3) 1m43.014910901s ago: executing program 0 (id=341): creat(&(0x7f0000000040)='./file0\x00', 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket(0x25, 0x1, 0x0) getsockname$inet6(r0, &(0x7f0000000280)={0xa, 0x0, 0x0, @private0}, &(0x7f00000002c0)=0x1c) setsockopt$EBT_SO_SET_ENTRIES(r0, 0xa00000000000000, 0x80, 0x0, 0xa08) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000800000008"], 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000200)={{r1, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f0000000340)='%pS \x00'}, 0x20) fchdir(r2) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0xb, 0x7, 0x2, 0x4, 0x5, 0xffffffffffffffff, 0xffffffff, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r3, 0xffffffffffffffff}, &(0x7f0000000b00), &(0x7f0000000300)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='9p_protocol_dump\x00', r5}, 0x10) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="0a00000004000000fd0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000020b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r9, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) mount$9p_fd(0x0, &(0x7f0000000500)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {'wfdno', 0x3d, r7}}) creat(&(0x7f0000000040)='./file0\x00', 0x0) (async) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) socket(0x25, 0x1, 0x0) (async) getsockname$inet6(r0, &(0x7f0000000280)={0xa, 0x0, 0x0, @private0}, &(0x7f00000002c0)=0x1c) (async) setsockopt$EBT_SO_SET_ENTRIES(r0, 0xa00000000000000, 0x80, 0x0, 0xa08) (async) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000800000008"], 0x48) (async) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000080), &(0x7f0000000340)='%pS \x00'}, 0x20) (async) fchdir(r2) (async) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0xb, 0x7, 0x2, 0x4, 0x5, 0xffffffffffffffff, 0xffffffff, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r3}, &(0x7f0000000b00), &(0x7f0000000300)}, 0x20) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='9p_protocol_dump\x00', r5}, 0x10) (async) pipe2$9p(&(0x7f00000001c0), 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="0a00000004000000fd0f000007"], 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000020b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r9, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) mount$9p_fd(0x0, &(0x7f0000000500)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {'wfdno', 0x3d, r7}}) (async) 1m41.722348019s ago: executing program 0 (id=352): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r0, &(0x7f0000000440)=""/247, 0x26) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x1, @time={0xe}, 0x0, {0x0, 0xff}, 0x1, 0x1, 0x8}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0xc0bc5310, &(0x7f0000000040)={0x0, @time, 0x0, {0xd}, 0x6, 0x0, 0x1}) ioctl$SNDRV_SEQ_IOCTL_GET_PORT_INFO(r0, 0xc0a85322, &(0x7f0000000280)) 1m41.493928371s ago: executing program 32 (id=352): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r0, &(0x7f0000000440)=""/247, 0x26) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x1, @time={0xe}, 0x0, {0x0, 0xff}, 0x1, 0x1, 0x8}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0xc0bc5310, &(0x7f0000000040)={0x0, @time, 0x0, {0xd}, 0x6, 0x0, 0x1}) ioctl$SNDRV_SEQ_IOCTL_GET_PORT_INFO(r0, 0xc0a85322, &(0x7f0000000280)) 43.510116886s ago: executing program 2 (id=974): r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000540)='syz0\x00', 0x200002, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000580)={{0x0, 0x7ff, 0x19, 0x9, 0x8, 0xfffffffffffffffe, 0x80, 0x5, 0x8000, 0x4, 0x7f, 0x4, 0x7, 0x0, 0x8}, 0x20, [0x0, 0x0, 0x0, 0x0]}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x2, 0x3, 0x260, 0x108, 0x0, 0x0, 0x0, 0x108, 0x1c8, 0x1c8, 0x1c8, 0x1c8, 0x1c8, 0x3, 0x0, {[{{@ip={@rand_addr, @dev, 0x0, 0x0, '\x00', 'veth0\x00', {}, {}, 0x21}, 0x0, 0xa0, 0x108, 0x0, {}, [@common=@inet=@dccp={{0x30}, {[], [], 0x0, 0x10}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@inet=@TCPMSS={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x2c0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kfree\x00', r2}, 0x4d) process_vm_readv(0x0, &(0x7f00000000c0)=[{&(0x7f0000000300)=""/54, 0x36}, {&(0x7f0000006180)=""/152, 0x98}, {&(0x7f0000000040)=""/67, 0x43}, {&(0x7f0000000180)=""/138, 0xab}], 0x4, &(0x7f0000008640), 0x1, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = dup2(r3, r3) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000079e02200850000006d00000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r5}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x48) r6 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000200)={'netdevsim0\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001980)={0x6, 0x3, &(0x7f0000000180)=@framed, &(0x7f0000001780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r7, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000040000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000180)='sys_enter\x00', r8}, 0x40) prctl$PR_SET_NAME(0xf, &(0x7f0000000a40)='GPL\x00') fsync(0xffffffffffffffff) setsockopt$inet_udp_int(r4, 0x11, 0xa, &(0x7f0000000000)=0x2, 0x4) syz_mount_image$iso9660(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0x3f00, &(0x7f00000002c0), 0x1, 0x222, &(0x7f0000000300)="$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") ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r4, 0xc0189373, &(0x7f0000000640)={{0x1, 0x1, 0x18, r4, {0x2f}}, './file0\x00'}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000840)=@bpf_ext={0x1c, 0x16, &(0x7f0000000680)=@raw=[@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x100}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}, @call={0x85, 0x0, 0x0, 0xa0}, @map_idx_val={0x18, 0x9, 0x6, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r9}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}], &(0x7f0000000740)='syzkaller\x00', 0x890e, 0x1000, &(0x7f0000001a40)=""/4096, 0x41100, 0x1, '\x00', 0x0, 0x0, r4, 0x8, &(0x7f0000000780)={0x7, 0x3}, 0x8, 0x10, 0x0, 0x0, 0xf44d, 0xffffffffffffffff, 0x5, 0x0, &(0x7f00000007c0)=[{0x2, 0x1, 0x9, 0x6}, {0x4, 0x3, 0x8}, {0x3, 0x2, 0xc, 0xb}, {0x5, 0x1, 0x2, 0x7}, {0x2, 0x4, 0x6, 0x7}], 0x10, 0x7, @void, @value}, 0x94) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r4, 0x0, 0x60, &(0x7f0000000080)={'filter\x00', 0x58, [{}, {0x0, 0x100000000000000}]}, 0x68) 43.445374816s ago: executing program 2 (id=975): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r0, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x41, &(0x7f0000001200)=0x6d7c, 0x4) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000480)={0x2, 0x4e21, @multicast2}, 0x10) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x0) recvmmsg(r2, &(0x7f0000007480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000c80)=""/157, 0x9d}, 0xaff}], 0x1, 0x45833af92e4b39ff, 0x0) 43.249069598s ago: executing program 2 (id=978): syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ_FIXED={0x4, 0x4, 0x0, @fd_index=0x8, 0x10, 0x20000000, 0x20004, 0x0, 0x0, {0x1}}) r0 = socket$kcm(0x21, 0x2, 0xa) socket$kcm(0x29, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000100)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x18, {0xa, 0x0, 0x0, @private1}}, 0x80, 0x0, 0x0, &(0x7f0000000180)=ANY=[], 0x18, 0x68000000}, 0x0) r1 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r2 = fcntl$dupfd(r1, 0x0, r1) munmap(&(0x7f0000002000/0x2000)=nil, 0x2000) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x11, &(0x7f0000000100)={[{@noblock_validity}, {@stripe={'stripe', 0x3d, 0x2}}, {@norecovery}, {@min_batch_time={'min_batch_time', 0x3d, 0x720}}, {@abort}]}, 0x1, 0x610, &(0x7f0000000a40)="$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") socket$nl_sock_diag(0x10, 0x3, 0x4) bpf$MAP_CREATE(0x0, 0x0, 0x48) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000fdff00000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xe, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r3}, 0x10) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = dup(r4) fsetxattr$security_selinux(r5, &(0x7f0000000000), &(0x7f0000000040)='system_u:object_r:mouse_device_t:s0\x00', 0x20, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000001080)=ANY=[@ANYBLOB="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"/424, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000020000807b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kmem_cache_free\x00', r7}, 0x10) lchown(&(0x7f0000000100)='./file0\x00', 0xffffffffffffffff, 0x0) personality(0x4000009) openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_read_part_table(0x1048, &(0x7f0000000000)="$eJzsz7EJAkEQBdC/h+yaiC1obD1agI14mNuOjYnxityhiamI8F6wO/MZBib81pjNVKxewSW1JumlzNFxmd09c7cYnm/5vO12nf6a1ENOGXs/t75+D2yHfZLWvnQNAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPylRwAAAP//0foLfw==") r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800"/11], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r8}, 0x10) ioctl$SCSI_IOCTL_GET_PCI(r2, 0x5393, &(0x7f0000000000)) 42.80897834s ago: executing program 2 (id=986): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffffffffffff}, 0x111, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, &(0x7f00000002c0)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f0000000040)=0x1, r0, 0x0, 0x2, 0x4}}, 0x20) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000440)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) unshare(0x2a020400) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xfb, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r4}, 0x10) r5 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x2, 0x6, 0x5f8, 0x1e8, 0x3e8, 0xd0, 0x2e0, 0x0, 0x528, 0x528, 0x528, 0x528, 0x528, 0x6, 0x0, {[{{@ipv6={@mcast2, @private1, [], [], 'macvlan1\x00', 'erspan0\x00'}, 0x0, 0xa8, 0xd0, 0x0, {0x7a00000000000000}}, @HL={0x28, 'HL\x00', 0x0, {0x4}}}, {{@ipv6={@dev, @remote, [], [], 'ipvlan0\x00', 'pim6reg0\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@empty, @ipv4=@loopback=0x7f000000}}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @multicast2}, @remote, [], [], '\x00', 'bond_slave_0\x00'}, 0x0, 0xd0, 0xf8, 0x48000000, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CHECKSUM={0x28}}, {{@ipv6={@private1, @private2, [], [], 'veth1_to_bridge\x00', 'veth0_to_batadv\x00'}, 0x0, 0xa8, 0x108}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@multicast1}}}, {{@uncond, 0x0, 0xf8, 0x140, 0x0, {}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@loopback, @ipv6=@mcast2}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x658) sendfile(r3, r5, &(0x7f0000000300)=0x5, 0xca00) syz_emit_ethernet(0x109, &(0x7f00000006c0)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2f}, @void, {@x25={0x805, {0x2, 0xa, 0x9, "9d3b3cdd1ee8e80dd4582448e17309b09a200336009926042e52de316f8ecc142caab4e0af39d675dea565439c82b6d614abc3757ed91cc473b4714eca494ed7e6bf57021d205dc61e6ec986e8f13bcea5a92f9089acc77ae575a6a50fed687cc041872ddf84ccc68b34bde0132f12dc1aefd542483b4d661a224e2d689015de4a79184429f8b83506c6c4dad16fc9b3565508d21298473f58fc7f9b5d74486b5b58da463b508e5c795e79c1400d96b8c68cea99b4a5faa63c4feba2e62c5c95b3def04dc46bdd528bd4436faa8e6e993fdedcb0a27aeefa3fcf8dfa7bfcedefed725758253e4f45b84a33f91e06d2594bb5917c0db6b623"}}}}, 0x0) 42.722176321s ago: executing program 2 (id=987): bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair(0x31, 0x4, 0x7, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000080000000050000000010"], 0x48) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000480), r2) sendmsg$TIPC_NL_BEARER_ENABLE(r2, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000004c0)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002bbd7000fbdbdf25030000004c0001800d0001007564701a73797a3100000000380004001400010002004e21640101020000000000000000200002000a004e20000000020000000000000000000000000000000009000000"], 0x60}, 0x1, 0x0, 0x0, 0x841}, 0x400c050) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000fc0), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r1, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000540)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="080026bd7000fddbdf25200000000c000600010000000100000014002d80050004000000000005000100050000004d78c4bf13b057b9f4a481449a0ecf0b60a451d4a0cce504fcfcfa4ddb6b56b1637e5db1026ffa3fc9d1fc1c27956bb63b83b17204d7348c0178a8913495b4e78c4ef587c02ee183122f5686d9ad943e3dd2ecda31a796ce821ff43497b5fc69eca128c5b350872e2f00de53c6a3cda8c3023822f1601309b717268fa4cdb911e0cb52bd1e16c1355a87d5b2683ac1fe822389e55f433cb7805b47f5"], 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x20004004) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000740)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x275a, 0x0) write$P9_RREAD(r5, &(0x7f0000000180)=ANY=[@ANYRES32=r0], 0xfffffdfc) perf_event_open(&(0x7f0000000000)={0x5, 0x80, 0x0, 0x2, 0x0, 0x0, 0x82, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000006c0), 0x7}, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffc}, 0xffffffffffffffff, 0xffffffffffffffff, r2, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r7}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r6}, &(0x7f0000000380), &(0x7f00000003c0)=r7}, 0x20) socket$nl_route(0x10, 0x3, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x120, 0x0) r8 = socket$inet6(0xa, 0x806, 0x0) bind$inet6(r8, &(0x7f0000000100)={0xa, 0x4e23, 0x51, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c) listen(r8, 0x3) socket$inet_dccp(0x2, 0x6, 0x0) socket$qrtr(0x2a, 0x2, 0x0) r9 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000700), 0x3a5080) write$binfmt_aout(r9, &(0x7f0000000200)=ANY=[@ANYBLOB="0304"], 0xc8) 42.599866262s ago: executing program 2 (id=988): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r0, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x41, &(0x7f0000001200)=0x6d7c, 0x4) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000480)={0x2, 0x4e21, @multicast2}, 0x10) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x0) recvmmsg(r2, &(0x7f0000007480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000c80)=""/157, 0x9d}, 0xaff}], 0x1, 0x45833af92e4b39ff, 0x0) 42.579939652s ago: executing program 33 (id=988): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r0, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x41, &(0x7f0000001200)=0x6d7c, 0x4) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000480)={0x2, 0x4e21, @multicast2}, 0x10) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x0) recvmmsg(r2, &(0x7f0000007480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000c80)=""/157, 0x9d}, 0xaff}], 0x1, 0x45833af92e4b39ff, 0x0) 35.116112269s ago: executing program 6 (id=1074): bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r0 = io_uring_setup(0x901, &(0x7f00000004c0)={0x0, 0x894c, 0x1000, 0xfff7ffff, 0x1fc}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000ffff0018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) socket$can_j1939(0x1d, 0x2, 0x7) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r5 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r5, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @multicast}, 0x10) fsopen(&(0x7f0000000080)='devtmpfs\x00', 0x1) r6 = dup(r5) r7 = syz_open_dev$rtc(&(0x7f0000000040), 0x4, 0x400801) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000004380), 0x0, &(0x7f0000004540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r6]) r8 = memfd_secret(0x0) r9 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r9}, 0x4) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r9, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r11 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r10}, 0x10) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0xa, 0x11, r8, 0x0) ftruncate(r8, 0x51a9497) ioctl$BTRFS_IOC_START_SYNC(r11, 0x80089418, &(0x7f0000000040)=0x0) r13 = openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r13, 0x84009422, &(0x7f0000000740)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {}, {0x0, @struct}}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r10, 0x5000943f, &(0x7f0000002000)={{r8}, r12, 0x8, @unused=[0x9, 0x8, 0x400, 0x3], @devid=r14}) ioctl$BTRFS_IOC_DEV_INFO(r5, 0xd000941e, &(0x7f0000002700)={0x0, "2210560630fdee730e9661fc642cef99"}) ioctl$BTRFS_IOC_GET_DEV_STATS(r4, 0xc4089434, &(0x7f0000000540)={0x0, 0x6, 0x1, [0x0, 0xffffffff, 0xd3, 0x1ff, 0x8], [0x5, 0x3, 0x1c, 0x132f, 0x8, 0x66, 0x9, 0x6494c131, 0x8000, 0x0, 0x5, 0x6, 0x9, 0x3, 0xffffffff, 0x7fffffffffffffff, 0x4, 0x3622, 0x3, 0x3, 0x8, 0x5, 0x1ff, 0x7fff, 0x73c, 0xfffffffffffffffb, 0xb49, 0x2, 0x2, 0x5, 0x8001, 0x0, 0x8000, 0xfffffffffffffffb, 0x0, 0x6ea, 0x6, 0x6, 0x5, 0x2, 0x4, 0x7ff, 0x4a4, 0x536dce4f, 0x6, 0xff, 0xf46, 0x2, 0xd138, 0x4, 0x80000001, 0xdb, 0x2, 0x1, 0x5, 0x3, 0x8001, 0xfffffffffffffff7, 0xb5d5, 0x1cb6bf8c, 0x5, 0x578b, 0xff, 0x8, 0x4, 0x1, 0x6, 0x8000000000000000, 0x6dc756ba, 0x92, 0x7fffffff, 0x8, 0x5, 0x80000001, 0xff, 0x6da, 0x9, 0x80000000, 0x5, 0x7fff, 0x10001, 0x6, 0x1400000000, 0xe, 0xe4a, 0x800, 0x3, 0x7, 0x9, 0x6, 0x8, 0x2, 0x40, 0x8, 0x988, 0x7fffffff, 0x6, 0xffff, 0x80000000, 0x40, 0x9, 0x5, 0x2, 0xb, 0xffffffff, 0xe74, 0xfffffffffffffecc, 0x7, 0x8000000000000000, 0x7, 0xfffffffffffffffb, 0xfeb, 0xa2c, 0xc34b, 0x2, 0x6, 0xb, 0x3, 0x9, 0xa0, 0x1000]}) ioctl$BTRFS_IOC_BALANCE_V2(r7, 0xc4009420, &(0x7f0000000980)={0x1, 0x6, {0x4, @usage=0x2, r14, 0xa, 0x1, 0x200, 0x1, 0x8, 0x6a, @struct={0x5, 0x400}, 0x4c81d5a0, 0x3, [0x5, 0x3, 0xe, 0x3, 0x9, 0xfffffffffffffffb]}, {0x1, @struct={0x5, 0x1000}, r15, 0x29, 0x6, 0x7, 0xab, 0x1, 0x5df33406f6edb090, @usage=0xa, 0xe97, 0x401, [0x10, 0x2, 0x0, 0x3, 0x0, 0x9]}, {0x6cf, @usage=0x3, r16, 0x9, 0x10000, 0x0, 0xc, 0x6, 0x23, @struct={0x37}, 0x7ff, 0x0, [0xfffffffffffffffe, 0x5, 0x6, 0x7, 0x6, 0xae1b]}, {0xa7a5, 0x5, 0xab60}}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0xfff}], 0x1083) 34.208478894s ago: executing program 6 (id=1085): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x0, &(0x7f0000000240)={[{@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x7f}}, {@nolazytime}, {@noload}, {@nombcache}, {@acl}]}, 0x6, 0x56a, &(0x7f00000015c0)="$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") bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x3d, 0x1, 0x0, 0x0, 0x0, 0x5, 0x60004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x1016c5, 0x10000, 0x0, 0x6, 0x10001, 0x0, 0x81}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000680)=@newqdisc={0x24}, 0x24}}, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {}, {0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_CT_STATE={0x6}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24008005}, 0x0) socket$netlink(0x10, 0x3, 0x0) unshare(0x20400) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='ext4_writepages_result\x00', r2}, 0x10) bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r3}, 0x8) r4 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) pwritev2(r4, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c00}], 0x1, 0x7a00, 0x0, 0x3) 33.900195396s ago: executing program 6 (id=1094): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'nr0\x00', 0x0}) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = dup(r1) write$UHID_INPUT(r2, &(0x7f0000001040)={0xfc, {"a2e3ad09ed1a09f91b37090987f70e06d038e7ff7fc6e5539b0d3d0e8b089b3f383b6c090890e0879b0a0ac6e70a9b3361959b509a240d5b0af3988f7ef319520100ffe8d178708c523c921b1b5b31070d07640936cd3b78130daa61d8e8040000005802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6a62fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce7cd9f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d4ac01b75d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9e53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4350aeae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b813076038e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40427db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afa2d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02daee67918e5d6787463183b4b87c1050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7340002000000000000f288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4108b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb784ed7148b6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b8081c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c6b00000000000000f96f06817fb903729a7db6ff957697c9ede7885d94ffb0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f9000", 0x1000}}, 0x1006) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000040)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x40003a, '\x00', r0, 0xffffffffffffffff, 0x1, 0x5, 0x10000000, 0x0, @void, @value, @void, @value}, 0x50) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000000)=@generic={&(0x7f00000002c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', r3}, 0x18) 33.38179611s ago: executing program 6 (id=1098): r0 = syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000400)='./file0\x00', 0x10, &(0x7f0000000a40)=ANY=[@ANYBLOB="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", @ANYRES16, @ANYRES8], 0x1, 0x11dc, &(0x7f0000001280)="$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") perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x67, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=@framed={{}, [@ringbuf_output={{0x18, 0x2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x43}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='mm_page_alloc\x00', r1}, 0x10) syz_clone(0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = bpf$TOKEN_CREATE(0x24, &(0x7f00000002c0)={0x0, r0}, 0x8) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x8, [@decl_tag={0xa, 0x0, 0x0, 0x11, 0x5, 0x6}, @fwd={0x8}]}, {0x0, [0x30, 0x0, 0x61, 0x0, 0x61, 0x30]}}, &(0x7f0000000180)=""/2, 0x3c, 0x2, 0x1, 0x2, 0x10000, @value=r2}, 0x28) 32.606301455s ago: executing program 6 (id=1106): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r0, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000300)='./file0\x00', 0x1004404, &(0x7f0000000340)={[{@noinit_itable}, {@dioread_lock}, {@noauto_da_alloc}, {@lazytime}, {@nojournal_checksum}, {@max_batch_time={'max_batch_time', 0x3d, 0xa}}]}, 0x23, 0x44d, &(0x7f0000000980)="$eJzs28tvG0UYAPBv7SR9k1CVRx9AoCDKK2nSUnpAQiCQOICEBIdyDElalboNaoJEq4oWhMoRVeLEBXFE4i/gBBcEnJC4wh1VqlAvLZyM1t5NbMd2HnXsUP9+0jozu2PPfN6d9exONoC+NZq+JBE7I+KPiBiuZusLjFb/3L55afqfm5emkyiX3/47qZS7dfPSdF40f9+OPDMQUfgsif1N6p2/cPHMVKk0ez7Ljy+c/WB8/sLF506fnTo1e2r23OTx40ePTLxwbPL5jsSZxnVr38dzB/a+/u61N6dPXHvvl++SPP6GODpktN3GJ8rlDlfXW7tq0slADxvCmhSr3TQGK/1/OIqxtPOG47VPe9o4YEOVy+Xy/a03XykDd7Gkcg4ovxS9bgjQZfkPfXr9my9dGnpsCjderl4ApXHfzpbqloEoZGUGG65vO2k0Ik5c+ffrdImNuQ8BAFDnh3T882yz8V8hau8L3ZPNoYxExL0RsTsijkXEnoi4L6JS9oGIeHCN9TdOkiwf/xSuryuwVUrHfy9mc1v147989BcjxSy3qxL/YHLydGn2cPadHIrBLWl+ok0dP776+xetttWO/9IlrT8fC2btuD6wpf49M1MLU3cSc60bn0TsG2gWf7I4E5BExN6I2LfOOk4//e2BVttWjr+NDswzlb+JeLK6/69EQ/y5pP385PjWKM0eHs+PiuV+/e3qW63qv6P4OyDd/9ubHv+L8Y8ktfO182v59K+eSl+v/vl5y2ua9R7/Q8k7des+mlpYOD8RMZS8UW107frJhnKTS+XT+A8dbN7/d8fSN7E/ItKD+KGIeDgiHsna/mhEPBYRB9t8Cz+/8vj7649/Y6Xxz6xp/y8lhqJxTfNE8cxP39dVOrL04avb/0crqUPZmtWc/1bTrrUezQAAAPB/VYiInZEUxhbThcLYWPV/+PfE9kJpbn7hmZNzH56bqT4jMBKDhfxO13DN/dCJ7J5Lnp9syB/J7ht/WdxWyY9Nz5Vmeh089LkdLfp/6q9ir1sHbDjPa0H/0v+hf+n/0L/0f+hfTfr/tl60A+i+Zr//l1d+29aNaAvQXQ3937Qf9BHX/9C/1tP/nTPg7tC2Lw91rx1AV81vi5UfkpeQWJaIwqZoxiZKXN4czehQotdnJgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgM74LwAA//8cB+YG") r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000280)='rpcgss_need_reencode\x00', r1, 0x0, 0xe0b}, 0x18) pselect6(0x40, &(0x7f0000000200)={0x8000000000000000, 0x97, 0x80000001, 0x0, 0x6200000000000000, 0x4, 0xb, 0x7fff}, 0x0, 0x0, 0x0, 0x0) 32.393580356s ago: executing program 6 (id=1112): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000100)={[{@mpol={'mpol', 0x3d, {'interleave', '', @val={0x3a, [0x37, 0x32, 0x2c]}}}, 0x4e}]}) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NL80211_CMD_GET_MPP(r0, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1440200}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x40, r1, 0x500, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000000}, 0x2004c000) socket$nl_generic(0x10, 0x3, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000080)='sched_switch\x00', r3, 0x0, 0x6}, 0x18) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') r4 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000240)='./file2\x00', 0x2000410, &(0x7f0000000080), 0x81, 0x7a5, &(0x7f0000000f80)="$eJzs3c9rXNUeAPDvnfxq0r6XPHjwXl0FBA2UTkyNrYKLigsRLBR0bRsm01AzyZTMpDQh0BYR3AgqLgTddO2PunPrj63+Fy6kpWparLiQkTuZSSbNTJq0mZlgPh+4uefcc2/O+c65P87MvcwEcGCNpn8yEUcj4v0kYri2PImIvmqqN+L02nr3V1dy6ZREpfL6r0l1nXurK7lo2CZ1uJb5f0R8907EsczWektLy7NThUJ+oZYfL89dGi8tLR+/ODc1k5/Jz5+cmJw8ceq5Uyf3Ltbff1w+cvuDV57+8vSfb//v5nvfJ3E6jtTKGuPYK6MxWntN+tKXcJOX97qyLku63QAeSXpo9qwd5XE0hqOnmmphsJMtAwDa5WpEVACAAyZx/QeAA6b+OcC91ZVcferuJxKddeeliDi0Fn/9/uZaSW/tnt2h6n3QoXvJpjsjSUSM7EH9oxHx6ddvfp5O0ab7kADNXLseEedHRree/5Mtzyzs1jPbFVYGqrPRBxY7/0HnfJOOf55vNv7LrI9/osn4Z6DJsfsoHn78Z27tQTUtpeO/FxuebbvfEH/NSE8t96/qmK8vuXCxkE/Pbf+OiLHoG0jzE9VVmz8FNXb3r7ut6m8c//324VufpfWn8401Mrd6BzZvMz1VnnrcuOvuXI94ordZ/Ml6/yctxr9nd1jHqy+8+0mrsjT+NN76tDX+9qrciHiqaf9v9GWy7fOJ49XdYby+UzTx1U8fD7Wqf6P/B6rztP76e4FOSPt/aPv4R5LG5zVLu6/jhxvD37Yqa9z/m8fffP/vT96opvtry65MlcsLExH9yWtbl5/Y2Laer6+fxj/2ZPPjv9X+n6k9G3t+Pbe93tu/fFH7V03jr7rWKv72SuOf3lX/b5Oo1LZ5oOjm/dmeVvXvrP8nq6mx2pKdnP8e0tLH2JsBAAAAAAAAAAAAAAAAAAAAAAAAYPcyEXEkkkx2PZ3JZLNrv+H93xjKFIql8rELxcX56aj+VvZI9GXqX3U53PB9qBO178Ov5088kH82Iv4TER8NDFbz2VyxMN3t4AEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACg5vDm3/+/ms6y2bWynwe63ToAoG0OdbsBAEDHuf4DwMGzu+v/YNvaAQB0zq7f/1eS9jQEAOiYHV//z7e3HQBA57j/DwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQJudPXMmnSp/rK7k0vz05aXF2eLl49P50mx2bjGXzRUXLmVnisWZQj6bK861/EfX1maFYvHSZMwvXhkv50vl8dLS8rm54uJ8+dzFuamZ/Ll8X8ciAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAICdKy0tz04VCvkFiW0Tg/ujGfsm0Rv7ohn/+ER/12pvPEsMdu8EBQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALDP/R0AAP//aHclQg==") r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x143042, 0x0) sendfile(r5, r5, 0x0, 0x7a680000) truncate(&(0x7f0000000200)='./file2\x00', 0x7) r6 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_tables_names\x00') lsm_get_self_attr(0x2, 0x0, &(0x7f0000000080), 0x0) sendmsg$NFQNL_MSG_VERDICT(r4, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x38, 0x1, 0x3, 0x201, 0x0, 0x0, {0x7}, [@NFQA_VERDICT_HDR={0xc, 0x2, {0xffffffffffffffff, 0x1}}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffb, 0x400}}, @NFQA_VERDICT_HDR={0xc, 0x2, {0x0, 0xffffffff}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x4000010) read(r6, &(0x7f0000001180)=""/4096, 0x1000) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x24}, 0x1, 0x0, 0x0, 0x20004004}, 0x40004) 32.375500536s ago: executing program 34 (id=1112): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000100)={[{@mpol={'mpol', 0x3d, {'interleave', '', @val={0x3a, [0x37, 0x32, 0x2c]}}}, 0x4e}]}) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NL80211_CMD_GET_MPP(r0, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1440200}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x40, r1, 0x500, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000000}, 0x2004c000) socket$nl_generic(0x10, 0x3, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000080)='sched_switch\x00', r3, 0x0, 0x6}, 0x18) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') r4 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000240)='./file2\x00', 0x2000410, &(0x7f0000000080), 0x81, 0x7a5, &(0x7f0000000f80)="$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") r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x143042, 0x0) sendfile(r5, r5, 0x0, 0x7a680000) truncate(&(0x7f0000000200)='./file2\x00', 0x7) r6 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip_tables_names\x00') lsm_get_self_attr(0x2, 0x0, &(0x7f0000000080), 0x0) sendmsg$NFQNL_MSG_VERDICT(r4, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x38, 0x1, 0x3, 0x201, 0x0, 0x0, {0x7}, [@NFQA_VERDICT_HDR={0xc, 0x2, {0xffffffffffffffff, 0x1}}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffb, 0x400}}, @NFQA_VERDICT_HDR={0xc, 0x2, {0x0, 0xffffffff}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x4000010) read(r6, &(0x7f0000001180)=""/4096, 0x1000) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x24}, 0x1, 0x0, 0x0, 0x20004004}, 0x40004) 1.655925029s ago: executing program 5 (id=1280): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0x2}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x17}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x15}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x78}}, 0x8000) 1.60151716s ago: executing program 5 (id=1281): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000240)='rpm_return_int\x00', r1}, 0x18) syz_open_dev$usbfs(&(0x7f0000000040), 0x12, 0x0) 1.54773615s ago: executing program 5 (id=1283): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00"/14], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000001a80)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000a9000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) syz_open_dev$tty20(0xc, 0x4, 0x0) (async) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$GIO_SCRNMAP(r1, 0x5608, 0x0) (async) ioctl$GIO_SCRNMAP(r1, 0x5608, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0x4, &(0x7f0000000340)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x3f24000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) openat$pidfd(0xffffffffffffff9c, 0x0, 0x0, 0x0) unlink(&(0x7f0000000340)='./cgroup.cpu/cpuset.cpus\x00') r3 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xbe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x100000000, 0x6}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x40082406, &(0x7f0000000340)='cpu\t&0&&\t') perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x35, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3ff, 0x81}, 0x0, 0xf5, 0x4, 0x9, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x8000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$inet_tcp(0x2, 0x1, 0x0) (async) socket$inet_tcp(0x2, 0x1, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) (async) socket$inet_tcp(0x2, 0x1, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000004c0)={@map, r2, 0x11, 0x0, 0x0, @void, @value}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x5, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b7030000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) read(r5, 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r5, 0x0, &(0x7f00000000c0)) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r6) (async) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r6) sendmsg$NFC_CMD_DEV_UP(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[], 0x1c}}, 0x0) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x200c840, &(0x7f0000000240)={[{@discard}, {@noload}]}, 0x64, 0x537, &(0x7f0000000f80)="$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") 1.261669662s ago: executing program 3 (id=1284): r0 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r1, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) getsockopt$inet_opts(r1, 0x0, 0x4, 0xfffffffffffffffe, &(0x7f0000000200)) ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(r0, 0x8040942d, &(0x7f0000000080)) 1.149892143s ago: executing program 3 (id=1287): symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000040)=@broute={'broute\x00', 0x20, 0x1, 0x220, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000500], 0x7, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff01000000110000000000000000006eff369df4880000145b41fe6900000079616d3000000000000000000000000079616d3000000000000000000000000076657468315f742f5f626f6e640000000180c20000000000000000000180c20000000000000000000000b0000000670100009001000073746174697374696300000000000000000000000000000000000000000000001800000000000000000000000000000000000000000000000000000000000000646e61740000000000000000ff0300000000000000000000000000000000000010000000000000000180c20000000000ffffffff000000006e666c6f670000000000000000007124653b48a2601bf5ce1a222a243bb900000000000000000000000000000000000050000000121b6eb2e833e7a394a873495fdd3844d4f0fffbf04a000000007e4b000022d4e27ebdf3b9dc569e338e2c551c2fc4a19597ba4c501c8b1f16fb7809c40aee86f4fe16383d2afb577ed2bb6dd99f024b3f54ba00000000415544495400"/544]}, 0x298) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000ffffffff000000000000000085000000a8000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b705000000000000850000007300000095"], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x18, 0xc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000400)={r3, r2}, 0x26) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000010000200000000000030000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r4}, 0x10) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r5}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0x25c, &(0x7f0000000440)=@framed={{0x18, 0x2}, [@printk={@ld}, @call={0x85, 0x0, 0x0, 0x7}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='percpu_free_percpu\x00', r6}, 0x10) r7 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r8 = fcntl$dupfd(r7, 0x0, r7) ioctl$SG_IO(r8, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffc, 0x6, 0x0, @buffer={0x2, 0x0, 0x0}, &(0x7f0000000380)="259374c96ee3", 0x0, 0x2, 0x0, 0x0, 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, r8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file2\x00', 0x200801f, &(0x7f0000000180)={[{@block_validity}, {@quota}, {@nodiscard}]}, 0xfe, 0x4e5, &(0x7f0000000980)="$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") 1.144059973s ago: executing program 4 (id=1289): r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000080)='sched_switch\x00', 0xffffffffffffffff, 0x0, 0x3}, 0x18) socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000040000001801000020786c2500000000002020207b1af8ff00000000bfa1000000"], &(0x7f0000000240)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000180)='sys_enter\x00', r1}, 0x10) r2 = gettid() r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r3, &(0x7f0000000440)=""/247, 0x26) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r3, 0x4040534e, &(0x7f0000000080)={0x1, @time={0xe}, 0x0, {0x0, 0xff}, 0x1, 0x1, 0x8}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r3, 0xc0bc5310, &(0x7f0000000040)={0x0, @time, 0x0, {0xd}, 0x6, 0x0, 0x1}) tkill(r2, 0x7) kcmp(r2, r2, 0x4, 0xffffffffffffffff, r0) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000100)={0x1, &(0x7f0000000080)=[{0x40, 0x42, 0xfe, 0x100}]}, 0x10) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x40, 0x0, 0x82, 0x0, 0x8404, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1fffffff, 0x0, 0x0, 0x40}, 0x0, 0x100000000000, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x18, 0x22, &(0x7f0000000c40)=ANY=[@ANYBLOB="1800000001040000000000000d00000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=0x1, @ANYBLOB="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", @ANYRES32, @ANYBLOB="000000000000000018000000fdffffff0000000001040000850000001c000000084507000900000018550000000000000000000000000000002d07000b000000bf91000000000000b7020000020000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000280)='syzkaller\x00', 0xd, 0x0, 0x0, 0x41100, 0x2e, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000c00)={0x1, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[0xffffffffffffffff, 0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x0, 0x10, 0x2000000, @void, @value}, 0x94) 1.007318044s ago: executing program 5 (id=1293): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x1, 0x1001, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xf, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000003fffffe218110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f9ffffffb703000000080000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec850000007d000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r2}, 0xc) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000380)=ANY=[], &(0x7f0000000ec0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000700)='signal_generate\x00', r3}, 0x10) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r4, 0x0, 0x8000000000000000}, 0x18) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x1) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r6}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r7, 0x0, r9, 0x0, 0xf3a, 0x6) tee(r8, r5, 0x8, 0x2) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r10}, 0x10) r11 = syz_open_procfs(0x0, &(0x7f0000000280)='ns\x00') readlinkat(r11, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000002780)=""/4112, 0x1010) r12 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r12, &(0x7f0000000180)=@name={0x1e, 0x2, 0x1, {{0x42, 0x2}, 0x4}}, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) unlink(0x0) socket$nl_route(0x10, 0x3, 0x0) 983.310244ms ago: executing program 1 (id=1295): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000240)='rpm_return_int\x00', r1}, 0x18) syz_open_dev$usbfs(&(0x7f0000000040), 0x12, 0x0) 931.541074ms ago: executing program 1 (id=1296): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000008002b000000000000000018040000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='sys_enter\x00', r2}, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r4}, 0x10) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r5, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f00000001c0), 0xc7) 845.886335ms ago: executing program 4 (id=1297): r0 = syz_open_procfs(0x0, &(0x7f0000000280)='ns\x00') readlinkat(r0, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000002780)=""/4112, 0x1010) 833.381584ms ago: executing program 1 (id=1298): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0xffffffff, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0), &(0x7f00000003c0), 0x5, r1}, 0x38) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kfree\x00', r2}, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r0) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01000000ecffffffffff2000000005002000000000000c001f0070687930"], 0x28}}, 0x0) 815.894465ms ago: executing program 3 (id=1299): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000fdff00000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000008385000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xe, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) r1 = io_uring_setup(0x3123, &(0x7f00000002c0)={0x0, 0x656, 0x40, 0x1, 0x328}) io_uring_register$IORING_REGISTER_RESTRICTIONS(r1, 0xb, &(0x7f0000000400), 0x0) 815.208115ms ago: executing program 7 (id=1300): bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={0xffffffffffffffff, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r0}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0xfc, 0x7ffc0002}]}) pselect6(0x40, &(0x7f0000000200)={0x8000000000000000, 0x97, 0x80000001, 0x0, 0x6200000000000000, 0x4, 0xb, 0x7fff}, 0x0, 0x0, 0x0, 0x0) 815.058095ms ago: executing program 4 (id=1301): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x9, 0xc, 0xffffffff, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000001040)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 797.151885ms ago: executing program 4 (id=1302): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x0, 0x3ff}}}}]}, 0x4c}}, 0x0) (fail_nth: 4) 555.551907ms ago: executing program 1 (id=1303): syz_usbip_server_init(0x4) syz_usbip_server_init(0x4) syz_usbip_server_init(0x4) syz_usbip_server_init(0x3) syz_usbip_server_init(0x1) syz_usbip_server_init(0x4) (async) syz_usbip_server_init(0x4) (async) syz_usbip_server_init(0x4) (async) syz_usbip_server_init(0x3) (async) syz_usbip_server_init(0x1) (async) 495.479087ms ago: executing program 4 (id=1304): r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040), 0x100, 0x0) ioctl$SNAPSHOT_ALLOC_SWAP_PAGE(r0, 0x80083314, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYRESHEX=r0, @ANYRES32=0xffffffffffffffff, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000580)=ANY=[@ANYBLOB="9fc6755a21ae875717bdb63e2368e4de82c2a0ff11b7650446bd399d28c8856d50a4d6e518a8ad05f82ae729f7156be053409774a81926412d5f5ac5d74f16ada2df8bfb89b5f1a393d5bcfe735868e06c1e9742dcfd1d1125502245319e5c3d2e27f95b0ec1fcb3da8de72f4ee32af411a9b004977d982bef80f992260b591c1c8d3260e147d8accd6f0c0546a69c61ad64aaaaaf99134f2a7a07aefc95f690b2310795dab014950806a83b5ffc008e356c9fd5d5b7b5e70124e9752373c9729db89fecbfb05c47e8031185aac94c39313e7ebbc8fedddd617562e84121", @ANYRESOCT=r2, @ANYRES64=r2, @ANYRES32=r1], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$CAN_RAW_FD_FRAMES(0xffffffffffffffff, 0x65, 0x5, &(0x7f0000000a80), &(0x7f0000000ac0)=0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180200000700000000000000000000008500000041000000850000000500000095"], &(0x7f0000000a40)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r4, 0x27, 0x25, 0x0, &(0x7f00000007c0), 0x0, 0x702, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000002080)={&(0x7f0000000300)='kfree\x00', r3}, 0x10) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x7101}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) close(r6) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r7 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0xe6884, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000001c0)={0x1, 0xffffffffffffffff}, 0x4) pipe2(&(0x7f0000000340)={0xffffffffffffffff}, 0x80800) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0xe, 0x2b, &(0x7f00000006c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x8978}, {{0x18, 0x1, 0x1, 0x0, r7}}, {}, [@call={0x85, 0x0, 0x0, 0x71}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r8}}, @call={0x85, 0x0, 0x0, 0x4c}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @ldst={0x0, 0x3, 0x3, 0x8, 0x0, 0xc, 0x1}, @map_fd={0x18, 0xb, 0x1, 0x0, r9}, @btf_id={0x18, 0xb, 0x3, 0x0, 0x2}, @ringbuf_query, @alu={0x7, 0x0, 0x4, 0x1f, 0x2, 0xfffffffffffffff8, 0x10}, @map_idx_val={0x18, 0x4, 0x6, 0x0, 0x9, 0x0, 0x0, 0x0, 0x4}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, 0x0, 0x7e79306f, 0xae, &(0x7f0000000840)=""/174, 0x41000, 0xb, '\x00', 0x0, @sk_skb=0x5, 0xffffffffffffffff, 0x8, &(0x7f0000000440)={0x0, 0x2}, 0x8, 0x10, &(0x7f0000000900)={0x4, 0x8, 0x80, 0x1440000}, 0x10, 0x0, r5, 0x3, 0x0, &(0x7f0000000940)=[{0x0, 0x3, 0x9, 0x6}, {0x5, 0x4, 0x2, 0xb}, {0x3, 0x2, 0x0, 0x2}], 0x10, 0x5, @void, @value}, 0x94) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r10) pipe(&(0x7f0000000b00)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000400)) ioctl$SIOCSIFHWADDR(r10, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 495.209877ms ago: executing program 7 (id=1305): bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xb, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000001000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, &(0x7f00000000c0)}) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000200), 0x1, 0x0) writev(r0, &(0x7f00000025c0)=[{&(0x7f0000000240)='4', 0x1}], 0x1) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000040000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000240)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000180)='sys_enter\x00', r1}, 0x10) r2 = gettid() r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r3, &(0x7f0000000440)=""/247, 0x26) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r3, 0x4040534e, &(0x7f0000000080)={0x1, @time={0xe}, 0x0, {0x0, 0xff}, 0x1, 0x1, 0x8}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r3, 0xc0bc5310, &(0x7f0000000040)={0x0, @time, 0x0, {0xd}, 0x6, 0x0, 0x1}) tkill(r2, 0x7) ioctl$SNDRV_SEQ_IOCTL_GET_PORT_INFO(r3, 0xc0a85322, &(0x7f0000000280)) r4 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./bus\x00', 0x141842, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_user\x00', 0x275a, 0x0) readv(r4, &(0x7f0000000900)=[{&(0x7f0000001380)=""/4096, 0x1000}, {&(0x7f0000003380)=""/4101, 0x1005}, {&(0x7f0000000800)=""/202, 0xca}], 0x3) copy_file_range(r5, 0x0, r4, 0x0, 0xfffffff7a003e45c, 0x10000000000000) kcmp(r2, r2, 0x4, 0xffffffffffffffff, 0xffffffffffffffff) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000004c0)={r4, 0x20, &(0x7f0000000480)={&(0x7f0000000a00)=""/227, 0xe3, 0x0, &(0x7f0000000b00)=""/235, 0xeb}}, 0x10) 474.134657ms ago: executing program 3 (id=1306): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xb, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000001000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000080)='sched_switch\x00', r0, 0x0, 0x3}, 0x18) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000200), 0x1, 0x0) writev(r2, &(0x7f00000025c0)=[{&(0x7f0000000240)='4', 0x1}], 0x1) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000040000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000240)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000180)='sys_enter\x00', r3}, 0x10) r4 = gettid() r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r5, &(0x7f0000000440)=""/247, 0x26) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r5, 0x4040534e, &(0x7f0000000080)={0x1, @time={0xe}, 0x0, {0x0, 0xff}, 0x1, 0x1, 0x8}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r5, 0xc0bc5310, &(0x7f0000000040)={0x0, @time, 0x0, {0xd}, 0x6, 0x0, 0x1}) tkill(r4, 0x7) ioctl$SNDRV_SEQ_IOCTL_GET_PORT_INFO(r5, 0xc0a85322, &(0x7f0000000280)) r6 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./bus\x00', 0x141842, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_user\x00', 0x275a, 0x0) readv(r6, &(0x7f0000000900)=[{&(0x7f0000001380)=""/4096, 0x1000}, {&(0x7f0000003380)=""/4101, 0x1005}, {&(0x7f0000000800)=""/202, 0xca}], 0x3) copy_file_range(r7, 0x0, r6, 0x0, 0xfffffff7a003e45c, 0x10000000000000) kcmp(r4, r4, 0x4, 0xffffffffffffffff, r1) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000004c0)={r6, 0x20, &(0x7f0000000480)={&(0x7f0000000a00)=""/227, 0xe3, 0x0, &(0x7f0000000b00)=""/235, 0xeb}}, 0x10) 326.180618ms ago: executing program 1 (id=1307): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b707000008000000850000006900"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x18) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="0667000000000000140012800900010076657468000000000400028008000a00", @ANYRES32], 0x3c}, 0x1, 0xba01, 0x0, 0x4004890}, 0x800) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480), 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000080)={0x2, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x2, 0xa, 0x0, 0x0, 0x2}, 0x10}}, 0x0) r4 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$bt_hci(r4, 0x0, 0x0) accept$phonet_pipe(0xffffffffffffffff, &(0x7f00000000c0), &(0x7f0000000140)=0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)={0x68, r6, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_PEERS={0x40, 0x8, 0x0, 0x1, [{0x3c, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x0, @local}}]}]}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}]}, 0x68}}, 0x0) 204.446308ms ago: executing program 7 (id=1308): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000240)='rpm_return_int\x00', r1}, 0x18) syz_open_dev$usbfs(&(0x7f0000000040), 0x12, 0x0) 204.105429ms ago: executing program 4 (id=1309): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x1008002, &(0x7f0000000800), 0x1, 0x5d8, &(0x7f0000000c00)="$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") creat(&(0x7f0000000240)='./bus\x00', 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r0}, 0x10) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0) write(r2, &(0x7f0000004200)='t', 0x1) sendfile(r2, r1, 0x0, 0x3ffff) sendfile(r2, r1, 0x0, 0x7ffff000) sched_setscheduler(0x0, 0x1, 0x0) getpid() sched_setaffinity(0x0, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000008002b000000000000000018040000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='sched_switch\x00', r3}, 0x10) ppoll(0x0, 0x0, &(0x7f0000000340)={0x0, 0xff}, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) 162.190089ms ago: executing program 3 (id=1310): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0x2}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x17}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x15}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x78}}, 0x8000) 153.387979ms ago: executing program 7 (id=1311): pselect6(0x40, &(0x7f0000000200)={0x8000000000000000, 0x97, 0x80000001, 0x0, 0x6200000000000000, 0x4, 0xb, 0x7fff}, 0x0, 0x0, 0x0, 0x0) 96.392099ms ago: executing program 5 (id=1312): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x9, 0xc, 0xffffffff, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000001040)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 95.857479ms ago: executing program 3 (id=1313): syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0x2000480, &(0x7f0000000000)={[{@grpjquota}, {@errors_remount}]}, 0x1, 0x784, &(0x7f00000007c0)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$TOKEN_CREATE(0x24, &(0x7f0000000340)={0x0, r1}, 0x8) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x18, 0x4, &(0x7f00000005c0)=ANY=[], &(0x7f0000000140)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x72, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r2}, 0x10) socket$key(0xf, 0x3, 0x2) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000001040)=ANY=[@ANYBLOB="38010000100013070000000000000000ffffffff000000000000000000000000fe8000000000000000000000000000bb00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000032000000ff01000000000000000000200000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000200030000000000000048000200656362286369706865725f6e756c6c29"], 0x138}, 0x1, 0xe}, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000200)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r4}, 0x10) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r6 = fcntl$dupfd(r5, 0x0, r5) ioctl$SG_IO(r6, 0x2285, &(0x7f0000000040)={0x53, 0x0, 0x6, 0x0, @buffer={0x2, 0x40002, &(0x7f00000000c0)=""/81}, &(0x7f0000000380)="259374c96ee3", 0x0, 0x0, 0x0, 0x0, 0x0}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000080000000c"], 0x48) unshare(0x22020600) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x1a14008, &(0x7f0000000a00)={[{@nodioread_nolock}, {@init_itable_val={'init_itable', 0x3d, 0x7}}]}, 0xf9, 0x7c0, &(0x7f0000000f80)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) sendmsg$ETHTOOL_MSG_FEATURES_GET(0xffffffffffffffff, &(0x7f0000002040)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000002000)={&(0x7f0000001e40)={0x188, 0x0, 0x400, 0x70bd25, 0x25dfdbfb, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_macvtap\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}]}, @HEADER={0x6c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_macvtap\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x188}, 0x1, 0x0, 0x0, 0x48804}, 0x4000001) fstat(r5, &(0x7f00000005c0)) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000a10418050000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r7}, 0x10) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000000cc0)=@newtaction={0x84, 0x30, 0x12f, 0x0, 0x0, {0x0, 0x0, 0x1be}, [{0x70, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x5c, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x4}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa, {0x0, 0x3f}}}}]}]}, 0x84}}, 0x0) write$P9_RSTAT(r0, &(0x7f00000000c0)=ANY=[], 0x56) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f0000000300)=ANY=[@ANYBLOB="000000000000000000000002"]) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x492492492492846, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) 88.515109ms ago: executing program 1 (id=1314): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x1008002, &(0x7f0000000800), 0x1, 0x5d8, &(0x7f0000000c00)="$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") creat(&(0x7f0000000240)='./bus\x00', 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r0}, 0x10) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0) write(r2, &(0x7f0000004200)='t', 0x1) sendfile(r2, r1, 0x0, 0x3ffff) sendfile(r2, r1, 0x0, 0x7ffff000) sched_setscheduler(0x0, 0x1, 0x0) getpid() sched_setaffinity(0x0, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000008002b000000000000000018040000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='sched_switch\x00', r3}, 0x10) ppoll(0x0, 0x0, &(0x7f0000000340)={0x0, 0xff}, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) 38.83466ms ago: executing program 7 (id=1315): prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="eaffffff04000000080000000c000000000000008d25043298f8938ae6d94bfd31d2b0102cf93867f57a7f71dfbad796eba6e40718d81777de2e9e35635d7f3233a1c14675114bf42ddd6d2c87c9cfca192dce82cc602028f1eb63a150d46c13ffcd25", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000300)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r3}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r0}, &(0x7f0000000380), &(0x7f00000003c0)=r1}, 0x20) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001940)=@newtaction={0xe98, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0xe84, 0x1, [@m_pedit={0xe80, 0x1, 0x0, 0x0, {{0xa}, {0xe54, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe50, 0x2, {{{}, 0x97, 0x0, [{}, {}]}, [{}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, {}, {}, {0x448eade7}, {0x0, 0x0, 0x80000000}, {}, {0x0, 0x0, 0x0, 0x2000}, {0x0, 0x0, 0x0, 0x0, 0x400}, {}, {}, {}, {0x0, 0x1, 0x0, 0x0, 0xfffffffe}, {}, {}, {}, {}, {}, {}, {0x0, 0x3, 0x0, 0x0, 0x0, 0x9}, {}, {0x0, 0x0, 0x100}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {}, {0xfffffffc}, {}, {}, {}, {0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x1}, {}, {}, {0x0, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {}, {0xfffffffe}, {}, {0xd5}, {}, {0x0, 0x0, 0x0, 0xffffffff}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x10}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x800, 0x6}, {}, {}, {}, {}, {}, {0x0, 0x5, 0x0, 0x2}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000}, {}, {}, {0xffffffff}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x4}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, {0x0, 0x800000}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x1000}, {}, {}, {}, {}, {}, {0x4, 0x0, 0x0, 0x0, 0x1}, {}, {0x0, 0x9}, {}, {0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xb}], [{}, {}, {}, {}, {}, {}, {0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {0x5}, {}, {}, {}, {0x5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x2}, {}, {0x0, 0x1}, {}, {}, {}, {}, {0x0, 0x1}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe98}}, 0x0) 38.46221ms ago: executing program 5 (id=1316): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000008002b000000000000000018040000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r3}, 0x10) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f00000001c0), 0xc7) 0s ago: executing program 7 (id=1317): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x1, 0x1001, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xf, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000003fffffe218110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f9ffffffb703000000080000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec850000007d000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r2}, 0xc) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000380)=ANY=[], &(0x7f0000000ec0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000700)='signal_generate\x00', r3}, 0x10) r4 = syz_open_procfs(0x0, &(0x7f0000000280)='ns\x00') readlinkat(r4, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000002780)=""/4112, 0x1010) kernel console output (not intermixed with test programs): ? vm_area_dup+0x98/0x130 [ 114.033023][ T6828] vm_area_dup+0x98/0x130 [ 114.037392][ T6828] __split_vma+0xf7/0x6a0 [ 114.041801][ T6828] vma_modify+0x17d/0x1e0 [ 114.046161][ T6828] vma_modify_flags_name+0xf6/0x120 [ 114.051442][ T6828] do_madvise+0x18bf/0x2a70 [ 114.055985][ T6828] ? __secure_computing+0x9f/0x1c0 [ 114.061125][ T6828] __x64_sys_madvise+0x61/0x70 [ 114.066008][ T6828] x64_sys_call+0x23ab/0x2dc0 [ 114.070789][ T6828] do_syscall_64+0xc9/0x1c0 [ 114.075308][ T6828] ? clear_bhb_loop+0x55/0xb0 [ 114.080016][ T6828] ? clear_bhb_loop+0x55/0xb0 [ 114.084829][ T6828] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 114.090784][ T6828] RIP: 0033:0x7f3171800809 [ 114.095292][ T6828] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 114.114926][ T6828] RSP: 002b:00007f316fe77058 EFLAGS: 00000246 ORIG_RAX: 000000000000001c [ 114.123359][ T6828] RAX: ffffffffffffffda RBX: 00007f31719c5fa0 RCX: 00007f3171800809 [ 114.131359][ T6828] RDX: 0000000000000012 RSI: 0000000000004000 RDI: 0000000020ffb000 [ 114.139415][ T6828] RBP: 00007f316fe770a0 R08: 0000000000000000 R09: 0000000000000000 [ 114.147392][ T6828] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 114.155392][ T6828] R13: 0000000000000000 R14: 00007f31719c5fa0 R15: 00007ffef719d0d8 [ 114.163422][ T6828] [ 114.222490][ T6835] loop5: detected capacity change from 0 to 512 [ 114.229402][ T6835] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 114.237795][ T6835] EXT4-fs (loop5): bad geometry: first data block is 0 with a 1k block and cluster size [ 114.267140][ T6840] netlink: 4 bytes leftover after parsing attributes in process `syz.2.889'. [ 114.281326][ T6840] netlink: 4 bytes leftover after parsing attributes in process `syz.2.889'. [ 114.311586][ T6841] lo speed is unknown, defaulting to 1000 [ 114.317854][ T6841] lo speed is unknown, defaulting to 1000 [ 114.324446][ T6841] lo speed is unknown, defaulting to 1000 [ 114.431147][ T6841] loop1: detected capacity change from 0 to 512 [ 114.438076][ T6841] EXT4-fs: Ignoring removed oldalloc option [ 114.455088][ T6841] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 114.483861][ T6841] EXT4-fs (loop1): 1 truncate cleaned up [ 114.659118][ T6847] loop4: detected capacity change from 0 to 512 [ 114.706468][ T6847] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 114.724405][ T6849] loop2: detected capacity change from 0 to 1024 [ 114.738210][ T6847] EXT4-fs (loop4): 1 truncate cleaned up [ 114.790327][ T6859] siw: device registration error -23 [ 114.839666][ T6863] loop2: detected capacity change from 0 to 256 [ 114.875499][ T6864] lo speed is unknown, defaulting to 1000 [ 114.881792][ T6864] lo speed is unknown, defaulting to 1000 [ 114.888297][ T6864] lo speed is unknown, defaulting to 1000 [ 115.085044][ T6864] loop5: detected capacity change from 0 to 512 [ 115.092059][ T6864] EXT4-fs: Ignoring removed oldalloc option [ 115.127730][ T6854] netlink: 100 bytes leftover after parsing attributes in process `syz.3.890'. [ 115.141294][ T6864] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 115.154372][ T6864] EXT4-fs (loop5): 1 truncate cleaned up [ 115.281839][ T6863] FAT-fs (loop2): Directory bread(block 64) failed [ 115.314230][ T6867] loop4: detected capacity change from 0 to 512 [ 115.317520][ T6863] FAT-fs (loop2): Directory bread(block 65) failed [ 115.327209][ T6863] FAT-fs (loop2): Directory bread(block 66) failed [ 115.333835][ T6863] FAT-fs (loop2): Directory bread(block 67) failed [ 115.342921][ T6863] FAT-fs (loop2): Directory bread(block 68) failed [ 115.349781][ T6863] FAT-fs (loop2): Directory bread(block 69) failed [ 115.356519][ T6863] FAT-fs (loop2): Directory bread(block 70) failed [ 115.363095][ T6863] FAT-fs (loop2): Directory bread(block 71) failed [ 115.370799][ T6863] FAT-fs (loop2): Directory bread(block 72) failed [ 115.373258][ T6867] ext4 filesystem being mounted at /166/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 115.382753][ T6863] FAT-fs (loop2): Directory bread(block 73) failed [ 115.496825][ T6877] loop4: detected capacity change from 0 to 512 [ 115.522265][ T6879] loop3: detected capacity change from 0 to 4096 [ 115.534559][ T6877] ext4 filesystem being mounted at /167/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 115.580717][ T6879] FAULT_INJECTION: forcing a failure. [ 115.580717][ T6879] name failslab, interval 1, probability 0, space 0, times 0 [ 115.593494][ T6879] CPU: 0 UID: 0 PID: 6879 Comm: syz.3.899 Not tainted 6.12.0-syzkaller-10296-gaaf20f870da0 #0 [ 115.598721][ T6885] netlink: 8 bytes leftover after parsing attributes in process `syz.1.900'. [ 115.603783][ T6879] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 115.622614][ T6879] Call Trace: [ 115.625970][ T6879] [ 115.628924][ T6879] dump_stack_lvl+0xf2/0x150 [ 115.633538][ T6879] dump_stack+0x15/0x20 [ 115.637722][ T6879] should_fail_ex+0x223/0x230 [ 115.642537][ T6879] should_failslab+0x8f/0xb0 [ 115.647255][ T6879] kmem_cache_alloc_noprof+0x52/0x320 [ 115.652691][ T6879] ? ext4_init_io_end+0x31/0xb0 [ 115.657632][ T6879] ? submit_bio+0x218/0x230 [ 115.662185][ T6879] ext4_init_io_end+0x31/0xb0 [ 115.666967][ T6879] ext4_do_writepages+0x78c/0x2130 [ 115.672171][ T6879] ? __ext4_mark_inode_dirty+0x32a/0x440 [ 115.677863][ T6879] ? _raw_spin_unlock_irqrestore+0x2b/0x60 [ 115.683728][ T6879] ? ext4_has_free_clusters+0x311/0x330 [ 115.687522][ T6877] hub 6-0:1.0: USB hub found [ 115.689331][ T6879] ? cgroup_rstat_updated+0x9f/0x570 [ 115.694063][ T6877] FAULT_INJECTION: forcing a failure. [ 115.694063][ T6877] name failslab, interval 1, probability 0, space 0, times 0 [ 115.699229][ T6879] ? __mod_memcg_lruvec_state+0x141/0x290 [ 115.699266][ T6879] ? __mod_zone_page_state+0x19/0x70 [ 115.699302][ T6879] ext4_writepages+0x159/0x2e0 [ 115.699340][ T6879] ? __pfx_ext4_writepages+0x10/0x10 [ 115.733106][ T6879] do_writepages+0x1d8/0x480 [ 115.737795][ T6879] ? xas_load+0x3ae/0x3d0 [ 115.742135][ T6879] ? _raw_spin_unlock+0x26/0x50 [ 115.747026][ T6879] ? wbc_attach_and_unlock_inode+0x8f/0x2d0 [ 115.752953][ T6879] filemap_write_and_wait_range+0x146/0x360 [ 115.759385][ T6879] ? xa_load+0xb9/0xe0 [ 115.763569][ T6879] kiocb_write_and_wait+0x73/0x100 [ 115.768703][ T6879] __iomap_dio_rw+0x50c/0x1110 [ 115.773501][ T6879] iomap_dio_rw+0x40/0x90 [ 115.777878][ T6879] ext4_file_read_iter+0x214/0x290 [ 115.783002][ T6879] copy_splice_read+0x3a0/0x5d0 [ 115.788151][ T6879] ? __pfx_ext4_file_splice_read+0x10/0x10 [ 115.793963][ T6879] splice_direct_to_actor+0x28b/0x670 [ 115.799398][ T6879] ? __pfx_direct_splice_actor+0x10/0x10 [ 115.805124][ T6879] do_splice_direct+0xd7/0x150 [ 115.810004][ T6879] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 115.815913][ T6879] do_sendfile+0x398/0x660 [ 115.820355][ T6879] __x64_sys_sendfile64+0x110/0x150 [ 115.825575][ T6879] x64_sys_call+0xfbd/0x2dc0 [ 115.830230][ T6879] do_syscall_64+0xc9/0x1c0 [ 115.834736][ T6879] ? clear_bhb_loop+0x55/0xb0 [ 115.839421][ T6879] ? clear_bhb_loop+0x55/0xb0 [ 115.844111][ T6879] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 115.850024][ T6879] RIP: 0033:0x7fc8831d0809 [ 115.854451][ T6879] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 115.874093][ T6879] RSP: 002b:00007fc881847058 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 115.882773][ T6879] RAX: ffffffffffffffda RBX: 00007fc883395fa0 RCX: 00007fc8831d0809 [ 115.890998][ T6879] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000005 [ 115.899094][ T6879] RBP: 00007fc8818470a0 R08: 0000000000000000 R09: 0000000000000000 [ 115.907068][ T6879] R10: 0000000080000000 R11: 0000000000000246 R12: 0000000000000001 [ 115.915101][ T6879] R13: 0000000000000000 R14: 00007fc883395fa0 R15: 00007ffce8d0dc38 [ 115.923087][ T6879] [ 115.926117][ T6877] CPU: 1 UID: 0 PID: 6877 Comm: syz.4.898 Not tainted 6.12.0-syzkaller-10296-gaaf20f870da0 #0 [ 115.936471][ T6877] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 115.946566][ T6877] Call Trace: [ 115.949865][ T6877] [ 115.952839][ T6877] dump_stack_lvl+0xf2/0x150 [ 115.957535][ T6877] dump_stack+0x15/0x20 [ 115.961864][ T6877] should_fail_ex+0x223/0x230 [ 115.966601][ T6877] ? hub_probe+0x28c/0x15c0 [ 115.971208][ T6877] should_failslab+0x8f/0xb0 [ 115.975869][ T6877] __kmalloc_cache_noprof+0x4e/0x320 [ 115.981185][ T6877] hub_probe+0x28c/0x15c0 [ 115.985602][ T6877] ? pm_runtime_enable+0x15a/0x180 [ 115.990759][ T6877] ? read_tsc+0x9/0x20 [ 115.994837][ T6877] ? ktime_get_mono_fast_ns+0x18b/0x1b0 [ 116.000512][ T6877] ? _raw_spin_unlock_irqrestore+0x2b/0x60 [ 116.006411][ T6877] usb_probe_interface+0x460/0x6a0 [ 116.011633][ T6877] ? __pfx_usb_probe_interface+0x10/0x10 [ 116.017352][ T6877] really_probe+0x1cf/0x5d0 [ 116.021870][ T6877] __driver_probe_device+0x12d/0x200 [ 116.027173][ T6877] driver_probe_device+0x38/0x2f0 [ 116.032208][ T6877] __device_attach_driver+0x216/0x320 [ 116.037633][ T6877] ? __pfx___device_attach_driver+0x10/0x10 [ 116.043578][ T6877] bus_for_each_drv+0x1cd/0x240 [ 116.048504][ T6877] __device_attach+0x1c7/0x290 [ 116.053279][ T6877] device_attach+0x17/0x20 [ 116.057707][ T6877] proc_ioctl+0x339/0x400 [ 116.062093][ T6877] usbdev_ioctl+0x1f01/0x3e00 [ 116.066815][ T6877] ? do_vfs_ioctl+0x96e/0x1530 [ 116.071619][ T6877] ? selinux_file_ioctl+0x2f7/0x380 [ 116.076906][ T6877] ? __fget_files+0x17c/0x1c0 [ 116.081605][ T6877] ? __pfx_usbdev_ioctl+0x10/0x10 [ 116.086670][ T6877] __se_sys_ioctl+0xc9/0x140 [ 116.091300][ T6877] __x64_sys_ioctl+0x43/0x50 [ 116.096054][ T6877] x64_sys_call+0x1690/0x2dc0 [ 116.100797][ T6877] do_syscall_64+0xc9/0x1c0 [ 116.105309][ T6877] ? clear_bhb_loop+0x55/0xb0 [ 116.109991][ T6877] ? clear_bhb_loop+0x55/0xb0 [ 116.114721][ T6877] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 116.120684][ T6877] RIP: 0033:0x7fbb4ab90809 [ 116.125103][ T6877] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 116.144757][ T6877] RSP: 002b:00007fbb49207058 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 116.153216][ T6877] RAX: ffffffffffffffda RBX: 00007fbb4ad55fa0 RCX: 00007fbb4ab90809 [ 116.161201][ T6877] RDX: 0000000020000040 RSI: 00000000c0105512 RDI: 000000000000000c [ 116.169341][ T6877] RBP: 00007fbb492070a0 R08: 0000000000000000 R09: 0000000000000000 [ 116.177533][ T6877] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 116.185517][ T6877] R13: 0000000000000000 R14: 00007fbb4ad55fa0 R15: 00007ffda1fcaa68 [ 116.193585][ T6877] [ 116.196812][ T6877] hub 6-0:1.0: probe with driver hub failed with error -12 [ 116.263245][ T6889] loop1: detected capacity change from 0 to 512 [ 116.295845][ T6889] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 116.323374][ T6894] loop5: detected capacity change from 0 to 2048 [ 116.325307][ T6887] Â: renamed from vlan0 (while UP) [ 116.344782][ T6889] EXT4-fs (loop1): 1 truncate cleaned up [ 116.368959][ T29] kauditd_printk_skb: 440 callbacks suppressed [ 116.368976][ T29] audit: type=1326 audit(1732711403.159:6312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6899 comm="syz.4.906" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb4ab90809 code=0x7ffc0000 [ 116.400292][ T29] audit: type=1326 audit(1732711403.189:6313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6899 comm="syz.4.906" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb4ab90809 code=0x7ffc0000 [ 116.423722][ T29] audit: type=1326 audit(1732711403.189:6314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6899 comm="syz.4.906" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbb4ab90809 code=0x7ffc0000 [ 116.438705][ T6900] siw: device registration error -23 [ 116.447339][ T29] audit: type=1326 audit(1732711403.189:6315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6899 comm="syz.4.906" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb4ab90809 code=0x7ffc0000 [ 116.475931][ T29] audit: type=1326 audit(1732711403.189:6316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6899 comm="syz.4.906" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb4ab90809 code=0x7ffc0000 [ 116.499431][ T29] audit: type=1326 audit(1732711403.209:6317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6899 comm="syz.4.906" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbb4ab90809 code=0x7ffc0000 [ 116.522978][ T29] audit: type=1326 audit(1732711403.209:6318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6899 comm="syz.4.906" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb4ab90809 code=0x7ffc0000 [ 116.546470][ T29] audit: type=1326 audit(1732711403.209:6319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6899 comm="syz.4.906" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbb4ab90809 code=0x7ffc0000 [ 116.569903][ T29] audit: type=1326 audit(1732711403.209:6320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6899 comm="syz.4.906" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb4ab90809 code=0x7ffc0000 [ 116.593327][ T29] audit: type=1326 audit(1732711403.219:6321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6899 comm="syz.4.906" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbb4ab90809 code=0x7ffc0000 [ 116.669071][ T6894] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 116.695792][ T6914] loop3: detected capacity change from 0 to 1024 [ 116.703848][ T6894] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 116.717155][ T6894] EXT4-fs (loop5): This should not happen!! Data will be lost [ 116.717155][ T6894] [ 116.726909][ T6894] EXT4-fs (loop5): Total free blocks count 0 [ 116.732984][ T6894] EXT4-fs (loop5): Free/Dirty block details [ 116.738946][ T6894] EXT4-fs (loop5): free_blocks=2415919104 [ 116.744749][ T6894] EXT4-fs (loop5): dirty_blocks=3616 [ 116.750785][ T6894] EXT4-fs (loop5): Block reservation details [ 116.756836][ T6894] EXT4-fs (loop5): i_reserved_data_blocks=226 [ 116.825166][ T6919] lo speed is unknown, defaulting to 1000 [ 116.831226][ T6919] lo speed is unknown, defaulting to 1000 [ 116.837909][ T6919] lo speed is unknown, defaulting to 1000 [ 116.903386][ T6919] loop2: detected capacity change from 0 to 512 [ 116.909970][ T6919] EXT4-fs: Ignoring removed oldalloc option [ 116.919755][ T6919] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 116.939658][ T6901] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 2050 with max blocks 1556 with error 28 [ 116.952461][ T6901] EXT4-fs (loop5): This should not happen!! Data will be lost [ 116.952461][ T6901] [ 116.965730][ T6919] EXT4-fs (loop2): 1 truncate cleaned up [ 117.251186][ T6924] loop4: detected capacity change from 0 to 512 [ 117.293263][ T6924] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2240: inode #15: comm syz.4.914: corrupted in-inode xattr: invalid ea_ino [ 117.313811][ T6927] netlink: 36 bytes leftover after parsing attributes in process `syz.3.912'. [ 117.315514][ T6924] EXT4-fs error (device loop4): ext4_orphan_get:1394: comm syz.4.914: couldn't read orphan inode 15 (err -117) [ 117.364087][ T6927] netlink: 12 bytes leftover after parsing attributes in process `syz.3.912'. [ 117.416288][ T6932] veth7: entered promiscuous mode [ 117.421435][ T6932] veth7: entered allmulticast mode [ 117.529283][ T6950] loop5: detected capacity change from 0 to 512 [ 117.543204][ T6947] veth5: entered promiscuous mode [ 117.543310][ T6950] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 117.548380][ T6947] veth5: entered allmulticast mode [ 117.575754][ T6950] EXT4-fs (loop5): 1 truncate cleaned up [ 117.628811][ T6958] loop2: detected capacity change from 0 to 1024 [ 117.784827][ T6969] loop3: detected capacity change from 0 to 512 [ 117.820030][ T6969] ext4 filesystem being mounted at /192/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 117.897843][ T6976] veth14: entered promiscuous mode [ 117.898475][ T6980] loop5: detected capacity change from 0 to 2048 [ 117.931993][ T6976] veth16: entered promiscuous mode [ 117.946257][ T6976] veth18: entered promiscuous mode [ 117.965587][ T6976] veth20: entered promiscuous mode [ 117.981447][ T6976] veth22: entered promiscuous mode [ 118.009904][ T6976] veth24: entered promiscuous mode [ 118.031166][ T6987] veth5: entered promiscuous mode [ 118.036509][ T6990] loop5: detected capacity change from 0 to 2048 [ 118.043346][ T6987] veth5: entered allmulticast mode [ 118.057008][ T6976] veth26: entered promiscuous mode [ 118.071949][ T6976] veth28: entered promiscuous mode [ 118.086560][ T6976] veth30: entered promiscuous mode [ 118.106007][ T6976] veth32: entered promiscuous mode [ 118.131613][ T6976] veth34: entered promiscuous mode [ 118.150382][ T6976] veth36: entered promiscuous mode [ 118.188211][ T6976] veth38: entered promiscuous mode [ 118.204471][ T6976] veth40: entered promiscuous mode [ 118.220950][ T6976] veth42: entered promiscuous mode [ 118.240136][ T6976] veth44: entered promiscuous mode [ 118.269584][ T6976] veth46: entered promiscuous mode [ 118.313161][ T6976] veth48: entered promiscuous mode [ 118.339579][ T6976] veth50: entered promiscuous mode [ 118.361734][ T6976] veth52: entered promiscuous mode [ 118.377867][ T6976] veth54: entered promiscuous mode [ 118.398619][ T7014] dccp_invalid_packet: P.Data Offset(0) too small [ 118.398973][ T7013] netlink: 8 bytes leftover after parsing attributes in process `syz.4.939'. [ 118.416981][ T6976] veth56: entered promiscuous mode [ 118.420366][ T7017] loop3: detected capacity change from 0 to 512 [ 118.430819][ T7014] netlink: 'syz.5.941': attribute type 10 has an invalid length. [ 118.438723][ T7014] netlink: 168 bytes leftover after parsing attributes in process `syz.5.941'. [ 118.463198][ T6976] veth58: entered promiscuous mode [ 118.478669][ T7021] loop5: detected capacity change from 0 to 2048 [ 118.514383][ T6976] veth60: entered promiscuous mode [ 118.515647][ T7024] loop3: detected capacity change from 0 to 512 [ 118.564659][ T6976] veth62: entered promiscuous mode [ 118.584445][ T7031] loop1: detected capacity change from 0 to 512 [ 118.584980][ T6976] veth64: entered promiscuous mode [ 118.592022][ T7031] EXT4-fs: inline encryption not supported [ 118.610890][ T7031] ext4 filesystem being mounted at /202/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 118.619347][ T7026] loop4: detected capacity change from 0 to 512 [ 118.625027][ T6976] veth66: entered promiscuous mode [ 118.648024][ T7031] EXT4-fs error (device loop1): ext4_do_update_inode:5153: inode #2: comm syz.1.946: corrupted inode contents [ 118.651651][ T7026] EXT4-fs error (device loop4): ext4_acquire_dquot:6938: comm syz.4.945: Failed to acquire dquot type 1 [ 118.664397][ T7031] EXT4-fs error (device loop1): ext4_dirty_inode:6041: inode #2: comm syz.1.946: mark_inode_dirty error [ 118.687959][ T6976] veth68: entered promiscuous mode [ 118.689184][ T7026] EXT4-fs (loop4): 1 truncate cleaned up [ 118.701160][ T7035] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.944'. [ 118.711730][ T7024] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.944'. [ 118.721566][ T7026] ext4 filesystem being mounted at /174/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 118.731458][ T7031] EXT4-fs error (device loop1): ext4_do_update_inode:5153: inode #2: comm syz.1.946: corrupted inode contents [ 118.760732][ T7039] loop5: detected capacity change from 0 to 512 [ 118.789386][ T7039] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 118.803615][ T7031] EXT4-fs error (device loop1): __ext4_ext_dirty:207: inode #2: comm syz.1.946: mark_inode_dirty error [ 118.824292][ T7039] EXT4-fs (loop5): 1 truncate cleaned up [ 118.969498][ T7058] siw: device registration error -23 [ 119.027439][ T7061] veth7: entered promiscuous mode [ 119.032566][ T7061] veth7: entered allmulticast mode [ 119.131344][ T7064] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(18) [ 119.138043][ T7064] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 119.145729][ T7064] vhci_hcd vhci_hcd.0: Device attached [ 119.152549][ T7067] veth3: entered promiscuous mode [ 119.157863][ T7067] veth3: entered allmulticast mode [ 119.157987][ T7068] vhci_hcd: connection closed [ 119.164031][ T4891] vhci_hcd: stop threads [ 119.173153][ T4891] vhci_hcd: release socket [ 119.177676][ T4891] vhci_hcd: disconnect device [ 119.193049][ T7073] netlink: 4 bytes leftover after parsing attributes in process `syz.5.956'. [ 119.233613][ T7075] loop1: detected capacity change from 0 to 512 [ 119.247656][ T7075] ext4 filesystem being mounted at /204/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 119.303327][ T7079] loop1: detected capacity change from 0 to 2048 [ 119.513290][ T7091] loop1: detected capacity change from 0 to 512 [ 119.527313][ T7091] EXT4-fs warning (device loop1): ext4_enable_quotas:7156: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 119.542150][ T7091] EXT4-fs (loop1): mount failed [ 119.576784][ T7095] siw: device registration error -23 [ 119.701251][ T7100] loop1: detected capacity change from 0 to 512 [ 119.710160][ T7100] EXT4-fs: inline encryption not supported [ 119.738240][ T7102] loop4: detected capacity change from 0 to 2048 [ 119.761062][ T7100] ext4 filesystem being mounted at /212/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 119.777984][ T7100] EXT4-fs error (device loop1): ext4_do_update_inode:5153: inode #2: comm syz.1.965: corrupted inode contents [ 119.796235][ T7102] Alternate GPT is invalid, using primary GPT. [ 119.796631][ T7100] EXT4-fs error (device loop1): ext4_dirty_inode:6041: inode #2: comm syz.1.965: mark_inode_dirty error [ 119.802650][ T7102] loop4: p1 p2 p3 [ 119.815400][ T7110] loop2: detected capacity change from 0 to 2048 [ 119.819324][ T7100] EXT4-fs error (device loop1): ext4_do_update_inode:5153: inode #2: comm syz.1.965: corrupted inode contents [ 119.838135][ T7100] EXT4-fs error (device loop1): __ext4_ext_dirty:207: inode #2: comm syz.1.965: mark_inode_dirty error [ 120.009588][ T3897] udevd[3897]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 120.045757][ T3895] udevd[3895]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 120.057943][ T3314] udevd[3314]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 120.238746][ T7134] loop1: detected capacity change from 0 to 1024 [ 120.299152][ T7136] loop2: detected capacity change from 0 to 132 [ 120.477719][ T7144] netlink: 28 bytes leftover after parsing attributes in process `syz.1.976'. [ 120.486810][ T7144] netlink: 28 bytes leftover after parsing attributes in process `syz.1.976'. [ 120.495879][ T7144] netlink: 44 bytes leftover after parsing attributes in process `syz.1.976'. [ 120.624886][ T7151] loop2: detected capacity change from 0 to 1024 [ 120.641526][ T7151] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 120.651555][ T7151] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 120.676039][ T7151] EXT4-fs (loop2): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 120.745856][ T7159] loop5: detected capacity change from 0 to 512 [ 120.753168][ T7151] EXT4-fs error (device loop2): ext4_get_journal_inode:5809: inode #5: comm syz.2.978: unexpected bad inode w/o EXT4_IGET_BAD [ 120.756575][ T7159] EXT4-fs: inline encryption not supported [ 120.794338][ T7151] EXT4-fs (loop2): no journal found [ 120.799671][ T7151] EXT4-fs (loop2): can't get journal size [ 120.811294][ T7159] ext4 filesystem being mounted at /139/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 120.825213][ T7159] EXT4-fs error (device loop5): ext4_do_update_inode:5153: inode #2: comm syz.5.983: corrupted inode contents [ 120.837948][ T7159] EXT4-fs error (device loop5): ext4_dirty_inode:6041: inode #2: comm syz.5.983: mark_inode_dirty error [ 120.852818][ T7159] EXT4-fs error (device loop5): ext4_do_update_inode:5153: inode #2: comm syz.5.983: corrupted inode contents [ 120.879464][ T7159] EXT4-fs error (device loop5): __ext4_ext_dirty:207: inode #2: comm syz.5.983: mark_inode_dirty error [ 121.319089][ T7179] veth3: entered promiscuous mode [ 121.324212][ T7179] veth3: entered allmulticast mode [ 121.408413][ T7175] lo speed is unknown, defaulting to 1000 [ 121.414534][ T7175] lo speed is unknown, defaulting to 1000 [ 121.421611][ T7175] lo speed is unknown, defaulting to 1000 [ 121.530207][ T7175] chnl_net:caif_netlink_parms(): no params data found [ 121.569062][ T7175] bridge0: port 1(bridge_slave_0) entered blocking state [ 121.576221][ T7175] bridge0: port 1(bridge_slave_0) entered disabled state [ 121.598194][ T7175] bridge_slave_0: entered allmulticast mode [ 121.628300][ T7175] bridge_slave_0: entered promiscuous mode [ 121.651959][ T7175] bridge0: port 2(bridge_slave_1) entered blocking state [ 121.659243][ T7175] bridge0: port 2(bridge_slave_1) entered disabled state [ 121.670977][ T7175] bridge_slave_1: entered allmulticast mode [ 121.678726][ T7175] bridge_slave_1: entered promiscuous mode [ 121.702670][ T7175] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 121.713451][ T7175] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 121.736961][ T7175] team0: Port device team_slave_0 added [ 121.737842][ T29] kauditd_printk_skb: 985 callbacks suppressed [ 121.737859][ T29] audit: type=1326 audit(1732711408.529:7302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7199 comm="syz.3.995" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8831d0809 code=0x7ffc0000 [ 121.744159][ T7202] loop5: detected capacity change from 0 to 164 [ 121.749529][ T29] audit: type=1326 audit(1732711408.539:7303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7199 comm="syz.3.995" exe="/root/syz-executor" sig=0 arch=c000003e syscall=22 compat=0 ip=0x7fc8831d0809 code=0x7ffc0000 [ 121.778308][ T7175] team0: Port device team_slave_1 added [ 121.820946][ T7200] loop3: detected capacity change from 0 to 164 [ 121.833723][ T29] audit: type=1326 audit(1732711408.589:7304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7199 comm="syz.3.995" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8831d0809 code=0x7ffc0000 [ 121.857262][ T29] audit: type=1326 audit(1732711408.589:7305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7199 comm="syz.3.995" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8831d0809 code=0x7ffc0000 [ 121.861459][ T7202] Unable to read rock-ridge attributes [ 121.880577][ T29] audit: type=1326 audit(1732711408.589:7306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7199 comm="syz.3.995" exe="/root/syz-executor" sig=0 arch=c000003e syscall=427 compat=0 ip=0x7fc8831d0809 code=0x7ffc0000 [ 121.909506][ T29] audit: type=1326 audit(1732711408.589:7307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7199 comm="syz.3.995" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8831d0809 code=0x7ffc0000 [ 121.920215][ T7200] rock: corrupted directory entry. extent=28, offset=0, size=16777216 [ 121.932944][ T29] audit: type=1326 audit(1732711408.589:7308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7199 comm="syz.3.995" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8831d0809 code=0x7ffc0000 [ 121.964516][ T29] audit: type=1326 audit(1732711408.589:7309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7199 comm="syz.3.995" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fc8831d0809 code=0x7ffc0000 [ 121.987833][ T29] audit: type=1400 audit(1732711408.599:7310): avc: denied { create } for pid=7199 comm="syz.3.995" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 122.007326][ T29] audit: type=1326 audit(1732711408.599:7311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7199 comm="syz.3.995" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8831d0809 code=0x7ffc0000 [ 122.037146][ T7202] Unable to read rock-ridge attributes [ 122.045622][ T7207] lo speed is unknown, defaulting to 1000 [ 122.051738][ T7207] lo speed is unknown, defaulting to 1000 [ 122.059536][ T7175] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 122.067203][ T7175] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 122.093209][ T7175] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 122.106361][ T7175] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 122.113368][ T7175] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 122.114979][ T7208] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=7208 comm=syz.4.997 [ 122.139428][ T7175] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 122.140117][ T7207] lo speed is unknown, defaulting to 1000 [ 122.235666][ T7175] hsr_slave_0: entered promiscuous mode [ 122.245505][ T7175] hsr_slave_1: entered promiscuous mode [ 122.253796][ T7215] FAULT_INJECTION: forcing a failure. [ 122.253796][ T7215] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 122.266992][ T7215] CPU: 1 UID: 0 PID: 7215 Comm: syz.1.1000 Not tainted 6.12.0-syzkaller-10296-gaaf20f870da0 #0 [ 122.277520][ T7215] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 122.284477][ T7210] siw: device registration error -23 [ 122.287575][ T7215] Call Trace: [ 122.287585][ T7215] [ 122.287595][ T7215] dump_stack_lvl+0xf2/0x150 [ 122.287626][ T7215] dump_stack+0x15/0x20 [ 122.287648][ T7215] should_fail_ex+0x223/0x230 [ 122.287789][ T7215] should_fail+0xb/0x10 [ 122.287843][ T7215] should_fail_usercopy+0x1a/0x20 [ 122.287879][ T7215] _copy_from_user+0x1e/0xb0 [ 122.287919][ T7215] copy_msghdr_from_user+0x54/0x2a0 [ 122.288016][ T7215] ? __fget_files+0x17c/0x1c0 [ 122.288049][ T7215] __sys_sendmmsg+0x1e8/0x4b0 [ 122.288121][ T7215] __x64_sys_sendmmsg+0x57/0x70 [ 122.288151][ T7215] x64_sys_call+0x29aa/0x2dc0 [ 122.288184][ T7215] do_syscall_64+0xc9/0x1c0 [ 122.288241][ T7215] ? clear_bhb_loop+0x55/0xb0 [ 122.288263][ T7215] ? clear_bhb_loop+0x55/0xb0 [ 122.288286][ T7215] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 122.370859][ T7215] RIP: 0033:0x7fac562a0809 [ 122.375328][ T7215] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 122.395045][ T7215] RSP: 002b:00007fac54917058 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 122.403529][ T7215] RAX: ffffffffffffffda RBX: 00007fac56465fa0 RCX: 00007fac562a0809 [ 122.411518][ T7215] RDX: 0000000000000001 RSI: 0000000020000780 RDI: 0000000000000005 [ 122.419499][ T7215] RBP: 00007fac549170a0 R08: 0000000000000000 R09: 0000000000000000 [ 122.427550][ T7215] R10: 0000000004008804 R11: 0000000000000246 R12: 0000000000000001 [ 122.435559][ T7215] R13: 0000000000000000 R14: 00007fac56465fa0 R15: 00007ffd248624f8 [ 122.443630][ T7215] [ 122.462382][ T7175] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 122.470445][ T7175] Cannot create hsr debugfs directory [ 122.553055][ T7222] loop1: detected capacity change from 0 to 512 [ 122.590688][ T7222] EXT4-fs error (device loop1): ext4_expand_extra_isize_ea:2813: inode #11: comm syz.1.1002: corrupted xattr block 95: invalid header [ 122.594850][ T7224] loop3: detected capacity change from 0 to 2048 [ 122.612954][ T7226] loop5: detected capacity change from 0 to 512 [ 122.619881][ T7222] EXT4-fs error (device loop1): ext4_validate_block_bitmap:432: comm syz.1.1002: bg 0: block 7: invalid block bitmap [ 122.641339][ T7226] EXT4-fs: inline encryption not supported [ 122.650279][ T7222] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 122.672764][ T7222] EXT4-fs error (device loop1): ext4_xattr_delete_inode:2977: inode #11: comm syz.1.1002: corrupted xattr block 95: invalid header [ 122.737973][ T7226] ext4 filesystem being mounted at /142/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 122.750773][ T7222] EXT4-fs warning (device loop1): ext4_evict_inode:276: xattr delete (err -117) [ 122.760164][ T7222] EXT4-fs (loop1): 1 orphan inode deleted [ 122.768973][ T7226] EXT4-fs error (device loop5): ext4_do_update_inode:5153: inode #2: comm syz.5.1004: corrupted inode contents [ 122.783079][ T7234] FAULT_INJECTION: forcing a failure. [ 122.783079][ T7234] name failslab, interval 1, probability 0, space 0, times 0 [ 122.795861][ T7234] CPU: 0 UID: 0 PID: 7234 Comm: syz.4.1005 Not tainted 6.12.0-syzkaller-10296-gaaf20f870da0 #0 [ 122.799537][ T7175] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 122.806242][ T7234] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 122.806259][ T7234] Call Trace: [ 122.806267][ T7234] [ 122.829335][ T7234] dump_stack_lvl+0xf2/0x150 [ 122.834008][ T7234] dump_stack+0x15/0x20 [ 122.838237][ T7234] should_fail_ex+0x223/0x230 [ 122.842949][ T7234] should_failslab+0x8f/0xb0 [ 122.847641][ T7234] __kmalloc_node_track_caller_noprof+0xa8/0x410 [ 122.854019][ T7234] ? sidtab_sid2str_get+0xb8/0x140 [ 122.859187][ T7234] kmemdup_noprof+0x2a/0x60 [ 122.863712][ T7234] sidtab_sid2str_get+0xb8/0x140 [ 122.868750][ T7234] security_sid_to_context_core+0x1eb/0x2f0 [ 122.874749][ T7234] security_sid_to_context+0x27/0x30 [ 122.880109][ T7234] avc_audit_post_callback+0x9d/0x530 [ 122.885504][ T7234] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 122.891513][ T7234] common_lsm_audit+0x90f/0x1010 [ 122.896490][ T7234] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 122.902501][ T7234] ? avc_denied+0xf1/0x110 [ 122.906998][ T7234] slow_avc_audit+0xf9/0x140 [ 122.911614][ T7234] avc_has_perm+0x129/0x160 [ 122.916164][ T7234] selinux_socket_sendmsg+0x185/0x1c0 [ 122.921602][ T7234] security_socket_sendmsg+0x47/0x80 [ 122.926945][ T7234] __sock_sendmsg+0x2d/0x180 [ 122.931589][ T7234] ____sys_sendmsg+0x312/0x410 [ 122.936368][ T7234] __sys_sendmsg+0x19d/0x230 [ 122.940991][ T7234] __x64_sys_sendmsg+0x46/0x50 [ 122.945784][ T7234] x64_sys_call+0x2734/0x2dc0 [ 122.947998][ T7226] EXT4-fs error (device loop5): ext4_dirty_inode:6041: inode #2: comm syz.5.1004: mark_inode_dirty error [ 122.950476][ T7234] do_syscall_64+0xc9/0x1c0 [ 122.966200][ T7234] ? clear_bhb_loop+0x55/0xb0 [ 122.970896][ T7234] ? clear_bhb_loop+0x55/0xb0 [ 122.972167][ T7226] EXT4-fs error (device loop5): ext4_do_update_inode:5153: inode #2: comm syz.5.1004: corrupted inode contents [ 122.975581][ T7234] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 122.993190][ T7234] RIP: 0033:0x7fbb4ab90809 [ 122.997696][ T7234] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 123.007343][ T7226] EXT4-fs error (device loop5): __ext4_ext_dirty:207: inode #2: comm syz.5.1004: mark_inode_dirty error [ 123.017325][ T7234] RSP: 002b:00007fbb49207058 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 123.017352][ T7234] RAX: ffffffffffffffda RBX: 00007fbb4ad55fa0 RCX: 00007fbb4ab90809 [ 123.017368][ T7234] RDX: 0000000000040004 RSI: 00000000200004c0 RDI: 0000000000000003 [ 123.017384][ T7234] RBP: 00007fbb492070a0 R08: 0000000000000000 R09: 0000000000000000 [ 123.017396][ T7234] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 123.017408][ T7234] R13: 0000000000000000 R14: 00007fbb4ad55fa0 R15: 00007ffda1fcaa68 [ 123.017431][ T7234] [ 123.088352][ T7175] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 123.254082][ T7175] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 123.423783][ T7175] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 123.469002][ T7175] 8021q: adding VLAN 0 to HW filter on device bond0 [ 123.481721][ T7175] 8021q: adding VLAN 0 to HW filter on device team0 [ 123.493999][ T352] bridge0: port 1(bridge_slave_0) entered blocking state [ 123.501125][ T352] bridge0: port 1(bridge_slave_0) entered forwarding state [ 123.513759][ T352] bridge0: port 2(bridge_slave_1) entered blocking state [ 123.520937][ T352] bridge0: port 2(bridge_slave_1) entered forwarding state [ 123.528801][ T7246] vhci_hcd: invalid port number 0 [ 123.538075][ T7175] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 123.548560][ T7175] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 123.571855][ T7248] netlink: 'syz.1.1015': attribute type 3 has an invalid length. [ 123.651550][ T7250] siw: device registration error -23 [ 123.707951][ T7175] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 123.787925][ T7267] veth3: entered promiscuous mode [ 123.793020][ T7267] veth3: entered allmulticast mode [ 123.888987][ T7276] lo speed is unknown, defaulting to 1000 [ 123.895337][ T7276] lo speed is unknown, defaulting to 1000 [ 123.901803][ T7276] lo speed is unknown, defaulting to 1000 [ 124.073385][ T7276] loop3: detected capacity change from 0 to 512 [ 124.080182][ T7276] EXT4-fs: Ignoring removed oldalloc option [ 124.094703][ T7276] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 124.122907][ T7276] EXT4-fs (loop3): 1 truncate cleaned up [ 124.314802][ T7281] loop1: detected capacity change from 0 to 2048 [ 124.374933][ T7175] veth0_vlan: entered promiscuous mode [ 124.382298][ T7175] veth1_vlan: entered promiscuous mode [ 124.397122][ T7175] veth0_macvtap: entered promiscuous mode [ 124.404606][ T7175] veth1_macvtap: entered promiscuous mode [ 124.414676][ T7175] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 124.425162][ T7175] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 124.434999][ T7175] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 124.445485][ T7175] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 124.455407][ T7175] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 124.465851][ T7175] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 124.476604][ T7175] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 124.488343][ T7175] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 124.498896][ T7175] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 124.508859][ T7175] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 124.519384][ T7175] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 124.529301][ T7175] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 124.539889][ T7175] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 124.550397][ T7175] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 124.572409][ T7175] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.581337][ T7175] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.590135][ T7175] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.599087][ T7175] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.722341][ T7297] netlink: 188 bytes leftover after parsing attributes in process `syz.3.1017'. [ 124.790078][ T7294] netlink: 100 bytes leftover after parsing attributes in process `syz.5.1014'. [ 124.827593][ T7303] lo speed is unknown, defaulting to 1000 [ 124.833644][ T7303] lo speed is unknown, defaulting to 1000 [ 124.839856][ T7303] lo speed is unknown, defaulting to 1000 [ 124.874781][ T7305] loop4: detected capacity change from 0 to 512 [ 124.885151][ T7305] EXT4-fs: inline encryption not supported [ 124.908664][ T7305] ext4 filesystem being mounted at /185/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 124.920454][ T7309] siw: device registration error -23 [ 124.935769][ T7304] EXT4-fs error (device loop4): ext4_do_update_inode:5153: inode #2: comm syz.4.1018: corrupted inode contents [ 124.952479][ T7304] EXT4-fs error (device loop4): ext4_dirty_inode:6041: inode #2: comm syz.4.1018: mark_inode_dirty error [ 124.984683][ T7304] EXT4-fs error (device loop4): ext4_do_update_inode:5153: inode #2: comm syz.4.1018: corrupted inode contents [ 124.997607][ T7312] loop6: detected capacity change from 0 to 512 [ 125.005091][ T7304] EXT4-fs error (device loop4): __ext4_ext_dirty:207: inode #2: comm syz.4.1018: mark_inode_dirty error [ 125.028383][ T7312] EXT4-fs error (device loop6): ext4_acquire_dquot:6938: comm syz.6.1020: Failed to acquire dquot type 1 [ 125.057161][ T7312] EXT4-fs (loop6): 1 truncate cleaned up [ 125.063422][ T7321] veth5: entered promiscuous mode [ 125.063640][ T7312] ext4 filesystem being mounted at /2/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 125.068565][ T7321] veth5: entered allmulticast mode [ 125.127420][ T7325] loop6: detected capacity change from 0 to 2048 [ 125.134111][ T7325] ext4: Unknown parameter 'euid>00000000000000000000' [ 125.282537][ T7331] loop3: detected capacity change from 0 to 2048 [ 125.397780][ T7335] loop3: detected capacity change from 0 to 128 [ 125.422458][ T7335] FAT-fs (loop3): bogus number of reserved sectors [ 125.429140][ T7335] FAT-fs (loop3): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 125.438595][ T7335] FAT-fs (loop3): Can't find a valid FAT filesystem [ 125.614508][ T7344] loop3: detected capacity change from 0 to 2048 [ 125.916146][ T7351] x_tables: eb_tables: nflog.0 target: invalid size 80 (kernel) != (user) 0 [ 125.956989][ T7356] veth3: entered promiscuous mode [ 125.962065][ T7356] veth3: entered allmulticast mode [ 126.013902][ T7351] loop6: detected capacity change from 0 to 512 [ 126.043525][ T7351] EXT4-fs (loop6): revision level too high, forcing read-only mode [ 126.068782][ T7363] loop3: detected capacity change from 0 to 2048 [ 126.069310][ T7351] EXT4-fs (loop6): orphan cleanup on readonly fs [ 126.213282][ T7351] EXT4-fs error (device loop6): ext4_acquire_dquot:6938: comm +}[@: Failed to acquire dquot type 1 [ 126.235523][ T7351] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm +}[@: bg 0: block 40: padding at end of block bitmap is not set [ 126.255852][ T7351] EXT4-fs error (device loop6) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 126.266517][ T7351] EXT4-fs (loop6): 1 truncate cleaned up [ 126.368307][ T7375] loop5: detected capacity change from 0 to 512 [ 126.377930][ T7374] siw: device registration error -23 [ 126.393625][ T7375] EXT4-fs: inline encryption not supported [ 126.443354][ T7377] loop1: detected capacity change from 0 to 512 [ 126.458912][ T7377] EXT4-fs: inline encryption not supported [ 126.478389][ T7380] loop3: detected capacity change from 0 to 512 [ 126.489637][ T7375] ext4 filesystem being mounted at /148/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 126.503351][ T7375] EXT4-fs error (device loop5): ext4_do_update_inode:5153: inode #2: comm syz.5.1042: corrupted inode contents [ 126.518232][ T7380] ext4 filesystem being mounted at /223/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 126.529482][ T7375] EXT4-fs error (device loop5): ext4_dirty_inode:6041: inode #2: comm syz.5.1042: mark_inode_dirty error [ 126.537362][ T7377] ext4 filesystem being mounted at /228/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 126.567369][ T7375] EXT4-fs error (device loop5): ext4_do_update_inode:5153: inode #2: comm syz.5.1042: corrupted inode contents [ 126.582668][ T7375] EXT4-fs error (device loop5): __ext4_ext_dirty:207: inode #2: comm syz.5.1042: mark_inode_dirty error [ 126.596063][ T7377] EXT4-fs error (device loop1): ext4_do_update_inode:5153: inode #2: comm syz.1.1044: corrupted inode contents [ 126.608551][ T7377] EXT4-fs error (device loop1): ext4_dirty_inode:6041: inode #2: comm syz.1.1044: mark_inode_dirty error [ 126.654622][ T7391] loop6: detected capacity change from 0 to 2048 [ 126.666788][ T7377] EXT4-fs error (device loop1): ext4_do_update_inode:5153: inode #2: comm syz.1.1044: corrupted inode contents [ 126.738589][ T7377] EXT4-fs error (device loop1): __ext4_ext_dirty:207: inode #2: comm syz.1.1044: mark_inode_dirty error [ 126.781136][ T29] kauditd_printk_skb: 759 callbacks suppressed [ 126.781156][ T29] audit: type=1326 audit(1732711413.569:8067): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7372 comm="syz.5.1042" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3171800809 code=0x7ffc0000 [ 126.812048][ T7380] EXT4-fs error (device loop3): ext4_do_update_inode:5153: inode #19: comm syz.3.1043: corrupted inode contents [ 126.821161][ T29] audit: type=1326 audit(1732711413.569:8068): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7372 comm="syz.5.1042" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3171800809 code=0x7ffc0000 [ 126.847438][ T29] audit: type=1326 audit(1732711413.569:8069): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7372 comm="syz.5.1042" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3171800809 code=0x7ffc0000 [ 126.854678][ T7380] EXT4-fs error (device loop3): ext4_dirty_inode:6041: inode #19: comm syz.3.1043: mark_inode_dirty error [ 126.871002][ T29] audit: type=1326 audit(1732711413.569:8070): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7372 comm="syz.5.1042" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f3171800809 code=0x7ffc0000 [ 126.871120][ T29] audit: type=1326 audit(1732711413.569:8071): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7372 comm="syz.5.1042" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3171800809 code=0x7ffc0000 [ 126.871154][ T29] audit: type=1326 audit(1732711413.569:8072): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7372 comm="syz.5.1042" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3171800809 code=0x7ffc0000 [ 126.871185][ T29] audit: type=1326 audit(1732711413.569:8073): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7372 comm="syz.5.1042" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f3171800809 code=0x7ffc0000 [ 126.871276][ T29] audit: type=1326 audit(1732711413.569:8074): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7372 comm="syz.5.1042" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3171800809 code=0x7ffc0000 [ 126.871308][ T29] audit: type=1326 audit(1732711413.569:8075): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7372 comm="syz.5.1042" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f3171800809 code=0x7ffc0000 [ 126.871349][ T29] audit: type=1326 audit(1732711413.569:8076): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7372 comm="syz.5.1042" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3171800809 code=0x7ffc0000 [ 127.090594][ T7401] loop6: detected capacity change from 0 to 512 [ 127.109590][ T7401] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 127.127934][ T7380] EXT4-fs error (device loop3): ext4_do_update_inode:5153: inode #19: comm syz.3.1043: corrupted inode contents [ 127.172447][ T7380] EXT4-fs error (device loop3): ext4_xattr_delete_inode:3006: inode #19: comm syz.3.1043: mark_inode_dirty error [ 127.185182][ T7403] veth7: entered promiscuous mode [ 127.185618][ T7401] EXT4-fs (loop6): 1 truncate cleaned up [ 127.190273][ T7403] veth7: entered allmulticast mode [ 127.197007][ T7401] EXT4-fs mount: 104 callbacks suppressed [ 127.197024][ T7401] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 127.208136][ T7380] EXT4-fs error (device loop3): ext4_xattr_delete_inode:3009: inode #19: comm syz.3.1043: mark inode dirty (error -117) [ 127.244580][ T7380] EXT4-fs warning (device loop3): ext4_evict_inode:276: xattr delete (err -117) [ 127.276124][ T7175] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 127.424599][ T3321] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 127.462873][ T7410] loop5: detected capacity change from 0 to 512 [ 127.474337][ T7412] FAULT_INJECTION: forcing a failure. [ 127.474337][ T7412] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 127.487643][ T7412] CPU: 1 UID: 0 PID: 7412 Comm: syz.4.1049 Not tainted 6.12.0-syzkaller-10296-gaaf20f870da0 #0 [ 127.498083][ T7412] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 127.508154][ T7412] Call Trace: [ 127.511493][ T7412] [ 127.514430][ T7412] dump_stack_lvl+0xf2/0x150 [ 127.519114][ T7412] dump_stack+0x15/0x20 [ 127.523293][ T7412] should_fail_ex+0x223/0x230 [ 127.528062][ T7412] should_fail+0xb/0x10 [ 127.532265][ T7412] should_fail_usercopy+0x1a/0x20 [ 127.537359][ T7412] strncpy_from_user+0x25/0x210 [ 127.542322][ T7412] ? kmem_cache_alloc_noprof+0x18e/0x320 [ 127.547990][ T7412] ? getname_flags+0x81/0x3b0 [ 127.552698][ T7412] getname_flags+0xb0/0x3b0 [ 127.557225][ T7412] __x64_sys_unlink+0x21/0x40 [ 127.561910][ T7412] x64_sys_call+0x2329/0x2dc0 [ 127.566633][ T7412] do_syscall_64+0xc9/0x1c0 [ 127.571160][ T7412] ? clear_bhb_loop+0x55/0xb0 [ 127.575906][ T7412] ? clear_bhb_loop+0x55/0xb0 [ 127.580586][ T7412] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 127.586505][ T7412] RIP: 0033:0x7fbb4ab90809 [ 127.590952][ T7412] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 127.610679][ T7412] RSP: 002b:00007fbb49207058 EFLAGS: 00000246 ORIG_RAX: 0000000000000057 [ 127.619099][ T7412] RAX: ffffffffffffffda RBX: 00007fbb4ad55fa0 RCX: 00007fbb4ab90809 [ 127.627247][ T7412] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000180 [ 127.635240][ T7412] RBP: 00007fbb492070a0 R08: 0000000000000000 R09: 0000000000000000 [ 127.643216][ T7412] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 127.651264][ T7412] R13: 0000000000000000 R14: 00007fbb4ad55fa0 R15: 00007ffda1fcaa68 [ 127.659340][ T7412] [ 127.664638][ T3320] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 127.683340][ T7414] siw: device registration error -23 [ 127.697484][ T7417] FAULT_INJECTION: forcing a failure. [ 127.697484][ T7417] name failslab, interval 1, probability 0, space 0, times 0 [ 127.710239][ T7417] CPU: 1 UID: 0 PID: 7417 Comm: syz.4.1055 Not tainted 6.12.0-syzkaller-10296-gaaf20f870da0 #0 [ 127.720594][ T7417] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 127.730678][ T7417] Call Trace: [ 127.734011][ T7417] [ 127.736948][ T7417] dump_stack_lvl+0xf2/0x150 [ 127.741651][ T7417] dump_stack+0x15/0x20 [ 127.745861][ T7417] should_fail_ex+0x223/0x230 [ 127.750640][ T7417] should_failslab+0x8f/0xb0 [ 127.755313][ T7417] __kmalloc_node_track_caller_noprof+0xa8/0x410 [ 127.761669][ T7417] ? sidtab_sid2str_get+0xb8/0x140 [ 127.766804][ T7417] kmemdup_noprof+0x2a/0x60 [ 127.771357][ T7417] sidtab_sid2str_get+0xb8/0x140 [ 127.776399][ T7417] security_sid_to_context_core+0x1eb/0x2f0 [ 127.782319][ T7417] security_sid_to_context+0x27/0x30 [ 127.787625][ T7417] selinux_lsmprop_to_secctx+0x2c/0x40 [ 127.793208][ T7417] security_lsmprop_to_secctx+0x4a/0x90 [ 127.798766][ T7417] audit_log_task_context+0x93/0x1c0 [ 127.804188][ T7417] audit_log_task+0xf9/0x1c0 [ 127.808850][ T7417] audit_seccomp+0x68/0x130 [ 127.813413][ T7417] __seccomp_filter+0x6fa/0x1180 [ 127.818408][ T7417] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 127.824103][ T7417] ? vfs_write+0x596/0x920 [ 127.828633][ T7417] __secure_computing+0x9f/0x1c0 [ 127.833675][ T7417] syscall_trace_enter+0xd1/0x1f0 [ 127.838738][ T7417] ? fpregs_assert_state_consistent+0x83/0xa0 [ 127.844907][ T7417] do_syscall_64+0xaa/0x1c0 [ 127.849420][ T7417] ? clear_bhb_loop+0x55/0xb0 [ 127.854159][ T7417] ? clear_bhb_loop+0x55/0xb0 [ 127.858934][ T7417] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 127.864932][ T7417] RIP: 0033:0x7fbb4ab90809 [ 127.869372][ T7417] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 127.889048][ T7417] RSP: 002b:00007fbb49207058 EFLAGS: 00000246 ORIG_RAX: 00000000000000dc [ 127.897604][ T7417] RAX: ffffffffffffffda RBX: 00007fbb4ad55fa0 RCX: 00007fbb4ab90809 [ 127.905741][ T7417] RDX: 0000000000000001 RSI: 0000000020000340 RDI: 0000000000000001 [ 127.913721][ T7417] RBP: 00007fbb492070a0 R08: 0000000000000000 R09: 0000000000000000 [ 127.921705][ T7417] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 127.929751][ T7417] R13: 0000000000000000 R14: 00007fbb4ad55fa0 R15: 00007ffda1fcaa68 [ 127.937761][ T7417] [ 127.985139][ T7422] loop4: detected capacity change from 0 to 1024 [ 127.993369][ T7410] EXT4-fs error (device loop5): ext4_acquire_dquot:6938: comm syz.5.1052: Failed to acquire dquot type 1 [ 127.999615][ T7419] loop1: detected capacity change from 0 to 2048 [ 128.016290][ T7410] EXT4-fs (loop5): 1 truncate cleaned up [ 128.022705][ T7422] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 128.035870][ T7410] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 128.050554][ T7410] ext4 filesystem being mounted at /150/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 128.072046][ T7419] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 128.073193][ T7425] 9pnet_fd: Insufficient options for proto=fd [ 128.091134][ T4672] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 128.093871][ T7425] netlink: 36 bytes leftover after parsing attributes in process `syz.6.1056'. [ 128.109189][ T7425] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1056'. [ 128.118222][ T7425] netlink: 36 bytes leftover after parsing attributes in process `syz.6.1056'. [ 128.140477][ T7425] netlink: 36 bytes leftover after parsing attributes in process `syz.6.1056'. [ 128.152893][ T7425] netlink: 40 bytes leftover after parsing attributes in process `syz.6.1056'. [ 128.163359][ T7425] netlink: 44 bytes leftover after parsing attributes in process `syz.6.1056'. [ 128.182577][ T3327] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 128.193746][ T3321] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 128.302911][ T7447] pimreg: entered allmulticast mode [ 128.316857][ T7446] Â: renamed from vlan0 (while UP) [ 128.337478][ T7451] loop6: detected capacity change from 0 to 512 [ 128.346344][ T7451] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 128.358117][ T7453] loop3: detected capacity change from 0 to 256 [ 128.364926][ T7438] pimreg: left allmulticast mode [ 128.380122][ T7451] EXT4-fs (loop6): 1 truncate cleaned up [ 128.390155][ T7451] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 128.405785][ T7457] siw: device registration error -23 [ 128.414105][ T7438] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1062'. [ 128.469960][ T7175] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 128.501564][ T7461] lo speed is unknown, defaulting to 1000 [ 128.508253][ T7461] lo speed is unknown, defaulting to 1000 [ 128.514431][ T7461] lo speed is unknown, defaulting to 1000 [ 128.523275][ T7466] loop6: detected capacity change from 0 to 512 [ 128.548032][ T7466] EXT4-fs error (device loop6): ext4_acquire_dquot:6938: comm syz.6.1069: Failed to acquire dquot type 1 [ 128.564350][ T7466] EXT4-fs (loop6): 1 truncate cleaned up [ 128.570833][ T7466] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 128.595695][ T7466] ext4 filesystem being mounted at /12/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 128.620767][ T7473] x_tables: duplicate underflow at hook 2 [ 128.627002][ T7475] loop3: detected capacity change from 0 to 2048 [ 128.660402][ T7475] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 128.687883][ T7481] loop4: detected capacity change from 0 to 512 [ 128.688161][ T7175] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 128.701174][ T7481] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 128.726807][ T7481] EXT4-fs (loop4): 1 truncate cleaned up [ 128.739190][ T7481] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 128.770775][ T3327] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 128.780914][ T3320] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 128.845181][ T7491] loop5: detected capacity change from 0 to 256 [ 128.963031][ T7495] lo speed is unknown, defaulting to 1000 [ 128.969860][ T7495] lo speed is unknown, defaulting to 1000 [ 128.975903][ T7495] lo speed is unknown, defaulting to 1000 [ 129.069035][ T7495] loop3: detected capacity change from 0 to 512 [ 129.075634][ T7495] EXT4-fs: Ignoring removed oldalloc option [ 129.090698][ T7495] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 129.104371][ T7495] EXT4-fs (loop3): 1 truncate cleaned up [ 129.110989][ T7495] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 129.269855][ T7500] siw: device registration error -23 [ 129.467715][ T7504] loop4: detected capacity change from 0 to 1024 [ 129.494816][ T7508] netlink: 2 bytes leftover after parsing attributes in process `syz.5.1081'. [ 129.508037][ T7504] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 129.531040][ T7507] veth3: entered promiscuous mode [ 129.536224][ T7507] veth3: entered allmulticast mode [ 129.551196][ T7512] loop5: detected capacity change from 0 to 2048 [ 129.558042][ T7512] EXT4-fs: Ignoring removed mblk_io_submit option [ 129.569918][ T3327] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 129.590088][ T7512] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 129.620584][ T4672] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 129.625393][ T7517] loop6: detected capacity change from 0 to 1024 [ 129.663793][ T7521] No such timeout policy "syz1" [ 129.712687][ T7517] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 129.712872][ T3320] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 129.759885][ T7529] loop3: detected capacity change from 0 to 1024 [ 129.779016][ T7530] loop5: detected capacity change from 0 to 2048 [ 129.810413][ T7529] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 129.837788][ T7537] siw: device registration error -23 [ 129.867711][ T7530] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 129.916334][ T7175] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 129.957457][ T7547] FAULT_INJECTION: forcing a failure. [ 129.957457][ T7547] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 129.970790][ T7547] CPU: 0 UID: 0 PID: 7547 Comm: syz.4.1095 Not tainted 6.12.0-syzkaller-10296-gaaf20f870da0 #0 [ 129.981224][ T7547] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 129.991412][ T7547] Call Trace: [ 129.994701][ T7547] [ 129.997714][ T7547] dump_stack_lvl+0xf2/0x150 [ 130.002459][ T7547] dump_stack+0x15/0x20 [ 130.006627][ T7547] should_fail_ex+0x223/0x230 [ 130.011322][ T7547] should_fail_alloc_page+0xfd/0x110 [ 130.016641][ T7547] __alloc_pages_noprof+0x109/0x340 [ 130.021855][ T7547] alloc_pages_mpol_noprof+0xb1/0x1e0 [ 130.027255][ T7547] vma_alloc_folio_noprof+0x1a0/0x2f0 [ 130.032661][ T7547] handle_mm_fault+0xdd7/0x2ac0 [ 130.037538][ T7547] ? __rcu_read_lock+0x36/0x50 [ 130.042389][ T7547] __get_user_pages+0xf2c/0x2670 [ 130.047421][ T7547] __gup_longterm_locked+0x2ea/0xf90 [ 130.052752][ T7547] ? gup_fast_fallback+0x113f/0x2010 [ 130.058126][ T7547] gup_fast_fallback+0x1568/0x2010 [ 130.063452][ T7547] pin_user_pages_fast+0x5f/0x90 [ 130.068415][ T7547] io_pin_pages+0x8c/0x140 [ 130.072958][ T7547] io_sqe_buffer_register+0x109/0x1460 [ 130.078601][ T7547] ? ___kmalloc_large_node+0xba/0x120 [ 130.084067][ T7547] ? __kmalloc_large_node_noprof+0x17/0xa0 [ 130.090042][ T7547] ? __kmalloc_node_noprof+0x2f3/0x410 [ 130.095543][ T7547] ? __kvmalloc_node_noprof+0x72/0x170 [ 130.101159][ T7547] io_sqe_buffers_register+0x2d8/0x4e0 [ 130.106724][ T7547] __se_sys_io_uring_register+0xaf5/0x22e0 [ 130.112574][ T7547] ? get_pid_task+0x8e/0xc0 [ 130.117155][ T7547] ? proc_fail_nth_write+0x12a/0x150 [ 130.122535][ T7547] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 130.128203][ T7547] ? vfs_write+0x596/0x920 [ 130.132802][ T7547] ? fput+0x1c4/0x200 [ 130.136801][ T7547] ? ksys_write+0x176/0x1b0 [ 130.141407][ T7547] __x64_sys_io_uring_register+0x55/0x70 [ 130.147099][ T7547] x64_sys_call+0x2c52/0x2dc0 [ 130.151877][ T7547] do_syscall_64+0xc9/0x1c0 [ 130.156403][ T7547] ? clear_bhb_loop+0x55/0xb0 [ 130.161109][ T7547] ? clear_bhb_loop+0x55/0xb0 [ 130.165835][ T7547] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 130.171774][ T7547] RIP: 0033:0x7fbb4ab90809 [ 130.176348][ T7547] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 130.196033][ T7547] RSP: 002b:00007fbb49207058 EFLAGS: 00000246 ORIG_RAX: 00000000000001ab [ 130.204526][ T7547] RAX: ffffffffffffffda RBX: 00007fbb4ad55fa0 RCX: 00007fbb4ab90809 [ 130.212569][ T7547] RDX: 00000000200002c0 RSI: 0000000000000000 RDI: 0000000000000003 [ 130.220567][ T7547] RBP: 00007fbb492070a0 R08: 0000000000000000 R09: 0000000000000000 [ 130.228576][ T7547] R10: 0000000000001083 R11: 0000000000000246 R12: 0000000000000001 [ 130.236623][ T7547] R13: 0000000000000000 R14: 00007fbb4ad55fa0 R15: 00007ffda1fcaa68 [ 130.244622][ T7547] [ 130.310292][ T4672] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 130.472239][ T7554] veth3: entered promiscuous mode [ 130.477437][ T7554] veth3: entered allmulticast mode [ 130.479782][ T7558] loop6: detected capacity change from 0 to 8192 [ 130.512815][ T7558] lo speed is unknown, defaulting to 1000 [ 130.628912][ T7564] loop5: detected capacity change from 0 to 512 [ 130.635608][ T7564] EXT4-fs: Ignoring removed oldalloc option [ 130.655458][ T7564] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 130.666950][ T7563] lo speed is unknown, defaulting to 1000 [ 130.673566][ T7563] lo speed is unknown, defaulting to 1000 [ 130.679801][ T7563] lo speed is unknown, defaulting to 1000 [ 130.776289][ T7558] lo speed is unknown, defaulting to 1000 [ 130.792170][ T7558] lo speed is unknown, defaulting to 1000 [ 130.819309][ T7564] EXT4-fs (loop5): 1 truncate cleaned up [ 130.825855][ T7564] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 130.973913][ T7568] veth2: entered allmulticast mode [ 131.130627][ T7578] siw: device registration error -23 [ 131.148561][ T3320] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 131.223790][ T7586] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 131.235107][ T7586] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 131.305529][ T4672] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 131.305704][ T7591] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 131.321017][ T7591] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 131.328793][ T7591] vhci_hcd vhci_hcd.0: Device attached [ 131.338463][ T7592] vhci_hcd: connection closed [ 131.339088][ T7245] vhci_hcd: stop threads [ 131.348158][ T7245] vhci_hcd: release socket [ 131.352611][ T7245] vhci_hcd: disconnect device [ 131.474030][ T5327] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.528535][ T5327] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.565506][ T7616] siw: device registration error -23 [ 131.588772][ T5327] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.621749][ T7606] lo speed is unknown, defaulting to 1000 [ 131.630211][ T7606] lo speed is unknown, defaulting to 1000 [ 131.636499][ T7606] lo speed is unknown, defaulting to 1000 [ 131.659196][ T5327] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.670909][ T7602] __nla_validate_parse: 1 callbacks suppressed [ 131.670925][ T7602] netlink: 100 bytes leftover after parsing attributes in process `syz.1.1111'. [ 131.739952][ T7606] chnl_net:caif_netlink_parms(): no params data found [ 131.801802][ T29] kauditd_printk_skb: 476 callbacks suppressed [ 131.801819][ T29] audit: type=1400 audit(1732711418.589:8548): avc: denied { create } for pid=7635 comm="syz.4.1118" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 131.835708][ T29] audit: type=1400 audit(1732711418.589:8549): avc: denied { setopt } for pid=7635 comm="syz.4.1118" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 131.856139][ T29] audit: type=1400 audit(1732711418.589:8550): avc: denied { bind } for pid=7635 comm="syz.4.1118" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 131.875586][ T29] audit: type=1400 audit(1732711418.589:8551): avc: denied { node_bind } for pid=7635 comm="syz.4.1118" saddr=172.20.20.18 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 131.897828][ T29] audit: type=1400 audit(1732711418.589:8552): avc: denied { write } for pid=7635 comm="syz.4.1118" laddr=172.20.20.18 lport=34344 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 131.920102][ T29] audit: type=1400 audit(1732711418.589:8553): avc: denied { connect } for pid=7635 comm="syz.4.1118" laddr=172.20.20.18 lport=34344 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 131.943463][ T29] audit: type=1400 audit(1732711418.589:8554): avc: denied { name_connect } for pid=7635 comm="syz.4.1118" dest=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 131.968393][ T29] audit: type=1400 audit(1732711418.669:8555): avc: denied { create } for pid=7638 comm="syz.4.1120" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 131.990642][ T29] audit: type=1400 audit(1732711418.759:8556): avc: denied { create } for pid=7641 comm="syz.4.1122" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 132.010922][ T29] audit: type=1400 audit(1732711418.759:8557): avc: denied { getopt } for pid=7641 comm="syz.4.1122" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 132.016103][ T7606] bridge0: port 1(bridge_slave_0) entered blocking state [ 132.037776][ T7606] bridge0: port 1(bridge_slave_0) entered disabled state [ 132.051392][ T7606] bridge_slave_0: entered allmulticast mode [ 132.059656][ T7606] bridge_slave_0: entered promiscuous mode [ 132.070127][ T7644] loop4: detected capacity change from 0 to 512 [ 132.094023][ T7606] bridge0: port 2(bridge_slave_1) entered blocking state [ 132.101266][ T7606] bridge0: port 2(bridge_slave_1) entered disabled state [ 132.114014][ T7606] bridge_slave_1: entered allmulticast mode [ 132.120255][ T7644] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 132.132587][ T7606] bridge_slave_1: entered promiscuous mode [ 132.139210][ T7644] EXT4-fs (loop4): 1 truncate cleaned up [ 132.139334][ T5327] bridge_slave_1: left allmulticast mode [ 132.145433][ T7644] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 132.150567][ T5327] bridge_slave_1: left promiscuous mode [ 132.150698][ T5327] bridge0: port 2(bridge_slave_1) entered disabled state [ 132.177453][ T5327] bridge_slave_0: left allmulticast mode [ 132.183139][ T5327] bridge_slave_0: left promiscuous mode [ 132.188863][ T5327] bridge0: port 1(bridge_slave_0) entered disabled state [ 132.197953][ T7647] loop3: detected capacity change from 0 to 1024 [ 132.220447][ T7647] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 132.225034][ T3327] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 132.314158][ T7655] siw: device registration error -23 [ 132.369066][ T5327] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 132.381361][ T5327] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 132.391664][ T5327] bond0 (unregistering): Released all slaves [ 132.407356][ T7640] batman_adv: batadv0: Adding interface: dummy0 [ 132.413722][ T7640] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 132.439987][ T7640] batman_adv: batadv0: Interface activated: dummy0 [ 132.452142][ T7651] batadv0: mtu less than device minimum [ 132.458364][ T7651] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 132.469125][ T7651] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 132.479900][ T7651] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 132.490716][ T7651] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 132.501562][ T7651] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 132.512363][ T7651] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 132.523142][ T7651] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 132.533931][ T7651] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 132.544833][ T7651] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 132.581481][ T7606] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 132.614747][ T7606] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 132.661153][ T3320] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 132.682303][ T7671] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1130'. [ 132.707985][ T7606] team0: Port device team_slave_0 added [ 132.746499][ T7606] team0: Port device team_slave_1 added [ 132.755674][ T7683] loop5: detected capacity change from 0 to 2048 [ 132.782181][ T5327] hsr_slave_0: left promiscuous mode [ 132.832881][ T7694] loop1: detected capacity change from 0 to 2048 [ 132.833299][ T7683] FAULT_INJECTION: forcing a failure. [ 132.833299][ T7683] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 132.852469][ T7683] CPU: 1 UID: 0 PID: 7683 Comm: syz.5.1133 Not tainted 6.12.0-syzkaller-10296-gaaf20f870da0 #0 [ 132.855902][ T5327] hsr_slave_1: left promiscuous mode [ 132.862800][ T7683] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 132.862818][ T7683] Call Trace: [ 132.862826][ T7683] [ 132.862836][ T7683] dump_stack_lvl+0xf2/0x150 [ 132.862893][ T7683] dump_stack+0x15/0x20 [ 132.862941][ T7683] should_fail_ex+0x223/0x230 [ 132.863103][ T7683] should_fail+0xb/0x10 [ 132.863158][ T7683] should_fail_usercopy+0x1a/0x20 [ 132.863198][ T7683] _copy_from_user+0x1e/0xb0 [ 132.863261][ T7683] copy_msghdr_from_user+0x54/0x2a0 [ 132.863300][ T7683] ? __fget_files+0x17c/0x1c0 [ 132.863329][ T7683] __sys_sendmsg+0x13e/0x230 [ 132.863369][ T7683] __x64_sys_sendmsg+0x46/0x50 [ 132.863431][ T7683] x64_sys_call+0x2734/0x2dc0 [ 132.863463][ T7683] do_syscall_64+0xc9/0x1c0 [ 132.863483][ T7683] ? clear_bhb_loop+0x55/0xb0 [ 132.863506][ T7683] ? clear_bhb_loop+0x55/0xb0 [ 132.863529][ T7683] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 132.871456][ T7696] FAULT_INJECTION: forcing a failure. [ 132.871456][ T7696] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 132.878871][ T7683] RIP: 0033:0x7f3171800809 [ 132.878894][ T7683] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 132.878917][ T7683] RSP: 002b:00007f316fe77058 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 133.001963][ T7683] RAX: ffffffffffffffda RBX: 00007f31719c5fa0 RCX: 00007f3171800809 [ 133.009946][ T7683] RDX: 0000000000000004 RSI: 00000000200000c0 RDI: 0000000000000003 [ 133.017923][ T7683] RBP: 00007f316fe770a0 R08: 0000000000000000 R09: 0000000000000000 [ 133.025901][ T7683] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 133.033967][ T7683] R13: 0000000000000000 R14: 00007f31719c5fa0 R15: 00007ffef719d0d8 [ 133.041956][ T7683] [ 133.044981][ T7696] CPU: 0 UID: 0 PID: 7696 Comm: syz.4.1137 Not tainted 6.12.0-syzkaller-10296-gaaf20f870da0 #0 [ 133.055379][ T7696] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 133.065458][ T7696] Call Trace: [ 133.068834][ T7696] [ 133.071832][ T7696] dump_stack_lvl+0xf2/0x150 [ 133.076457][ T7696] dump_stack+0x15/0x20 [ 133.080646][ T7696] should_fail_ex+0x223/0x230 [ 133.084043][ T7702] loop5: detected capacity change from 0 to 512 [ 133.085343][ T7696] should_fail+0xb/0x10 [ 133.093884][ T7702] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 133.095734][ T7696] should_fail_usercopy+0x1a/0x20 [ 133.109690][ T7702] EXT4-fs (loop5): 1 truncate cleaned up [ 133.110565][ T7696] _copy_from_iter+0x24b/0xd00 [ 133.116922][ T7702] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 133.120984][ T7696] ? __virt_addr_valid+0x1ed/0x250 [ 133.121022][ T7696] ? __check_object_size+0x364/0x520 [ 133.143594][ T7696] nfc_llcp_send_ui_frame+0xc8/0x310 [ 133.148914][ T7696] ? _raw_spin_unlock_bh+0x36/0x40 [ 133.154063][ T7696] ? lock_sock_nested+0x10f/0x140 [ 133.159265][ T7696] llcp_sock_sendmsg+0x1e9/0x220 [ 133.164249][ T7696] ? __pfx_llcp_sock_sendmsg+0x10/0x10 [ 133.169746][ T7696] __sock_sendmsg+0x140/0x180 [ 133.174511][ T7696] ____sys_sendmsg+0x312/0x410 [ 133.179360][ T7696] __sys_sendmmsg+0x227/0x4b0 [ 133.184065][ T7696] __x64_sys_sendmmsg+0x57/0x70 [ 133.188928][ T7696] x64_sys_call+0x29aa/0x2dc0 [ 133.193797][ T7696] do_syscall_64+0xc9/0x1c0 [ 133.198303][ T7696] ? clear_bhb_loop+0x55/0xb0 [ 133.202994][ T7696] ? clear_bhb_loop+0x55/0xb0 [ 133.207669][ T7696] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 133.213661][ T7696] RIP: 0033:0x7fbb4ab90809 [ 133.218099][ T7696] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 133.220848][ T7690] netlink: 100 bytes leftover after parsing attributes in process `syz.3.1135'. [ 133.237720][ T7696] RSP: 002b:00007fbb49207058 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 133.255262][ T7696] RAX: ffffffffffffffda RBX: 00007fbb4ad55fa0 RCX: 00007fbb4ab90809 [ 133.263320][ T7696] RDX: 0000000000000001 RSI: 0000000020000f80 RDI: 0000000000000004 [ 133.271345][ T7696] RBP: 00007fbb492070a0 R08: 0000000000000000 R09: 0000000000000000 [ 133.279558][ T7696] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 133.287530][ T7696] R13: 0000000000000000 R14: 00007fbb4ad55fa0 R15: 00007ffda1fcaa68 [ 133.295508][ T7696] [ 133.300909][ T5327] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 133.308436][ T5327] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 133.310770][ T4672] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 133.325680][ T5327] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 133.333930][ T5327] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 133.357051][ T7708] siw: device registration error -23 [ 133.363550][ T5327] veth1_macvtap: left promiscuous mode [ 133.369228][ T5327] veth0_macvtap: left promiscuous mode [ 133.374779][ T5327] veth1_vlan: left promiscuous mode [ 133.380084][ T5327] veth0_vlan: left promiscuous mode [ 133.462011][ T7713] loop1: detected capacity change from 0 to 1024 [ 133.469680][ T7713] EXT4-fs: quotafile must be on filesystem root [ 133.478549][ T5327] team0 (unregistering): Port device team_slave_1 removed [ 133.490704][ T5327] team0 (unregistering): Port device team_slave_0 removed [ 133.533166][ T7606] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 133.540832][ T7606] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 133.567541][ T7606] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 133.598583][ T7606] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 133.605675][ T7606] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 133.632455][ T7606] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 133.700443][ T7606] hsr_slave_0: entered promiscuous mode [ 133.706719][ T7606] hsr_slave_1: entered promiscuous mode [ 133.713047][ T7606] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 133.721306][ T7606] Cannot create hsr debugfs directory [ 133.825224][ T7606] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 133.840762][ T7606] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 133.852945][ T7606] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 133.861763][ T7606] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 133.899723][ T7606] 8021q: adding VLAN 0 to HW filter on device bond0 [ 133.912835][ T7606] 8021q: adding VLAN 0 to HW filter on device team0 [ 133.922977][ T7245] bridge0: port 1(bridge_slave_0) entered blocking state [ 133.930106][ T7245] bridge0: port 1(bridge_slave_0) entered forwarding state [ 133.953441][ T7245] bridge0: port 2(bridge_slave_1) entered blocking state [ 133.960608][ T7245] bridge0: port 2(bridge_slave_1) entered forwarding state [ 134.025680][ T7606] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 134.161279][ T7606] veth0_vlan: entered promiscuous mode [ 134.174209][ T7606] veth1_vlan: entered promiscuous mode [ 134.189933][ T7606] veth0_macvtap: entered promiscuous mode [ 134.198540][ T7606] veth1_macvtap: entered promiscuous mode [ 134.210841][ T7606] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 134.221413][ T7606] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 134.231304][ T7606] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 134.241805][ T7606] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 134.251696][ T7606] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 134.262255][ T7606] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 134.273070][ T7606] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 134.284605][ T7606] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 134.295133][ T7606] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 134.305144][ T7606] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 134.315637][ T7606] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 134.325535][ T7606] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 134.336076][ T7606] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 134.346852][ T7606] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 134.355445][ T7606] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.364325][ T7606] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.373075][ T7606] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.381922][ T7606] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 143.721920][ T29] kauditd_printk_skb: 329 callbacks suppressed [ 143.721940][ T29] audit: type=1400 audit(1732711430.499:8887): avc: denied { mounton } for pid=7606 comm="syz-executor" path="/root/syzkaller.XwLtU1/syz-tmp" dev="sda1" ino=1954 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 143.752765][ T29] audit: type=1400 audit(1732711430.499:8888): avc: denied { mount } for pid=7606 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 143.775095][ T29] audit: type=1400 audit(1732711430.499:8889): avc: denied { mount } for pid=7606 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 143.797267][ T29] audit: type=1400 audit(1732711430.499:8890): avc: denied { mounton } for pid=7606 comm="syz-executor" path="/root/syzkaller.XwLtU1/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 143.815779][ T7868] loop5: detected capacity change from 0 to 512 [ 143.824090][ T29] audit: type=1400 audit(1732711430.499:8891): avc: denied { mounton } for pid=7606 comm="syz-executor" path="/root/syzkaller.XwLtU1/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=18810 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 143.858366][ T29] audit: type=1400 audit(1732711430.499:8892): avc: denied { unmount } for pid=7606 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 143.859152][ T7868] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 143.878754][ T29] audit: type=1326 audit(1732711430.519:8893): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7862 comm="syz.4.1146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb4ab90809 code=0x7ffc0000 [ 143.878794][ T29] audit: type=1326 audit(1732711430.519:8894): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7862 comm="syz.4.1146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb4ab90809 code=0x7ffc0000 [ 143.915173][ T7868] EXT4-fs (loop5): 1 truncate cleaned up [ 143.935532][ T29] audit: type=1326 audit(1732711430.549:8895): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7862 comm="syz.4.1146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbb4ab90809 code=0x7ffc0000 [ 143.944032][ T7868] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 143.964601][ T29] audit: type=1326 audit(1732711430.549:8896): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7862 comm="syz.4.1146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb4ab90809 code=0x7ffc0000 [ 144.005499][ T7867] FAULT_INJECTION: forcing a failure. [ 144.005499][ T7867] name failslab, interval 1, probability 0, space 0, times 0 [ 144.018935][ T7867] CPU: 0 UID: 0 PID: 7867 Comm: syz.3.1147 Not tainted 6.12.0-syzkaller-10296-gaaf20f870da0 #0 [ 144.029298][ T7867] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 144.039364][ T7867] Call Trace: [ 144.042644][ T7867] [ 144.045584][ T7867] dump_stack_lvl+0xf2/0x150 [ 144.050183][ T7867] dump_stack+0x15/0x20 [ 144.054347][ T7867] should_fail_ex+0x223/0x230 [ 144.059046][ T7867] should_failslab+0x8f/0xb0 [ 144.063706][ T7867] kmem_cache_alloc_noprof+0x52/0x320 [ 144.069211][ T7867] ? audit_log_start+0x34c/0x6b0 [ 144.074170][ T7867] audit_log_start+0x34c/0x6b0 [ 144.078965][ T7867] audit_seccomp+0x4b/0x130 [ 144.083602][ T7867] __seccomp_filter+0x6fa/0x1180 [ 144.088588][ T7867] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 144.094260][ T7867] ? vfs_write+0x596/0x920 [ 144.098746][ T7867] __secure_computing+0x9f/0x1c0 [ 144.103698][ T7867] syscall_trace_enter+0xd1/0x1f0 [ 144.108738][ T7867] ? fpregs_assert_state_consistent+0x83/0xa0 [ 144.114850][ T7867] do_syscall_64+0xaa/0x1c0 [ 144.119402][ T7867] ? clear_bhb_loop+0x55/0xb0 [ 144.124089][ T7867] ? clear_bhb_loop+0x55/0xb0 [ 144.128784][ T7867] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 144.134728][ T7867] RIP: 0033:0x7fc8831d0809 [ 144.139205][ T7867] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 144.158897][ T7867] RSP: 002b:00007fc881847058 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 144.167320][ T7867] RAX: ffffffffffffffda RBX: 00007fc883395fa0 RCX: 00007fc8831d0809 [ 144.175343][ T7867] RDX: 0000000000000001 RSI: 0000000020000040 RDI: 000000000000000c [ 144.183321][ T7867] RBP: 00007fc8818470a0 R08: 0000000000000000 R09: 0000000000000000 [ 144.191428][ T7867] R10: 000000000000ffff R11: 0000000000000246 R12: 0000000000000001 [ 144.199425][ T7867] R13: 0000000000000000 R14: 00007fc883395fa0 R15: 00007ffce8d0dc38 [ 144.207412][ T7867] [ 144.271557][ T7877] siw: device registration error -23 [ 144.277412][ T4672] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 144.294862][ T7881] veth5: entered promiscuous mode [ 144.300011][ T7881] veth5: entered allmulticast mode [ 144.314449][ T7884] loop7: detected capacity change from 0 to 512 [ 144.325547][ T7884] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 144.346229][ T7884] EXT4-fs (loop7): 1 truncate cleaned up [ 144.348738][ T7886] loop5: detected capacity change from 0 to 512 [ 144.352271][ T7884] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 144.389553][ T7886] EXT4-fs error (device loop5): ext4_acquire_dquot:6938: comm syz.5.1149: Failed to acquire dquot type 1 [ 144.422591][ T7886] EXT4-fs (loop5): 1 truncate cleaned up [ 144.436467][ T7606] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 144.439838][ T7894] Â: renamed from vlan0 (while UP) [ 144.448733][ T7886] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 144.470082][ T7886] ext4 filesystem being mounted at /172/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 144.514358][ T4672] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 144.519629][ T7902] loop7: detected capacity change from 0 to 2048 [ 144.584389][ T7907] lo speed is unknown, defaulting to 1000 [ 144.590673][ T7907] lo speed is unknown, defaulting to 1000 [ 144.597435][ T7907] lo speed is unknown, defaulting to 1000 [ 144.688461][ T7907] loop3: detected capacity change from 0 to 512 [ 144.695044][ T7907] EXT4-fs: Ignoring removed oldalloc option [ 144.813545][ T7907] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 144.861713][ T7907] EXT4-fs (loop3): 1 truncate cleaned up [ 144.868254][ T7907] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 144.951194][ T7902] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 144.969649][ T7915] loop1: detected capacity change from 0 to 1024 [ 145.043921][ T7915] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 145.095620][ T7922] x_tables: eb_tables: nflog.0 target: invalid size 80 (kernel) != (user) 0 [ 145.155689][ T7922] loop4: detected capacity change from 0 to 512 [ 145.189880][ T7922] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 145.219734][ T7922] EXT4-fs (loop4): orphan cleanup on readonly fs [ 145.237537][ T7902] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 145.245940][ T7922] EXT4-fs error (device loop4): ext4_acquire_dquot:6938: comm +}[@: Failed to acquire dquot type 1 [ 145.252982][ T7902] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 2 with error 28 [ 145.275476][ T7902] EXT4-fs (loop7): This should not happen!! Data will be lost [ 145.275476][ T7902] [ 145.285269][ T7902] EXT4-fs (loop7): Total free blocks count 0 [ 145.291307][ T7902] EXT4-fs (loop7): Free/Dirty block details [ 145.297525][ T7902] EXT4-fs (loop7): free_blocks=2415919104 [ 145.303313][ T7902] EXT4-fs (loop7): dirty_blocks=16 [ 145.308576][ T7902] EXT4-fs (loop7): Block reservation details [ 145.314622][ T7902] EXT4-fs (loop7): i_reserved_data_blocks=1 [ 145.322057][ T7922] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm +}[@: bg 0: block 40: padding at end of block bitmap is not set [ 145.363720][ T7922] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 145.372826][ T7922] EXT4-fs (loop4): 1 truncate cleaned up [ 145.379737][ T7922] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 145.381076][ T7606] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 145.403775][ T3320] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 145.510404][ T7939] lo speed is unknown, defaulting to 1000 [ 145.516890][ T7939] lo speed is unknown, defaulting to 1000 [ 145.523403][ T7939] lo speed is unknown, defaulting to 1000 [ 145.698636][ T7939] loop5: detected capacity change from 0 to 512 [ 145.705526][ T7939] EXT4-fs: Ignoring removed oldalloc option [ 145.722730][ T7939] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 145.756432][ T7939] EXT4-fs (loop5): 1 truncate cleaned up [ 145.762855][ T7939] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 145.880503][ T3327] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 146.013143][ T3321] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 146.027347][ T7951] xt_CT: You must specify a L4 protocol and not use inversions on it [ 146.029965][ T7949] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1165'. [ 146.112369][ T7954] lo speed is unknown, defaulting to 1000 [ 146.118640][ T7954] lo speed is unknown, defaulting to 1000 [ 146.125299][ T7954] lo speed is unknown, defaulting to 1000 [ 146.429257][ T7954] loop3: detected capacity change from 0 to 512 [ 146.435888][ T7954] EXT4-fs: Ignoring removed oldalloc option [ 146.476438][ T7949] loop4: detected capacity change from 0 to 164 [ 146.570789][ T7954] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 146.609667][ T7964] FAULT_INJECTION: forcing a failure. [ 146.609667][ T7964] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 146.609990][ T4672] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 146.622764][ T7964] CPU: 1 UID: 0 PID: 7964 Comm: syz.7.1169 Not tainted 6.12.0-syzkaller-10296-gaaf20f870da0 #0 [ 146.622790][ T7964] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 146.631974][ T7949] syz.4.1165: attempt to access beyond end of device [ 146.631974][ T7949] loop4: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 146.642064][ T7964] Call Trace: [ 146.642077][ T7964] [ 146.642087][ T7964] dump_stack_lvl+0xf2/0x150 [ 146.642190][ T7964] dump_stack+0x15/0x20 [ 146.642209][ T7964] should_fail_ex+0x223/0x230 [ 146.642250][ T7964] should_fail+0xb/0x10 [ 146.642284][ T7964] should_fail_usercopy+0x1a/0x20 [ 146.642385][ T7964] _copy_to_user+0x20/0xa0 [ 146.642407][ T7964] simple_read_from_buffer+0xa0/0x110 [ 146.642458][ T7964] proc_fail_nth_read+0xf9/0x140 [ 146.642498][ T7964] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 146.642537][ T7964] vfs_read+0x1a2/0x700 [ 146.642620][ T7964] ? __rcu_read_unlock+0x4e/0x70 [ 146.642641][ T7964] ? __fget_files+0x17c/0x1c0 [ 146.642676][ T7964] ksys_read+0xe8/0x1b0 [ 146.642719][ T7964] __x64_sys_read+0x42/0x50 [ 146.642791][ T7964] x64_sys_call+0x2874/0x2dc0 [ 146.642824][ T7964] do_syscall_64+0xc9/0x1c0 [ 146.747635][ T7964] ? clear_bhb_loop+0x55/0xb0 [ 146.752342][ T7964] ? clear_bhb_loop+0x55/0xb0 [ 146.757147][ T7964] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 146.763063][ T7964] RIP: 0033:0x7f5ac3daf21c [ 146.767545][ T7964] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 8e 02 00 48 [ 146.787279][ T7964] RSP: 002b:00007f5ac2427050 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 146.795760][ T7964] RAX: ffffffffffffffda RBX: 00007f5ac3f75fa0 RCX: 00007f5ac3daf21c [ 146.803789][ T7964] RDX: 000000000000000f RSI: 00007f5ac24270b0 RDI: 0000000000000007 [ 146.811817][ T7964] RBP: 00007f5ac24270a0 R08: 0000000000000000 R09: 0000000000000000 [ 146.819866][ T7964] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 146.827853][ T7964] R13: 0000000000000000 R14: 00007f5ac3f75fa0 R15: 00007fffe33f5fa8 [ 146.835890][ T7964] [ 146.844663][ T7967] syz.4.1165: attempt to access beyond end of device [ 146.844663][ T7967] loop4: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 146.878053][ T7967] syz.4.1165: attempt to access beyond end of device [ 146.878053][ T7967] loop4: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 146.891823][ T7954] EXT4-fs (loop3): 1 truncate cleaned up [ 146.898059][ T7954] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 146.900834][ T7971] loop7: detected capacity change from 0 to 128 [ 146.933121][ T7961] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1166'. [ 146.942454][ T7949] syz.4.1165: attempt to access beyond end of device [ 146.942454][ T7949] loop4: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 146.956258][ T7949] syz.4.1165: attempt to access beyond end of device [ 146.956258][ T7949] loop4: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 146.975355][ T7949] syz.4.1165: attempt to access beyond end of device [ 146.975355][ T7949] loop4: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 146.988942][ T7949] syz.4.1165: attempt to access beyond end of device [ 146.988942][ T7949] loop4: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 147.002518][ T7967] syz.4.1165: attempt to access beyond end of device [ 147.002518][ T7967] loop4: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 147.038390][ T7976] siw: device registration error -23 [ 147.049554][ T7949] syz.4.1165: attempt to access beyond end of device [ 147.049554][ T7949] loop4: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 147.093706][ T7949] syz.4.1165: attempt to access beyond end of device [ 147.093706][ T7949] loop4: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 147.136708][ T3320] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 147.511646][ T8029] netlink: 'syz.5.1183': attribute type 6 has an invalid length. [ 147.565919][ T8035] siw: device registration error -23 [ 147.688663][ T8050] FAULT_INJECTION: forcing a failure. [ 147.688663][ T8050] name failslab, interval 1, probability 0, space 0, times 0 [ 147.701392][ T8050] CPU: 1 UID: 0 PID: 8050 Comm: syz.5.1187 Not tainted 6.12.0-syzkaller-10296-gaaf20f870da0 #0 [ 147.711850][ T8050] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 147.721930][ T8050] Call Trace: [ 147.725213][ T8050] [ 147.728222][ T8050] dump_stack_lvl+0xf2/0x150 [ 147.732872][ T8050] dump_stack+0x15/0x20 [ 147.737117][ T8050] should_fail_ex+0x223/0x230 [ 147.741882][ T8050] should_failslab+0x8f/0xb0 [ 147.746497][ T8050] kmem_cache_alloc_noprof+0x52/0x320 [ 147.751907][ T8050] ? getname_flags+0x81/0x3b0 [ 147.756657][ T8050] getname_flags+0x81/0x3b0 [ 147.761214][ T8050] user_path_create+0x26/0x120 [ 147.766013][ T8050] bpf_obj_pin_user+0xc9/0x260 [ 147.770852][ T8050] bpf_obj_pin+0xd8/0xf0 [ 147.775159][ T8050] __sys_bpf+0x5ad/0x7a0 [ 147.779575][ T8050] __x64_sys_bpf+0x43/0x50 [ 147.784032][ T8050] x64_sys_call+0x2914/0x2dc0 [ 147.788754][ T8050] do_syscall_64+0xc9/0x1c0 [ 147.793289][ T8050] ? clear_bhb_loop+0x55/0xb0 [ 147.798002][ T8050] ? clear_bhb_loop+0x55/0xb0 [ 147.802915][ T8050] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 147.808921][ T8050] RIP: 0033:0x7f3171800809 [ 147.813425][ T8050] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 147.833138][ T8050] RSP: 002b:00007f316fe77058 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 147.841584][ T8050] RAX: ffffffffffffffda RBX: 00007f31719c5fa0 RCX: 00007f3171800809 [ 147.849595][ T8050] RDX: 0000000000000018 RSI: 0000000020000800 RDI: 0000000000000006 [ 147.857642][ T8050] RBP: 00007f316fe770a0 R08: 0000000000000000 R09: 0000000000000000 [ 147.865671][ T8050] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 147.873749][ T8050] R13: 0000000000000000 R14: 00007f31719c5fa0 R15: 00007ffef719d0d8 [ 147.881763][ T8050] [ 148.056876][ T8076] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1191'. [ 148.078156][ T8076] loop5: detected capacity change from 0 to 512 [ 148.093431][ T8076] EXT4-fs: Ignoring removed orlov option [ 148.105904][ T8076] EXT4-fs: dax option not supported [ 148.219160][ T8093] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.280610][ T8093] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.291134][ T8107] syz.3.1200 uses obsolete (PF_INET,SOCK_PACKET) [ 148.359525][ T8093] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.429357][ T8093] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.498821][ T8135] rdma_op ffff88810a3f9580 conn xmit_rdma 0000000000000000 [ 148.530191][ T8093] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 148.555731][ T8093] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 148.594519][ T8093] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 148.619077][ T8093] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 148.729421][ T29] kauditd_printk_skb: 1142 callbacks suppressed [ 148.729437][ T29] audit: type=1326 audit(1732711435.519:10031): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8132 comm="syz.5.1204" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f31717f77a7 code=0x7ffc0000 [ 148.759371][ T29] audit: type=1326 audit(1732711435.519:10032): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8132 comm="syz.5.1204" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f317179c149 code=0x7ffc0000 [ 148.783564][ T29] audit: type=1326 audit(1732711435.519:10033): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8132 comm="syz.5.1204" exe="/root/syz-executor" sig=0 arch=c000003e syscall=275 compat=0 ip=0x7f3171800809 code=0x7ffc0000 [ 148.809266][ T29] audit: type=1326 audit(1732711435.529:10034): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8132 comm="syz.5.1204" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f31717f77a7 code=0x7ffc0000 [ 148.833071][ T29] audit: type=1326 audit(1732711435.529:10035): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8132 comm="syz.5.1204" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f317179c149 code=0x7ffc0000 [ 148.856561][ T29] audit: type=1326 audit(1732711435.529:10036): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8132 comm="syz.5.1204" exe="/root/syz-executor" sig=0 arch=c000003e syscall=275 compat=0 ip=0x7f3171800809 code=0x7ffc0000 [ 148.880256][ T29] audit: type=1326 audit(1732711435.539:10037): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8132 comm="syz.5.1204" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f31717f77a7 code=0x7ffc0000 [ 148.903751][ T29] audit: type=1326 audit(1732711435.539:10038): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8132 comm="syz.5.1204" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f317179c149 code=0x7ffc0000 [ 148.927263][ T29] audit: type=1326 audit(1732711435.539:10039): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8132 comm="syz.5.1204" exe="/root/syz-executor" sig=0 arch=c000003e syscall=275 compat=0 ip=0x7f3171800809 code=0x7ffc0000 [ 148.950866][ T29] audit: type=1326 audit(1732711435.549:10040): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8132 comm="syz.5.1204" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f31717f77a7 code=0x7ffc0000 [ 158.795991][ T29] kauditd_printk_skb: 809 callbacks suppressed [ 158.796010][ T29] audit: type=1400 audit(1732711445.569:10850): avc: denied { unlink } for pid=4672 comm="syz-executor" name="file0" dev="tmpfs" ino=1038 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 158.830954][ T29] audit: type=1400 audit(1732711445.619:10851): avc: denied { create } for pid=8178 comm="syz.5.1215" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 158.860393][ T8182] FAULT_INJECTION: forcing a failure. [ 158.860393][ T8182] name failslab, interval 1, probability 0, space 0, times 0 [ 158.860464][ T8182] CPU: 0 UID: 0 PID: 8182 Comm: syz.1.1217 Not tainted 6.12.0-syzkaller-10296-gaaf20f870da0 #0 [ 158.860496][ T8182] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 158.860513][ T8182] Call Trace: [ 158.860519][ T8182] [ 158.860527][ T8182] dump_stack_lvl+0xf2/0x150 [ 158.860553][ T8182] dump_stack+0x15/0x20 [ 158.860572][ T8182] should_fail_ex+0x223/0x230 [ 158.860665][ T8182] should_failslab+0x8f/0xb0 [ 158.860687][ T8182] __kmalloc_node_noprof+0xad/0x410 [ 158.860720][ T8182] ? __kvmalloc_node_noprof+0x72/0x170 [ 158.860800][ T8182] __kvmalloc_node_noprof+0x72/0x170 [ 158.874565][ T29] audit: type=1400 audit(1732711445.619:10852): avc: denied { write } for pid=8178 comm="syz.5.1215" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 158.883906][ T8182] __se_sys_add_key+0x1c9/0x320 [ 158.894024][ T29] audit: type=1400 audit(1732711445.649:10853): avc: denied { read write } for pid=8177 comm="syz.4.1214" name="sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 158.897268][ T8182] ? fput+0x1c4/0x200 [ 158.897310][ T8182] __x64_sys_add_key+0x67/0x80 [ 158.900234][ T29] audit: type=1400 audit(1732711445.649:10854): avc: denied { open } for pid=8177 comm="syz.4.1214" path="/dev/sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 158.904805][ T8182] x64_sys_call+0x2964/0x2dc0 [ 158.909048][ T29] audit: type=1400 audit(1732711445.649:10855): avc: denied { ioctl } for pid=8177 comm="syz.4.1214" path="/dev/sg0" dev="devtmpfs" ino=135 ioctlcmd=0x5309 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 158.913644][ T8182] do_syscall_64+0xc9/0x1c0 [ 158.918320][ T8181] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 158.923433][ T8182] ? clear_bhb_loop+0x55/0xb0 [ 158.936030][ T8176] loop7: detected capacity change from 0 to 1024 [ 158.954878][ T8182] ? clear_bhb_loop+0x55/0xb0 [ 158.960519][ T29] audit: type=1400 audit(1732711445.749:10856): avc: denied { mounton } for pid=8175 comm="syz.7.1216" path="/10/file0" dev="tmpfs" ino=71 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 158.983795][ T8182] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 158.990330][ T29] audit: type=1400 audit(1732711445.749:10857): avc: denied { mount } for pid=8177 comm="syz.4.1214" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 158.992564][ T8182] RIP: 0033:0x7fac562a0809 [ 158.992587][ T8182] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 159.150258][ T8182] RSP: 002b:00007fac54917058 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 159.150282][ T8182] RAX: ffffffffffffffda RBX: 00007fac56465fa0 RCX: 00007fac562a0809 [ 159.150296][ T8182] RDX: 00000000200000c0 RSI: 0000000000000000 RDI: 0000000020000040 [ 159.150367][ T8182] RBP: 00007fac549170a0 R08: fffffffffffffffd R09: 0000000000000000 [ 159.150380][ T8182] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000001 [ 159.150393][ T8182] R13: 0000000000000000 R14: 00007fac56465fa0 R15: 00007ffd248624f8 [ 159.150432][ T8182] [ 159.160413][ T8186] x_tables: ip6_tables: socket match: used from hooks OUTPUT, but only valid from PREROUTING/INPUT [ 159.177249][ T8176] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 159.183096][ T8186] loop3: detected capacity change from 0 to 512 [ 159.204893][ T29] audit: type=1400 audit(1732711445.979:10858): avc: denied { mount } for pid=8175 comm="syz.7.1216" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 159.257652][ T29] audit: type=1400 audit(1732711445.989:10859): avc: denied { write } for pid=8175 comm="syz.7.1216" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 159.287419][ T8186] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 159.306070][ T8186] EXT4-fs warning (device loop3): ext4_multi_mount_protect:292: Invalid MMP block in superblock [ 159.365383][ T8201] loop4: detected capacity change from 0 to 4096 [ 159.373354][ T8201] EXT4-fs: test_dummy_encryption option not supported [ 159.387642][ T8201] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 159.396555][ T8201] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 159.484118][ T8209] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1224'. [ 159.608320][ T8218] loop3: detected capacity change from 0 to 2048 [ 159.647839][ T8218] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 159.656835][ T8222] loop5: detected capacity change from 0 to 1024 [ 159.721457][ T7606] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 159.722420][ T8222] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 159.773558][ T3320] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 159.776230][ T8231] loop1: detected capacity change from 0 to 1024 [ 159.811542][ T8231] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 159.849819][ T8236] sg_write: data in/out 2147229655/60 bytes for SCSI command 0x0-- guessing data in; [ 159.849819][ T8236] program syz.7.1236 not setting count and/or reply_len properly [ 159.869103][ T35] kernel write not supported for file /sg0 (pid: 35 comm: kworker/1:1) [ 160.288443][ T8262] loop4: detected capacity change from 0 to 1024 [ 160.317275][ T8262] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 160.333531][ T8265] 9pnet_fd: Insufficient options for proto=fd [ 160.390025][ T8265] loop7: detected capacity change from 0 to 512 [ 160.400690][ T8265] EXT4-fs (loop7): couldn't mount as ext2 due to feature incompatibilities [ 160.585532][ T4672] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 160.631083][ T8280] veth7: entered promiscuous mode [ 160.636338][ T8280] veth7: entered allmulticast mode [ 160.651536][ T8281] siw: device registration error -23 [ 160.745218][ T3321] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 160.771871][ T8284] loop1: detected capacity change from 0 to 1024 [ 160.821063][ T8284] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 160.884109][ T8292] loop7: detected capacity change from 0 to 1024 [ 160.893215][ T3321] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 160.956737][ T8292] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 160.969158][ T8299] loop3: detected capacity change from 0 to 1024 [ 161.004596][ T8299] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 161.025163][ T7606] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 161.206704][ T8325] FAULT_INJECTION: forcing a failure. [ 161.206704][ T8325] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 161.220107][ T8325] CPU: 0 UID: 0 PID: 8325 Comm: syz.1.1261 Not tainted 6.12.0-syzkaller-10296-gaaf20f870da0 #0 [ 161.230489][ T8325] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 161.240578][ T8325] Call Trace: [ 161.243968][ T8325] [ 161.247184][ T8325] dump_stack_lvl+0xf2/0x150 [ 161.251887][ T8325] dump_stack+0x15/0x20 [ 161.256075][ T8325] should_fail_ex+0x223/0x230 [ 161.260802][ T8325] should_fail_alloc_page+0xfd/0x110 [ 161.266205][ T8325] __alloc_pages_noprof+0x109/0x340 [ 161.271617][ T8325] alloc_pages_mpol_noprof+0xb1/0x1e0 [ 161.277161][ T8325] vma_alloc_folio_noprof+0x1a0/0x2f0 [ 161.282629][ T8325] handle_mm_fault+0xdd7/0x2ac0 [ 161.287592][ T8325] exc_page_fault+0x3b9/0x650 [ 161.292360][ T8325] asm_exc_page_fault+0x26/0x30 [ 161.297260][ T8325] RIP: 0033:0x7fac5624db0b [ 161.301736][ T8325] Code: c0 8b 87 c0 00 00 00 66 0f 6c c0 85 c0 0f 85 44 01 00 00 c7 87 c0 00 00 00 ff ff ff ff 48 8d 84 24 20 21 00 00 48 8d 7c 24 20 <0f> 29 44 24 40 49 89 e4 48 89 44 24 50 8b 43 74 48 89 9c 24 00 01 [ 161.321629][ T8325] RSP: 002b:00007fac548f3e30 EFLAGS: 00010246 [ 161.327785][ T8325] RAX: 00007fac548f5f50 RBX: 00007fac56430620 RCX: 0000000000000000 [ 161.335787][ T8325] RDX: 00007fac548f5f98 RSI: 00007fac562feae8 RDI: 00007fac548f3e50 [ 161.343780][ T8325] RBP: 0000000000000009 R08: 0000000000000000 R09: 0000000000000000 [ 161.351775][ T8325] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 161.359791][ T8325] R13: 0000000000000000 R14: 00007fac56466080 R15: 00007ffd248624f8 [ 161.368158][ T8325] [ 161.372132][ T8325] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 161.424167][ T3327] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 161.673243][ T8351] loop1: detected capacity change from 0 to 2048 [ 161.718931][ T8351] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 161.830403][ T8354] loop4: detected capacity change from 0 to 512 [ 162.071590][ T3321] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 162.168550][ T8364] loop4: detected capacity change from 0 to 512 [ 162.186028][ T8364] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 162.195740][ T8364] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (20904!=33349) [ 162.219249][ T8364] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 162.228645][ T3320] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 162.236669][ T8364] EXT4-fs (loop4): orphan cleanup on readonly fs [ 162.244179][ T8364] EXT4-fs error (device loop4): ext4_map_blocks:671: inode #2: block 4: comm syz.4.1279: lblock 0 mapped to illegal pblock 4 (length 1) [ 162.276837][ T8371] loop1: detected capacity change from 0 to 512 [ 162.284064][ T8364] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -117 [ 162.293564][ T8364] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 162.294589][ T8371] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 162.294667][ T8371] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (20904!=33349) [ 162.306455][ T8371] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 162.306578][ T8371] EXT4-fs (loop1): orphan cleanup on readonly fs [ 162.306612][ T8371] EXT4-fs error (device loop1): ext4_map_blocks:671: inode #2: block 4: comm syz.1.1278: lblock 0 mapped to illegal pblock 4 (length 1) [ 162.313793][ T8371] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -117 [ 162.329756][ T8371] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 162.331694][ T8371] FAULT_INJECTION: forcing a failure. [ 162.331694][ T8371] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 162.331721][ T8371] CPU: 1 UID: 0 PID: 8371 Comm: syz.1.1278 Not tainted 6.12.0-syzkaller-10296-gaaf20f870da0 #0 [ 162.331749][ T8371] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 162.331764][ T8371] Call Trace: [ 162.331771][ T8371] [ 162.331780][ T8371] dump_stack_lvl+0xf2/0x150 [ 162.331811][ T8371] dump_stack+0x15/0x20 [ 162.331841][ T8371] should_fail_ex+0x223/0x230 [ 162.331931][ T8371] should_fail+0xb/0x10 [ 162.331967][ T8371] should_fail_usercopy+0x1a/0x20 [ 162.332050][ T8371] _copy_from_user+0x1e/0xb0 [ 162.332162][ T8371] usbdev_ioctl+0xab2/0x3e00 [ 162.332196][ T8371] ? do_vfs_ioctl+0x96e/0x1530 [ 162.332233][ T8371] ? selinux_file_ioctl+0x2f7/0x380 [ 162.332269][ T8371] ? __fget_files+0x17c/0x1c0 [ 162.332324][ T8371] ? __pfx_usbdev_ioctl+0x10/0x10 [ 162.332353][ T8371] __se_sys_ioctl+0xc9/0x140 [ 162.332391][ T8371] __x64_sys_ioctl+0x43/0x50 [ 162.332466][ T8371] x64_sys_call+0x1690/0x2dc0 [ 162.332495][ T8371] do_syscall_64+0xc9/0x1c0 [ 162.332516][ T8371] ? clear_bhb_loop+0x55/0xb0 [ 162.332535][ T8371] ? clear_bhb_loop+0x55/0xb0 [ 162.332607][ T8371] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 162.332643][ T8371] RIP: 0033:0x7fac562a0809 [ 162.332660][ T8371] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 162.332682][ T8371] RSP: 002b:00007fac54917058 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 162.332724][ T8371] RAX: ffffffffffffffda RBX: 00007fac56465fa0 RCX: 00007fac562a0809 [ 162.332739][ T8371] RDX: 0000000020000040 RSI: 00000000c0185500 RDI: 0000000000000006 [ 162.332754][ T8371] RBP: 00007fac549170a0 R08: 0000000000000000 R09: 0000000000000000 [ 162.332769][ T8371] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 162.332783][ T8371] R13: 0000000000000000 R14: 00007fac56465fa0 R15: 00007ffd248624f8 [ 162.332871][ T8371] [ 162.616297][ T8364] vhci_hcd: default hub control req: 8001 v0011 i0000 l0 [ 162.686471][ T8387] x_tables: eb_tables: nflog.0 target: invalid size 80 (kernel) != (user) 0 [ 162.699684][ T3327] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 162.710554][ T3321] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 162.738037][ T8394] loop7: detected capacity change from 0 to 1024 [ 162.752003][ T8394] EXT4-fs: quotafile must be on filesystem root [ 162.817397][ T8387] loop3: detected capacity change from 0 to 512 [ 162.838133][ T8405] loop7: detected capacity change from 0 to 1024 [ 162.848761][ T8387] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 162.858031][ T8387] EXT4-fs (loop3): orphan cleanup on readonly fs [ 162.865000][ T8387] EXT4-fs error (device loop3): ext4_acquire_dquot:6938: comm +}[@: Failed to acquire dquot type 1 [ 162.882638][ T8405] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 162.898641][ T8387] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm +}[@: bg 0: block 40: padding at end of block bitmap is not set [ 162.913883][ T8387] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 162.925898][ T8387] EXT4-fs (loop3): 1 truncate cleaned up [ 162.933255][ T8387] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 162.974533][ T3320] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 162.993893][ T7606] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 163.017688][ T8424] FAULT_INJECTION: forcing a failure. [ 163.017688][ T8424] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 163.030870][ T8424] CPU: 1 UID: 0 PID: 8424 Comm: syz.4.1302 Not tainted 6.12.0-syzkaller-10296-gaaf20f870da0 #0 [ 163.041246][ T8424] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 163.051332][ T8424] Call Trace: [ 163.054713][ T8424] [ 163.057761][ T8424] dump_stack_lvl+0xf2/0x150 [ 163.062380][ T8424] dump_stack+0x15/0x20 [ 163.066584][ T8424] should_fail_ex+0x223/0x230 [ 163.071291][ T8424] should_fail+0xb/0x10 [ 163.075530][ T8424] should_fail_usercopy+0x1a/0x20 [ 163.080718][ T8424] _copy_from_iter+0xd5/0xd00 [ 163.085511][ T8424] ? kmalloc_reserve+0x16e/0x190 [ 163.090521][ T8424] ? __build_skb_around+0x196/0x1f0 [ 163.095753][ T8424] ? __alloc_skb+0x21f/0x310 [ 163.100433][ T8424] ? __virt_addr_valid+0x1ed/0x250 [ 163.105560][ T8424] ? __check_object_size+0x364/0x520 [ 163.110872][ T8424] netlink_sendmsg+0x460/0x6e0 [ 163.115664][ T8424] ? __pfx_netlink_sendmsg+0x10/0x10 [ 163.121027][ T8424] __sock_sendmsg+0x140/0x180 [ 163.125723][ T8424] ____sys_sendmsg+0x312/0x410 [ 163.130637][ T8424] __sys_sendmsg+0x19d/0x230 [ 163.135252][ T8424] __x64_sys_sendmsg+0x46/0x50 [ 163.140136][ T8424] x64_sys_call+0x2734/0x2dc0 [ 163.144868][ T8424] do_syscall_64+0xc9/0x1c0 [ 163.149417][ T8424] ? clear_bhb_loop+0x55/0xb0 [ 163.154145][ T8424] ? clear_bhb_loop+0x55/0xb0 [ 163.158827][ T8424] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 163.164748][ T8424] RIP: 0033:0x7fbb4ab90809 [ 163.169168][ T8424] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 163.188800][ T8424] RSP: 002b:00007fbb49207058 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 163.197278][ T8424] RAX: ffffffffffffffda RBX: 00007fbb4ad55fa0 RCX: 00007fbb4ab90809 [ 163.205267][ T8424] RDX: 0000000000000000 RSI: 0000000020001200 RDI: 0000000000000003 [ 163.213251][ T8424] RBP: 00007fbb492070a0 R08: 0000000000000000 R09: 0000000000000000 [ 163.221232][ T8424] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 163.229252][ T8424] R13: 0000000000000000 R14: 00007fbb4ad55fa0 R15: 00007ffda1fcaa68 [ 163.237276][ T8424] [ 163.286037][ T8429] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 163.292650][ T8429] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 163.300125][ T8429] vhci_hcd vhci_hcd.0: Device attached [ 163.312144][ T8429] vhci_hcd vhci_hcd.0: pdev(1) rhport(1) sockfd(5) [ 163.318755][ T8429] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 163.327267][ T8429] vhci_hcd vhci_hcd.0: Device attached [ 163.347864][ T8429] vhci_hcd vhci_hcd.0: pdev(1) rhport(2) sockfd(7) [ 163.354441][ T8429] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 163.362606][ T8429] vhci_hcd vhci_hcd.0: Device attached [ 163.380105][ T8429] vhci_hcd vhci_hcd.0: pdev(1) rhport(3) sockfd(9) [ 163.386663][ T8429] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 163.394469][ T8429] vhci_hcd vhci_hcd.0: Device attached [ 163.406426][ T8429] vhci_hcd vhci_hcd.0: pdev(1) rhport(4) sockfd(11) [ 163.413064][ T8429] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 163.420646][ T8429] vhci_hcd vhci_hcd.0: Device attached [ 163.436879][ T8441] vhci_hcd: connection closed [ 163.437053][ T8434] vhci_hcd: connection closed [ 163.442315][ T8430] vhci_hcd: connection closed [ 163.450900][ T8438] syzkaller0: entered promiscuous mode [ 163.451215][ T8444] vhci_hcd: connection closed [ 163.455772][ T8438] syzkaller0: entered allmulticast mode [ 163.470963][ T8446] vhci_hcd: connection closed [ 163.475011][ T11] vhci_hcd: stop threads [ 163.484732][ T11] vhci_hcd: release socket [ 163.486001][ T35] vhci_hcd: vhci_device speed not set [ 163.494773][ T11] vhci_hcd: disconnect device [ 163.504011][ T11] vhci_hcd: stop threads [ 163.509016][ T11] vhci_hcd: release socket [ 163.513495][ T11] vhci_hcd: disconnect device [ 163.519202][ T11] vhci_hcd: stop threads [ 163.523481][ T11] vhci_hcd: release socket [ 163.527967][ T11] vhci_hcd: disconnect device [ 163.532857][ T11] vhci_hcd: stop threads [ 163.537859][ T11] vhci_hcd: release socket [ 163.542298][ T11] vhci_hcd: disconnect device [ 163.548142][ T11] vhci_hcd: stop threads [ 163.548407][ T8456] veth3: entered promiscuous mode [ 163.552380][ T11] vhci_hcd: release socket [ 163.552396][ T11] vhci_hcd: disconnect device [ 163.566892][ T8456] veth3: entered allmulticast mode [ 163.576050][ T35] usb 3-1: new full-speed USB device number 2 using vhci_hcd [ 163.586068][ T35] usb 3-1: enqueue for inactive port 0 [ 163.591713][ T35] usb 3-1: enqueue for inactive port 0 [ 163.597475][ T35] usb 3-1: enqueue for inactive port 0 [ 163.623099][ T8465] loop4: detected capacity change from 0 to 1024 [ 163.664288][ T8465] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 163.686256][ T35] vhci_hcd: vhci_device speed not set [ 163.732775][ T8474] loop3: detected capacity change from 0 to 2048 [ 163.738106][ T8476] loop1: detected capacity change from 0 to 1024 [ 163.778250][ T8476] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 163.780580][ T8474] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 164.090255][ T8465] ================================================================== [ 164.098402][ T8465] BUG: KCSAN: data-race in __writeback_single_inode / generic_buffers_fsync_noflush [ 164.107847][ T8465] [ 164.110179][ T8465] read-write to 0xffff8881065f6a38 of 4 bytes by task 8481 on cpu 0: [ 164.118271][ T8465] __writeback_single_inode+0x1f4/0x850 [ 164.123853][ T8465] writeback_single_inode+0x16c/0x3f0 [ 164.129263][ T8465] sync_inode_metadata+0x5c/0x90 [ 164.134237][ T8465] generic_buffers_fsync_noflush+0xd8/0x120 [ 164.140176][ T8465] ext4_sync_file+0x1ff/0x6c0 [ 164.144886][ T8465] vfs_fsync_range+0x116/0x130 [ 164.149678][ T8465] ext4_buffered_write_iter+0x326/0x370 [ 164.155262][ T8465] ext4_file_write_iter+0x383/0xf20 [ 164.160491][ T8465] iter_file_splice_write+0x5f1/0x980 [ 164.165907][ T8465] direct_splice_actor+0x160/0x2c0 [ 164.171067][ T8465] splice_direct_to_actor+0x302/0x670 [ 164.177356][ T8465] do_splice_direct+0xd7/0x150 [ 164.182169][ T8465] do_sendfile+0x398/0x660 [ 164.186618][ T8465] __x64_sys_sendfile64+0x110/0x150 [ 164.191849][ T8465] x64_sys_call+0xfbd/0x2dc0 [ 164.196478][ T8465] do_syscall_64+0xc9/0x1c0 [ 164.201006][ T8465] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 164.206948][ T8465] [ 164.209287][ T8465] read to 0xffff8881065f6a38 of 4 bytes by task 8465 on cpu 1: [ 164.216845][ T8465] generic_buffers_fsync_noflush+0x83/0x120 [ 164.222774][ T8465] ext4_sync_file+0x1ff/0x6c0 [ 164.227483][ T8465] vfs_fsync_range+0x116/0x130 [ 164.232274][ T8465] ext4_buffered_write_iter+0x326/0x370 [ 164.237845][ T8465] ext4_file_write_iter+0x383/0xf20 [ 164.243059][ T8465] iter_file_splice_write+0x5f1/0x980 [ 164.248477][ T8465] direct_splice_actor+0x160/0x2c0 [ 164.253633][ T8465] splice_direct_to_actor+0x302/0x670 [ 164.259056][ T8465] do_splice_direct+0xd7/0x150 [ 164.263867][ T8465] do_sendfile+0x398/0x660 [ 164.268417][ T8465] __x64_sys_sendfile64+0x110/0x150 [ 164.273642][ T8465] x64_sys_call+0xfbd/0x2dc0 [ 164.278280][ T8465] do_syscall_64+0xc9/0x1c0 [ 164.282825][ T8465] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 164.288771][ T8465] [ 164.291238][ T8465] value changed: 0x00000022 -> 0x00000000 [ 164.296993][ T8465] [ 164.299330][ T8465] Reported by Kernel Concurrency Sanitizer on: [ 164.305492][ T8465] CPU: 1 UID: 0 PID: 8465 Comm: syz.4.1309 Not tainted 6.12.0-syzkaller-10296-gaaf20f870da0 #0 [ 164.316032][ T8465] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 164.326198][ T8465] ================================================================== [ 164.335294][ T29] kauditd_printk_skb: 542 callbacks suppressed [ 164.335310][ T29] audit: type=1400 audit(1732711451.129:11400): avc: denied { read } for pid=3003 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 164.365245][ T29] audit: type=1400 audit(1732711451.129:11401): avc: denied { search } for pid=3003 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 164.387004][ T29] audit: type=1400 audit(1732711451.129:11402): avc: denied { open } for pid=3003 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=9 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 164.409703][ T29] audit: type=1400 audit(1732711451.129:11403): avc: denied { getattr } for pid=3003 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=9 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 164.949778][ T8465] ================================================================== [ 164.957910][ T8465] BUG: KCSAN: data-race in __writeback_single_inode / xas_set_mark [ 164.965848][ T8465] [ 164.968173][ T8465] write to 0xffff8881065f6b24 of 4 bytes by task 8481 on cpu 0: [ 164.975810][ T8465] xas_set_mark+0x131/0x150 [ 164.980316][ T8465] __folio_start_writeback+0x1e8/0x430 [ 164.985780][ T8465] ext4_bio_write_folio+0x591/0x9d0 [ 164.991003][ T8465] mpage_process_page_bufs+0x486/0x5d0 [ 164.996486][ T8465] mpage_prepare_extent_to_map+0x788/0xb80 [ 165.002317][ T8465] ext4_do_writepages+0xa20/0x2130 [ 165.007493][ T8465] ext4_writepages+0x159/0x2e0 [ 165.012277][ T8465] do_writepages+0x1d8/0x480 [ 165.016897][ T8465] file_write_and_wait_range+0x168/0x2f0 [ 165.022558][ T8465] generic_buffers_fsync_noflush+0x46/0x120 [ 165.028479][ T8465] ext4_sync_file+0x1ff/0x6c0 [ 165.033171][ T8465] vfs_fsync_range+0x116/0x130 [ 165.037937][ T8465] ext4_buffered_write_iter+0x326/0x370 [ 165.043494][ T8465] ext4_file_write_iter+0x383/0xf20 [ 165.048699][ T8465] iter_file_splice_write+0x5f1/0x980 [ 165.054096][ T8465] direct_splice_actor+0x160/0x2c0 [ 165.059229][ T8465] splice_direct_to_actor+0x302/0x670 [ 165.064624][ T8465] do_splice_direct+0xd7/0x150 [ 165.069488][ T8465] do_sendfile+0x398/0x660 [ 165.073912][ T8465] __x64_sys_sendfile64+0x110/0x150 [ 165.079119][ T8465] x64_sys_call+0xfbd/0x2dc0 [ 165.083726][ T8465] do_syscall_64+0xc9/0x1c0 [ 165.088235][ T8465] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 165.094152][ T8465] [ 165.096483][ T8465] read to 0xffff8881065f6b24 of 4 bytes by task 8465 on cpu 1: [ 165.104042][ T8465] __writeback_single_inode+0x210/0x850 [ 165.109612][ T8465] writeback_single_inode+0x16c/0x3f0 [ 165.115012][ T8465] sync_inode_metadata+0x5c/0x90 [ 165.119964][ T8465] generic_buffers_fsync_noflush+0xd8/0x120 [ 165.125970][ T8465] ext4_sync_file+0x1ff/0x6c0 [ 165.130668][ T8465] vfs_fsync_range+0x116/0x130 [ 165.135428][ T8465] ext4_buffered_write_iter+0x326/0x370 [ 165.140985][ T8465] ext4_file_write_iter+0x383/0xf20 [ 165.146190][ T8465] iter_file_splice_write+0x5f1/0x980 [ 165.151580][ T8465] direct_splice_actor+0x160/0x2c0 [ 165.156728][ T8465] splice_direct_to_actor+0x302/0x670 [ 165.162142][ T8465] do_splice_direct+0xd7/0x150 [ 165.166947][ T8465] do_sendfile+0x398/0x660 [ 165.171389][ T8465] __x64_sys_sendfile64+0x110/0x150 [ 165.176608][ T8465] x64_sys_call+0xfbd/0x2dc0 [ 165.181214][ T8465] do_syscall_64+0xc9/0x1c0 [ 165.185723][ T8465] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 165.191664][ T8465] [ 165.193988][ T8465] value changed: 0x0a000021 -> 0x04000021 [ 165.199875][ T8465] [ 165.202202][ T8465] Reported by Kernel Concurrency Sanitizer on: [ 165.208359][ T8465] CPU: 1 UID: 0 PID: 8465 Comm: syz.4.1309 Not tainted 6.12.0-syzkaller-10296-gaaf20f870da0 #0 [ 165.218699][ T8465] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 165.228777][ T8465] ================================================================== [ 165.966234][ T8412] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 165.981427][ T8412] EXT4-fs (loop3): Remounting filesystem read-only [ 173.851472][ T29] audit: type=1400 audit(1732711460.639:11404): avc: denied { unmount } for pid=3321 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 173.864893][ T3321] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 173.882548][ T3320] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 173.892119][ T3327] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.