last executing test programs: 2m49.84505883s ago: executing program 32 (id=996): r0 = io_uring_setup(0x3454, &(0x7f0000000080)={0x0, 0xffffeffe, 0x18, 0x2}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r2}, &(0x7f0000000180), &(0x7f00000001c0)=r1}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f00000004c0)='kfree\x00', r3}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x18, 0x0, 0x0, &(0x7f0000000280)='syzkaller\x00', 0x5, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6, @void, @value}, 0x94) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r0, 0x10, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000002700)=""/4096, 0x1000}], 0x0, 0xa}, 0x20) 2m31.389788412s ago: executing program 5 (id=1342): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001b80)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r2, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) connect$vsock_stream(r2, &(0x7f00000002c0)={0x28, 0x0, 0x2710, @host}, 0x10) 2m31.372169502s ago: executing program 5 (id=1344): select(0x40, &(0x7f0000000080)={0x0, 0x0, 0xfffffffffffffff2}, &(0x7f00000000c0)={0x4}, 0x0, &(0x7f0000000100)={0x7fffffffffffffff}) pselect6(0x40, &(0x7f0000000040)={0xffffffff00000000, 0x7, 0xfffffffffffffffe, 0x9, 0x7, 0xfffffffffffffffd, 0x9}, &(0x7f0000000180)={0x9, 0x3, 0x2b, 0x6, 0xd2, 0x0, 0xae, 0xfffffffffffff1c1}, &(0x7f00000001c0)={0x8000000000000001, 0xfffffffffffffff9, 0xe, 0x9, 0xfffffffffffffff7, 0x3c, 0x5, 0x6}, &(0x7f0000000200)={0x0, 0x989680}, &(0x7f0000000280)={&(0x7f0000000240)={[0xef]}, 0x8}) prctl$PR_SET_SECUREBITS(0x1c, 0x11) setreuid(0xee00, 0xee00) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) getsockname$packet(r1, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) write$binfmt_script(r1, &(0x7f0000000000)={'#! ', './file0', [{}, {0x20, '[\xee'}], 0xa, "383cd7eeb534e1549011aadcd4b3cf3ed66134618b9b3a91f2f8d803e10f49c149fb0df569d52371dc23492b73fb4f"}, 0x3e) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f0000001540)=[{&(0x7f00000002c0)=""/25, 0x19}, {&(0x7f0000000300)=""/205, 0xcd}, {&(0x7f0000000400)=""/90, 0x5a}, {&(0x7f0000000480)=""/138, 0x8a}, {&(0x7f0000000540)=""/4096, 0x1000}], 0x5) 2m31.258362623s ago: executing program 5 (id=1347): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000003200)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0100000001000000e27f00000100000001", @ANYRES32=0x0], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r1}, &(0x7f00000002c0), &(0x7f0000000300)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000f7ff000000000000000000001811", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x0, 0x800, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x5, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001400)={{r2}, &(0x7f0000001380), &(0x7f00000013c0)='%-010d \x00'}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, @void, @value}, 0x94) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) bind$bt_hci(r3, &(0x7f0000000140)={0x1f, 0xffff, 0x2}, 0x6) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000000)={0x1f, 0xffff, 0x3}, 0x6) 2m31.152805235s ago: executing program 5 (id=1352): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000380)={'batadv0\x00', 0x0}) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', r1, @fallback=0x3d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) r4 = socket(0x10, 0x3, 0x0) syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000200)='./file0\x00', 0x800, &(0x7f0000000000)=ANY=[@ANYRES8=0x0, @ANYRES16, @ANYRES64, @ANYRES16=0x0, @ANYRES32=0x0], 0x1, 0x36e, &(0x7f0000000c00)="$eJzs3c9rI2UYwPEnaZpMumyTgygK0ge96GVoq2c1yC6IAZfuRtwVhNntREPGpMyESERsPXkVb/4DgsseFzwsqP9AL97WixdP9iIIuog4Mr/SJJ00aTZL0/b7gTZP8r7PzPvmF88byJuD9776uFn3zLrVkayhkhEReSRSlqwkMtFFXlLsycuX/nz4/PWbt96uVKtXtlSvVm68sqmqq2s/fPJZMe72oCD75Q8OxPht/+n9Zw/+u/FRw9OGp612Ry293f61Y912bN1ueE1T9ZpjW56tjZZnu1F7O2qvO+2dnZ5are3LKzuu7XlqtXratHvaaWvH7an1odVoqWmaenklbbjnmDFDTu3u1pZVmfGEd2bMw7z94/v+Mc2uW7GWRMzikZba3Sc6LgAAsJBG6v9vkhqhLNl+QZmJ1wL5MB5eBgT1fxKH9X+wWDis/++98FPn0rv3V+P6/0E+rf5/9Zcof6j+D84+9/r/u5HrRyuiM2/3JJ0fq/7HYlgbfkX+frhijwX1f/Bq6K/ov3j/3noYUP8DAAAAAAAAAAAAAAAAAAAAAHAWPPL9ku/7peQy+Tv8CkF8Pbl23BeNceaMe/wL8Y4C/ecDzqXrN2+JEX5xL7cq4nzZrXVr0WXcnnRcl5L8Gz4fYtGGE3thowbK8qOz260txwlL4f+KiIojtmxIScpD+WF89a3qlQ2NRPnh+Xe7tUxuJcivSyPM35SSPJWev5man5eXXhzIN6UkP9+RtjiyHb+PJfmfb6i++U51JL8Y9kvz+pN9SAAAAAAAmDtT1YiXz+Xh9W+0fjdN1bT2YC0vg+vzo58P9NfX66nr81zpudzpzh0AAAAAgIvCy3/atBzHdr3e2KAok/oU4qONNOVkwpGDIDdFn6HgYRgsH9dnaWCG0x45H/+CxrTDcL2eTD3mJPirIKl3ZrKF61CTkX6vThkk85+is3HSh8D1siefu+16a8F4dKbpDATJx0bj+si1WY88Lkh2zp3U+Zmvv/17tlNk4l17B5teu29MmGkYZEZu2ZvwpP3D9yeOZzn93eL7WX5kBgAAAMCCSIr+opfc8sbpDggAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgAtortukjQlOe44AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAovg/AAD//5h69bA=") mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) quotactl$Q_QUOTAON(0xffffffff80000201, &(0x7f0000000040)=@sg0, 0x0, &(0x7f00000000c0)='./file0\x00') epoll_create(0x8) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18090000002300810000000000000000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000340)='kfree\x00', r5}, 0x10) write(r4, &(0x7f0000000000)="240000001a005f0214f9f407000904000a000000fe0000000000000008000f00fd000000", 0x24) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='rss_stat\x00', r2}, 0x10) ioctl$F2FS_IOC_MOVE_RANGE(r3, 0xc020f509, &(0x7f00000001c0)={r5, 0x9, 0x7, 0x3}) mkdirat(r6, &(0x7f00000002c0)='./file1\x00', 0x190) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r7, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4) r8 = openat$vcsu(0xffffff9c, &(0x7f0000000080), 0x88080, 0x0) ppoll(&(0x7f0000000040)=[{r8, 0x40}], 0x1, 0x0, 0x0, 0x0) read$eventfd(r8, &(0x7f00000003c0), 0x8) setsockopt$packet_rx_ring(r7, 0x107, 0x5, &(0x7f0000000180)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7fe, 0xf83, 0x8}, 0x1c) syz_emit_ethernet(0x66, &(0x7f0000000000)=ANY=[], 0x0) 2m30.922243999s ago: executing program 5 (id=1356): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r1, r0, 0x0, 0x100000002) 2m30.558401065s ago: executing program 5 (id=1359): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000080000000b"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000020001801000020646c2100000000002020007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000181100", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x1}, 0x10) connect$vsock_stream(r2, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) 2m30.502711965s ago: executing program 33 (id=1359): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000080000000b"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000020001801000020646c2100000000002020007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000181100", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x1}, 0x10) connect$vsock_stream(r2, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) 2m15.824916779s ago: executing program 2 (id=1586): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r0, 0x0, 0x8000}, 0x18) r1 = syz_io_uring_setup(0x221b, &(0x7f0000000340)={0x0, 0x4780, 0x40, 0xfffffffd, 0x1e0}, &(0x7f0000000100), &(0x7f0000000040)) r2 = socket(0x15, 0x5, 0x0) getsockopt$bt_BT_SECURITY(r2, 0x112, 0x4, &(0x7f0000000080), 0x2) r3 = getgid() getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000180)={0x0, 0x0, 0x0}, &(0x7f0000000300)=0xc) fstat(r2, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setresgid(r3, r4, r5) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0x3, &(0x7f0000000440)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = syz_io_uring_setup(0x449, &(0x7f00000003c0)={0x0, 0x23, 0x10100, 0x2, 0x12}, &(0x7f0000000180)=0x0, &(0x7f0000000200)=0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3c, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x33f555fdfdd407b9, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r10}, 0x18) syz_io_uring_submit(r7, r8, &(0x7f00000001c0)=@IORING_OP_SENDMSG={0x9, 0x2, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000440)={&(0x7f0000000340)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x0, {0x2, 0x0, @multicast1}}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000480)="10ab119b497ad23a1c1142ce24b27ffa12477294d5f95fbf8890c08a1c7a02944cf58f9e6725ddafac32a98ed3ec927d19a01a193c99058915996d97a79d6e364c97cd620d3e639b4374dae2de1c616415fbc228c3f6bbaacf237291ea1c763bc9f9405da6d699a83194b49c8848fe72407cbcd06881dbc687e9a9967c4031632fbbb883db18c6b0c40a546715fa886040c2", 0x5d}], 0x100000000000000f, 0x0, 0xfffffe5e}, 0x0, 0x80840, 0x1}) io_uring_enter(r6, 0x4c80, 0x45d8, 0x2, 0x0, 0x0) getsockopt(r2, 0x200000000114, 0x2714, 0x0, &(0x7f0000000040)) time(&(0x7f0000000000)) io_uring_register$IORING_REGISTER_RESTRICTIONS(r1, 0xb, &(0x7f0000000980)=[@ioring_restriction_register_op={0x0, 0x38}], 0x1) 2m15.742408451s ago: executing program 2 (id=1590): bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00'}, 0x18) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000d80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x18}, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000dc0)=@mangle={'mangle\x00', 0x1f, 0x6, 0x3f0, 0x248, 0x180, 0x180, 0x180, 0x3d0, 0x3d0, 0x3d0, 0x3d0, 0x3d0, 0x3d0, 0x6, 0x0, {[{{@ip={@local, @rand_addr=0x64010100, 0x0, 0x0, 'veth1_to_bridge\x00', 'ipvlan0\x00', {}, {0xff}, 0x67, 0x2, 0x6d}, 0x0, 0x98, 0xc0, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x1}}]}, @common=@unspec=@NFQUEUE0={0x28, 'NFQUEUE\x00', 0x0, {0xec}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0xffffff00, 0xffffffff, 'vlan0\x00', 'veth1_to_hsr\x00', {0xff}, {0xff}, 0x1, 0x1, 0x2}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x9, 0xe, @private=0xa010102, 0x4e21}}}, {{@ip={@remote, @empty, 0xffffffff, 0xffffff00, 'nr0\x00', 'veth1_to_batadv\x00', {0xff}, {0xff}, 0x0, 0x0, 0x34}, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@ah={{0x30}, {[0x0, 0x8], 0x1}}]}, @unspec=@CHECKSUM={0x28}}, {{@ip={@dev={0xac, 0x14, 0x14, 0x34}, @multicast2, 0x0, 0xffffff00, 'ipvlan0\x00', 'ip_vti0\x00', {0xff}, {}, 0x84, 0x0, 0x30}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x450) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000000)={[{@minixdf}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x44040, 0x100) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0) write(r1, &(0x7f0000004200)='t', 0x1) sendfile(r1, r0, 0x0, 0x3ffff) openat(r1, &(0x7f0000000040)='./bus\x00', 0x2000, 0x80) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, 0x0, 0x40000) sendfile(r1, r0, 0x0, 0x7ffff000) syz_open_dev$loop(&(0x7f00000005c0), 0x9, 0x12d600) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x149a82, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r3, 0xffffffffffffffff}, 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000140)={r4}, 0x4) bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00"/11], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) syz_usb_disconnect(0xffffffffffffffff) symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') 2m14.516944579s ago: executing program 2 (id=1611): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[], 0x48) r0 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x0, 0x0, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) socket$tipc(0x1e, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000240)=ANY=[@ANYBLOB="180300000005000000000000000000001801000011af000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000d5030000020000838500000071000000180100002020752500000000806020207b1af8ff"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, @void, @value}, 0x94) socket$inet6_sctp(0xa, 0x1, 0x84) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000500)='./file0\x00', 0x0, 0x100) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0x3) syz_usb_control_io(0xffffffffffffffff, &(0x7f00000004c0)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r2, 0x40047438, &(0x7f0000000180)=""/246) writev(r2, &(0x7f0000000440)=[{&(0x7f0000000280)="c021", 0x1700}], 0x1) 2m13.79785382s ago: executing program 2 (id=1629): r0 = socket(0x10, 0x3, 0x9) syz_mount_image$iso9660(&(0x7f00000000c0), &(0x7f0000000000)='./file1\x00', 0x8c08, &(0x7f0000000cc0)=ANY=[], 0x1, 0x5c2, &(0x7f0000000e00)="$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") r1 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) getdents(r1, &(0x7f0000000400)=""/201, 0xc9) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000000), 0x4) connect$netlink(0xffffffffffffffff, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x25dfdbff}, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x31, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = io_uring_setup(0x5cbd, &(0x7f0000000080)={0x0, 0x4006731, 0x2000, 0x2, 0x18d, 0x0, r1}) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='kfree\x00', r3, 0x0, 0xfffffffffffffffd}, 0x18) r4 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r5 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) mmap(&(0x7f0000342000/0x2000)=nil, 0x2000, 0x27524d5207e95870, 0x12, r5, 0xf3834000) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000300)=@broute={'broute\x00', 0x20, 0x0, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000040], 0x0, 0x0, 0x0}, 0x91) write$selinux_load(r4, &(0x7f0000000000)=ANY=[], 0x2000) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) syz_clone(0x62000000, 0x0, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) gettid() syz_genetlink_get_family_id$tipc(&(0x7f0000000040), r0) socket(0x10, 0x3, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3e, 0x1, 0x0, 0x0, 0x0, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x800000000003}, 0x1320, 0xffffffff, 0x3, 0x6, 0x0, 0x1, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) 2m13.274211008s ago: executing program 2 (id=1636): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0x1) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=ANY=[], &(0x7f0000000180), 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) bpf$TOKEN_CREATE(0x24, &(0x7f0000000040)={0x0, r0}, 0x8) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="33eb00000000b1e0fae4e7081478000000000000", @ANYRES32=r2, @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, @void, @value}, 0x94) sched_setaffinity(r1, 0x8, &(0x7f00000001c0)=0xa1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10) syz_open_procfs(0x0, &(0x7f0000000240)='net/kcm\x00') open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x0) 2m13.090198201s ago: executing program 2 (id=1642): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@updpolicy={0x1bc, 0x19, 0x1, 0x0, 0x0, {{@in6=@private2, @in6=@empty, 0x0, 0x3, 0x0, 0x0, 0xa, 0x0, 0x0, 0x5e}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4}}, [@tmpl={0x104, 0x5, [{{@in=@remote, 0x0, 0x6c}, 0x0, @in=@dev={0xac, 0x14, 0x14, 0xc}, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x1}, {{@in6=@loopback, 0x0, 0x3c}, 0x2, @in=@remote, 0x0, 0x1, 0x3}, {{@in6=@empty, 0x0, 0x32}, 0x2, @in=@dev, 0xffffffff, 0x0, 0x2}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x6c}, 0x0, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x4}]}]}, 0x1bc}}, 0x0) 2m13.089905891s ago: executing program 34 (id=1642): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@updpolicy={0x1bc, 0x19, 0x1, 0x0, 0x0, {{@in6=@private2, @in6=@empty, 0x0, 0x3, 0x0, 0x0, 0xa, 0x0, 0x0, 0x5e}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4}}, [@tmpl={0x104, 0x5, [{{@in=@remote, 0x0, 0x6c}, 0x0, @in=@dev={0xac, 0x14, 0x14, 0xc}, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x1}, {{@in6=@loopback, 0x0, 0x3c}, 0x2, @in=@remote, 0x0, 0x1, 0x3}, {{@in6=@empty, 0x0, 0x32}, 0x2, @in=@dev, 0xffffffff, 0x0, 0x2}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x6c}, 0x0, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x4}]}]}, 0x1bc}}, 0x0) 1m48.326020508s ago: executing program 6 (id=2075): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="4c0000004a00010000000000000000000a00806e"], 0x4c}}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) move_pages(r1, 0x2, &(0x7f0000000040)=[&(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil], 0x0, &(0x7f0000000080)=[0x0, 0x0, 0x0], 0x2) r2 = syz_open_dev$tty1(0xc, 0x4, 0x3) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x976}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) r4 = dup(r0) getsockname$packet(r4, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r3, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) setsockopt$XDP_RX_RING(r4, 0x11b, 0x2, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r6}, 0x10) ioctl$KDFONTOP_SET(r2, 0x4b72, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r7, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_int(r7, 0x6, 0xa, 0x0, 0x0) setsockopt$sock_int(r7, 0x1, 0x7, 0x0, 0x0) sendto$inet6(r7, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) 1m47.452838032s ago: executing program 6 (id=2089): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0}, 0x18) r0 = syz_open_dev$vcsa(&(0x7f0000000040), 0xa5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0xb, 0x0, &(0x7f0000000200)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000b00)=@usbdevfs_disconnect={0xfffffffc}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000300)={'tunl0\x00', &(0x7f0000000240)={'syztnl1\x00', 0x0, 0x40, 0x20, 0x74b9, 0x81, {{0x12, 0x4, 0x0, 0x23, 0x48, 0x67, 0x0, 0x8, 0x29, 0x0, @loopback, @empty, {[@rr={0x7, 0x3, 0x5}, @ssrr={0x89, 0x27, 0x8c, [@local, @initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, @broadcast, @remote, @initdev={0xac, 0x1e, 0x1, 0x0}, @local, @private=0xa010101]}, @timestamp={0x44, 0x8, 0x14, 0x0, 0x5, [0x60]}, @noop]}}}}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f00000003c0)={'gretap0\x00', &(0x7f0000000340)={'syztnl0\x00', r1, 0x8, 0x8000, 0x100, 0xf70, {{0x11, 0x4, 0x0, 0x7, 0x44, 0x67, 0x0, 0x37, 0x6, 0x0, @empty, @loopback, {[@ra={0x94, 0x4, 0x1}, @rr={0x7, 0x7, 0xd5, [@empty]}, @timestamp={0x44, 0x24, 0xaa, 0x0, 0x7, [0x91, 0x800, 0xb1, 0x7ff, 0x0, 0x7, 0xfffffff8, 0x4]}]}}}}}) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)) perf_event_open(&(0x7f0000000680)={0x3, 0x80, 0x3f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4224, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={&(0x7f0000000540), 0x6}, 0x4102, 0x8ffffffff, 0x10006, 0x6, 0x4, 0x7e0, 0xfff9, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3f, 0x1, 0x0, 0x9, 0x0, 0x2, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0x1}, 0x10, 0x0, 0x0, 0x0, 0x9, 0x1fe, 0x6, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x80000, 0x0, 0x0, 0x0, 0x66, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r2}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffb}]}) migrate_pages(0x0, 0xf7fffffffffffffc, &(0x7f0000000080)=0xfffffffe, 0x0) 1m47.415283222s ago: executing program 6 (id=2090): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000015c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000010000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xa2, 0x7}}, './file0\x00'}) r2 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_GET_VERSION_NUM(r2, 0x2284, &(0x7f0000000080)) 1m47.366356102s ago: executing program 6 (id=2091): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000100)='./bus\x00', 0x20081e, &(0x7f0000000340)={[{@journal_dev={'journal_dev', 0x3d, 0x2}}, {@grpid}, {@auto_da_alloc}]}, 0x1, 0x4f4, &(0x7f00000008c0)="$eJzs3U1vG1sZAODXzpeTm3uTW7oABLSUQkFVncRto6oLKCuEUCVElyC1IXGjKHYcxU5pQhfpf0CiEitY8gNYd8WeDYIdm7JA4iMCNZVYGM14kpo0bkKT2CF+Hmk0c+Y4fs+pNefYr+s5AfStyxGxFRHDEfEoIiay87lsi3utLXnc6+1n8zvbz+Zz0Ww++HsurU/ORdvfJD7KnrMQET/4TsSPc+/GrW9sLs9VKuW1VnF0qlFdnapvbN5Yqs4tlhfLK6XS7Mzs9J2bt0sn1tdL1eHs6Iuvfrf1jZ8mzRrPzrT34yS1uj60FycxGBHfO41gPTCQ9We41w3hg+Qj4kJEXEmv/4kYSF9NAOA8azYnojnRXgYAzrt8mgPL5YtZLmA88vlisZXDuxhj+Uqt3rj+uLa+stDKlU3GUP7xUqU8neUKJ2Mol5Rn0uO35dK+8s2I+DQifjYympaL87XKQi/f+ABAH/to3/z/r5HW/A8AnHOFXjcAAOg68z8A9B/zPwD0H/M/APQf8z8A9B/zPwD0n8Pm/wPu3wkA/P/6/v37ydbcye5/vfBkY3259uTGQrm+XKyuzxfna2urxcVabTG9Z0/1sOer1GqrM7di/enkN1frjan6xubDam19pfEwva/3w/JQV3oFALzPp5de/jH5eL91dzTdom0tB3M1nG/5XjcA6JmBXjcA6BmrfUH/OsZnfOkBOCcO+y8+hYgY3X+y2Ww2T69JwCm79jn5f+hXbfl/vwKCPiP/D/1L/h/6V7OZO+qa/3HUBwIAZ5scP9Dh+/8L2f7X2ZcDP1rY/4gXp9kqAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAONt21/8tZmuBj0c+XyxGfBwRkzGUe7xUKU9HxCcR8YeRoZGkPNPjNgMAx5X/Sy5b/+vaxNXx/bXDuTcj6T4ifvKLBz9/OtdorP0+Of+PvfONF9n5Ui/aDwAcZneeTvdtH+Rfbz+b39262Z6/fjsiCq34O9vDsbMXfzAG030hhiJi7J+5rNySa8tdHMfW84j47EH9z8V4mgNprXy6P34S++Ouxs//V/x8WtfaJ/8WnzmBtkC/eZmMP/cOuv7ycTndH3z9F9IR6viy8S95qvmddAx8G393/BvoMP5dPmqMW7/9buto9N265xGfH4zYjb3TNv7sxs91iH/1iPH/9IUvXelU1/xlxLU4OH57rKlGdXWqvrF5Y6k6t1heLK+USrMzs9N3bt4uTaU56qnOs8Hf7l7/pFNd0v+xDvELh/T/q0fs/6/+/eiHX35P/K9/5aD4+bj4nvjJnPi1I8afG/tNoVNdEn+hQ/8Pe/2vHzH+qz9vvrNsOADQO/WNzeW5SqW81s2D3TcSXQ3q4BwctBIeibPRnvaDb3Ur1nD8T3/VbH5QrE4jxklk3YCzYO+ij4g3vW4MAAAAAAAAAAAAAABwoG78YqnXfQQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOD8+k8AAAD//2CSzDE=") creat(&(0x7f0000000240)='./bus\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x100) write(r1, &(0x7f0000001000)='\x00', 0x1) sendfile(r1, r0, 0x0, 0x3ffff) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r2 = open(&(0x7f0000000500)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r2, 0x4c04, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0xa, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5c9d000ff8ee09e737ff0edf110ff4117639c2eb4b78c66ee677df701905b9aafab4afaaf755a3f6a004", "cba3d625780820d1cbf7db71038259ca171ce1a311ef97e4298d1e14ef01060000e9009600fdff00000000000000000000000000000000000400", "9300e6d6a89ef30bea2a0092000010000000aff571ec3199bde400"}) getrandom(0x0, 0x0, 0x2) clock_gettime(0x0, 0x0) mount(0x0, &(0x7f0000001200)='./file1\x00', &(0x7f0000001240)='omfs\x00', 0xa00008, &(0x7f0000001280)='\x00') 1m46.755207682s ago: executing program 6 (id=2095): mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f00000002c0)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) r3 = dup(r2) write$P9_RLERRORu(r3, &(0x7f0000000500)=ANY=[@ANYBLOB="5300000007000046009d40edce82cd28e1e1edab5168510449"], 0x53) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[], [], 0x6b}}) 1m46.409245097s ago: executing program 6 (id=2097): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18070000000000000000000000030000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f00000005c0)='bcache_write\x00', 0xffffffffffffffff, 0x0, 0x9}, 0x18) r1 = perf_event_open(&(0x7f0000000100)={0x4, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f00000002c0), 0xc}, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x0, 0xffffffffffffffff, r0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) statx(r3, 0x0, 0x2400, 0x1, &(0x7f00000004c0)) bpf$PROG_LOAD(0x5, &(0x7f0000001200)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24581ed60e5ac586, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x80, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r2}, &(0x7f0000000180), &(0x7f00000001c0)=r1}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000040)='sys_enter\x00', r4}, 0x10) syz_clone(0x8c834400, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6) ioctl$sock_SIOCGPGRP(r5, 0x8904, &(0x7f00000000c0)=0x0) syz_open_procfs(r6, &(0x7f0000000140)='net/rt_cache\x00') r7 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r7, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r7, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r7, 0x84, 0x6c, &(0x7f0000000000)={0x0, 0x1c, "f492302979aaf7d87d0c134ff7aac9f481cb1be62055b0d328689325"}, &(0x7f0000000080)=0x24) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b70200001400ffffb7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='signal_generate\x00', r9}, 0x10) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) io_setup(0x2, &(0x7f0000002400)=0x0) io_submit(r10, 0x1, &(0x7f0000000340)=[&(0x7f0000000100)={0x2000000000, 0x4, 0x0, 0x1, 0x0, r5, &(0x7f0000000040)="5400ffff0000", 0x6, 0x0, 0x0, 0x2}]) get_robust_list(0x0, &(0x7f0000000080)=0x0, &(0x7f0000001cc0)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) 1m46.397094908s ago: executing program 35 (id=2097): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18070000000000000000000000030000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f00000005c0)='bcache_write\x00', 0xffffffffffffffff, 0x0, 0x9}, 0x18) r1 = perf_event_open(&(0x7f0000000100)={0x4, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f00000002c0), 0xc}, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x0, 0xffffffffffffffff, r0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) statx(r3, 0x0, 0x2400, 0x1, &(0x7f00000004c0)) bpf$PROG_LOAD(0x5, &(0x7f0000001200)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24581ed60e5ac586, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x80, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r2}, &(0x7f0000000180), &(0x7f00000001c0)=r1}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000040)='sys_enter\x00', r4}, 0x10) syz_clone(0x8c834400, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6) ioctl$sock_SIOCGPGRP(r5, 0x8904, &(0x7f00000000c0)=0x0) syz_open_procfs(r6, &(0x7f0000000140)='net/rt_cache\x00') r7 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r7, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r7, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r7, 0x84, 0x6c, &(0x7f0000000000)={0x0, 0x1c, "f492302979aaf7d87d0c134ff7aac9f481cb1be62055b0d328689325"}, &(0x7f0000000080)=0x24) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b70200001400ffffb7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='signal_generate\x00', r9}, 0x10) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) io_setup(0x2, &(0x7f0000002400)=0x0) io_submit(r10, 0x1, &(0x7f0000000340)=[&(0x7f0000000100)={0x2000000000, 0x4, 0x0, 0x1, 0x0, r5, &(0x7f0000000040)="5400ffff0000", 0x6, 0x0, 0x0, 0x2}]) get_robust_list(0x0, &(0x7f0000000080)=0x0, &(0x7f0000001cc0)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) 1m27.047354052s ago: executing program 8 (id=2390): fcntl$setlease(0xffffffffffffffff, 0x400, 0x3) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1e000000000000000500000006", @ANYRES64], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r0, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000200)=@o_path={&(0x7f0000000140)='./file0\x00', 0x0, 0x8, r1}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x18) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'veth1_vlan\x00'}) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000000c0)=@newlinkprop={0x44, 0x6c, 0x10, 0x70bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, 0x40400, 0x2}, [@IFLA_PHYS_SWITCH_ID={0x23, 0x24, "d9be991ed436373ce716bbb84ba35cd9da0ae7f7c1d531675636b542cb52d7"}]}, 0x44}}, 0x0) 1m26.944360224s ago: executing program 8 (id=2393): mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001280)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16, @ANYBLOB="a18300000000000000000500000008000300", @ANYRES32=0x0, @ANYBLOB="0c00990000000000000000004f000e000000ffff080211e500010000000000000000000064000000000602020202020201000301003c"], 0x78}}, 0x0) r1 = syz_io_uring_setup(0x31a9, &(0x7f0000000200)={0x0, 0x38a0, 0x80, 0x1, 0x37d}, &(0x7f0000000180), &(0x7f00000002c0)) io_uring_register$IORING_UNREGISTER_NAPI(r1, 0x1c, &(0x7f0000000400), 0x1) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x4, 0x0, 0x7ffc9ffb}]}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000013000000850000008600000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) read$char_usb(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001300)={0xc, 0xb, &(0x7f00000000c0)=ANY=[@ANYBLOB="18040000000000000000000000000000180000002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], &(0x7f00000005c0)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) openat$cgroup_procs(0xffffffffffffffff, &(0x7f00000000c0)='cgroup.threads\x00', 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000540)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x88, &(0x7f00000005c0)={[{@nogrpid}, {@min_batch_time}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@nobarrier}, {@nodiscard}, {@quota}]}, 0x3, 0x42f, &(0x7f0000000940)="$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") rename(&(0x7f0000000000)='./file1\x00', &(0x7f00000000c0)='./file0/file0\x00') 1m26.855123855s ago: executing program 8 (id=2397): mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001880), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001280)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="a18300000000000000000500000008000300", @ANYRES32=0x0, @ANYBLOB="0c00990000000000000000004f000e000000ffff080211e500010000000000000000000064000000000602020202020201000301003c"], 0x78}}, 0x0) r2 = syz_io_uring_setup(0x31a9, &(0x7f0000000200)={0x0, 0x38a0, 0x80, 0x1, 0x37d}, &(0x7f0000000180), &(0x7f00000002c0)) io_uring_register$IORING_UNREGISTER_NAPI(r2, 0x1c, &(0x7f0000000400), 0x1) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x18) read$char_usb(0xffffffffffffffff, 0x0, 0x0) epoll_pwait2(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001300)={0xc, 0xb, &(0x7f00000000c0)=ANY=[@ANYBLOB="18040000000000000000000000000000180000002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], &(0x7f00000005c0)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001040)={r4, 0x18000000000002a0, 0xe, 0x0, &(0x7f00000003c0)="b9ff03316844268cb89e14f00800", 0x0, 0x2000000, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) openat$cgroup_procs(r3, &(0x7f00000000c0)='cgroup.threads\x00', 0x2, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0/file0\x00', 0x0) prctl$PR_SET_NAME(0xf, &(0x7f0000000280)='+}[@\x00') syz_mount_image$ext4(&(0x7f0000000540)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x88, &(0x7f00000005c0)={[{@nogrpid}, {@min_batch_time}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@nobarrier}, {@nodiscard}, {@quota}]}, 0x3, 0x42f, &(0x7f0000000940)="$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") setxattr$trusted_overlay_upper(&(0x7f0000000380)='./file0/file0\x00', &(0x7f00000001c0), &(0x7f0000001400)=ANY=[], 0x835, 0x0) rename(&(0x7f0000000000)='./file1\x00', &(0x7f00000000c0)='./file0/file0\x00') 1m25.91383668s ago: executing program 8 (id=2418): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000005000000005e002200850000006d00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x0, &(0x7f0000000640)={0x2, &(0x7f0000000500)=[{0x8, 0x4, 0x4, 0xd}, {0x9, 0x3, 0x4, 0x8}]}) mq_unlink(0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xb, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f83c6d5ddd02000008000000b703000000000000850000000400000095", @ANYRES64=r0], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=@newqdisc={0x30, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x9}, {0xf}, {0xe, 0xd}}, [@TCA_RATE={0x6, 0x5, {0x9, 0x1}}, @TCA_STAB={0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$KDSKBENT(r3, 0x4b47, &(0x7f0000000400)={0x0, 0x7f, 0x6}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r4, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r4, 0xc0189373, &(0x7f0000000340)={{0x1, 0x1, 0x18, r3}, './file1\x00'}) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000003200)='./file2\x00', 0x4204, &(0x7f0000003240)=ANY=[], 0x6, 0x325, &(0x7f0000000b40)="$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") r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x800714, &(0x7f0000000100)={[{@nobarrier}], [{@euid_gt={'euid>', 0xee01}}]}, 0xff, 0x486, &(0x7f0000001040)="$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") r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000000), 0x208e24b) creat(&(0x7f0000000000)='./bus\x00', 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r7 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r7, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x171c, 0x0, 0x0, 0x0, 0x8, "ef359f413bb93852f7d6d1ce5d29c3ee5e5ca9000f7c41499dc2aac63a4b78c660e677df701908b9aaa3f6a00400", "036c47c6780820d1cbf7896de1fdcf335263bdbcef549ba197fce47ddfdd753abd9501ce721b6ae9b49600002a00", "b7326736181c208220000000b9000010000000000000f0ffefffff5aff000001"}) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x9) fallocate(r5, 0x1, 0x8416, 0x4) setsockopt$inet_mreqsrc(r5, 0x0, 0x25, &(0x7f00000001c0)={@local, @empty, @loopback}, 0xc) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r8, &(0x7f0000000080)='\n\x00\x00\x00', 0x4, 0x0, &(0x7f0000000000)={0xa, 0x4e23, 0x98, @empty}, 0x1c) sendto$inet6(r8, &(0x7f0000000300)='p-', 0x2, 0x0, &(0x7f0000000140)={0xa, 0x4e23, 0x9, @dev={0xfe, 0x80, '\x00', 0xb}, 0x1}, 0x1c) setsockopt$inet6_buf(r8, 0x29, 0x44, &(0x7f0000000440)="ca2ca2d35d4bd6c0280c6fc18a977b982764add874ee0df8e036fc06b219b9c70e70474298d1893cbb8095a767137ed27f3faead6334d700203b9c980e34951a2dff5efbc14d7766654db7e69001f45788bbe04b97c5aea0bf495460f2892b0e3f3b5d4e987a3a41a5079b9cab5ba0475c8a98a2dee50c0506eb34e619ec8b1e1d218824f07bd15474dee76f091260447d99f985f1", 0x95) 1m23.966117239s ago: executing program 8 (id=2430): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000050000000900000001000000", @ANYBLOB], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000c00)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10) creat(&(0x7f0000000300)='./file0\x00', 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0) faccessat(r4, &(0x7f0000000000)='./file0\x00', 0x5) 1m23.447609368s ago: executing program 8 (id=2432): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000040), 0x400000001fc, 0x301) ioctl$USBDEVFS_REAPURB(r1, 0x4008550c, &(0x7f0000000180)) ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f0000000280)=@urb_type_control={0x2, {}, 0x0, 0x40, &(0x7f0000000000)={0x4b5a9da54893e123, 0x14, 0x8, 0x2}, 0x8, 0x7, 0x200, 0x0, 0x0, 0x20000, 0x0}) 1m23.447451898s ago: executing program 36 (id=2432): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000040), 0x400000001fc, 0x301) ioctl$USBDEVFS_REAPURB(r1, 0x4008550c, &(0x7f0000000180)) ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f0000000280)=@urb_type_control={0x2, {}, 0x0, 0x40, &(0x7f0000000000)={0x4b5a9da54893e123, 0x14, 0x8, 0x2}, 0x8, 0x7, 0x200, 0x0, 0x0, 0x20000, 0x0}) 48.239335264s ago: executing program 9 (id=3062): getpgrp(0x0) r0 = epoll_create1(0x80000) clock_gettime(0x0, &(0x7f0000000340)={0x0, 0x0}) epoll_pwait2(r0, &(0x7f0000000300)=[{}], 0x1, &(0x7f0000000380)={r1, r2+60000000}, &(0x7f0000000400)={[0x2]}, 0x8) socket$nl_netfilter(0x10, 0x3, 0xc) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x400, &(0x7f0000000000)={[{@grpjquota}, {@stripe={'stripe', 0x3d, 0x2}}]}, 0x1, 0x4bb, &(0x7f0000000580)="$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") r3 = socket$xdp(0x2c, 0x3, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) keyctl$unlink(0x9, 0x0, 0xfffffffffffffffe) setsockopt$XDP_TX_RING(r3, 0x11b, 0x3, &(0x7f00000003c0)=0x800, 0x4) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000030000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sys_enter\x00', r5}, 0x10) memfd_secret(0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000a80)='kfree\x00', 0xffffffffffffffff, 0x0, 0x80000000000000}, 0x18) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x103042, 0x8) r6 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x187842, 0x147) r7 = open(&(0x7f0000000080)='./file1\x00', 0x10b942, 0x140) sendfile(r7, r6, 0x0, 0x80000000) 47.162521051s ago: executing program 9 (id=3070): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e0000000000000005000000"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a00)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext3\x00', &(0x7f0000000140)='./file1\x00', 0x0, &(0x7f0000000500)={[{@noblock_validity}, {}, {@auto_da_alloc}, {@errors_remount}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@journal_path={'journal_path', 0x3d, './file1'}}, {@usrquota}, {@quota}, {@nomblk_io_submit}]}, 0x3, 0x56a, &(0x7f00000015c0)="$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") 47.009256713s ago: executing program 9 (id=3074): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="620af8ffa1dc0021bfa100000000000007010000f8ffffffb702000007000000bd120000000000008500000010000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24561f1b2607995daa56f151905ea23c22624c9f87f9793f3bbb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64b751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07372c29184ff7f4a7c0000070000006056feb4cc664c0af9360a1f7a5e6b607130c89f18c0c1089d8b8588d72ec29c48b45e0000000000000401d01aa27ae8b09e00e79ab20b0b8ed8fb7a68000000000000000000006fa03c6468978089b302d7ff6023cdcedb5e0125ebbcebdde510cb2364149215108337719acd97cfa107d40224edc5465a932b77a74e802a0dc6bf25d8a242bc6099ad2300000480006ef6c1ff0900ff0000000010c63a949e8b7955394ffaff03000000000000ab87b1bfeda7be586602d985430cea080000000000000026abfb0767192361448279b05d96a703a660581eecdbf5bcd3de227a167ca17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9b081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80af740b5b7632d5933a1c1fa5605bd7603f2ba2a790d62d6faec2fed44da4928b30142ba1fde5c5d50b83bae616b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0cb97fca585ec6bf58351d578be00d952aab9c71764b0a8a7583c90b3433b809bdb9fbd48bc877505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223d8d9e86c5ea06d108d8f80a0eb4fa39f6b5c02e6d6d90756ff578f57000000009700cf0b4b8bc229413300000000000000000003000000000000000000000000001000000000559711e6e8fcffffffffffffffb2d02edc3e01dd271c896249ed85b980680b09000000000f0000169cdcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffffd897ef3b7cda42f93d53046da21b40216e14ba2d6af8656b01e17addaedab25b30002abbba7fa725f38400be7c1f001b2cd3170400000085be9e48dccf1f9f3282830689da6b53b263339863297771d74732d400003341bf4a00fc9fec2271ff01589646efd1cf870cd7bb2366fde4a594290c405ff870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d30a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78249788f11f761038b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe760e717a04becff0f719197724f4fce1093b62d7e8c7123d890cec55bf404e4e1f74b7eed82571be54c72d978cf906df08f11f1c4042e36acd37d7f9e109f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2acd1fe582786105c70600000000000000b7561301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c542c9062ece84c99a061887a20639b41c8c12ee86c50804042b3eac1f871b136345cf67ca3fb5aac518a75f9e7d7101da841735e186c489b3a06fb99e0347f23a054de2f4d92d6bd72ee2c9f0390a6f01e3e483b4ad05573af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f91e358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df90400000000000000d6b2c5eaff07000000000000b99c9cc0ad1857216f000000009191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e669261192899d4562db0e22d564ae09bb6d163118e401e024fd452277c3887d6116c6cc9d8046c216c1f895778cb26e22a2a798de44aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99a3594191e104d417e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250df98674152f94e32409e2a3bce109b6000000000000a1fec9000000d694210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137ab79a404abde7750898b59270b939b81367ac91bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f00fb8191bbab2dc591dda61f0868afc4294859323e7a45319f18101288a0268893373750d1a8fe64680b0a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7d58c08acaf30065b928a31d2eca55f74a23641f61f2d5b308cf01cfaed9ef0ce21d69993e9960ff5f76015e6009756237badf4e7965bbe2777e808fcba821a00e8c5c39609ff854356cb490000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546bb2e51935ab9067ec3ad2a182068e1e3a0e2505bc7f41019645466ac96e0d0b3bc19faa5449209b085f3c334b47f067bbab40743b2a428f1da1f626602111b40e761fd21081920382f14d12ca3c471c7868e7da7eaa69eb7f7f80572fdd11bb1d070080fbc22bf73468788df51710eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331ff5e20fa26b8471d9e1cc9eb3d541e407cc2dae5e690cd628ab84875f2c50ba830d3f474b079b407000000deff000040430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df902aeec50e71b967ce7daac4be290159f6bcd75f0dda9de5532e66ae9e48b0ed1254a81faae79b6af6fbb869604d51de44c4e0973171ad47d6c00ebc7603093f000000fdec743af930cd6db49a47613808bad959719c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f15d6533f78a1f4e2df4ca23d867693fd42de9b49a1b36d48a44ba6a4530e59bec53e876dc660dd6d89f80a4377b1b1292a893a516dab183ee65744fb8fc4f9ce2242e0f000000000100000000d77480e0345effff6413258d1f6eb190aa28cbb4bafe3436b176c7ed4b132fb805d5edd9d188daf28d89c014c3ecca10ae55704544673e1fb03b84f63e022fe755f4007a4a899eaf52c4f491f1e97c862e29e4570600000091c691faee1e0c8fe056a07474e6e5490a7d3c3402000000b60600d837c6befc63ddf2f594ad7cbc56a1e44d218c956a5392a995f1fae8e9f206efbb33854dc70104d74dc07748f9745cb796da2dfb714a0500000000000000faed94fc39acfb3fd25dfa8116a154cd1226e1bb72b59fed817072a0da60160761fd3dffda0f7c592eabd8ab68334d2a1693cb187539049e331272bf5135044df8161400211b8012b6eb1ed5656e83f65509bb4b323c5bd61bff949d3bade2f6ffda1360c2786e16937ab61d6dcafed319c7167d0885f9c6d1f442954c167dd9b4acd9468ce3674c82bbb2e31389179b025dbe063b7f906217b2cf8410c7023aa3e5cc3ba1000000000000000000000000000000006ae6301a2da44394275c582a6516bb92ea1980a0a659f2f1811c8b281c209647c4241f292b20508b215dde27bb2487a6e2b5e4a8ccfab90c23827ef06cbe364073005f8a6d1456aaeb85ffb7858f24eced67a67ab825e863928ed64c83f62ffdaa997657335b63c6b4163aff094059e626766845fd779c9e6cdbbd64c2499ce3ffe2fef03f7cdd0d90f3a7579579a142c0f7b318264d5c13c31cf475829528267ead38523cab7e1664e8426cfce471fef821c8a02a7e7d954d05b68a9c28f79429b09e2bb3681ae2b831e27c735123361c193d66ed4d71f19b199d371ec6bfada7cd370e3fdd3cd980fa1e145fd3f3e96b1feb53c865e1ada08f5d16ed652ee0c7f45352222692fbd679212c225d097aa90f7e1fb1f983415f43e75a19ecf7fd21bfa150ef563aa72ba3c43c5f3d9be128ec26b691f31f9cab931631606a81622f120675c962be2d3b5e95f74f0b209e42e6bdd76e6e725295b1d78d928f6f63e4581d5cc41cbde2ba66adc1168070c8c6e18a6a234f5f9311ef0f78924b68dbb4712efdb6974667bdb54f16fd2061b9ba93638dd177227e94e4ebd0ec1d437db948062bf41742000000000000000000305f70dd02fa0c61d5fe6d8ff35389246037e18d34c1375ae04f44f0c2543c772c5ccb137be7dc1874c514b37c668554d77d4ea5ed144a648257f4a0301067bbcd9b91072659d872f26b796e2b81025edb5f45f785e2c2602b248ecdd80f019ca659be7e8ae953325a27564f33c9d458a60be3dab38baab7eb1a66ab1ffd6308f7fd51beb356fe75eb985b7581bb5584c53984ba9c3340f97e8d3825681c53de5f554e595b00000000000000006a8fa9f05d64c4be42f981f00051a39938613067dbd1427e01bfec016e51844cefa8a855bf23ac887b4a88eed6d9443857242f28e31a41d20105fbf3394ff910e734b4d9101265ff729c426e01c1ab13dda8c388b909006f19eecb87e39175e85e17000000000000000000009431807e43886903526074e6b40244c938a4c68a38c25ddd7c143b3f1400010000ec66815cf8d1f56aa1424bc9b5d58790298e5b310969e50c222563b54e60854e1b0100448aca8c5ccbf5546ce4c3cd5a733fec25fb94e1e0f966bcbd28a4d8fe4f556eaa1104a793006619700798354c6ae05025040965e3083562bfa20968c04007d21dc02c9fd1f75e1ff40f439bdde4e784012e52049b483d02f81b88f5f57816b3fecec79cfca8d37203e769759d6b6a56b7605ced8ee18475a77ff0963a565fb6021d216c01b1098e40550a1cfd80e918d685a7b099a4f8ed654cd76ca61fe5ad8a31ec558fdbfa706d5e738bceae81fe777c307d5bc72183a4c2d35732ab916a781b9912160a3fd2a2e74dd690c57bdfdc1f069f949170ef8cb9c13c12138116bca7a8c59363799be7005c51bc25a8bbe2cf5ddf6aa161693782b0e7feb8a768f391b49d4c978c96dbb52f21c122eba9f17c8bed10591958cf06321a248b5f76ceedfe0d080d6aeadc11b237b3326dd04b86ac37c0d131544888db9e128d059761ad9a393e96c3b41c13c5a381bff187a75de560ba6eb3faa5ff8d2bb3c88f8de5efc2fb2200cfda6d07ceae22577064334fbf76a23e62e6059211d995b879f6b7d3f7fcf03652b81e6b7cdeff947ad185d3c6269ca247b429c3b872a8f1ef60407d29a874f4ec31c9effed55543a65a6b4d778cebcd43b7905f3960140bd783540a7353014bda8e9c7a34a5f428fd1f8eb11e837dd9d586487fdebcb1ecd3a003ff0fda4be617fecf1ff0ef2c74664d60a4b9423f3297bc8eb91b4ee1d73272abbef3e7a828a7d7ab055a8eb58fe379de85338304e26e3620941b463e9049fd105c74c91cc4d71b0f76e2c2e4825106aa7ce2a3adbbc7a0443ece58e752b47e6f677eff7c5c568a89d6e36b165c39132a0f27080ece2a94c320b002c77f82662675a7713c7067081cac15994698c41ff4754268ae1676384ff799783f55d7e5a1a0920300000000000000d98440c355927629f2bcf9dc405a18ca0264400abf38e90000000000000000008faf2cddffbfa69bf32eb718e88ec75603ed7c7a8825ce0f27a114bd7a4ab74d0c7b8d90ccc1c3ca6620def782e24d75aed70eb676437f62677a69e0994cd82d72e95493c830fe9515329f40b7025326dec33a527c5d999298eaa3690fd0d38a02fc6e0bc16dbe19f353027edc014411e1138087221492f5d5e5cc9d0a1acd3f581eda9a807aa0e609f935f626d96351e0ff116686cbeb8939feecd5dac8cf45101942cc7cec21b7f337df5431bcf7e504b7c427f70a10e1cb8993a661306a0576b638a0171e6800b5b35589d676eb30ed1a72e8f7b057eb281c4504195635b6b285ebaba019913a2520e43ed790231f047f7d3789c10ae7d724929f77aec1d33d9587580268ee14396f71e7ef588cb2560d6bd0795a9b97281229eb16de086553469fad7214ffc3e416f8b8e442dce1d37f9b1c88a5d8a8d9f2fe45bd8df213ecb4194c8554aea13cadcd502e51f6fec80418e772b5bd8d0228949058038b185909ee542848680f9ad43f4057d676d5e21ae3d7e0e4a28c04f112a94707f032b35915e42993ff148291b8babe026646ee41905992db217561b90811c4702a14f312fe5d2ae7257db6be1034cc1c346b76a853ce274bf0435e18f7e86c660c18c80f30505dd4cf2ae2a1893b83c62d61bfeadc1f913e4cab2b897e096dd3fe3525090410cb23bab36cdf200a36014032cf6e5121803c5a0c4a273a19f340163fc6265425d513a1294b8439276394945d94a589708e32a1cb30f1fa4b2f08e01dc5e8c6732e6dc59b5c8cb400000000000000592c9b68f09c8f5ddb20b4ae08b4d9df548e5ed6cd47b91a4bea8b6aa52edf64576aef1e43f2958437fdc20fbbd0d4e13d8cce1193b2f9b4f107e25af178d056e1b1e40bd75b013f7484fae0bc447b1ffaf34819fe3ad1a634c94345e26e1e68dec08723a37b05d1594a66a4718a51d4d67fc880c9d640f4eacc509873f1a103c87f69"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f00000001c0)='w\xde\xa3\x05\xff\a\x00\x00\x00\x00\x00\x00\x8f\xc0\x9b\x86\xef\\\xc0\x89\av\x9f\xd6\xd1\x98<\xc8\x18E/\x8c\x1a\xe3\xbd') sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000020000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f627269646765001400010077673200"], 0xa8}}, 0x0) 46.963134834s ago: executing program 9 (id=3076): r0 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$inet6(r0, &(0x7f0000000740)={&(0x7f00000002c0)={0xa, 0x4e24, 0x0, @dev={0xfe, 0x80, '\x00', 0x35}, 0x4}, 0x1c, 0x0, 0x0, &(0x7f0000002c00)=ANY=[@ANYBLOB="1400000000000000290000003e0000000100000000000000680000000000000029000000370000001d09000000000000000100010100c2040000000ac2047fffffff00010004012bc20400000000010400000000072000000002067f0100e9070000000000000900000000000000010000000000000004017f000000000000001400000000000000290000000b000000000000010000000014"], 0xb0}, 0x800) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0xb, &(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB="00000000000000000300000000cf9233ef12fd44a6c16b637d93ae5436e92626964bfa0953a57275453a97", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000100)={r2}, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x10, &(0x7f0000000600)=@framed={{}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000400)='snd_soc_jack_notify\x00', r3, 0x0, 0x5}, 0xfffffffffffffdb4) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd604f930900140600fc010000000000000000000000000002fe8000000000000000000000000000aa", @ANYRES32=0x41424344, @ANYRES32=0x41424344], 0x0) syz_mount_image$iso9660(&(0x7f0000000b00), &(0x7f0000000040)='./file0\x00', 0x4002, &(0x7f0000000140)=ANY=[@ANYBLOB='map=off,cruft,iocharset=ascii,block=0x0000000000000200,unhide,session=0x0000000000000011,uid=', @ANYRESDEC=0x0, @ANYBLOB="2c004238994fceef7f633ea81416b1324d35327f7ace27c590b7f9fb133af0ffd6dfc4d893195864142b1450fbace6795f6e181993255fbbca2cb54fcf79cc53b3a6c3704aed82da89741aad5205bb43ded29cfd65509ff9c85cbdb7337ef48b9412ff439da96bb3f5ac11273d94d3d75d"], 0x1, 0xa29, &(0x7f0000001580)="$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") truncate(&(0x7f0000000080)='./cgroup.cpu/cgroup.procs\x00', 0x6) socket$unix(0x1, 0x1, 0x0) unshare(0x68040200) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='net/ip_tables_names\x00') preadv(r4, &(0x7f0000000140)=[{&(0x7f0000000080)=""/132, 0x84}], 0x1, 0x1a, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r6, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r5, 0x6, 0x23, 0x0, 0x0) sendto$inet6(r6, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) shutdown(r6, 0x1) splice(r6, 0x0, r5, 0x0, 0x406f413, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kfree\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a999850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)) syz_clone(0x8d002240, 0x0, 0x0, 0x0, 0x0, 0x0) 46.53536008s ago: executing program 9 (id=3086): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000130000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000380)={{0x1, 0x1, 0x18, r0, {0x80}}, './file0\x00'}) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000dc0)={0x11, 0xc, &(0x7f00000003c0)=ANY=[@ANYRESHEX=r0], &(0x7f0000000240)='GPL\x00', 0x3, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={0x0, r1}, 0x18) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000240)='./file1\x00', 0x8, &(0x7f0000000040), 0x9, 0x52e, &(0x7f0000000500)="$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") bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00'}, 0x10) r2 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x101042, 0x45) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000140)) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r3, &(0x7f0000000080)="10", 0xffffff27, 0x8000c60) ioctl$EXT4_IOC_MIGRATE(r2, 0x6609) 46.246227455s ago: executing program 9 (id=3091): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3f, 0x1, 0x0, 0x0, 0x0, 0x9, 0x690, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0xa5d4}, 0x4c58, 0x0, 0x0, 0x1, 0x8, 0x0, 0xb, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f00000000c0)='./file0\x00', 0x0) socket(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000400), &(0x7f0000000140), 0x1000}, 0x38) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2f, &(0x7f0000000200)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x4e24, 0x0, @private2, 0x3}}}, 0x108) socketpair$tipc(0x1e, 0x5, 0x0, 0x0) r0 = socket$inet6(0x10, 0x3, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={0xffffffffffffffff, 0x0, 0xb8, 0xae, &(0x7f00000005c0)="e4b3f350df2c69a5c0fa5b2c04cbee95e3f9718ff7ba9b9c35c255fd62dc6b0bd82098f85d630add9d040fddba1f8e4a0ac9fee9bca4b1ba18e004c1175b335c7a43977a5c0bb6b4e218a2b0b1e0ad668288ef84f7840551af8ae24654b77701060debc4909b89b377219e5348e5658066d58e6d31ea3ab5a3cb4332aabbc2f5cd7fb5b9b8c91bec54726e11b2a8112e6230b4672549772b02cc8710343ebb86df25c246b54cf794ba82cf714fe077f1ca429dd8ed22b6e8", &(0x7f0000000680)=""/174, 0x80000000, 0x0, 0x16, 0x86, &(0x7f0000000400)="c192bd560b505014414370c1fd44185ffb9b8b4ba7ed", &(0x7f0000000740)="c213deedb4c025d44086fad6a1c01d3af6f3b5bdd991f118f99e492d3b725de8891f078e5d8c4c712aebe72e3ad53cf72c9c38898aa719a1abca8bd743aa45e70f88497f28a46af76e0d42d594055ce459745b7dbbad72cbb0335907512d1e32ea20baae4a4f120d38a111c3fae69c186b607cb7f9198515c09b7f57636cadeb6a0ce1cc81a9", 0x0, 0x0, 0x9}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000380)='neigh_update\x00', r2}, 0x10) sendto$inet6(r0, &(0x7f00000000c0)="900000001c001f4d154a817393278bff0a80a578020000000104740014000100ac1414bb0542d6401051a2d708f37ac8da1a297e0099c5ac0000c5b068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000760700c0c80cefd28581d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee9aa241731ae9e0b390", 0x90, 0x0, 0x0, 0x0) 46.246080474s ago: executing program 37 (id=3091): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3f, 0x1, 0x0, 0x0, 0x0, 0x9, 0x690, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0xa5d4}, 0x4c58, 0x0, 0x0, 0x1, 0x8, 0x0, 0xb, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(&(0x7f00000000c0)='./file0\x00', 0x0) socket(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000400), &(0x7f0000000140), 0x1000}, 0x38) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2f, &(0x7f0000000200)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x4e24, 0x0, @private2, 0x3}}}, 0x108) socketpair$tipc(0x1e, 0x5, 0x0, 0x0) r0 = socket$inet6(0x10, 0x3, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={0xffffffffffffffff, 0x0, 0xb8, 0xae, &(0x7f00000005c0)="e4b3f350df2c69a5c0fa5b2c04cbee95e3f9718ff7ba9b9c35c255fd62dc6b0bd82098f85d630add9d040fddba1f8e4a0ac9fee9bca4b1ba18e004c1175b335c7a43977a5c0bb6b4e218a2b0b1e0ad668288ef84f7840551af8ae24654b77701060debc4909b89b377219e5348e5658066d58e6d31ea3ab5a3cb4332aabbc2f5cd7fb5b9b8c91bec54726e11b2a8112e6230b4672549772b02cc8710343ebb86df25c246b54cf794ba82cf714fe077f1ca429dd8ed22b6e8", &(0x7f0000000680)=""/174, 0x80000000, 0x0, 0x16, 0x86, &(0x7f0000000400)="c192bd560b505014414370c1fd44185ffb9b8b4ba7ed", &(0x7f0000000740)="c213deedb4c025d44086fad6a1c01d3af6f3b5bdd991f118f99e492d3b725de8891f078e5d8c4c712aebe72e3ad53cf72c9c38898aa719a1abca8bd743aa45e70f88497f28a46af76e0d42d594055ce459745b7dbbad72cbb0335907512d1e32ea20baae4a4f120d38a111c3fae69c186b607cb7f9198515c09b7f57636cadeb6a0ce1cc81a9", 0x0, 0x0, 0x9}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000380)='neigh_update\x00', r2}, 0x10) sendto$inet6(r0, &(0x7f00000000c0)="900000001c001f4d154a817393278bff0a80a578020000000104740014000100ac1414bb0542d6401051a2d708f37ac8da1a297e0099c5ac0000c5b068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000760700c0c80cefd28581d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee9aa241731ae9e0b390", 0x90, 0x0, 0x0, 0x0) 2.915500215s ago: executing program 3 (id=3829): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000005000000020000000010"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kfree\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0xb, 0xf, 0x200cc, 0x6, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0x0, 0x0, 0x0, &(0x7f0000000240), 0x4af, r2}, 0x38) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000680), 0x2, r2}, 0x38) 2.849826796s ago: executing program 3 (id=3830): r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000040), 0x8002) write$binfmt_aout(r0, &(0x7f00000003c0)=ANY=[], 0x31c8) bpf$MAP_CREATE(0x0, 0x0, 0x48) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) gettid() prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000004c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ff8}]}) r1 = syz_mount_image$iso9660(&(0x7f0000000180), &(0x7f0000000280)='./file0\x00', 0x14806, &(0x7f0000000b00)=ANY=[], 0x0, 0x6fe, &(0x7f0000001340)="$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") futimesat(r1, &(0x7f0000000000)='./file1\x00', 0x0) preadv2(r1, &(0x7f0000000180)=[{&(0x7f0000000500)=""/232, 0xe8}], 0x1, 0x7, 0xa, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) rt_sigaction(0x19, &(0x7f0000000000)={0xfffffffffffffffc, 0x8c000003, 0x0, {[0x3]}}, 0x0, 0x8, &(0x7f0000000440)) socket$inet_dccp(0x2, 0x6, 0x0) r2 = perf_event_open(&(0x7f0000000380)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x5}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x8) syz_emit_ethernet(0x1de, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x0) perf_event_open(&(0x7f0000000040)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x200, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, r2, 0x3) syz_io_uring_setup(0xd2, &(0x7f0000000480)={0x0, 0xd814, 0x8, 0x80000000, 0xfffffffc}, &(0x7f0000000000)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000002c0)='hrtimer_start\x00', r6}, 0x3d) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000002c0)='hrtimer_start\x00', r7}, 0x3d) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = creat(&(0x7f0000000000)='./file0\x00', 0x0) dup3(r8, r10, 0x0) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="7416c0ee1e078700007266646e6f1abbb7d19e3d08e98df7241938c2c15b9bec74a3cb856e2aecf4feeefba6063061d5a7823b522b74251172125590452d1b4366811800fe00e916b5f048d04b0637700cf0c0ae31afd19ea1ff36ad2ca5150ab5f5", @ANYRESHEX=r10, @ANYBLOB=',wfdno=', @ANYRESHEX=r8]) shutdown(r9, 0x1) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_ASYNC_CANCEL={0xe, 0x32, 0x0, 0x0, 0x0, 0x1}) 2.482265932s ago: executing program 3 (id=3833): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000005000000020000000010"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000000f80)={0x0, 0x0, 0x0}, 0x0) recvmsg(r2, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000600)=""/203, 0xcb}], 0x1}, 0x0) 1.915687851s ago: executing program 1 (id=3847): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70200001400001cb7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_WIPHY(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)={0x14, 0x0, 0x301, 0x0, 0x25dfdbfe, {{}, {@void, @val={0x8}, @val={0xc, 0x99, {0x2, 0x3}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x88d1}, 0x40) 1.915339611s ago: executing program 1 (id=3848): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0xfe80, &(0x7f00000005c0)=[{&(0x7f0000000940)="2e00000010008188e6b62aa73772cc9f1ba1f8482e0000005e140602000000000e000a001000000002800000128c", 0x2e}], 0x1}, 0x0) 1.842824092s ago: executing program 1 (id=3850): modify_ldt$write(0x1, &(0x7f0000000040)={0x8, 0xffffffffffffffff}, 0x10) modify_ldt$write2(0x11, &(0x7f0000000000)={0x1, 0x1000, 0x2000, 0x1, 0x3, 0x0, 0x1, 0x1}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0a000000020000000900"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000400)='kfree\x00', r0}, 0x18) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000040)="3700000013000318680907070000000f0000ff3f13000000170a001700000000040037000d00030001362564aa58b9a6c011f6bbf44dc4", 0x37}], 0x1) r2 = socket$inet6(0xa, 0x80002, 0x0) perf_event_open(0x0, 0x0, 0xffffffbfffffffff, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x2a8, 0x0, 0x940c, 0x3002, 0x0, 0x2c0, 0x328, 0x3d8, 0x3d8, 0x328, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0xa8, 0xf0, 0x4001}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@loopback, 'virt_wifi0\x00'}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x1, 0xbe, {0x565159d7}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x308) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) syz_clone3(&(0x7f0000001240)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0xa, 0x2) 1.802347842s ago: executing program 7 (id=3852): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000005000000020000000010"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kfree\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0xb, 0xf, 0x200cc, 0x6, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0x0, 0x0, 0x0, &(0x7f0000000240), 0x4af, r2}, 0x38) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000680), 0x2, r2}, 0x38) 1.742328653s ago: executing program 7 (id=3853): perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0xc8101339d8526c63}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000380)={'syztnl1\x00', 0x0}) r0 = socket(0x10, 0x803, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000180)=[@in={0x2, 0x4e22, @multicast1}, @in={0x2, 0x4e24, @loopback}, @in6={0xa, 0x4e23, 0xc64, @dev={0xfe, 0x80, '\x00', 0x12}, 0x5}, @in={0x2, 0x4e20, @multicast1}], 0x4c) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x3c}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c0000005e0001002dbd7000ffdbdf25f3000000", @ANYRES32=r1], 0x1c}}, 0x8000) 1.739470493s ago: executing program 7 (id=3854): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001200)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x80, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000040)='sys_enter\x00', r2}, 0x10) syz_clone(0x80, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 14) 1.708822824s ago: executing program 1 (id=3855): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000300)=@newlink={0x40, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @local}]}, 0x40}, 0x1, 0x0, 0x0, 0x60c0}, 0x0) ioctl$EVIOCGSW(r1, 0x8040451b, &(0x7f0000000280)=""/113) io_setup(0x281, &(0x7f0000000100)=0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x8, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) io_submit(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r3, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000ac0)={0x0}, 0x18) syz_mount_image$ext4(&(0x7f0000000040)='ext3\x00', &(0x7f00000004c0)='./file0\x00', 0x400e, &(0x7f0000000300)={[{@i_version}, {@nombcache}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@lazytime}, {@block_validity}, {@sysvgroups}]}, 0x1, 0x42f, &(0x7f0000000940)="$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") io_submit(r2, 0x1, &(0x7f0000000a00)=[&(0x7f0000001900)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x401}]) bpf$MAP_CREATE(0x0, &(0x7f0000000c80)=ANY=[@ANYBLOB="170000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sysinfo(0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) vmsplice(r4, &(0x7f00000005c0)=[{&(0x7f0000001cc0)="b70cdbd771882612c450d694c9dd7d7f28d237e84e2780ca6428d132e03f188fff6bd9f85ead7e68f90830db9295022700491841f4a15a000aa4e29ac23601041ec521aa0ea8044f23feb74151693f228ba89f0a43385617bc7930f30a52ca91d02c64bd39d3d581abe9089b2284f876f9c58c124aba7a28700efcb0588ff4ab54a62c0c64fd577d85f5f753ec15281cf73fc37442b0a5ca4a1818cb01590d6415b1e9fda6c7d63cd293d7cc7ca5581041a2736e95b9b0322880b5fd7f27c0d4a59df8101b755fd6cc495963381c8a95d5d605b8ef4800b47091c8749f9e8e9fce163e46db0f7c0e4d0d3a621e3c999453e95aaa56090f220b220c50b31b9d6af722477ab1cda6d561156d85c658a3cd42d777314d154bf31bb61918ac7de8bfad7a5825be505af82806130e8dd03816b86086cc3361bf3a2a0cf6c18b7c84503477660ef5a0bf92d8169c43df1d7bb140652c799a4ac292b94fcea7f0c74413791879104e2bc9b414eda6c74f3625299f67d03e3ef58eeae5ca5fb029005ffa0fe23fb541bc24a57e9c6d8169702998273789ee8c9f08132ab9f76c02a6696c3ad68bf7a772d8be6b1840cfad2184edcf10bd5620f51657239e8eb49b8e77c1483dcc3dc04aeb6cae2922af4be346d52f2983dd5330cbef40b3207432ea6d2a6d2ffb0c3440c78add8395da089aa80e21d8692b16582edea583b73266fd1ab37abc02aa89310ed72a827153f1cbba0f76147a09977724706fdcd68ac168ceb433eba816f55bb5069924c0a6c59b1116e27de7938b835c467dbd9be1843913748e5a2e6f6621bf4944045d82b5124d23fa1d87e780b54a6955a51e47fbf36432be1b3d9d01c05d86e390e497856e476ce5b101c837cef62edce520860667c5259478602febbc5e87f216a6f1452b285f44282333569cbd2f49613730b86a74485e49e1979690ee2c11e1fb49d642c9f515d9e0cf30fe8995379b0b4b2177b2541a34cef72af676c2402b3ab03993047186d45016f83a735b7babda7b3e408f9a7b5c36e7daaaad51e437060c8a5a07646a31a43ebdda0b12a3f64f963315febebf0ad610f2ec9500717c4f33d8bf0e5b55ed2a976339643658df80f07bb29f5fac6f25957ef64ef1bac93f0ea64bfea48b38a4985ff610259762996044543bdf2c", 0x341}], 0x1, 0xa) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x1) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000002000000018002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000000085000000700000009500"/81], &(0x7f0000000040)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000fd0f000002"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1c, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000004000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f9ffffffb703000000080000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x31, '\x00', 0x0, @fallback, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='sys_enter\x00', r7}, 0x10) lremovexattr(0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r5}, 0x18) r8 = creat(&(0x7f00000000c0)='./file0\x00', 0xc9028ba210c11f88) ioctl$BLKTRACESETUP(r8, 0xc0481273, &(0x7f0000000000)={'\x00', 0x8, 0x2, 0x80400, 0x2004, 0x800}) fcntl$setpipe(r4, 0x407, 0x6) 1.467113907s ago: executing program 3 (id=3857): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = open(&(0x7f0000000080)='./file1\x00', 0x4000, 0x4) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r1, 0x660c) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001400)={{r4}, 0x0, &(0x7f00000013c0)}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000840), &(0x7f0000000880)=r2}, 0x20) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000a00)={0xffffffffffffffff, 0x20, &(0x7f0000000980)={&(0x7f0000000e00)=""/206, 0xce, 0x0, &(0x7f0000001f80)=""/252, 0xfc}}, 0x10) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000002080)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x10001, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3, 0x3, 0x0, @void, @value, @void, @value}, 0x50) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000002180)={0x12, 0x22, &(0x7f0000000cc0)=@raw=[@exit, @btf_id={0x18, 0x8, 0x3, 0x0, 0x1}, @ringbuf_query, @map_idx_val={0x18, 0x1, 0x6, 0x0, 0xd, 0x0, 0x0, 0x0, 0x3}, @map_idx={0x18, 0xb, 0x5, 0x0, 0xe}, @printk={@d, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x4}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xb}}, @map_fd={0x18, 0xb, 0x1, 0x0, r5}, @cb_func={0x18, 0xb, 0x4, 0x0, 0x5}, @map_idx={0x18, 0x3, 0x5, 0x0, 0x10}], &(0x7f0000000900)='GPL\x00', 0x5, 0x1000, &(0x7f0000000f80)=""/4096, 0x0, 0x42, '\x00', 0x0, @cgroup_sock_addr=0x1f, 0xffffffffffffffff, 0x8, &(0x7f0000000940)={0x3, 0x1}, 0x8, 0x10, 0x0, 0x0, r6, r3, 0x1, &(0x7f0000002100)=[0xffffffffffffffff, 0x1, r7, 0xffffffffffffffff, 0xffffffffffffffff, r8, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000002140)=[{0x5, 0x3, 0xe, 0x7}], 0x10, 0x5, @void, @value}, 0x94) syz_open_dev$usbfs(&(0x7f0000000340), 0x800000001f7, 0x82) ioctl$USBDEVFS_CONTROL(0xffffffffffffffff, 0xc0185500, &(0x7f0000000040)={0x23, 0x3, 0x17, 0xf, 0x0, 0x2, 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000020000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000093850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0xfe80, &(0x7f00000005c0)=[{&(0x7f0000000940)="2e00000010008188e6b62aa73772cc9f1ba1f8482e0000005e140602000000000e000a001000000002800000128c", 0x2e}], 0x1}, 0x0) 1.466676858s ago: executing program 4 (id=3858): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYRES32=r0, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = openat$selinux_access(0xffffffffffffff9c, &(0x7f0000000600), 0x2, 0x0) write$selinux_access(r1, &(0x7f0000000740)=ANY=[@ANYBLOB="73797374656d5f753a6f626a6563745f723a6c645f736f5f7429704a122f7362696e2f6468636c69656e742030"], 0x41) 1.382307859s ago: executing program 4 (id=3859): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="190000000400000008000000fd"], 0x48) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f0000000980)='sys_enter\x00', r0}, 0x10) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0x5}, 0x10) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r2, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) recvmmsg$unix(r1, &(0x7f00000043c0)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000002c0)=""/240, 0xf0}], 0x1}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000640)=""/187, 0xbb}], 0x1}}], 0x2, 0x0, 0x0) 1.382057509s ago: executing program 7 (id=3860): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x9) connect$netlink(r1, &(0x7f0000000580)=@proc={0x10, 0x0, 0x25dfdbfe, 0x800000}, 0xc) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x31, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = io_uring_setup(0x1283, &(0x7f0000000080)={0x0, 0xeac, 0x2000, 0x1, 0x1ad}) io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, &(0x7f0000000100)=[{&(0x7f0000000d00)=""/165, 0xa5}, {&(0x7f0000000b00)=""/231, 0xe7}, {&(0x7f0000000dc0)=""/194, 0xc2}], 0x3) syz_clone(0x62800800, 0x0, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) gettid() syz_genetlink_get_family_id$tipc(&(0x7f0000000040), r1) ioctl$SIOCPNENABLEPIPE(r2, 0x89ed, 0x0) fgetxattr(r1, &(0x7f00000002c0)=@known='com.apple.FinderInfo\x00', &(0x7f0000001500)=""/75, 0x4b) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x3c, 0xb, &(0x7f0000000a40)=ANY=[], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x51, '\x00', 0x0, @fallback=0x3e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0xa, @void, @value}, 0x94) syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000240)='./file1\x00', 0x2000000, &(0x7f0000000ac0)=ANY=[], 0x7e, 0x67a, &(0x7f0000002600)="$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") munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x108) getdents64(r6, &(0x7f0000000f80)=""/4096, 0x1000) r7 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000940)='xen_cpu_set_ldt\x00'}, 0x18) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'veth1_vlan\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYRES64=r7], 0x48) r9 = socket$kcm(0xa, 0x2, 0x0) sendmsg$inet(r9, &(0x7f00000005c0)={&(0x7f0000001000)={0x2, 0x4e24, @local}, 0x10, 0x0, 0x0, &(0x7f00000005c0)=ANY=[], 0x28}, 0x0) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000e57a5c370000000000850000006d00000000000000", @ANYBLOB="39936c2c60846aa46ed51b1fd34dac5058e971391d12be5beb2a8edb2d86dabc60e78b85421fb69e1b26a663c3fd49ae93b86d38712b5ded3eba94bdc360c7ba1a81c32a84ed6db9e9deda3d084ae62bb35a5ec3465ffbedb9747113a5f0d3bb6ac9e6ff048d9632d4632590e94854b2c522916f4c2fb293941a80d012d6d9be327b43bb83fd620da42fa8529a091b98bab2f2f80496ca6856d58ec85213f4cc04918fc20a730fade2", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r10}, 0x10) r11 = socket(0x1, 0x2, 0x0) bind$unix(r11, &(0x7f00000001c0)=@file={0x1, './file1\x00'}, 0x6e) accept4$unix(r11, 0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="400000001000030500000000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="000000000000000020001202800800010000ffcb00000000000000006d654dd8711a585928ed1bc380fb3c7b8cd3d24e5d847d7aea3cac1550893aa6edacbd446bce9630a5fd98a805e13359b1a6b4fb8fdf68a589abb617fa5e95d79fa4ab7fb262dd916ab63c7a7df5c54e00205b571936f5eec0799c22bf464982967e42683266a900bdf60459107db2376d516b1d038fe867b808d3d2bbac203a6dbe45e7ff", @ANYRES32=r5, @ANYBLOB="c157d69b81dacfc2", @ANYRES32=r8, @ANYBLOB], 0x40}}, 0x0) 1.377455509s ago: executing program 3 (id=3861): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/resume', 0x169a82, 0x109) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000002000000000000000000018190000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0xfffffffffffffe90, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000e41f20207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000deab44f4850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000240)='sys_enter\x00', r6}, 0x18) time(0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020100008500000043000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r7}, 0x10) socket$inet6(0xa, 0x3, 0x3c) socket$packet(0x11, 0x2, 0x300) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000021c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r8}, 0x10) io_uring_setup(0x7d98, &(0x7f00000003c0)={0x0, 0xdf07, 0x2, 0x2}) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r9}, 0x10) sendfile(r0, r0, 0x0, 0xb) 1.198909331s ago: executing program 4 (id=3862): getpgrp(0x0) r0 = epoll_create1(0x80000) clock_gettime(0x0, &(0x7f0000000340)={0x0, 0x0}) epoll_pwait2(r0, &(0x7f0000000300)=[{}], 0x1, &(0x7f0000000380)={r1, r2+60000000}, &(0x7f0000000400)={[0x2]}, 0x8) socket$nl_netfilter(0x10, 0x3, 0xc) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x400, &(0x7f0000000000)={[{@grpjquota}, {@stripe={'stripe', 0x3d, 0x2}}]}, 0x1, 0x4bb, &(0x7f0000000580)="$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") r3 = socket$xdp(0x2c, 0x3, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) keyctl$unlink(0x9, 0x0, 0xfffffffffffffffe) setsockopt$XDP_TX_RING(r3, 0x11b, 0x3, &(0x7f00000003c0)=0x800, 0x4) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000030000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sys_enter\x00', r4}, 0x10) memfd_secret(0x0) close(r3) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000a80)='kfree\x00', 0xffffffffffffffff, 0x0, 0x80000000000000}, 0x18) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x103042, 0x8) r6 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x187842, 0x147) r7 = open(&(0x7f0000000080)='./file1\x00', 0x10b942, 0x140) sendfile(r7, r6, 0x0, 0x80000000) getresgid(&(0x7f0000000200), &(0x7f0000000280), &(0x7f00000002c0)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00'}, 0x10) ioctl$EXT4_IOC_MOVE_EXT(r6, 0xc028660f, &(0x7f0000000040)={0x3920e, r5, 0x5, 0x1, 0x9000000, 0x6}) 700.426719ms ago: executing program 1 (id=3866): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000400)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_VENDOR(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001740)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010700000000000000a6670000000800c300000000000800c4"], 0x2c}}, 0x0) 699.361249ms ago: executing program 1 (id=3867): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000005000000020000000010"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000000f80)={0x0, 0x0, 0x0}, 0x0) recvmsg(r2, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000600)=""/203, 0xcb}], 0x1}, 0x0) 473.140603ms ago: executing program 0 (id=3868): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0}, 0x18) r0 = syz_open_dev$vcsa(&(0x7f0000000040), 0xa5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0xb, 0x0, &(0x7f0000000200)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000b00)=@usbdevfs_disconnect={0xfffffffc}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000300)={'tunl0\x00', &(0x7f0000000240)={'syztnl1\x00', 0x0, 0x40, 0x20, 0x74b9, 0x81, {{0x13, 0x4, 0x0, 0x23, 0x4c, 0x67, 0x0, 0x8, 0x29, 0x0, @loopback, @empty, {[@rr={0x7, 0x3, 0x5}, @ssrr={0x89, 0x2b, 0x8c, [@local, @initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, @remote, @broadcast, @remote, @initdev={0xac, 0x1e, 0x1, 0x0}, @local, @private=0xa010101]}, @timestamp={0x44, 0x8, 0x14, 0x0, 0x5, [0x60]}, @noop]}}}}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f00000003c0)={'gretap0\x00', &(0x7f0000000340)={'syztnl0\x00', r1, 0x8, 0x8000, 0x100, 0xf70, {{0x11, 0x4, 0x0, 0x7, 0x44, 0x67, 0x0, 0x37, 0x6, 0x0, @empty, @loopback, {[@ra={0x94, 0x4, 0x1}, @rr={0x7, 0x7, 0xd5, [@empty]}, @timestamp={0x44, 0x24, 0xaa, 0x0, 0x7, [0x91, 0x800, 0xb1, 0x7ff, 0x0, 0x7, 0xfffffff8, 0x4]}]}}}}}) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)) perf_event_open(&(0x7f0000000680)={0x3, 0x80, 0x3f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4224, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={&(0x7f0000000540), 0x6}, 0x4102, 0x8ffffffff, 0x10006, 0x6, 0x4, 0x7e0, 0xfff9, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3f, 0x1, 0x0, 0x9, 0x0, 0x2, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0x1}, 0x10, 0x0, 0x0, 0x0, 0x9, 0x1fe, 0x6, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x80000, 0x0, 0x0, 0x0, 0x66, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r2}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffb}]}) migrate_pages(0x0, 0xf7fffffffffffffc, &(0x7f0000000080)=0xfffffffe, 0x0) 472.716983ms ago: executing program 0 (id=3869): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000400)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_VENDOR(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001740)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010700000000000000a6670000000800c300000000000800c4"], 0x2c}}, 0x0) (fail_nth: 2) 207.870897ms ago: executing program 0 (id=3870): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)={0x1b, 0x0, 0x0, 0x1, 0x0, 0x1, 0xfffff9ab, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x0, 0x3, 0x0, @void, @value, @void, @value}, 0x50) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) (async) r2 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000140), 0x8) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1c, 0xfffffffb, 0x5, 0x4, 0x30000, r0, 0x7f97, '\x00', r1, 0xffffffffffffffff, 0x3, 0x5, 0x3, 0x0, @void, @value, @value=r2}, 0x50) (async) r4 = socket$rxrpc(0x21, 0x2, 0xa) setsockopt$RXRPC_SECURITY_KEYRING(r4, 0x110, 0x2, &(0x7f0000000180)='\x00', 0x1) ioctl$sock_FIOGETOWN(r4, 0x8903, &(0x7f00000001c0)=0x0) fcntl$lock(r4, 0x0, &(0x7f0000000200)={0x0, 0x4, 0x3, 0x7, r5}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f0000000240)={{0x1, 0x1, 0x18, r2, {0x8}}, './file0\x00'}) ioctl$SG_IO(r6, 0x2285, &(0x7f0000000480)={0x53, 0xfffffffffffffffd, 0x0, 0x4, @scatter={0x1, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000280)=""/12, 0xc}]}, &(0x7f0000000300), &(0x7f0000000340)=""/240, 0x6, 0x0, 0x1, &(0x7f0000000440)}) (async) socket(0x2, 0x800, 0xb46a) (async) socket$nl_route(0x10, 0x3, 0x0) r7 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$BLKTRACESTOP(r6, 0x1275, 0x0) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r3, 0xffffffffffffffff}, &(0x7f0000000540), &(0x7f0000000580)=r7}, 0x20) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000600)={r6, 0xffffffffffffffff}, 0x4) r10 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000780), 0x2, 0x0) (async) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000980)={r6, 0x20, &(0x7f0000000940)={&(0x7f0000000840)=""/18, 0x12, 0x0, &(0x7f0000000880)=""/184, 0xb8}}, 0x10) (async) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r6, 0xc018937a, &(0x7f00000009c0)={{0x1, 0x1, 0x18, r2, {0x4bba}}, './file0\x00'}) r13 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000a00)={0xffffffffffffffff, 0x30}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x8, 0xd, &(0x7f0000000640)=@framed={{0x18, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x98}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r8}}, @map_val={0x18, 0x6, 0x2, 0x0, r9, 0x0, 0x0, 0x0, 0x1}, @alu={0x4, 0x1, 0xb, 0x9, 0x2, 0xc, 0xffffffffffffffff}, @initr0={0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xffffff01}]}, &(0x7f00000006c0)='syzkaller\x00', 0x2, 0x66, &(0x7f0000000700)=""/102, 0x41100, 0x8, '\x00', r1, @fallback=0x36, r10, 0x8, &(0x7f00000007c0)={0x1, 0x3}, 0x8, 0x10, &(0x7f0000000800)={0x5, 0xe, 0x100, 0xfffffff7}, 0x10, r11, r12, 0x2, &(0x7f0000000a40)=[r13, r3, r0, r3], &(0x7f0000000a80)=[{0x1, 0x1, 0x10, 0x5}, {0x4, 0x3, 0xb, 0x1}], 0x10, 0x4, @void, @value}, 0x94) socket$nl_route(0x10, 0x3, 0x0) (async) pipe2$9p(&(0x7f0000000c00)={0xffffffffffffffff}, 0x82080) mount$9p_fd(0x0, &(0x7f0000000b80)='./file0\x00', &(0x7f0000000bc0), 0x2a4090, &(0x7f0000000c40)={'trans=fd,', {'rfdno', 0x3d, r14}, 0x2c, {'wfdno', 0x3d, r13}, 0x2c, {[{@cachetag={'cachetag', 0x3d, '/selinux/policy\x00'}}, {@noxattr}, {@cache_readahead}, {@version_u}], [{@dont_hash}]}}) syz_emit_ethernet(0xcd, &(0x7f0000000d00)={@random="9ace68edc4ee", @random="b784f70d496f", @val={@void, {0x8100, 0x6}}, {@x25={0x805, {0x0, 0x3, 0x1b, "a88960df10fd339a7ef0d4c5d3a366738351bb63b7c734b2c99cacd451258fd0c0cc3917d3f5583b97ef08e7bb070cb67492ac513edaab740cab621fab45b623a9f33a613353cee60664ce6bcbef27929f57b0ca270b1cc58de7c4eb7b46b0a39bf3c7193936d24af186520916d144c7123de994db1f4c5f0abe9a9887a81c568358d9e5fca5bdb1740546d84bf3d0f976dd3d789476a3ccbfbc1c79cd28423b476da9572613d76dfe0ec420a7f22575caa32a35aaffda7c"}}}}, &(0x7f0000000e00)={0x0, 0x1, [0xd6, 0xa45, 0xd83, 0xbb6]}) (async) r15 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000e80), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r10, &(0x7f0000000f40)={&(0x7f0000000e40)={0x10, 0x0, 0x0, 0xfa3b7c9ef1e96177}, 0xc, &(0x7f0000000f00)={&(0x7f0000000ec0)={0x14, r15, 0x8, 0x70bd2b, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x8004}, 0x800) (async) r16 = add_key$keyring(&(0x7f0000001080), &(0x7f00000010c0)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) add_key(&(0x7f0000000f80)='trusted\x00', &(0x7f0000000fc0)={'syz', 0x0}, &(0x7f0000001000)="cfdda53eee9cde5be988776c4e4a492932f2bda558568634c3b69513ba66293da02a946a28b82879b3104128901be2cc4bfcbfdc7443f2748e8f511905993a27d73bfd5e62e51c103b7f05058bb48dcc863cf3056b4ce177582ff9712debda29ebc0df7f9e6c4fd4448093ea62e13f540fb745", 0x73, r16) (async) socket$nl_route(0x10, 0x3, 0x0) 206.866116ms ago: executing program 7 (id=3871): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000380)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@dioread_lock}, {@data_err_ignore}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4007b1}}, {@data_err_ignore}, {@grpquota}, {@nobh}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000001080)="$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") r0 = open(&(0x7f0000000040)='./bus\x00', 0x10d27e, 0x24) fallocate(r0, 0x0, 0x0, 0x1001f0) fallocate(r0, 0x3, 0x0, 0x7750) bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, 0x0, 0x0, 0xffffffffffffffff) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000100)={[{}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x8}}, {@dioread_lock}, {@jqfmt_vfsv0}, {@noquota}, {@delalloc}, {@grpquota}, {@nobh}, {@user_xattr}, {@grpquota}, {@dioread_nolock}]}, 0x1, 0x55a, &(0x7f0000000b80)="$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") openat(0xffffffffffffff9c, 0x0, 0x105042, 0x1db) r3 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0) getdents64(r3, 0xfffffffffffffffe, 0x29) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000780)={&(0x7f0000000400)='locks_get_lock_context\x00', r2}, 0x3d) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000600)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) syz_emit_ethernet(0xc2, &(0x7f0000000240)={@local, @random="7f0a00030011", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0xb4, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x2802, {0x26, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f, 0x0, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp={0x44, 0x14, 0xe3, 0x0, 0x2, [0x0, 0x4, 0x2f, 0x4]}, @rr={0x7, 0x13, 0xb4, [@private=0xa010101, @empty, @remote, @remote]}, @timestamp_prespec={0x44, 0x1c, 0x57, 0x3, 0x0, [{@private=0xa010101, 0xc6e}, {@private=0xa010102, 0x7}, {@multicast2, 0x8}]}, @ra={0x94, 0x4, 0x1}, @rr={0x7, 0x13, 0xf4, [@remote, @multicast2, @multicast1, @broadcast]}, @lsrr={0x83, 0x13, 0x5, [@local, @private=0xa010102, @loopback, @local]}, @timestamp_prespec={0x44, 0x14, 0x75, 0x3, 0x8, [{@multicast1, 0x3642}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4}]}]}}}}}}}, 0x0) fcntl$lock(r4, 0x26, &(0x7f0000000000)) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r5}, 0x10) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000700)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01040000000000000000010000000900010073797a300000000058000000030a01040000000000000000010000000900030073797a300000000028000480080002400000000008000140000000051400030076657468315f746f5f626174616476000900010073797a3000000000040008"], 0xa0}, 0x1, 0x0, 0x0, 0x10}, 0x0) 173.771057ms ago: executing program 0 (id=3872): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="190000000400000008000000fd"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f0000000980)='sys_enter\x00', r0}, 0x10) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0x5}, 0x10) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r2, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) recvmmsg$unix(r1, &(0x7f00000043c0)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000002c0)=""/240, 0xf0}], 0x1}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000640)=""/187, 0xbb}], 0x1}}], 0x2, 0x0, 0x0) 173.024037ms ago: executing program 4 (id=3873): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000100060000000077f2ab26850000002300000095", @ANYRES64], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='kfree\x00', r0}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a40)=ANY=[@ANYBLOB="140000001000010000000000000007000000000a60000000060a0b0400000000000000000200000034000480200001800e000100636f6e6e6c696d69740000000c000280080001400000000010000180090001006c617374000000000900010073797a30000000000900020073797a32"], 0x88}}, 0x0) r2 = mq_open(&(0x7f0000001140)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\xe0\x9d\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xdf\x15\f]\x15\xf5#G\xce\xaf\x88U\xfa\x80\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7\'\f\f\x957\xc9}\r\xa6\xaa\x0f\xca\x96\xeb', 0x42, 0x40, 0x0) mq_unlink(&(0x7f0000000000)='eth0\x00') r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_COALESCE(r3, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x14, r4, 0x4, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void, @void}}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x80c1}, 0xc040) close(r2) 116.758478ms ago: executing program 3 (id=3874): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x1) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x2) 83.265339ms ago: executing program 0 (id=3875): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a00)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = dup2(r2, r2) faccessat2(r3, &(0x7f0000000880)='\x00', 0x1, 0x1100) 32.149779ms ago: executing program 0 (id=3876): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000440)=ANY=[@ANYRES16], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000280)='sched_switch\x00'}, 0x18) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1803000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000800b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) syz_emit_ethernet(0x3a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c20000000800"], 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x6, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0}, 0x18) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) recvmmsg(0xffffffffffffffff, &(0x7f00000008c0)=[{{0x0, 0x0, 0x0}, 0x8}], 0x1, 0x10000, 0x0) 17.99907ms ago: executing program 4 (id=3877): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70200001400001cb7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_WIPHY(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)={0x14, 0x0, 0x301, 0x0, 0x25dfdbfe, {{}, {@void, @val={0x8}, @val={0xc, 0x99, {0x2, 0x3}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x88d1}, 0x40) 294.83µs ago: executing program 7 (id=3878): r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x601c2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x8031, 0xffffffffffffffff, 0xc6ed4000) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="1e000000085db50000000f00000001040000009064bcf8eeb844475c66d84b499994060ffa8ffe02360026d9610d56761cf9aa1adcee882ca4b872c80d341ff095d889820ee43ea0c8bb3eddff52b6be484013b0fd95ba979674e173704cfb8d0658e58d591f16eb502df03c1723df3663d36acb129dcbb0e73dc2a581d3eadce96f43d6914655ef9fd0057d3c7b25b3d562909f5f3b3a6f5e601b02d582f45d6bbb9f87cd318752c0a0e420260d58341cd79e93452ebe", @ANYRES32=r0, @ANYBLOB="0f00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0200000002000000020000000200000000000000", @ANYBLOB='\x00\x00\x00\x00'], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xf, &(0x7f00000009c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000720311598500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r2}, 0x10) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) getrandom(0x0, 0x0, 0x0) ftruncate(r0, 0x8800000) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) write$cgroup_int(r0, &(0x7f0000000180)=0x3, 0x12) sendfile(r3, r0, 0x0, 0x558410e9) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0xffffffffffffff31) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x7a23c507e44309d5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000900)={&(0x7f0000000380)='kmem_cache_free\x00', r4}, 0x18) socket$inet_smc(0x2b, 0x1, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x93, @loopback}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f0000847fff)='X', 0x1, 0x20000890, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback, 0x4}, 0x1c) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000004900)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="00c2acb90fb104c0d7dd04b8938d3b79b33788b29d44ba2f94ecc45a7e1550296ffa143620", 0x25}], 0x1}}], 0x1, 0x11) socket$inet6(0x10, 0x3, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'bridge_slave_0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x41000, 0x0, '\x00', r5, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 0s ago: executing program 4 (id=3879): modify_ldt$write(0x1, &(0x7f0000000040)={0x8, 0xffffffffffffffff}, 0x10) modify_ldt$write2(0x11, &(0x7f0000000000)={0x1, 0x1000, 0x2000, 0x1, 0x3, 0x0, 0x1, 0x1}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0a000000020000000900"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000400)='kfree\x00', r0}, 0x18) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000040)="3700000013000318680907070000000f0000ff3f13000000170a001700000000040037000d00030001362564aa58b9a6c011f6bbf44dc4", 0x37}], 0x1) r2 = socket$inet6(0xa, 0x80002, 0x0) perf_event_open(0x0, 0x0, 0xffffffbfffffffff, 0xffffffffffffffff, 0x8) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x2a8, 0x0, 0x940c, 0x3002, 0x0, 0x2c0, 0x328, 0x3d8, 0x3d8, 0x328, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0xa8, 0xf0, 0x4001}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@loopback, 'virt_wifi0\x00'}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x1, 0xbe, {0x565159d7}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x308) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) syz_clone3(&(0x7f0000001240)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0xa, 0x2) kernel console output (not intermixed with test programs): 7295 subj=root:sysadm_r:sysadm_t pid=13712 comm="syz.3.3236" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0f092fd169 code=0x7ffc0000 [ 242.817968][T13711] EXT4-fs: error: could not find journal device path [ 242.855786][ T29] audit: type=1326 audit(18763440.502:20743): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13712 comm="syz.3.3236" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f092fd169 code=0x7ffc0000 [ 242.880149][ T29] audit: type=1326 audit(18763440.502:20744): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13712 comm="syz.3.3236" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0f092fd169 code=0x7ffc0000 [ 242.883266][T13703] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3235'. [ 242.903769][ T29] audit: type=1326 audit(18763440.502:20745): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13712 comm="syz.3.3236" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f092fd169 code=0x7ffc0000 [ 242.937301][ T29] audit: type=1326 audit(18763440.502:20746): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13712 comm="syz.3.3236" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0f092fd169 code=0x7ffc0000 [ 242.997735][T13716] loop4: detected capacity change from 0 to 2048 [ 243.065175][T13716] EXT4-fs: Ignoring removed mblk_io_submit option [ 243.123494][T13718] netlink: 'syz.1.3240': attribute type 10 has an invalid length. [ 243.134190][T13718] team0: Device hsr_slave_0 failed to register rx_handler [ 243.172278][ T29] audit: type=1326 audit(18763440.532:20747): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13712 comm="syz.3.3236" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f092fd169 code=0x7ffc0000 [ 243.196491][ T29] audit: type=1326 audit(18763440.532:20748): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13712 comm="syz.3.3236" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0f092fd169 code=0x7ffc0000 [ 243.220861][ T29] audit: type=1326 audit(18763440.532:20749): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13712 comm="syz.3.3236" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f092fd169 code=0x7ffc0000 [ 243.238840][T13725] rdma_op ffff88810220cd80 conn xmit_rdma 0000000000000000 [ 243.244331][ T29] audit: type=1326 audit(18763440.532:20750): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13712 comm="syz.3.3236" exe="/root/syz-executor" sig=0 arch=c000003e syscall=150 compat=0 ip=0x7f0f092fd169 code=0x7ffc0000 [ 243.282100][T13716] EXT4-fs error (device loop4): ext4_read_inline_dir:1566: inode #12: block 5: comm syz.4.3239: path /33/file1/file0: bad entry in directory: rec_len is smaller than minimal - offset=40, inode=0, rec_len=0, size=80 fake=0 [ 243.426315][T13733] loop4: detected capacity change from 0 to 256 [ 243.470835][T13737] netlink: 92 bytes leftover after parsing attributes in process `syz.0.3248'. [ 243.698726][T13747] netlink: 'syz.3.3252': attribute type 10 has an invalid length. [ 243.724611][T13747] team0: Device hsr_slave_0 failed to register rx_handler [ 243.824973][T13751] loop3: detected capacity change from 0 to 512 [ 243.832663][T13751] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 244.007562][T13763] loop7: detected capacity change from 0 to 2048 [ 244.014700][T13763] EXT4-fs: Ignoring removed mblk_io_submit option [ 244.034896][T13763] EXT4-fs error (device loop7): ext4_read_inline_dir:1566: inode #12: block 5: comm syz.7.3257: path /308/file1/file0: bad entry in directory: rec_len is smaller than minimal - offset=40, inode=0, rec_len=0, size=80 fake=0 [ 244.104177][T13774] netlink: 'syz.7.3263': attribute type 10 has an invalid length. [ 244.112620][T13774] team0: Device hsr_slave_0 failed to register rx_handler [ 244.163458][T13782] netlink: 'syz.7.3266': attribute type 10 has an invalid length. [ 244.172049][T13782] team0: Device hsr_slave_0 failed to register rx_handler [ 244.206573][T13787] FAULT_INJECTION: forcing a failure. [ 244.206573][T13787] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 244.220415][T13787] CPU: 1 UID: 0 PID: 13787 Comm: syz.0.3268 Not tainted 6.14.0-syzkaller #0 [ 244.220520][T13787] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 244.220536][T13787] Call Trace: [ 244.220544][T13787] [ 244.220586][T13787] dump_stack_lvl+0xf2/0x150 [ 244.220615][T13787] dump_stack+0x15/0x1a [ 244.220637][T13787] should_fail_ex+0x24a/0x260 [ 244.220676][T13787] should_fail+0xb/0x10 [ 244.220779][T13787] should_fail_usercopy+0x1a/0x20 [ 244.220826][T13787] _copy_from_user+0x1c/0xa0 [ 244.220919][T13787] move_addr_to_kernel+0x82/0x120 [ 244.220963][T13787] __sys_connect+0x67/0x1b0 [ 244.220990][T13787] __x64_sys_connect+0x41/0x50 [ 244.221011][T13787] x64_sys_call+0x22a7/0x2dc0 [ 244.221100][T13787] do_syscall_64+0xc9/0x1c0 [ 244.221184][T13787] ? clear_bhb_loop+0x55/0xb0 [ 244.221218][T13787] ? clear_bhb_loop+0x55/0xb0 [ 244.221253][T13787] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 244.221288][T13787] RIP: 0033:0x7f84517ed169 [ 244.221312][T13787] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 244.221334][T13787] RSP: 002b:00007f844fe57038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 244.221355][T13787] RAX: ffffffffffffffda RBX: 00007f8451a05fa0 RCX: 00007f84517ed169 [ 244.221371][T13787] RDX: 0000000000000010 RSI: 0000200000000140 RDI: 0000000000000008 [ 244.221446][T13787] RBP: 00007f844fe57090 R08: 0000000000000000 R09: 0000000000000000 [ 244.221519][T13787] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 244.221532][T13787] R13: 0000000000000000 R14: 00007f8451a05fa0 R15: 00007ffcc85a8548 [ 244.221555][T13787] [ 244.444473][T13793] loop1: detected capacity change from 0 to 512 [ 244.450285][T13790] Falling back ldisc for ttyS3. [ 244.453196][T13793] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 244.468510][T13793] EXT4-fs (loop1): 1 truncate cleaned up [ 244.509367][T13802] netlink: 'syz.7.3275': attribute type 10 has an invalid length. [ 244.524192][T13802] team0: Device hsr_slave_0 failed to register rx_handler [ 244.761072][T13829] loop3: detected capacity change from 0 to 256 [ 244.808746][T13830] loop7: detected capacity change from 0 to 512 [ 244.828644][T13830] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 244.989242][T13836] netlink: 'syz.1.3286': attribute type 10 has an invalid length. [ 244.997807][T13836] team0: Device hsr_slave_0 failed to register rx_handler [ 245.025193][T13838] netlink: 'syz.4.3287': attribute type 10 has an invalid length. [ 245.035963][T13838] team0: Device hsr_slave_0 failed to register rx_handler [ 245.083806][T13844] netlink: 'syz.4.3290': attribute type 10 has an invalid length. [ 245.092943][T13844] team0: Device hsr_slave_0 failed to register rx_handler [ 245.157655][T13840] loop1: detected capacity change from 0 to 1024 [ 245.173650][T13849] loop4: detected capacity change from 0 to 512 [ 245.181416][T13849] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 245.342954][T13860] loop1: detected capacity change from 0 to 4096 [ 245.356203][T13860] EXT4-fs error (device loop1): ext4_do_update_inode:5154: inode #15: comm +!: corrupted inode contents [ 245.368735][T13860] EXT4-fs error (device loop1): ext4_dirty_inode:6042: inode #15: comm +!: mark_inode_dirty error [ 245.379808][T13860] EXT4-fs error (device loop1): ext4_do_update_inode:5154: inode #15: comm +!: corrupted inode contents [ 245.392602][T13860] EXT4-fs error (device loop1): __ext4_ext_dirty:207: inode #15: comm +!: mark_inode_dirty error [ 245.403765][T13860] EXT4-fs error (device loop1): ext4_do_update_inode:5154: inode #15: comm +!: corrupted inode contents [ 245.415526][T13860] EXT4-fs error (device loop1): __ext4_ext_dirty:207: inode #15: comm +!: mark_inode_dirty error [ 245.427756][T13860] EXT4-fs error (device loop1): ext4_do_update_inode:5154: inode #15: comm +!: corrupted inode contents [ 245.439357][T13860] EXT4-fs error (device loop1): ext4_truncate:4240: inode #15: comm +!: mark_inode_dirty error [ 245.451185][T13860] EXT4-fs error (device loop1) in ext4_setattr:5569: Corrupt filesystem [ 245.478980][T13863] FAULT_INJECTION: forcing a failure. [ 245.478980][T13863] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 245.492747][T13863] CPU: 1 UID: 0 PID: 13863 Comm: syz.0.3295 Not tainted 6.14.0-syzkaller #0 [ 245.492882][T13863] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 245.492894][T13863] Call Trace: [ 245.492902][T13863] [ 245.492910][T13863] dump_stack_lvl+0xf2/0x150 [ 245.492938][T13863] dump_stack+0x15/0x1a [ 245.492971][T13863] should_fail_ex+0x24a/0x260 [ 245.493008][T13863] should_fail+0xb/0x10 [ 245.493072][T13863] should_fail_usercopy+0x1a/0x20 [ 245.493104][T13863] strncpy_from_user+0x25/0x210 [ 245.493190][T13863] ? kmem_cache_alloc_noprof+0x18e/0x320 [ 245.493286][T13863] ? getname_flags+0x81/0x3b0 [ 245.493350][T13863] getname_flags+0xb0/0x3b0 [ 245.493392][T13863] getname+0x17/0x20 [ 245.493412][T13863] vfs_fstatat+0x41/0x130 [ 245.493435][T13863] __se_sys_newfstatat+0x58/0x260 [ 245.493462][T13863] ? __fget_files+0x17c/0x1c0 [ 245.493544][T13863] ? fput+0x1c4/0x200 [ 245.493568][T13863] ? ksys_write+0x176/0x1b0 [ 245.493602][T13863] __x64_sys_newfstatat+0x55/0x70 [ 245.493642][T13863] x64_sys_call+0x236d/0x2dc0 [ 245.493671][T13863] do_syscall_64+0xc9/0x1c0 [ 245.493711][T13863] ? clear_bhb_loop+0x55/0xb0 [ 245.493819][T13863] ? clear_bhb_loop+0x55/0xb0 [ 245.493876][T13863] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 245.493991][T13863] RIP: 0033:0x7f84517ed169 [ 245.494010][T13863] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 245.494032][T13863] RSP: 002b:00007f844fe57038 EFLAGS: 00000246 ORIG_RAX: 0000000000000106 [ 245.494055][T13863] RAX: ffffffffffffffda RBX: 00007f8451a05fa0 RCX: 00007f84517ed169 [ 245.494111][T13863] RDX: 00002000000002c0 RSI: 0000200000000280 RDI: ffffffffffffff9c [ 245.494123][T13863] RBP: 00007f844fe57090 R08: 0000000000000000 R09: 0000000000000000 [ 245.494135][T13863] R10: 0000000000006000 R11: 0000000000000246 R12: 0000000000000001 [ 245.494146][T13863] R13: 0000000000000000 R14: 00007f8451a05fa0 R15: 00007ffcc85a8548 [ 245.494190][T13863] [ 245.754380][T13869] syz_tun: entered allmulticast mode [ 245.760493][T13868] syz_tun: left allmulticast mode [ 245.806971][T13872] loop3: detected capacity change from 0 to 512 [ 245.823490][T13872] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 245.843020][T13872] EXT4-fs (loop3): 1 truncate cleaned up [ 245.880632][T13880] loop3: detected capacity change from 0 to 512 [ 245.889368][T13880] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 245.902661][T13880] EXT4-fs (loop3): 1 truncate cleaned up [ 246.212140][T13898] loop1: detected capacity change from 0 to 512 [ 246.219364][T13898] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 246.233840][T13898] EXT4-fs (loop1): 1 truncate cleaned up [ 246.400541][T13901] loop7: detected capacity change from 0 to 2048 [ 246.407454][T13901] EXT4-fs: Ignoring removed mblk_io_submit option [ 246.419274][T13901] EXT4-fs error (device loop7): ext4_read_inline_dir:1566: inode #12: block 5: comm syz.7.3308: path /326/file1/file0: bad entry in directory: rec_len is smaller than minimal - offset=40, inode=0, rec_len=0, size=80 fake=0 [ 246.740032][T13907] loop7: detected capacity change from 0 to 128 [ 246.749489][T13907] loop7: detected capacity change from 0 to 128 [ 246.976013][T13930] rdma_op ffff888117c9f980 conn xmit_rdma 0000000000000000 [ 247.011339][T13933] loop1: detected capacity change from 0 to 2048 [ 247.042145][T13923] bridge_slave_1: left allmulticast mode [ 247.047924][T13923] bridge_slave_1: left promiscuous mode [ 247.053840][T13923] bridge0: port 2(bridge_slave_1) entered disabled state [ 247.061639][T13933] loop1: p1 < > p4 [ 247.069469][T13923] bridge_slave_0: left allmulticast mode [ 247.075264][T13923] bridge_slave_0: left promiscuous mode [ 247.081189][T13923] bridge0: port 1(bridge_slave_0) entered disabled state [ 247.091976][T13933] loop1: p4 size 8388608 extends beyond EOD, truncated [ 247.124542][T13936] loop3: detected capacity change from 0 to 4096 [ 247.139498][T13936] EXT4-fs error (device loop3): ext4_do_update_inode:5154: inode #15: comm +!: corrupted inode contents [ 247.152418][T13936] EXT4-fs error (device loop3): ext4_dirty_inode:6042: inode #15: comm +!: mark_inode_dirty error [ 247.171798][T13936] EXT4-fs error (device loop3): ext4_do_update_inode:5154: inode #15: comm +!: corrupted inode contents [ 247.187790][T13936] EXT4-fs error (device loop3): __ext4_ext_dirty:207: inode #15: comm +!: mark_inode_dirty error [ 247.204315][T13936] EXT4-fs error (device loop3): ext4_do_update_inode:5154: inode #15: comm +!: corrupted inode contents [ 247.216178][T13936] EXT4-fs error (device loop3): __ext4_ext_dirty:207: inode #15: comm +!: mark_inode_dirty error [ 247.229085][T13936] EXT4-fs error (device loop3): ext4_do_update_inode:5154: inode #15: comm +!: corrupted inode contents [ 247.242642][T13936] EXT4-fs error (device loop3): ext4_truncate:4240: inode #15: comm +!: mark_inode_dirty error [ 247.254283][T13936] EXT4-fs error (device loop3) in ext4_setattr:5569: Corrupt filesystem [ 247.498563][T13959] loop7: detected capacity change from 0 to 512 [ 247.505550][T13959] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 247.798938][ T29] kauditd_printk_skb: 802 callbacks suppressed [ 247.798957][ T29] audit: type=1326 audit(18763445.512:21553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13964 comm="syz.3.3331" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f092fd169 code=0x7ffc0000 [ 247.833342][ T29] audit: type=1326 audit(18763445.512:21554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13964 comm="syz.3.3331" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f092fd169 code=0x7ffc0000 [ 247.856834][ T29] audit: type=1326 audit(18763445.512:21555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13964 comm="syz.3.3331" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0f092fd169 code=0x7ffc0000 [ 247.856840][T13967] Falling back ldisc for ttyS3. [ 247.885822][ T29] audit: type=1326 audit(18763445.512:21556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13964 comm="syz.3.3331" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f092fd169 code=0x7ffc0000 [ 247.906330][T13969] loop3: detected capacity change from 0 to 512 [ 247.909302][ T29] audit: type=1326 audit(18763445.512:21557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13964 comm="syz.3.3331" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0f092fd169 code=0x7ffc0000 [ 247.927387][T13969] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 247.939619][ T29] audit: type=1326 audit(18763445.512:21558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13964 comm="syz.3.3331" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f092fd169 code=0x7ffc0000 [ 247.972877][ T29] audit: type=1326 audit(18763445.512:21559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13964 comm="syz.3.3331" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7f0f092fd169 code=0x7ffc0000 [ 247.996507][ T29] audit: type=1326 audit(18763445.512:21560): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13964 comm="syz.3.3331" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f092fd169 code=0x7ffc0000 [ 248.020159][ T29] audit: type=1326 audit(18763445.512:21561): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13964 comm="syz.3.3331" exe="/root/syz-executor" sig=0 arch=c000003e syscall=441 compat=0 ip=0x7f0f092fd169 code=0x7ffc0000 [ 248.044337][ T29] audit: type=1326 audit(18763445.512:21562): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13964 comm="syz.3.3331" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f092fd169 code=0x7ffc0000 [ 248.082380][T13969] EXT4-fs (loop3): 1 truncate cleaned up [ 248.262817][T13981] netlink: 'syz.4.3336': attribute type 13 has an invalid length. [ 248.316496][T13983] __nla_validate_parse: 8 callbacks suppressed [ 248.316514][T13983] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3337'. [ 248.369297][T13989] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3337'. [ 248.376698][T13981] bridge0: port 2(bridge_slave_1) entered disabled state [ 248.385560][T13981] bridge0: port 1(bridge_slave_0) entered disabled state [ 248.517825][T13981] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 248.562439][T13981] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 248.621579][T13981] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 248.631518][T13981] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 248.640795][T13981] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 248.649731][T13981] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 248.651723][T13999] loop1: detected capacity change from 0 to 512 [ 248.673942][T13993] syz_tun: entered allmulticast mode [ 248.681606][T13987] syz_tun: left allmulticast mode [ 248.705798][T13999] EXT4-fs error (device loop1): ext4_do_update_inode:5154: inode #19: comm syz.1.3340: corrupted inode contents [ 248.720637][T13999] EXT4-fs error (device loop1): ext4_dirty_inode:6042: inode #19: comm syz.1.3340: mark_inode_dirty error [ 248.733320][T13999] EXT4-fs error (device loop1): ext4_do_update_inode:5154: inode #19: comm syz.1.3340: corrupted inode contents [ 248.755974][T13999] EXT4-fs error (device loop1): ext4_xattr_delete_inode:3006: inode #19: comm syz.1.3340: mark_inode_dirty error [ 248.769348][T13999] EXT4-fs error (device loop1): ext4_xattr_delete_inode:3009: inode #19: comm syz.1.3340: mark inode dirty (error -117) [ 248.783723][T13999] EXT4-fs warning (device loop1): ext4_evict_inode:276: xattr delete (err -117) [ 248.864720][T14014] loop3: detected capacity change from 0 to 1024 [ 248.866158][T14021] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3347'. [ 248.880853][T14021] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3347'. [ 248.889795][T14021] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3347'. [ 248.904693][T14021] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3347'. [ 248.914243][T14021] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3347'. [ 248.923256][T14021] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3347'. [ 248.945192][T14021] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3347'. [ 248.954131][T14021] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3347'. [ 249.073204][T14031] netlink: 'syz.4.3349': attribute type 10 has an invalid length. [ 249.083259][T14031] team0: Device hsr_slave_0 failed to register rx_handler [ 249.129700][T14037] netlink: 'syz.4.3352': attribute type 10 has an invalid length. [ 249.140135][T14037] team0: Device hsr_slave_0 failed to register rx_handler [ 249.222565][T14045] netlink: 'syz.4.3353': attribute type 13 has an invalid length. [ 249.410099][T14061] Falling back ldisc for ttyS3. [ 249.445022][T14058] loop7: detected capacity change from 0 to 1024 [ 249.485170][T14070] netlink: 'syz.1.3361': attribute type 13 has an invalid length. [ 249.506414][T14073] netlink: 'syz.7.3363': attribute type 10 has an invalid length. [ 249.545131][T14070] bridge0: port 2(bridge_slave_1) entered disabled state [ 249.552462][T14070] bridge0: port 1(bridge_slave_0) entered disabled state [ 249.597853][T14070] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 249.609743][T14070] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 249.653524][T14070] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 249.662559][T14070] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 249.671739][T14070] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 249.681574][T14070] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 249.695843][T14073] team0: Device hsr_slave_0 failed to register rx_handler [ 249.750956][T14077] Falling back ldisc for ttyS3. [ 249.786725][T14089] block device autoloading is deprecated and will be removed. [ 249.795079][T14089] syz.0.3368: attempt to access beyond end of device [ 249.795079][T14089] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 249.852671][T14092] loop7: detected capacity change from 0 to 4096 [ 249.875993][T14100] loop3: detected capacity change from 0 to 512 [ 249.883309][T14092] EXT4-fs error (device loop7): ext4_do_update_inode:5154: inode #15: comm +!: corrupted inode contents [ 249.895278][T14092] EXT4-fs error (device loop7): ext4_dirty_inode:6042: inode #15: comm +!: mark_inode_dirty error [ 249.907069][T14092] EXT4-fs error (device loop7): ext4_do_update_inode:5154: inode #15: comm +!: corrupted inode contents [ 249.919148][T14092] EXT4-fs error (device loop7): __ext4_ext_dirty:207: inode #15: comm +!: mark_inode_dirty error [ 249.933577][T14092] EXT4-fs error (device loop7): ext4_do_update_inode:5154: inode #15: comm +!: corrupted inode contents [ 249.956635][T14104] rdma_op ffff88812eb52180 conn xmit_rdma 0000000000000000 [ 249.964391][T14092] EXT4-fs error (device loop7): __ext4_ext_dirty:207: inode #15: comm +!: mark_inode_dirty error [ 249.977808][T14092] EXT4-fs error (device loop7): ext4_do_update_inode:5154: inode #15: comm +!: corrupted inode contents [ 250.001921][T14092] EXT4-fs error (device loop7): ext4_truncate:4240: inode #15: comm +!: mark_inode_dirty error [ 250.015476][T14092] EXT4-fs error (device loop7) in ext4_setattr:5569: Corrupt filesystem [ 250.070215][T14110] Falling back ldisc for ttyS3. [ 250.109186][T14108] loop0: detected capacity change from 0 to 1024 [ 250.194707][T14128] $Hÿ: renamed from bond0 [ 250.211193][T14128] $Hÿ: entered promiscuous mode [ 250.216285][T14128] bond_slave_0: entered promiscuous mode [ 250.222193][T14128] bond_slave_1: entered promiscuous mode [ 250.305530][T14136] netlink: 'syz.4.3382': attribute type 10 has an invalid length. [ 250.314133][T14136] team0: Device hsr_slave_0 failed to register rx_handler [ 250.322166][T14138] rdma_op ffff888129a52980 conn xmit_rdma 0000000000000000 [ 250.419179][T14148] netlink: 'syz.4.3385': attribute type 13 has an invalid length. [ 250.453163][T14150] netlink: 'syz.1.3387': attribute type 3 has an invalid length. [ 250.522537][T14150] loop1: detected capacity change from 0 to 128 [ 250.617834][T14159] syz.1.3387: attempt to access beyond end of device [ 250.617834][T14159] loop1: rw=2049, sector=153, nr_sectors = 8 limit=128 [ 250.636464][T14161] rdma_op ffff88811853c180 conn xmit_rdma 0000000000000000 [ 250.654251][T14159] syz.1.3387: attempt to access beyond end of device [ 250.654251][T14159] loop1: rw=2049, sector=169, nr_sectors = 8 limit=128 [ 250.669285][T14159] syz.1.3387: attempt to access beyond end of device [ 250.669285][T14159] loop1: rw=2049, sector=185, nr_sectors = 8 limit=128 [ 250.690794][T14159] syz.1.3387: attempt to access beyond end of device [ 250.690794][T14159] loop1: rw=2049, sector=201, nr_sectors = 8 limit=128 [ 250.705147][T14159] syz.1.3387: attempt to access beyond end of device [ 250.705147][T14159] loop1: rw=2049, sector=217, nr_sectors = 8 limit=128 [ 250.718952][T14159] syz.1.3387: attempt to access beyond end of device [ 250.718952][T14159] loop1: rw=2049, sector=233, nr_sectors = 8 limit=128 [ 250.733103][T14159] syz.1.3387: attempt to access beyond end of device [ 250.733103][T14159] loop1: rw=2049, sector=249, nr_sectors = 8 limit=128 [ 250.746631][T14159] syz.1.3387: attempt to access beyond end of device [ 250.746631][T14159] loop1: rw=2049, sector=265, nr_sectors = 8 limit=128 [ 250.760797][T14159] syz.1.3387: attempt to access beyond end of device [ 250.760797][T14159] loop1: rw=2049, sector=281, nr_sectors = 8 limit=128 [ 250.780130][T14163] Falling back ldisc for ttyS3. [ 250.853189][T14177] rdma_op ffff88812eb52180 conn xmit_rdma 0000000000000000 [ 250.884633][T14181] loop3: detected capacity change from 0 to 1024 [ 250.892204][T14181] journal_path: Non-blockdev passed as './file1' [ 250.898647][T14181] EXT4-fs: error: could not find journal device path [ 250.932712][T14185] netlink: 'syz.1.3395': attribute type 13 has an invalid length. [ 250.977766][T14186] loop3: detected capacity change from 0 to 512 [ 250.984618][T14186] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 251.033168][T14191] program syz.0.3398 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 251.195044][T14199] IPv6: addrconf: prefix option has invalid lifetime [ 251.219424][T14201] rdma_op ffff888110763180 conn xmit_rdma 0000000000000000 [ 251.243204][T14203] syz_tun: entered allmulticast mode [ 251.249318][T14202] syz_tun: left allmulticast mode [ 251.310130][T14205] Falling back ldisc for ttyS3. [ 251.354534][T14209] bond0: option fail_over_mac: unable to set because the bond device has slaves [ 251.545008][T14221] loop4: detected capacity change from 0 to 512 [ 251.552364][T14221] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 251.561259][T14220] loop7: detected capacity change from 0 to 512 [ 251.568531][T14220] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 251.590302][T14220] EXT4-fs (loop7): 1 truncate cleaned up [ 251.703671][T14226] FAULT_INJECTION: forcing a failure. [ 251.703671][T14226] name failslab, interval 1, probability 0, space 0, times 0 [ 251.716390][T14226] CPU: 0 UID: 0 PID: 14226 Comm: syz.7.3410 Not tainted 6.14.0-syzkaller #0 [ 251.716416][T14226] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 251.716431][T14226] Call Trace: [ 251.716438][T14226] [ 251.716444][T14226] dump_stack_lvl+0xf2/0x150 [ 251.716472][T14226] dump_stack+0x15/0x1a [ 251.716493][T14226] should_fail_ex+0x24a/0x260 [ 251.716525][T14226] should_failslab+0x8f/0xb0 [ 251.716560][T14226] kmem_cache_alloc_noprof+0x52/0x320 [ 251.716586][T14226] ? mas_alloc_nodes+0x1e3/0x490 [ 251.716630][T14226] mas_alloc_nodes+0x1e3/0x490 [ 251.716670][T14226] mas_preallocate+0x44a/0x650 [ 251.716709][T14226] __split_vma+0x244/0x6a0 [ 251.716734][T14226] vma_modify+0x105/0x200 [ 251.716752][T14226] vma_modify_policy+0xeb/0x120 [ 251.716779][T14226] mbind_range+0x1d8/0x490 [ 251.716808][T14226] __se_sys_mbind+0x95c/0x11c0 [ 251.716843][T14226] __x64_sys_mbind+0x78/0x90 [ 251.716868][T14226] x64_sys_call+0x2662/0x2dc0 [ 251.716899][T14226] do_syscall_64+0xc9/0x1c0 [ 251.716931][T14226] ? clear_bhb_loop+0x55/0xb0 [ 251.716958][T14226] ? clear_bhb_loop+0x55/0xb0 [ 251.716990][T14226] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 251.717022][T14226] RIP: 0033:0x7f348416d169 [ 251.717040][T14226] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 251.717060][T14226] RSP: 002b:00007f34827d7038 EFLAGS: 00000246 ORIG_RAX: 00000000000000ed [ 251.717082][T14226] RAX: ffffffffffffffda RBX: 00007f3484385fa0 RCX: 00007f348416d169 [ 251.717097][T14226] RDX: 0000000000000004 RSI: 0000000000800000 RDI: 0000200000001000 [ 251.717112][T14226] RBP: 00007f34827d7090 R08: 0000000000000000 R09: 0000000000000002 [ 251.717126][T14226] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 251.717140][T14226] R13: 0000000000000000 R14: 00007f3484385fa0 R15: 00007ffe005198a8 [ 251.717161][T14226] [ 251.949606][T11770] EXT4-fs unmount: 64 callbacks suppressed [ 251.949639][T11770] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 251.990144][T14231] loop3: detected capacity change from 0 to 2048 [ 251.996874][T14231] EXT4-fs: Ignoring removed mblk_io_submit option [ 252.016509][T14236] rdma_op ffff888110763180 conn xmit_rdma 0000000000000000 [ 252.040227][T14231] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 252.070931][T14231] EXT4-fs error (device loop3): ext4_read_inline_dir:1566: inode #12: block 5: comm syz.3.3412: path /153/file1/file0: bad entry in directory: rec_len is smaller than minimal - offset=40, inode=0, rec_len=0, size=80 fake=0 [ 252.124435][T11770] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 252.159725][T14247] loop7: detected capacity change from 0 to 512 [ 252.160360][T14238] Falling back ldisc for ttyS3. [ 252.185666][T14247] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 252.240657][ T8590] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 252.337432][T12858] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 252.366554][T14273] rdma_op ffff88812eb53980 conn xmit_rdma 0000000000000000 [ 252.412258][T14278] loop3: detected capacity change from 0 to 2048 [ 252.419060][T14278] EXT4-fs: Ignoring removed mblk_io_submit option [ 252.432762][T14281] rdma_op ffff88812eb53980 conn xmit_rdma 0000000000000000 [ 252.456940][T14278] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 252.483858][T14268] netdevsim netdevsim7 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 252.493013][T14268] netdevsim netdevsim7 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 252.497780][T14278] EXT4-fs error (device loop3): ext4_read_inline_dir:1566: inode #12: block 5: comm syz.3.3427: path /159/file1/file0: bad entry in directory: rec_len is smaller than minimal - offset=40, inode=0, rec_len=0, size=80 fake=0 [ 252.502827][T14268] netdevsim netdevsim7 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 252.533105][T14268] netdevsim netdevsim7 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 252.563716][T11770] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 252.590225][T14289] Falling back ldisc for ttyS3. [ 252.742345][T14298] loop3: detected capacity change from 0 to 1024 [ 252.781670][T14298] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 252.799945][ T29] kauditd_printk_skb: 661 callbacks suppressed [ 252.799964][ T29] audit: type=1326 audit(18763450.512:22224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14297 comm="syz.3.3433" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f092fd169 code=0x7ffc0000 [ 252.832591][ T29] audit: type=1326 audit(18763450.522:22225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14297 comm="syz.3.3433" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f092fd169 code=0x7ffc0000 [ 252.833376][T14305] bridge_slave_1: left allmulticast mode [ 252.856185][ T29] audit: type=1326 audit(18763450.522:22226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14297 comm="syz.3.3433" exe="/root/syz-executor" sig=0 arch=c000003e syscall=254 compat=0 ip=0x7f0f092fd169 code=0x7ffc0000 [ 252.862487][T14305] bridge_slave_1: left promiscuous mode [ 252.885144][ T29] audit: type=1326 audit(18763450.522:22227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14297 comm="syz.3.3433" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f092fd169 code=0x7ffc0000 [ 252.885177][ T29] audit: type=1326 audit(18763450.522:22228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14297 comm="syz.3.3433" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7f0f092fd169 code=0x7ffc0000 [ 252.891891][T14305] bridge0: port 2(bridge_slave_1) entered disabled state [ 252.914314][ T29] audit: type=1326 audit(18763450.522:22229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14297 comm="syz.3.3433" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f092fd169 code=0x7ffc0000 [ 252.914419][ T29] audit: type=1326 audit(18763450.522:22230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14297 comm="syz.3.3433" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f092fd169 code=0x7ffc0000 [ 252.992003][T14310] loop4: detected capacity change from 0 to 4096 [ 252.999438][T14305] bridge_slave_0: left allmulticast mode [ 253.006051][T14305] bridge_slave_0: left promiscuous mode [ 253.011894][T14305] bridge0: port 1(bridge_slave_0) entered disabled state [ 253.020599][T11770] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 253.035309][T14310] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 253.083529][T14310] EXT4-fs error (device loop4): ext4_do_update_inode:5154: inode #15: comm +!: corrupted inode contents [ 253.124555][T14310] EXT4-fs error (device loop4): ext4_dirty_inode:6042: inode #15: comm +!: mark_inode_dirty error [ 253.127550][T14317] rdma_op ffff888110762980 conn xmit_rdma 0000000000000000 [ 253.136636][T14310] EXT4-fs error (device loop4): ext4_do_update_inode:5154: inode #15: comm +!: corrupted inode contents [ 253.156179][T14310] EXT4-fs error (device loop4): __ext4_ext_dirty:207: inode #15: comm +!: mark_inode_dirty error [ 253.183024][T14310] EXT4-fs error (device loop4): ext4_do_update_inode:5154: inode #15: comm +!: corrupted inode contents [ 253.210137][T14310] EXT4-fs error (device loop4): __ext4_ext_dirty:207: inode #15: comm +!: mark_inode_dirty error [ 253.226587][T14320] loop3: detected capacity change from 0 to 4096 [ 253.239151][T14324] loop7: detected capacity change from 0 to 512 [ 253.248071][T14324] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 253.250108][ T29] audit: type=1326 audit(18763450.962:22231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14321 comm="syz.0.3441" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84517ed169 code=0x7ffc0000 [ 253.280028][ T29] audit: type=1326 audit(18763450.962:22232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14321 comm="syz.0.3441" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f84517ed169 code=0x7ffc0000 [ 253.303527][ T29] audit: type=1326 audit(18763450.972:22233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14321 comm="syz.0.3441" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84517ed169 code=0x7ffc0000 [ 253.306580][T14310] EXT4-fs error (device loop4): ext4_do_update_inode:5154: inode #15: comm +!: corrupted inode contents [ 253.333953][T14320] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 253.353375][T14310] EXT4-fs error (device loop4): ext4_truncate:4240: inode #15: comm +!: mark_inode_dirty error [ 253.357601][T14326] __nla_validate_parse: 78 callbacks suppressed [ 253.357620][T14326] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3443'. [ 253.364447][T14310] EXT4-fs error (device loop4) in ext4_setattr:5569: Corrupt filesystem [ 253.388040][T14326] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3443'. [ 253.398476][T14326] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3443'. [ 253.408845][T14320] EXT4-fs error (device loop3): ext4_do_update_inode:5154: inode #15: comm +!: corrupted inode contents [ 253.421559][T14320] EXT4-fs error (device loop3): ext4_dirty_inode:6042: inode #15: comm +!: mark_inode_dirty error [ 253.422110][T14324] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 253.434996][T14320] EXT4-fs error (device loop3): ext4_do_update_inode:5154: inode #15: comm +!: corrupted inode contents [ 253.457371][T14320] EXT4-fs error (device loop3): __ext4_ext_dirty:207: inode #15: comm +!: mark_inode_dirty error [ 253.468650][T14320] EXT4-fs error (device loop3): ext4_do_update_inode:5154: inode #15: comm +!: corrupted inode contents [ 253.469642][T14326] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3443'. [ 253.489435][T14326] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3443'. [ 253.492093][T14320] EXT4-fs error (device loop3): __ext4_ext_dirty:207: inode #15: comm +!: mark_inode_dirty error [ 253.500246][T14326] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3443'. [ 253.519739][T14320] EXT4-fs error (device loop3): ext4_do_update_inode:5154: inode #15: comm +!: corrupted inode contents [ 253.532745][T14320] EXT4-fs error (device loop3): ext4_truncate:4240: inode #15: comm +!: mark_inode_dirty error [ 253.547156][ T8590] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 253.549958][T14320] EXT4-fs error (device loop3) in ext4_setattr:5569: Corrupt filesystem [ 253.568232][T12858] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 253.603750][T14340] loop1: detected capacity change from 0 to 512 [ 253.637487][T14340] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 253.687476][T14354] loop4: detected capacity change from 0 to 512 [ 253.716411][T13177] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 253.729682][T14354] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 253.777256][T14354] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 253.815534][T14366] rdma_op ffff888110762980 conn xmit_rdma 0000000000000000 [ 253.861529][T14368] loop1: detected capacity change from 0 to 2048 [ 253.868317][T14368] EXT4-fs: Ignoring removed mblk_io_submit option [ 253.886568][T14368] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 253.903135][T14368] EXT4-fs error (device loop1): ext4_read_inline_dir:1566: inode #12: block 5: comm syz.1.3454: path /60/file1/file0: bad entry in directory: rec_len is smaller than minimal - offset=40, inode=0, rec_len=0, size=80 fake=0 [ 253.928211][T11770] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 253.955247][T14374] loop7: detected capacity change from 0 to 512 [ 253.962915][T14374] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 253.973218][T13177] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 254.005631][T14379] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3458'. [ 254.014644][T14379] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3458'. [ 254.024784][T14376] Falling back ldisc for ttyS3. [ 254.029288][T14379] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3458'. [ 254.032442][T14374] EXT4-fs (loop7): 1 truncate cleaned up [ 254.053234][T14374] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 254.073740][T14387] FAULT_INJECTION: forcing a failure. [ 254.073740][T14387] name failslab, interval 1, probability 0, space 0, times 0 [ 254.087113][T14387] CPU: 1 UID: 0 PID: 14387 Comm: syz.0.3461 Not tainted 6.14.0-syzkaller #0 [ 254.087142][T14387] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 254.087179][T14387] Call Trace: [ 254.087186][T14387] [ 254.087195][T14387] dump_stack_lvl+0xf2/0x150 [ 254.087284][T14387] dump_stack+0x15/0x1a [ 254.087341][T14387] should_fail_ex+0x24a/0x260 [ 254.087375][T14387] ? audit_log_d_path+0x8e/0x150 [ 254.087413][T14387] should_failslab+0x8f/0xb0 [ 254.087513][T14387] __kmalloc_cache_noprof+0x4e/0x320 [ 254.087545][T14387] audit_log_d_path+0x8e/0x150 [ 254.087587][T14387] audit_log_d_path_exe+0x42/0x70 [ 254.087624][T14387] audit_log_task+0x1ec/0x250 [ 254.087663][T14387] audit_seccomp+0x68/0x130 [ 254.087745][T14387] __seccomp_filter+0x6fa/0x1180 [ 254.087782][T14387] __secure_computing+0x9f/0x1c0 [ 254.087807][T14387] syscall_trace_enter+0xd1/0x1f0 [ 254.087835][T14387] ? fpregs_assert_state_consistent+0x83/0xa0 [ 254.087933][T14387] do_syscall_64+0xaa/0x1c0 [ 254.087971][T14387] ? clear_bhb_loop+0x55/0xb0 [ 254.087998][T14387] ? clear_bhb_loop+0x55/0xb0 [ 254.088088][T14387] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 254.088122][T14387] RIP: 0033:0x7f84517ebb7c [ 254.088140][T14387] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 254.088241][T14387] RSP: 002b:00007f844fe57030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 254.088264][T14387] RAX: ffffffffffffffda RBX: 00007f8451a05fa0 RCX: 00007f84517ebb7c [ 254.088279][T14387] RDX: 000000000000000f RSI: 00007f844fe570a0 RDI: 0000000000000006 [ 254.088293][T14387] RBP: 00007f844fe57090 R08: 0000000000000000 R09: 0000000000000002 [ 254.088307][T14387] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 254.088321][T14387] R13: 0000000000000000 R14: 00007f8451a05fa0 R15: 00007ffcc85a8548 [ 254.088343][T14387] [ 254.293325][T14379] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3458'. [ 254.323520][ T8590] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 254.350404][T14398] rdma_op ffff888110763180 conn xmit_rdma 0000000000000000 [ 254.399426][T14389] loop3: detected capacity change from 0 to 1024 [ 254.431812][T14389] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 254.476335][T14409] loop7: detected capacity change from 0 to 2048 [ 254.483229][T14409] EXT4-fs: Ignoring removed mblk_io_submit option [ 254.496871][T12858] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 254.512675][T14409] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 254.536681][T14409] EXT4-fs error (device loop7): ext4_read_inline_dir:1566: inode #12: block 5: comm syz.7.3468: path /362/file1/file0: bad entry in directory: rec_len is smaller than minimal - offset=40, inode=0, rec_len=0, size=80 fake=0 [ 254.582640][T14415] validate_nla: 1 callbacks suppressed [ 254.582658][T14415] netlink: 'syz.4.3471': attribute type 10 has an invalid length. [ 254.596583][T14415] team0: Device hsr_slave_0 failed to register rx_handler [ 254.688906][ T8590] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 254.888040][T14437] FAULT_INJECTION: forcing a failure. [ 254.888040][T14437] name failslab, interval 1, probability 0, space 0, times 0 [ 254.901335][T14437] CPU: 1 UID: 0 PID: 14437 Comm: syz.1.3479 Not tainted 6.14.0-syzkaller #0 [ 254.901364][T14437] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 254.901413][T14437] Call Trace: [ 254.901422][T14437] [ 254.901432][T14437] dump_stack_lvl+0xf2/0x150 [ 254.901467][T14437] dump_stack+0x15/0x1a [ 254.901493][T14437] should_fail_ex+0x24a/0x260 [ 254.901540][T14437] should_failslab+0x8f/0xb0 [ 254.901573][T14437] kmem_cache_alloc_node_noprof+0x59/0x320 [ 254.901601][T14437] ? __alloc_skb+0x10b/0x310 [ 254.901659][T14437] __alloc_skb+0x10b/0x310 [ 254.901687][T14437] netlink_alloc_large_skb+0xad/0xe0 [ 254.901747][T14437] netlink_sendmsg+0x3b4/0x6e0 [ 254.901775][T14437] ? __pfx_netlink_sendmsg+0x10/0x10 [ 254.901798][T14437] __sock_sendmsg+0x140/0x180 [ 254.901839][T14437] sock_write_iter+0x15e/0x1a0 [ 254.901925][T14437] do_iter_readv_writev+0x403/0x4b0 [ 254.901966][T14437] vfs_writev+0x2d9/0x880 [ 254.901990][T14437] ? get_pid_task+0x8e/0xc0 [ 254.902099][T14437] ? proc_fail_nth_write+0x12a/0x150 [ 254.902152][T14437] do_writev+0xf4/0x220 [ 254.902177][T14437] __x64_sys_writev+0x45/0x50 [ 254.902210][T14437] x64_sys_call+0x1fab/0x2dc0 [ 254.902254][T14437] do_syscall_64+0xc9/0x1c0 [ 254.902293][T14437] ? clear_bhb_loop+0x55/0xb0 [ 254.902320][T14437] ? clear_bhb_loop+0x55/0xb0 [ 254.902348][T14437] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 254.902427][T14437] RIP: 0033:0x7f9d20fcd169 [ 254.902445][T14437] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 254.902463][T14437] RSP: 002b:00007f9d1f637038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 254.902481][T14437] RAX: ffffffffffffffda RBX: 00007f9d211e5fa0 RCX: 00007f9d20fcd169 [ 254.902494][T14437] RDX: 0000000000000001 RSI: 00002000000000c0 RDI: 0000000000000005 [ 254.902505][T14437] RBP: 00007f9d1f637090 R08: 0000000000000000 R09: 0000000000000000 [ 254.902533][T14437] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 254.902547][T14437] R13: 0000000000000000 R14: 00007f9d211e5fa0 R15: 00007ffc7ad1ba28 [ 254.902568][T14437] [ 254.907555][T14439] loop7: detected capacity change from 0 to 512 [ 255.127206][T14439] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 255.147348][T14439] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 255.161771][T11770] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 255.177697][T14445] loop1: detected capacity change from 0 to 512 [ 255.193296][T14445] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 255.193650][T14447] 9p: Unknown uid 00000000004294967295 [ 255.236620][T13177] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 255.259329][T14454] netlink: 'syz.1.3482': attribute type 10 has an invalid length. [ 255.270334][T14454] team0: Device hsr_slave_0 failed to register rx_handler [ 255.305479][T14456] loop1: detected capacity change from 0 to 2048 [ 255.312635][T14456] EXT4-fs: Ignoring removed mblk_io_submit option [ 255.322554][T14456] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 255.337060][T14456] EXT4-fs error (device loop1): ext4_read_inline_dir:1566: inode #12: block 5: comm syz.1.3483: path /68/file1/file0: bad entry in directory: rec_len is smaller than minimal - offset=40, inode=0, rec_len=0, size=80 fake=0 [ 255.377517][T13177] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 255.464208][T14471] loop1: detected capacity change from 0 to 1024 [ 255.479326][T14472] netlink: 'syz.3.3487': attribute type 13 has an invalid length. [ 255.488192][T14471] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 255.507711][T14471] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 255.536305][T13177] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 255.558519][T14479] loop1: detected capacity change from 0 to 128 [ 255.628888][T14475] loop4: detected capacity change from 0 to 1024 [ 255.643430][T14475] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 255.658652][T14487] loop1: detected capacity change from 0 to 512 [ 255.671890][T14487] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 255.697067][ T8590] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 255.709349][T14487] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 255.743070][T14492] netlink: 'syz.7.3494': attribute type 10 has an invalid length. [ 255.751776][T14492] team0: Device hsr_slave_0 failed to register rx_handler [ 255.923914][T14505] loop7: detected capacity change from 0 to 1024 [ 255.931295][T14505] EXT4-fs (loop7): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 255.941117][T14505] EXT4-fs (loop7): group descriptors corrupted! [ 256.220124][T14510] Falling back ldisc for ttyS3. [ 256.299161][T14514] FAULT_INJECTION: forcing a failure. [ 256.299161][T14514] name failslab, interval 1, probability 0, space 0, times 0 [ 256.312548][T14514] CPU: 0 UID: 0 PID: 14514 Comm: syz.3.3504 Not tainted 6.14.0-syzkaller #0 [ 256.312577][T14514] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 256.312592][T14514] Call Trace: [ 256.312599][T14514] [ 256.312652][T14514] dump_stack_lvl+0xf2/0x150 [ 256.312686][T14514] dump_stack+0x15/0x1a [ 256.312713][T14514] should_fail_ex+0x24a/0x260 [ 256.312814][T14514] should_failslab+0x8f/0xb0 [ 256.312849][T14514] kmem_cache_alloc_noprof+0x52/0x320 [ 256.312874][T14514] ? dup_fd+0x3a/0x580 [ 256.312932][T14514] dup_fd+0x3a/0x580 [ 256.312958][T14514] ? __fget_files+0x17c/0x1c0 [ 256.313044][T14514] ksys_unshare+0x33b/0x6e0 [ 256.313089][T14514] __x64_sys_unshare+0x1f/0x30 [ 256.313122][T14514] x64_sys_call+0x1a3e/0x2dc0 [ 256.313201][T14514] do_syscall_64+0xc9/0x1c0 [ 256.313233][T14514] ? clear_bhb_loop+0x55/0xb0 [ 256.313261][T14514] ? clear_bhb_loop+0x55/0xb0 [ 256.313366][T14514] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 256.313446][T14514] RIP: 0033:0x7f0f092fd169 [ 256.313464][T14514] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 256.313535][T14514] RSP: 002b:00007f0f07967038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 256.313558][T14514] RAX: ffffffffffffffda RBX: 00007f0f09515fa0 RCX: 00007f0f092fd169 [ 256.313572][T14514] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020040400 [ 256.313584][T14514] RBP: 00007f0f07967090 R08: 0000000000000000 R09: 0000000000000000 [ 256.313596][T14514] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 256.313608][T14514] R13: 0000000000000000 R14: 00007f0f09515fa0 R15: 00007ffdccf96998 [ 256.313705][T14514] [ 256.514721][T14518] xt_hashlimit: overflow, try lower: 18446744073709551615/7 [ 256.529465][T12858] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 256.552488][T13177] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 256.597655][T14534] netlink: 'syz.7.3513': attribute type 10 has an invalid length. [ 256.606517][T14534] team0: Device hsr_slave_0 failed to register rx_handler [ 256.631468][T14531] netlink: 'syz.0.3512': attribute type 13 has an invalid length. [ 256.733404][T14531] bridge0: port 2(bridge_slave_1) entered disabled state [ 256.740741][T14531] bridge0: port 1(bridge_slave_0) entered disabled state [ 256.753432][T14544] loop3: detected capacity change from 0 to 512 [ 256.761860][T14544] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 256.809399][T14531] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 256.819712][T14531] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 256.846597][T14549] netlink: 'syz.1.3515': attribute type 13 has an invalid length. [ 256.865753][T14532] loop4: detected capacity change from 0 to 128 [ 256.881166][T14544] EXT4-fs (loop3): 1 truncate cleaned up [ 256.887511][T14544] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 256.946865][T14531] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 256.956252][T14531] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 256.965473][T14531] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 256.974412][T14531] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 257.024101][T11770] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 257.239535][T14557] loop7: detected capacity change from 0 to 1024 [ 257.252369][T14557] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 257.538693][T14583] loop4: detected capacity change from 0 to 512 [ 257.562278][T14583] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 257.615950][T12858] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 257.653994][T14594] loop1: detected capacity change from 0 to 512 [ 257.671561][T14594] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 257.711717][T14594] EXT4-fs (loop1): 1 truncate cleaned up [ 257.718860][T14596] loop4: detected capacity change from 0 to 512 [ 257.732842][T14594] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 257.748795][T14596] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 257.792613][T14596] EXT4-fs (loop4): 1 truncate cleaned up [ 257.800541][T14596] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 258.150646][ T8590] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 258.289963][ T29] kauditd_printk_skb: 1036 callbacks suppressed [ 258.289980][ T29] audit: type=1326 audit(18763455.992:23270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14607 comm="syz.3.3536" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0f092fd169 code=0x0 [ 258.319298][ T29] audit: type=1326 audit(18763455.992:23271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14605 comm="syz.0.3535" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84517ed169 code=0x7ffc0000 [ 258.342760][ T29] audit: type=1326 audit(18763455.992:23272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14605 comm="syz.0.3535" exe="/root/syz-executor" sig=0 arch=c000003e syscall=194 compat=0 ip=0x7f84517ed169 code=0x7ffc0000 [ 258.366316][ T29] audit: type=1326 audit(18763455.992:23273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14605 comm="syz.0.3535" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84517ed169 code=0x7ffc0000 [ 258.389810][ T29] audit: type=1326 audit(18763455.992:23274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14605 comm="syz.0.3535" exe="/root/syz-executor" sig=0 arch=c000003e syscall=272 compat=0 ip=0x7f84517ed169 code=0x7ffc0000 [ 258.398723][T14606] __nla_validate_parse: 19 callbacks suppressed [ 258.398742][T14606] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3535'. [ 258.413321][ T29] audit: type=1326 audit(18763455.992:23275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14605 comm="syz.0.3535" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84517ed169 code=0x7ffc0000 [ 258.452059][ T29] audit: type=1326 audit(18763456.002:23276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14605 comm="syz.0.3535" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f84517ed169 code=0x7ffc0000 [ 258.475560][ T29] audit: type=1326 audit(18763456.002:23277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14605 comm="syz.0.3535" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84517ed169 code=0x7ffc0000 [ 258.499168][ T29] audit: type=1326 audit(18763456.002:23278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14605 comm="syz.0.3535" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84517ed169 code=0x7ffc0000 [ 258.522645][ T29] audit: type=1326 audit(18763456.002:23279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14605 comm="syz.0.3535" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f84517ed169 code=0x7ffc0000 [ 258.555051][T13177] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 258.649732][T14620] netlink: 'syz.7.3539': attribute type 13 has an invalid length. [ 258.665508][T12858] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 258.693505][T14624] loop4: detected capacity change from 0 to 512 [ 258.722940][T14624] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 258.767651][T12858] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 258.791144][T14636] netlink: 'syz.4.3543': attribute type 10 has an invalid length. [ 258.799529][T14636] team0: Device hsr_slave_0 failed to register rx_handler [ 258.904544][T14642] netlink: 'syz.4.3545': attribute type 13 has an invalid length. [ 259.066169][T14646] loop3: detected capacity change from 0 to 164 [ 259.079731][T14646] bio_check_eod: 4 callbacks suppressed [ 259.079750][T14646] syz.3.3546: attempt to access beyond end of device [ 259.079750][T14646] loop3: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 259.101211][T14646] syz.3.3546: attempt to access beyond end of device [ 259.101211][T14646] loop3: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 259.141759][T14649] netlink: 3 bytes leftover after parsing attributes in process `syz.3.3547'. [ 259.151080][T14649] 0ªX¹¦À: renamed from caif0 [ 259.157809][T14649] 0ªX¹¦À: entered allmulticast mode [ 259.163189][T14649] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 259.319466][T14654] loop3: detected capacity change from 0 to 2048 [ 259.327826][T14654] EXT4-fs: Ignoring removed mblk_io_submit option [ 259.336696][T14654] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 259.353447][T14654] EXT4-fs error (device loop3): ext4_read_inline_dir:1566: inode #12: block 5: comm syz.3.3548: path /179/file1/file0: bad entry in directory: rec_len is smaller than minimal - offset=40, inode=0, rec_len=0, size=80 fake=0 [ 259.381982][T14657] team0: Device hsr_slave_0 failed to register rx_handler [ 259.407355][T11770] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 259.469468][T14666] loop3: detected capacity change from 0 to 512 [ 259.491746][T14666] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 259.508199][T14660] serio: Serial port ptm0 [ 259.531912][T14674] FAULT_INJECTION: forcing a failure. [ 259.531912][T14674] name failslab, interval 1, probability 0, space 0, times 0 [ 259.544623][T14674] CPU: 0 UID: 0 PID: 14674 Comm: syz.7.3554 Not tainted 6.14.0-syzkaller #0 [ 259.544651][T14674] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 259.544665][T14674] Call Trace: [ 259.544674][T14674] [ 259.544682][T14674] dump_stack_lvl+0xf2/0x150 [ 259.544770][T14674] dump_stack+0x15/0x1a [ 259.544796][T14674] should_fail_ex+0x24a/0x260 [ 259.544832][T14674] should_failslab+0x8f/0xb0 [ 259.544867][T14674] kmem_cache_alloc_noprof+0x52/0x320 [ 259.544895][T14674] ? getname_flags+0x81/0x3b0 [ 259.545008][T14674] ? should_fail_ex+0xd7/0x260 [ 259.545038][T14674] getname_flags+0x81/0x3b0 [ 259.545187][T14674] getname+0x17/0x20 [ 259.545207][T14674] path_setxattrat+0x23a/0x310 [ 259.545246][T14674] __x64_sys_lsetxattr+0x71/0x90 [ 259.545302][T14674] x64_sys_call+0x29c8/0x2dc0 [ 259.545331][T14674] do_syscall_64+0xc9/0x1c0 [ 259.545367][T14674] ? clear_bhb_loop+0x55/0xb0 [ 259.545399][T14674] ? clear_bhb_loop+0x55/0xb0 [ 259.545432][T14674] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 259.545539][T14674] RIP: 0033:0x7f348416d169 [ 259.545558][T14674] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 259.545580][T14674] RSP: 002b:00007f34827b6038 EFLAGS: 00000246 ORIG_RAX: 00000000000000bd [ 259.545604][T14674] RAX: ffffffffffffffda RBX: 00007f3484386080 RCX: 00007f348416d169 [ 259.545619][T14674] RDX: 00002000000006c0 RSI: 00002000000000c0 RDI: 0000200000000080 [ 259.545634][T14674] RBP: 00007f34827b6090 R08: 0000000000000000 R09: 0000000000000000 [ 259.545649][T14674] R10: 0000000000000018 R11: 0000000000000246 R12: 0000000000000001 [ 259.545663][T14674] R13: 0000000000000000 R14: 00007f3484386080 R15: 00007ffe005198a8 [ 259.545699][T14674] [ 259.737768][T11770] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 259.756457][T14678] rdma_op ffff88811853d180 conn xmit_rdma 0000000000000000 [ 259.777259][T14681] validate_nla: 1 callbacks suppressed [ 259.777326][T14681] netlink: 'syz.3.3556': attribute type 10 has an invalid length. [ 259.779105][T14682] rdma_op ffff88812db91180 conn xmit_rdma 0000000000000000 [ 259.793613][T14681] team0: Device hsr_slave_0 failed to register rx_handler [ 259.807950][T14684] loop4: detected capacity change from 0 to 2048 [ 259.830271][T14684] EXT4-fs: Ignoring removed mblk_io_submit option [ 259.858493][T14684] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 259.865258][T14691] netlink: 'syz.1.3562': attribute type 10 has an invalid length. [ 259.881422][T14684] EXT4-fs error (device loop4): ext4_read_inline_dir:1566: inode #12: block 5: comm syz.4.3559: path /92/file1/file0: bad entry in directory: rec_len is smaller than minimal - offset=40, inode=0, rec_len=0, size=80 fake=0 [ 259.891763][T14691] team0: Device hsr_slave_0 failed to register rx_handler [ 259.942371][T14698] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 259.977246][T12858] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 260.021826][T14710] rdma_op ffff88811853c180 conn xmit_rdma 0000000000000000 [ 260.065670][T14699] loop3: detected capacity change from 0 to 1024 [ 260.081813][T14699] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 260.095942][T14723] netlink: 'syz.0.3572': attribute type 13 has an invalid length. [ 260.333008][T14728] loop7: detected capacity change from 0 to 2048 [ 260.339659][T14728] EXT4-fs: Ignoring removed mblk_io_submit option [ 260.348169][T14728] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 260.362286][T14728] EXT4-fs error (device loop7): ext4_read_inline_dir:1566: inode #12: block 5: comm syz.7.3574: path /386/file1/file0: bad entry in directory: rec_len is smaller than minimal - offset=40, inode=0, rec_len=0, size=80 fake=0 [ 260.401728][ T8590] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 260.424615][T14731] loop7: detected capacity change from 0 to 1024 [ 260.431485][T14731] journal_path: Non-blockdev passed as './file1' [ 260.437916][T14731] EXT4-fs: error: could not find journal device path [ 260.479943][T14735] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3577'. [ 260.488911][T14735] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3577'. [ 260.498527][T14735] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3577'. [ 260.514292][T14735] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3577'. [ 260.523388][T14735] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3577'. [ 260.532327][T14735] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3577'. [ 260.554907][T14735] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3577'. [ 260.563984][T14735] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3577'. [ 260.797002][T11770] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 260.917997][T14764] loop4: detected capacity change from 0 to 1024 [ 260.941474][T14764] journal_path: Non-blockdev passed as './file1' [ 260.948198][T14764] EXT4-fs: error: could not find journal device path [ 260.950908][T14768] SELinux: syz.0.3589 (14768) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 261.027802][T14774] netlink: 'syz.1.3588': attribute type 13 has an invalid length. [ 261.041580][T14778] loop7: detected capacity change from 0 to 512 [ 261.049801][T14778] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 261.074294][T14778] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 261.095352][T14772] loop4: detected capacity change from 0 to 1024 [ 261.123714][T14772] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 261.845233][T14803] netlink: 'syz.4.3599': attribute type 10 has an invalid length. [ 261.857260][T14810] netlink: 'syz.1.3598': attribute type 13 has an invalid length. [ 261.860118][T14803] team0: Device hsr_slave_0 failed to register rx_handler [ 261.901182][T14812] loop7: detected capacity change from 0 to 512 [ 261.928772][T14818] loop3: detected capacity change from 0 to 128 [ 261.944283][T14812] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 261.957503][T14812] EXT4-fs (loop7): 1 truncate cleaned up [ 262.063487][T14816] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 262.262397][T14837] loop7: detected capacity change from 0 to 1024 [ 262.263345][T14839] bridge_slave_1: left allmulticast mode [ 262.269150][T14837] journal_path: Non-blockdev passed as './file1' [ 262.274622][T14839] bridge_slave_1: left promiscuous mode [ 262.281042][T14837] EXT4-fs: error: could not find journal device path [ 262.286838][T14839] bridge0: port 2(bridge_slave_1) entered disabled state [ 262.329226][T14839] bridge_slave_0: left allmulticast mode [ 262.336207][T14839] bridge_slave_0: left promiscuous mode [ 262.342206][T14839] bridge0: port 1(bridge_slave_0) entered disabled state [ 262.368148][T14846] netlink: 'syz.4.3613': attribute type 10 has an invalid length. [ 262.391092][T14842] loop1: detected capacity change from 0 to 4096 [ 262.419294][T14842] EXT4-fs error (device loop1): ext4_do_update_inode:5154: inode #15: comm +!: corrupted inode contents [ 262.434958][T14842] EXT4-fs error (device loop1): ext4_dirty_inode:6042: inode #15: comm +!: mark_inode_dirty error [ 262.457970][T14850] loop7: detected capacity change from 0 to 512 [ 262.474540][T14842] EXT4-fs error (device loop1): ext4_do_update_inode:5154: inode #15: comm +!: corrupted inode contents [ 262.486832][T14850] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a842c01c, mo2=0002] [ 262.487294][T14846] team0: Device hsr_slave_0 failed to register rx_handler [ 262.495019][T14850] System zones: 0-2, 18-18, 34-34 [ 262.509931][T14842] EXT4-fs error (device loop1): __ext4_ext_dirty:207: inode #15: comm +!: mark_inode_dirty error [ 262.523440][T14850] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.3612: bg 0: block 248: padding at end of block bitmap is not set [ 262.543055][T14842] EXT4-fs error (device loop1): ext4_do_update_inode:5154: inode #15: comm +!: corrupted inode contents [ 262.554880][T14850] EXT4-fs error (device loop7): ext4_acquire_dquot:6927: comm syz.7.3612: Failed to acquire dquot type 1 [ 262.579571][T14842] EXT4-fs error (device loop1): __ext4_ext_dirty:207: inode #15: comm +!: mark_inode_dirty error [ 262.592722][T14850] EXT4-fs (loop7): 1 truncate cleaned up [ 262.602708][T14842] EXT4-fs error (device loop1): ext4_do_update_inode:5154: inode #15: comm +!: corrupted inode contents [ 262.616404][T14842] EXT4-fs error (device loop1): ext4_truncate:4240: inode #15: comm +!: mark_inode_dirty error [ 262.640676][T14842] EXT4-fs error (device loop1) in ext4_setattr:5569: Corrupt filesystem [ 262.718005][T14864] loop4: detected capacity change from 0 to 512 [ 262.725487][T14864] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 262.737729][T14864] EXT4-fs (loop4): 1 truncate cleaned up [ 262.742332][T14844] lo: left promiscuous mode [ 262.747956][T14844] lo: left allmulticast mode [ 262.784199][T14844] 8021q: adding VLAN 0 to HW filter on device bond0 [ 262.795162][T14844] 8021q: adding VLAN 0 to HW filter on device team0 [ 262.812846][T14844] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 262.956532][T14883] loop1: detected capacity change from 0 to 1024 [ 262.964275][T14883] journal_path: Non-blockdev passed as './file1' [ 262.970834][T14883] EXT4-fs: error: could not find journal device path [ 262.988266][T14885] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 263.008256][T14885] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 263.067520][T14885] syzkaller1: entered promiscuous mode [ 263.074260][T14885] syzkaller1: entered allmulticast mode [ 263.222946][T14896] loop7: detected capacity change from 0 to 512 [ 263.232409][T14896] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 263.248608][T14896] EXT4-fs (loop7): 1 truncate cleaned up [ 263.258554][T14897] loop1: detected capacity change from 0 to 512 [ 263.267640][T14897] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 263.344046][ T29] kauditd_printk_skb: 727 callbacks suppressed [ 263.344064][ T29] audit: type=1326 audit(18763461.062:24005): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14903 comm="syz.7.3633" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f348416d169 code=0x7ffc0000 [ 263.376146][T14904] FAULT_INJECTION: forcing a failure. [ 263.376146][T14904] name failslab, interval 1, probability 0, space 0, times 0 [ 263.388852][T14904] CPU: 1 UID: 0 PID: 14904 Comm: syz.7.3633 Not tainted 6.14.0-syzkaller #0 [ 263.388881][T14904] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 263.388966][T14904] Call Trace: [ 263.388975][T14904] [ 263.388986][T14904] dump_stack_lvl+0xf2/0x150 [ 263.389038][T14904] dump_stack+0x15/0x1a [ 263.389066][T14904] should_fail_ex+0x24a/0x260 [ 263.389153][T14904] should_failslab+0x8f/0xb0 [ 263.389192][T14904] kmem_cache_alloc_node_noprof+0x59/0x320 [ 263.389246][T14904] ? __alloc_skb+0x10b/0x310 [ 263.389276][T14904] __alloc_skb+0x10b/0x310 [ 263.389301][T14904] ? audit_log_start+0x34c/0x6b0 [ 263.389388][T14904] audit_log_start+0x368/0x6b0 [ 263.389425][T14904] audit_seccomp+0x4b/0x130 [ 263.389517][T14904] __seccomp_filter+0x6fa/0x1180 [ 263.389556][T14904] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 263.389596][T14904] ? vfs_write+0x644/0x920 [ 263.389636][T14904] __secure_computing+0x9f/0x1c0 [ 263.389713][T14904] syscall_trace_enter+0xd1/0x1f0 [ 263.389745][T14904] ? fpregs_assert_state_consistent+0x83/0xa0 [ 263.389771][T14904] do_syscall_64+0xaa/0x1c0 [ 263.389833][T14904] ? clear_bhb_loop+0x55/0xb0 [ 263.389916][T14904] ? clear_bhb_loop+0x55/0xb0 [ 263.389950][T14904] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 263.389984][T14904] RIP: 0033:0x7f348416d169 [ 263.390004][T14904] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 263.390026][T14904] RSP: 002b:00007f34827d7038 EFLAGS: 00000246 ORIG_RAX: 000000000000006d [ 263.390049][T14904] RAX: ffffffffffffffda RBX: 00007f3484385fa0 RCX: 00007f348416d169 [ 263.390065][T14904] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 263.390080][T14904] RBP: 00007f34827d7090 R08: 0000000000000000 R09: 0000000000000000 [ 263.390096][T14904] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 263.390111][T14904] R13: 0000000000000000 R14: 00007f3484385fa0 R15: 00007ffe005198a8 [ 263.390134][T14904] [ 263.589010][T14904] audit: audit_lost=12 audit_rate_limit=0 audit_backlog_limit=64 [ 263.596904][T14904] audit: out of memory in audit_log_start [ 263.602927][ T29] audit: type=1326 audit(18763461.092:24006): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14903 comm="syz.7.3633" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f348416bad0 code=0x7ffc0000 [ 263.627189][ T29] audit: type=1326 audit(18763461.092:24007): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14903 comm="syz.7.3633" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f348416bc1f code=0x7ffc0000 [ 263.657308][ T29] audit: type=1326 audit(18763461.332:24008): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14903 comm="syz.7.3633" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7f348416bb7c code=0x7ffc0000 [ 263.680731][ T29] audit: type=1326 audit(18763461.332:24009): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14903 comm="syz.7.3633" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f348416bc1f code=0x7ffc0000 [ 263.704288][ T29] audit: type=1326 audit(18763461.332:24010): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14903 comm="syz.7.3633" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f348416bdca code=0x7ffc0000 [ 263.727673][ T29] audit: type=1326 audit(18763461.332:24011): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14903 comm="syz.7.3633" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f348416d169 code=0x7ffc0000 [ 263.751269][ T29] audit: type=1326 audit(18763461.332:24012): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14903 comm="syz.7.3633" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f348416d169 code=0x7ffc0000 [ 263.922124][T14920] loop7: detected capacity change from 0 to 1024 [ 263.929266][T14920] journal_path: Non-blockdev passed as './file1' [ 263.935714][T14920] EXT4-fs: error: could not find journal device path [ 264.069722][T14926] netlink: 'syz.1.3640': attribute type 10 has an invalid length. [ 264.096357][T14926] team0: Device hsr_slave_0 failed to register rx_handler [ 264.107510][T14924] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(8) [ 264.114062][T14924] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 264.121654][T14924] vhci_hcd vhci_hcd.0: Device attached [ 264.130455][T14930] vhci_hcd: connection closed [ 264.130786][ T31] vhci_hcd: stop threads [ 264.139925][ T31] vhci_hcd: release socket [ 264.144366][ T31] vhci_hcd: disconnect device [ 264.166322][T14932] loop7: detected capacity change from 0 to 512 [ 264.175767][T14932] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 264.187820][T14932] EXT4-fs (loop7): 1 truncate cleaned up [ 264.221064][T14919] Falling back ldisc for ttyS3. [ 264.258205][T14936] loop3: detected capacity change from 0 to 512 [ 264.265715][T14936] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 264.543590][T14949] netlink: 'syz.3.3649': attribute type 10 has an invalid length. [ 264.564633][T14949] team0: Device hsr_slave_0 failed to register rx_handler [ 264.602162][T14947] __nla_validate_parse: 3 callbacks suppressed [ 264.602179][T14947] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3648'. [ 264.633112][T14947] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3648'. [ 265.315487][T14980] syz_tun: entered allmulticast mode [ 265.323543][T14979] syz_tun: left allmulticast mode [ 265.350545][T14982] netlink: 'syz.3.3661': attribute type 10 has an invalid length. [ 265.359546][T14982] team0: Device hsr_slave_0 failed to register rx_handler [ 265.370829][T14974] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3657'. [ 265.379774][T14974] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3657'. [ 265.389607][T14974] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3657'. [ 265.431090][T14986] SELinux: syz.3.3663 (14986) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 265.446961][T14986] FAULT_INJECTION: forcing a failure. [ 265.446961][T14986] name failslab, interval 1, probability 0, space 0, times 0 [ 265.459663][T14986] CPU: 0 UID: 0 PID: 14986 Comm: syz.3.3663 Not tainted 6.14.0-syzkaller #0 [ 265.459690][T14986] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 265.459706][T14986] Call Trace: [ 265.459758][T14986] [ 265.459767][T14986] dump_stack_lvl+0xf2/0x150 [ 265.459803][T14986] dump_stack+0x15/0x1a [ 265.459830][T14986] should_fail_ex+0x24a/0x260 [ 265.459873][T14986] should_failslab+0x8f/0xb0 [ 265.459970][T14986] __kmalloc_noprof+0xab/0x3f0 [ 265.459997][T14986] ? sel_write_user+0x194/0x430 [ 265.460070][T14986] sel_write_user+0x194/0x430 [ 265.460099][T14986] selinux_transaction_write+0xba/0x100 [ 265.460177][T14986] ? __pfx_selinux_transaction_write+0x10/0x10 [ 265.460206][T14986] vfs_write+0x27d/0x920 [ 265.460312][T14986] ? putname+0xcf/0xf0 [ 265.460349][T14986] ? __fget_files+0x17c/0x1c0 [ 265.460392][T14986] ksys_write+0xe8/0x1b0 [ 265.460426][T14986] __x64_sys_write+0x42/0x50 [ 265.460460][T14986] x64_sys_call+0x287e/0x2dc0 [ 265.460530][T14986] do_syscall_64+0xc9/0x1c0 [ 265.460571][T14986] ? clear_bhb_loop+0x55/0xb0 [ 265.460607][T14986] ? clear_bhb_loop+0x55/0xb0 [ 265.460700][T14986] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 265.460769][T14986] RIP: 0033:0x7f0f092fd169 [ 265.460786][T14986] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 265.460809][T14986] RSP: 002b:00007f0f07967038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 265.460832][T14986] RAX: ffffffffffffffda RBX: 00007f0f09515fa0 RCX: 00007f0f092fd169 [ 265.460848][T14986] RDX: 0000000000000027 RSI: 0000200000000040 RDI: 0000000000000003 [ 265.460886][T14986] RBP: 00007f0f07967090 R08: 0000000000000000 R09: 0000000000000000 [ 265.460899][T14986] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 265.460912][T14986] R13: 0000000000000000 R14: 00007f0f09515fa0 R15: 00007ffdccf96998 [ 265.460933][T14986] [ 265.699695][T14974] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3657'. [ 265.708688][T14974] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3657'. [ 265.740708][T14974] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3657'. [ 265.879010][T14974] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3657'. [ 265.887973][T14974] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3657'. [ 265.994629][T15012] syz_tun: entered allmulticast mode [ 266.000621][T15011] syz_tun: left allmulticast mode [ 266.029477][T15014] loop3: detected capacity change from 0 to 512 [ 266.385893][T15033] loop4: detected capacity change from 0 to 512 [ 266.395245][T15033] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 266.419505][T15033] EXT4-fs (loop4): 1 truncate cleaned up [ 266.719029][T15056] syz_tun: entered allmulticast mode [ 266.725168][T15051] syz_tun: left allmulticast mode [ 266.751755][T15060] rdma_op ffff88812bf8b580 conn xmit_rdma 0000000000000000 [ 266.763133][T15059] ip6t_srh: unknown srh match flags 4000 [ 266.770665][T15055] Falling back ldisc for ttyS3. [ 266.891687][T15095] 0ªX¹¦À: renamed from caif0 [ 266.900234][T15089] loop7: detected capacity change from 0 to 512 [ 266.911402][T15095] 0ªX¹¦À: entered allmulticast mode [ 266.916627][T15095] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 266.956196][T15106] syz_tun: entered allmulticast mode [ 266.972196][T15104] syz_tun: left allmulticast mode [ 267.068294][T15153] rdma_op ffff8881295d1d80 conn xmit_rdma 0000000000000000 [ 267.702782][T15167] loop4: detected capacity change from 0 to 512 [ 267.709774][T15167] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 267.782567][T15180] syz_tun: entered allmulticast mode [ 267.794307][T15176] syz_tun: left allmulticast mode [ 267.847458][T15188] loop7: detected capacity change from 0 to 512 [ 267.876972][T15188] EXT4-fs error (device loop7): ext4_do_update_inode:5154: inode #2: comm syz.7.3708: corrupted inode contents [ 267.899179][T15188] EXT4-fs error (device loop7): ext4_dirty_inode:6042: inode #2: comm syz.7.3708: mark_inode_dirty error [ 267.937283][T15196] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 267.967918][T15199] loop1: detected capacity change from 0 to 512 [ 267.979535][T15196] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 267.980997][T15188] EXT4-fs error (device loop7): ext4_do_update_inode:5154: inode #2: comm syz.7.3708: corrupted inode contents [ 268.005889][T15201] loop4: detected capacity change from 0 to 2048 [ 268.027366][T15188] EXT4-fs error (device loop7): __ext4_ext_dirty:207: inode #2: comm syz.7.3708: mark_inode_dirty error [ 268.077733][T15210] loop3: detected capacity change from 0 to 512 [ 268.079766][T15208] syzkaller1: entered promiscuous mode [ 268.089558][T15208] syzkaller1: entered allmulticast mode [ 268.092323][T15210] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 268.246236][T15219] loop7: detected capacity change from 0 to 512 [ 268.253328][T15219] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 268.356793][ T29] kauditd_printk_skb: 505 callbacks suppressed [ 268.356812][ T29] audit: type=1326 audit(18763466.072:24518): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15227 comm="syz.1.3719" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d20fcd169 code=0x7ffc0000 [ 268.387580][ T29] audit: type=1326 audit(18763466.082:24519): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15227 comm="syz.1.3719" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9d20fcd169 code=0x7ffc0000 [ 268.411724][ T29] audit: type=1326 audit(18763466.082:24520): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15227 comm="syz.1.3719" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d20fcd169 code=0x7ffc0000 [ 268.435260][ T29] audit: type=1326 audit(18763466.082:24521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15227 comm="syz.1.3719" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d20fcd169 code=0x7ffc0000 [ 268.459485][ T29] audit: type=1326 audit(18763466.082:24522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15227 comm="syz.1.3719" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9d20fcd169 code=0x7ffc0000 [ 268.483677][ T29] audit: type=1326 audit(18763466.082:24523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15227 comm="syz.1.3719" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d20fcd169 code=0x7ffc0000 [ 268.507166][ T29] audit: type=1326 audit(18763466.082:24524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15227 comm="syz.1.3719" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9d20fcd169 code=0x7ffc0000 [ 268.531311][ T29] audit: type=1326 audit(18763466.082:24525): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15227 comm="syz.1.3719" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9d20fcd169 code=0x7ffc0000 [ 268.555497][ T29] audit: type=1326 audit(18763466.082:24526): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15227 comm="syz.1.3719" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f9d20fcd169 code=0x7ffc0000 [ 268.579703][ T29] audit: type=1326 audit(18763466.082:24527): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15227 comm="syz.1.3719" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f9d20fcd1a3 code=0x7ffc0000 [ 268.604270][T15228] loop1: detected capacity change from 0 to 512 [ 268.625181][T15228] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 268.649890][T15231] loop4: detected capacity change from 0 to 2048 [ 268.656778][T15231] EXT4-fs: Ignoring removed mblk_io_submit option [ 268.677524][T15228] EXT4-fs (loop1): 1 truncate cleaned up [ 268.724579][T15231] EXT4-fs error (device loop4): ext4_read_inline_dir:1566: inode #12: block 5: comm syz.4.3720: path /118/file1/file0: bad entry in directory: rec_len is smaller than minimal - offset=40, inode=0, rec_len=0, size=80 fake=0 [ 268.876494][T15239] netlink: 'syz.1.3724': attribute type 10 has an invalid length. [ 268.884784][T15239] team0: Device hsr_slave_0 failed to register rx_handler [ 268.954788][T15245] loop1: detected capacity change from 0 to 512 [ 269.155378][T15257] loop1: detected capacity change from 0 to 512 [ 269.281720][T15269] loop1: detected capacity change from 0 to 2048 [ 269.288594][T15269] EXT4-fs: Ignoring removed mblk_io_submit option [ 269.381875][T15269] EXT4-fs error (device loop1): ext4_read_inline_dir:1566: inode #12: block 5: comm syz.1.3733: path /118/file1/file0: bad entry in directory: rec_len is smaller than minimal - offset=40, inode=0, rec_len=0, size=80 fake=0 [ 269.412364][T15276] FAULT_INJECTION: forcing a failure. [ 269.412364][T15276] name failslab, interval 1, probability 0, space 0, times 0 [ 269.425224][T15276] CPU: 0 UID: 0 PID: 15276 Comm: +}[@ Not tainted 6.14.0-syzkaller #0 [ 269.425255][T15276] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 269.425296][T15276] Call Trace: [ 269.425303][T15276] [ 269.425312][T15276] dump_stack_lvl+0xf2/0x150 [ 269.425347][T15276] dump_stack+0x15/0x1a [ 269.425396][T15276] should_fail_ex+0x24a/0x260 [ 269.425427][T15276] should_failslab+0x8f/0xb0 [ 269.425458][T15276] kmem_cache_alloc_noprof+0x52/0x320 [ 269.425485][T15276] ? security_file_alloc+0x32/0x100 [ 269.425527][T15276] security_file_alloc+0x32/0x100 [ 269.425563][T15276] init_file+0x5d/0x1b0 [ 269.425640][T15276] alloc_empty_file+0xea/0x200 [ 269.425667][T15276] path_openat+0x6a/0x1fc0 [ 269.425694][T15276] ? _parse_integer_limit+0x167/0x180 [ 269.425730][T15276] ? _parse_integer+0x27/0x30 [ 269.425761][T15276] ? kstrtoull+0x110/0x140 [ 269.425826][T15276] ? kstrtouint+0x77/0xc0 [ 269.425858][T15276] ? kstrtouint_from_user+0xb0/0xe0 [ 269.425958][T15276] do_filp_open+0x107/0x230 [ 269.426044][T15276] do_sys_openat2+0xab/0x120 [ 269.426070][T15276] __x64_sys_creat+0x66/0x90 [ 269.426105][T15276] x64_sys_call+0x1084/0x2dc0 [ 269.426139][T15276] do_syscall_64+0xc9/0x1c0 [ 269.426207][T15276] ? clear_bhb_loop+0x55/0xb0 [ 269.426241][T15276] ? clear_bhb_loop+0x55/0xb0 [ 269.426276][T15276] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 269.426310][T15276] RIP: 0033:0x7f348416d169 [ 269.426403][T15276] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 269.426426][T15276] RSP: 002b:00007f34827d7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000055 [ 269.426450][T15276] RAX: ffffffffffffffda RBX: 00007f3484385fa0 RCX: 00007f348416d169 [ 269.426465][T15276] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 00002000000000c0 [ 269.426486][T15276] RBP: 00007f34827d7090 R08: 0000000000000000 R09: 0000000000000000 [ 269.426506][T15276] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 269.426520][T15276] R13: 0000000000000000 R14: 00007f3484385fa0 R15: 00007ffe005198a8 [ 269.426543][T15276] [ 269.639045][T15276] loop7: detected capacity change from 0 to 2048 [ 269.657713][T15276] EXT4-fs: Ignoring removed bh option [ 269.720947][T15284] loop1: detected capacity change from 0 to 512 [ 269.750656][T15277] Falling back ldisc for ttyS3. [ 269.758076][T15281] loop4: detected capacity change from 0 to 512 [ 269.772401][T15281] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 269.813672][T15281] EXT4-fs (loop4): 1 truncate cleaned up [ 269.874016][T15292] loop3: detected capacity change from 0 to 512 [ 269.883936][T15292] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 269.916905][T15133] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 269.934145][T15133] EXT4-fs (loop7): Delayed block allocation failed for inode 18 at logical offset 6 with max blocks 2 with error 28 [ 269.946454][T15133] EXT4-fs (loop7): This should not happen!! Data will be lost [ 269.946454][T15133] [ 269.956141][T15133] EXT4-fs (loop7): Total free blocks count 0 [ 269.962320][T15133] EXT4-fs (loop7): Free/Dirty block details [ 269.968254][T15133] EXT4-fs (loop7): free_blocks=2415919104 [ 269.974146][T15133] EXT4-fs (loop7): dirty_blocks=16 [ 269.979269][T15133] EXT4-fs (loop7): Block reservation details [ 269.985368][T15133] EXT4-fs (loop7): i_reserved_data_blocks=1 [ 270.141289][T15300] netlink: 'syz.1.3741': attribute type 10 has an invalid length. [ 270.166499][T15300] team0: Device hsr_slave_0 failed to register rx_handler [ 270.543132][T15313] loop1: detected capacity change from 0 to 1024 [ 270.725290][T15329] netlink: 'syz.7.3750': attribute type 10 has an invalid length. [ 270.735148][T15329] team0: Device hsr_slave_0 failed to register rx_handler [ 270.764843][T15332] loop7: detected capacity change from 0 to 512 [ 271.212353][T15339] loop7: detected capacity change from 0 to 512 [ 271.219555][T15339] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 271.231631][T15339] EXT4-fs (loop7): 1 truncate cleaned up [ 271.260515][T15341] Falling back ldisc for ttyS3. [ 271.286963][T15346] rdma_op ffff88810ec52180 conn xmit_rdma 0000000000000000 [ 271.318384][T15352] netlink: 'syz.1.3757': attribute type 10 has an invalid length. [ 271.328910][T15352] team0: Device hsr_slave_0 failed to register rx_handler [ 271.359420][T15356] __nla_validate_parse: 12 callbacks suppressed [ 271.359439][T15356] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3760'. [ 271.374701][T15356] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3760'. [ 271.386109][T15356] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3760'. [ 271.391480][T15358] netlink: 'syz.0.3761': attribute type 10 has an invalid length. [ 271.398424][T15359] netlink: 'syz.7.3758': attribute type 13 has an invalid length. [ 271.404259][T15358] team0: Device hsr_slave_0 failed to register rx_handler [ 271.443978][T15356] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3760'. [ 271.452927][T15356] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3760'. [ 271.455162][T15362] loop4: detected capacity change from 0 to 512 [ 271.469466][T15356] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3760'. [ 271.536573][T15356] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3760'. [ 271.546295][T15356] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3760'. [ 271.555412][T15356] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3760'. [ 271.598934][T15380] FAULT_INJECTION: forcing a failure. [ 271.598934][T15380] name failslab, interval 1, probability 0, space 0, times 0 [ 271.612655][T15380] CPU: 1 UID: 0 PID: 15380 Comm: syz.1.3766 Not tainted 6.14.0-syzkaller #0 [ 271.612728][T15380] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 271.612747][T15380] Call Trace: [ 271.612791][T15380] [ 271.612872][T15380] dump_stack_lvl+0xf2/0x150 [ 271.612937][T15380] dump_stack+0x15/0x1a [ 271.613002][T15380] should_fail_ex+0x24a/0x260 [ 271.613044][T15380] should_failslab+0x8f/0xb0 [ 271.613084][T15380] __kmalloc_node_noprof+0xad/0x410 [ 271.613115][T15380] ? __vmalloc_node_range_noprof+0x3dc/0xe70 [ 271.613155][T15380] __vmalloc_node_range_noprof+0x3dc/0xe70 [ 271.613243][T15380] ? __rcu_read_unlock+0x4e/0x70 [ 271.613276][T15380] ? selinux_capable+0x1f2/0x260 [ 271.613307][T15380] ? bpf_prog_alloc_no_stats+0x49/0x380 [ 271.613382][T15380] __vmalloc_noprof+0x5e/0x70 [ 271.613466][T15380] ? bpf_prog_alloc_no_stats+0x49/0x380 [ 271.613569][T15380] bpf_prog_alloc_no_stats+0x49/0x380 [ 271.613606][T15380] ? bpf_prog_alloc+0x28/0x150 [ 271.613642][T15380] bpf_prog_alloc+0x3a/0x150 [ 271.613678][T15380] bpf_prog_load+0x4d0/0x1050 [ 271.613776][T15380] __sys_bpf+0x463/0x7a0 [ 271.613819][T15380] __x64_sys_bpf+0x43/0x50 [ 271.613851][T15380] x64_sys_call+0x2914/0x2dc0 [ 271.613960][T15380] do_syscall_64+0xc9/0x1c0 [ 271.614043][T15380] ? clear_bhb_loop+0x55/0xb0 [ 271.614074][T15380] ? clear_bhb_loop+0x55/0xb0 [ 271.614103][T15380] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 271.614206][T15380] RIP: 0033:0x7f9d20fcd169 [ 271.614223][T15380] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 271.614243][T15380] RSP: 002b:00007f9d1f637038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 271.614263][T15380] RAX: ffffffffffffffda RBX: 00007f9d211e5fa0 RCX: 00007f9d20fcd169 [ 271.614276][T15380] RDX: 0000000000000094 RSI: 00002000000001c0 RDI: 0000000000000005 [ 271.614291][T15380] RBP: 00007f9d1f637090 R08: 0000000000000000 R09: 0000000000000000 [ 271.614305][T15380] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 271.614381][T15380] R13: 0000000000000001 R14: 00007f9d211e5fa0 R15: 00007ffc7ad1ba28 [ 271.614404][T15380] [ 271.614414][T15380] syz.1.3766: vmalloc error: size 4096, failed to allocated page array size 8, mode:0x500dc2(GFP_HIGHUSER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=/,mems_allowed=0 [ 271.850922][T15380] CPU: 1 UID: 0 PID: 15380 Comm: syz.1.3766 Not tainted 6.14.0-syzkaller #0 [ 271.850946][T15380] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 271.850958][T15380] Call Trace: [ 271.850965][T15380] [ 271.850975][T15380] dump_stack_lvl+0xf2/0x150 [ 271.851043][T15380] dump_stack+0x15/0x1a [ 271.851093][T15380] warn_alloc+0x145/0x1b0 [ 271.851131][T15380] __vmalloc_node_range_noprof+0x473/0xe70 [ 271.851193][T15380] ? __rcu_read_unlock+0x4e/0x70 [ 271.851222][T15380] ? selinux_capable+0x1f2/0x260 [ 271.851268][T15380] ? bpf_prog_alloc_no_stats+0x49/0x380 [ 271.851305][T15380] __vmalloc_noprof+0x5e/0x70 [ 271.851337][T15380] ? bpf_prog_alloc_no_stats+0x49/0x380 [ 271.851411][T15380] bpf_prog_alloc_no_stats+0x49/0x380 [ 271.851491][T15380] ? bpf_prog_alloc+0x28/0x150 [ 271.851523][T15380] bpf_prog_alloc+0x3a/0x150 [ 271.851550][T15380] bpf_prog_load+0x4d0/0x1050 [ 271.851596][T15380] __sys_bpf+0x463/0x7a0 [ 271.851677][T15380] __x64_sys_bpf+0x43/0x50 [ 271.851701][T15380] x64_sys_call+0x2914/0x2dc0 [ 271.851724][T15380] do_syscall_64+0xc9/0x1c0 [ 271.851828][T15380] ? clear_bhb_loop+0x55/0xb0 [ 271.851852][T15380] ? clear_bhb_loop+0x55/0xb0 [ 271.851875][T15380] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 271.851964][T15380] RIP: 0033:0x7f9d20fcd169 [ 271.852033][T15380] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 271.852049][T15380] RSP: 002b:00007f9d1f637038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 271.852065][T15380] RAX: ffffffffffffffda RBX: 00007f9d211e5fa0 RCX: 00007f9d20fcd169 [ 271.852076][T15380] RDX: 0000000000000094 RSI: 00002000000001c0 RDI: 0000000000000005 [ 271.852086][T15380] RBP: 00007f9d1f637090 R08: 0000000000000000 R09: 0000000000000000 [ 271.852097][T15380] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 271.852107][T15380] R13: 0000000000000001 R14: 00007f9d211e5fa0 R15: 00007ffc7ad1ba28 [ 271.852136][T15380] [ 271.852142][T15380] Mem-Info: [ 272.056805][T15380] active_anon:8267 inactive_anon:26 isolated_anon:0 [ 272.056805][T15380] active_file:9034 inactive_file:17144 isolated_file:0 [ 272.056805][T15380] unevictable:0 dirty:619 writeback:0 [ 272.056805][T15380] slab_reclaimable:3296 slab_unreclaimable:104296 [ 272.056805][T15380] mapped:30045 shmem:682 pagetables:1063 [ 272.056805][T15380] sec_pagetables:0 bounce:0 [ 272.056805][T15380] kernel_misc_reclaimable:0 [ 272.056805][T15380] free:1764963 free_pcp:6000 free_cma:0 [ 272.102333][T15380] Node 0 active_anon:33068kB inactive_anon:104kB active_file:36136kB inactive_file:68576kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:120180kB dirty:2476kB writeback:0kB shmem:2728kB writeback_tmp:0kB kernel_stack:4880kB pagetables:4252kB sec_pagetables:0kB all_unreclaimable? no [ 272.131073][T15380] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 272.157952][T15380] lowmem_reserve[]: 0 2885 7863 7863 [ 272.163994][T15380] Node 0 DMA32 free:2950720kB boost:0kB min:4136kB low:7068kB high:10000kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2954352kB mlocked:0kB bounce:0kB free_pcp:3632kB local_pcp:3532kB free_cma:0kB [ 272.193379][T15380] lowmem_reserve[]: 0 0 4978 4978 [ 272.198497][T15380] Node 0 Normal free:4093772kB boost:0kB min:7184kB low:12280kB high:17376kB reserved_highatomic:0KB active_anon:32952kB inactive_anon:104kB active_file:36136kB inactive_file:68576kB unevictable:0kB writepending:2476kB present:5242880kB managed:5098208kB mlocked:0kB bounce:0kB free_pcp:20532kB local_pcp:6964kB free_cma:0kB [ 272.229585][T15380] lowmem_reserve[]: 0 0 0 0 [ 272.234273][T15380] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 272.246962][T15384] loop7: detected capacity change from 0 to 2048 [ 272.247074][T15380] Node 0 DMA32: 2*4kB (M) 1*8kB (M) 1*16kB (M) 3*32kB (M) 3*64kB (M) 2*128kB (M) 2*256kB (M) 3*512kB (M) 3*1024kB (M) 2*2048kB (M) 718*4096kB (M) = 2950720kB [ 272.270243][T15380] Node 0 Normal: 126*4kB (UME) 181*8kB (UM) 336*16kB (ME) 492*32kB (ME) 239*64kB (ME) 82*128kB (UME) 43*256kB (UM) 50*512kB (UME) 90*1024kB (UM) 48*2048kB (UME) 932*4096kB (M) = 4093408kB [ 272.289123][T15380] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 272.298505][T15380] 27165 total pagecache pages [ 272.303996][T15380] 45 pages in swap cache [ 272.308308][T15380] Free swap = 124520kB [ 272.312489][T15380] Total swap = 124996kB [ 272.316661][T15380] 2097051 pages RAM [ 272.320487][T15380] 0 pages HighMem/MovableOnly [ 272.325163][T15380] 80071 pages reserved [ 272.356869][T15393] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 272.359157][T15394] netlink: 'syz.1.3771': attribute type 10 has an invalid length. [ 272.366509][T15393] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 272.381092][T15382] Falling back ldisc for ttyS3. [ 272.390724][T15394] team0: Device hsr_slave_0 failed to register rx_handler [ 272.419213][T15400] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3773'. [ 272.426002][T15398] loop7: detected capacity change from 0 to 1024 [ 272.450379][T15398] journal_path: Non-blockdev passed as './file1' [ 272.456793][T15398] EXT4-fs: error: could not find journal device path [ 272.468893][T15402] netlink: 'syz.1.3774': attribute type 10 has an invalid length. [ 272.503113][T15405] loop4: detected capacity change from 0 to 512 [ 272.505918][T15402] team0: Device hsr_slave_0 failed to register rx_handler [ 272.528168][T15405] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 272.572342][T15407] FAULT_INJECTION: forcing a failure. [ 272.572342][T15407] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 272.585483][T15407] CPU: 0 UID: 0 PID: 15407 Comm: syz.7.3776 Not tainted 6.14.0-syzkaller #0 [ 272.585513][T15407] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 272.585593][T15407] Call Trace: [ 272.585601][T15407] [ 272.585611][T15407] dump_stack_lvl+0xf2/0x150 [ 272.585645][T15407] dump_stack+0x15/0x1a [ 272.585669][T15407] should_fail_ex+0x24a/0x260 [ 272.585851][T15407] should_fail+0xb/0x10 [ 272.585885][T15407] should_fail_usercopy+0x1a/0x20 [ 272.585924][T15407] _copy_from_user+0x1c/0xa0 [ 272.586035][T15407] kstrtouint_from_user+0x76/0xe0 [ 272.586073][T15407] ? 0xffffffff81000000 [ 272.586089][T15407] ? selinux_file_permission+0x22a/0x360 [ 272.586184][T15407] proc_fail_nth_write+0x4f/0x150 [ 272.586220][T15407] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 272.586311][T15407] vfs_write+0x27d/0x920 [ 272.586378][T15407] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 272.586413][T15407] ? __fget_files+0x17c/0x1c0 [ 272.586456][T15407] ksys_write+0xe8/0x1b0 [ 272.586489][T15407] __x64_sys_write+0x42/0x50 [ 272.586585][T15407] x64_sys_call+0x287e/0x2dc0 [ 272.586619][T15407] do_syscall_64+0xc9/0x1c0 [ 272.586660][T15407] ? clear_bhb_loop+0x55/0xb0 [ 272.586695][T15407] ? clear_bhb_loop+0x55/0xb0 [ 272.586751][T15407] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 272.586778][T15407] RIP: 0033:0x7f348416bc1f [ 272.586795][T15407] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 272.586865][T15407] RSP: 002b:00007f34827d7030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 272.586886][T15407] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f348416bc1f [ 272.586901][T15407] RDX: 0000000000000001 RSI: 00007f34827d70a0 RDI: 0000000000000005 [ 272.586916][T15407] RBP: 00007f34827d7090 R08: 0000000000000000 R09: 0000000000000000 [ 272.586928][T15407] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 272.586940][T15407] R13: 0000000000000000 R14: 00007f3484385fa0 R15: 00007ffe005198a8 [ 272.586964][T15407] [ 272.792496][T15417] netlink: 'syz.3.3778': attribute type 13 has an invalid length. [ 272.812724][T15405] EXT4-fs (loop4): 1 truncate cleaned up [ 272.819434][T15422] FAULT_INJECTION: forcing a failure. [ 272.819434][T15422] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 272.832644][T15422] CPU: 0 UID: 0 PID: 15422 Comm: syz.7.3781 Not tainted 6.14.0-syzkaller #0 [ 272.832668][T15422] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 272.832684][T15422] Call Trace: [ 272.832693][T15422] [ 272.832703][T15422] dump_stack_lvl+0xf2/0x150 [ 272.832816][T15422] dump_stack+0x15/0x1a [ 272.832862][T15422] should_fail_ex+0x24a/0x260 [ 272.832901][T15422] should_fail+0xb/0x10 [ 272.832934][T15422] should_fail_usercopy+0x1a/0x20 [ 272.833027][T15422] _copy_from_iter+0xd5/0xd00 [ 272.833084][T15422] ? kmalloc_reserve+0x16e/0x190 [ 272.833107][T15422] ? __build_skb_around+0x196/0x1f0 [ 272.833202][T15422] ? __alloc_skb+0x21f/0x310 [ 272.833223][T15422] ? __virt_addr_valid+0x1ed/0x250 [ 272.833250][T15422] ? __check_object_size+0x364/0x520 [ 272.833282][T15422] netlink_sendmsg+0x460/0x6e0 [ 272.833308][T15422] ? __pfx_netlink_sendmsg+0x10/0x10 [ 272.833342][T15422] __sock_sendmsg+0x140/0x180 [ 272.833384][T15422] ____sys_sendmsg+0x326/0x4b0 [ 272.833422][T15422] __sys_sendmsg+0x19d/0x230 [ 272.833461][T15422] __x64_sys_sendmsg+0x46/0x50 [ 272.833494][T15422] x64_sys_call+0x2734/0x2dc0 [ 272.833527][T15422] do_syscall_64+0xc9/0x1c0 [ 272.833576][T15422] ? clear_bhb_loop+0x55/0xb0 [ 272.833603][T15422] ? clear_bhb_loop+0x55/0xb0 [ 272.833629][T15422] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 272.833660][T15422] RIP: 0033:0x7f348416d169 [ 272.833710][T15422] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 272.833800][T15422] RSP: 002b:00007f34827d7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 272.833822][T15422] RAX: ffffffffffffffda RBX: 00007f3484385fa0 RCX: 00007f348416d169 [ 272.833838][T15422] RDX: 0000000000000040 RSI: 00002000000007c0 RDI: 0000000000000006 [ 272.833851][T15422] RBP: 00007f34827d7090 R08: 0000000000000000 R09: 0000000000000000 [ 272.833862][T15422] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 272.833877][T15422] R13: 0000000000000000 R14: 00007f3484385fa0 R15: 00007ffe005198a8 [ 272.833898][T15422] [ 273.093248][T15436] netlink: 'syz.1.3785': attribute type 30 has an invalid length. [ 273.192573][T15443] rdma_op ffff88810cfc6d80 conn xmit_rdma 0000000000000000 [ 273.276642][T15452] loop1: detected capacity change from 0 to 1024 [ 273.284325][T15452] journal_path: Non-blockdev passed as './file1' [ 273.290828][T15452] EXT4-fs: error: could not find journal device path [ 273.417599][ T29] kauditd_printk_skb: 444 callbacks suppressed [ 273.417616][ T29] audit: type=1326 audit(18763471.132:24972): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15471 comm="syz.3.3797" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0f092fd169 code=0x0 [ 273.458892][ T29] audit: type=1400 audit(18763471.172:24973): avc: denied { read } for pid=15461 comm="syz.4.3795" name="ptp0" dev="devtmpfs" ino=246 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 273.482288][ T29] audit: type=1400 audit(18763471.172:24974): avc: denied { open } for pid=15461 comm="syz.4.3795" path="/dev/ptp0" dev="devtmpfs" ino=246 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 273.513787][ T29] audit: type=1400 audit(18763471.232:24975): avc: denied { ioctl } for pid=15461 comm="syz.4.3795" path="/dev/ptp0" dev="devtmpfs" ino=246 ioctlcmd=0x3d05 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 274.083468][T15483] rdma_op ffff88810cfc7980 conn xmit_rdma 0000000000000000 [ 274.228668][T15493] FAULT_INJECTION: forcing a failure. [ 274.228668][T15493] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 274.241942][T15493] CPU: 0 UID: 0 PID: 15493 Comm: syz.4.3802 Not tainted 6.14.0-syzkaller #0 [ 274.242036][T15493] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 274.242051][T15493] Call Trace: [ 274.242059][T15493] [ 274.242067][T15493] dump_stack_lvl+0xf2/0x150 [ 274.242095][T15493] dump_stack+0x15/0x1a [ 274.242117][T15493] should_fail_ex+0x24a/0x260 [ 274.242154][T15493] should_fail+0xb/0x10 [ 274.242188][T15493] should_fail_usercopy+0x1a/0x20 [ 274.242284][T15493] _copy_to_user+0x20/0xa0 [ 274.242305][T15493] simple_read_from_buffer+0xa0/0x110 [ 274.242416][T15493] proc_fail_nth_read+0xf9/0x140 [ 274.242451][T15493] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 274.242488][T15493] vfs_read+0x19b/0x6f0 [ 274.242515][T15493] ? __rcu_read_unlock+0x4e/0x70 [ 274.242538][T15493] ? __fget_files+0x17c/0x1c0 [ 274.242639][T15493] ksys_read+0xe8/0x1b0 [ 274.242672][T15493] __x64_sys_read+0x42/0x50 [ 274.242698][T15493] x64_sys_call+0x2874/0x2dc0 [ 274.242727][T15493] do_syscall_64+0xc9/0x1c0 [ 274.242807][T15493] ? clear_bhb_loop+0x55/0xb0 [ 274.242896][T15493] ? clear_bhb_loop+0x55/0xb0 [ 274.242922][T15493] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 274.242949][T15493] RIP: 0033:0x7efc2bd0bb7c [ 274.242965][T15493] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 274.242987][T15493] RSP: 002b:00007efc2a377030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 274.243062][T15493] RAX: ffffffffffffffda RBX: 00007efc2bf25fa0 RCX: 00007efc2bd0bb7c [ 274.243076][T15493] RDX: 000000000000000f RSI: 00007efc2a3770a0 RDI: 0000000000000007 [ 274.243088][T15493] RBP: 00007efc2a377090 R08: 0000000000000000 R09: 0000000000000000 [ 274.243100][T15493] R10: 0000000004001c00 R11: 0000000000000246 R12: 0000000000000001 [ 274.243112][T15493] R13: 0000000000000000 R14: 00007efc2bf25fa0 R15: 00007ffd10f7b5e8 [ 274.243271][T15493] [ 274.713641][T15500] qrtr: Invalid version 0 [ 274.722827][ T29] audit: type=1326 audit(18763472.432:24976): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15499 comm="syz.3.3806" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f092fd169 code=0x7ffc0000 [ 274.747020][ T29] audit: type=1326 audit(18763472.432:24977): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15499 comm="syz.3.3806" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f0f092fd169 code=0x7ffc0000 [ 274.771093][ T29] audit: type=1326 audit(18763472.442:24978): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15499 comm="syz.3.3806" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f0f092fd1a3 code=0x7ffc0000 [ 274.811133][T15500] loop3: detected capacity change from 0 to 164 [ 274.861887][T15500] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 274.906618][T15505] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 274.916989][T15505] bond0: (slave macvlan2): Enslaving as an active interface with an up link [ 274.932707][T15500] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 275.019159][ T29] audit: type=1326 audit(18763472.522:24979): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15499 comm="syz.3.3806" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f0f092fbc1f code=0x7ffc0000 [ 275.042538][ T29] audit: type=1326 audit(18763472.532:24980): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15499 comm="syz.3.3806" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f0f092fd1f7 code=0x7ffc0000 [ 275.066027][ T29] audit: type=1326 audit(18763472.532:24981): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15499 comm="syz.3.3806" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f0f092fbad0 code=0x7ffc0000 [ 275.115132][T15513] 1ªX¹¦À: renamed from 60ªX¹¦À [ 275.123517][T15514] rdma_op ffff88810ec52d80 conn xmit_rdma 0000000000000000 [ 275.130957][T15513] A link change request failed with some changes committed already. Interface 61ªX¹¦À may have been left with an inconsistent configuration, please check. [ 275.410053][T15538] Falling back ldisc for ttyS3. [ 275.449656][T15543] netlink: 'syz.0.3820': attribute type 10 has an invalid length. [ 275.470343][T15543] team0: Device hsr_slave_0 failed to register rx_handler [ 275.515075][T15547] 0ªX¹¦À: renamed from caif0 [ 275.538077][T15547] 0ªX¹¦À: entered allmulticast mode [ 275.543455][T15547] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 275.650408][T15560] loop1: detected capacity change from 0 to 512 [ 275.682704][T15555] Falling back ldisc for ttyS3. [ 275.691515][T15568] qrtr: Invalid version 0 [ 275.712452][T15568] loop3: detected capacity change from 0 to 164 [ 275.735854][T15568] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 275.761022][T15568] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 275.799267][T15572] FAULT_INJECTION: forcing a failure. [ 275.799267][T15572] name failslab, interval 1, probability 0, space 0, times 0 [ 275.818892][T15572] CPU: 1 UID: 0 PID: 15572 Comm: syz.0.3831 Not tainted 6.14.0-syzkaller #0 [ 275.818921][T15572] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 275.818979][T15572] Call Trace: [ 275.818991][T15572] [ 275.818998][T15572] dump_stack_lvl+0xf2/0x150 [ 275.819027][T15572] dump_stack+0x15/0x1a [ 275.819052][T15572] should_fail_ex+0x24a/0x260 [ 275.819090][T15572] should_failslab+0x8f/0xb0 [ 275.819181][T15572] kmem_cache_alloc_node_noprof+0x59/0x320 [ 275.819205][T15572] ? __alloc_skb+0x10b/0x310 [ 275.819233][T15572] __alloc_skb+0x10b/0x310 [ 275.819260][T15572] netlink_ack+0xef/0x4f0 [ 275.819443][T15572] ? avc_has_perm_noaudit+0x1cc/0x210 [ 275.819465][T15572] netlink_rcv_skb+0x19c/0x230 [ 275.819495][T15572] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 275.819539][T15572] rtnetlink_rcv+0x1c/0x30 [ 275.819570][T15572] netlink_unicast+0x599/0x670 [ 275.819609][T15572] netlink_sendmsg+0x5cc/0x6e0 [ 275.819634][T15572] ? __pfx_netlink_sendmsg+0x10/0x10 [ 275.819652][T15572] __sock_sendmsg+0x140/0x180 [ 275.819772][T15572] ____sys_sendmsg+0x326/0x4b0 [ 275.819808][T15572] __sys_sendmsg+0x19d/0x230 [ 275.819919][T15572] __x64_sys_sendmsg+0x46/0x50 [ 275.819950][T15572] x64_sys_call+0x2734/0x2dc0 [ 275.819976][T15572] do_syscall_64+0xc9/0x1c0 [ 275.820019][T15572] ? clear_bhb_loop+0x55/0xb0 [ 275.820112][T15572] ? clear_bhb_loop+0x55/0xb0 [ 275.820157][T15572] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 275.820260][T15572] RIP: 0033:0x7f84517ed169 [ 275.820275][T15572] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 275.820293][T15572] RSP: 002b:00007f844fe57038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 275.820312][T15572] RAX: ffffffffffffffda RBX: 00007f8451a05fa0 RCX: 00007f84517ed169 [ 275.820324][T15572] RDX: 0000000000008000 RSI: 0000200000000280 RDI: 0000000000000005 [ 275.820337][T15572] RBP: 00007f844fe57090 R08: 0000000000000000 R09: 0000000000000000 [ 275.820358][T15572] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 275.820373][T15572] R13: 0000000000000000 R14: 00007f8451a05fa0 R15: 00007ffcc85a8548 [ 275.820392][T15572] [ 276.063622][T15574] loop1: detected capacity change from 0 to 512 [ 276.073440][T15574] EXT4-fs: Ignoring removed bh option [ 276.095158][T15574] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 276.128965][T15574] EXT4-fs (loop1): 1 truncate cleaned up [ 276.137377][T15586] 0ªX¹¦À: renamed from caif0 [ 276.139142][T15574] Cannot find set identified by id 0 to match [ 276.153589][T15586] 0ªX¹¦À: entered allmulticast mode [ 276.158886][T15586] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 276.176586][T15579] Falling back ldisc for ttyS3. [ 276.238350][T15592] FAULT_INJECTION: forcing a failure. [ 276.238350][T15592] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 276.251653][T15592] CPU: 0 UID: 0 PID: 15592 Comm: syz.0.3839 Not tainted 6.14.0-syzkaller #0 [ 276.251694][T15592] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 276.251708][T15592] Call Trace: [ 276.251716][T15592] [ 276.251724][T15592] dump_stack_lvl+0xf2/0x150 [ 276.251757][T15592] dump_stack+0x15/0x1a [ 276.251853][T15592] should_fail_ex+0x24a/0x260 [ 276.251887][T15592] should_fail+0xb/0x10 [ 276.251916][T15592] should_fail_usercopy+0x1a/0x20 [ 276.252075][T15592] _copy_from_iter+0xd5/0xd00 [ 276.252110][T15592] ? kmalloc_reserve+0x16e/0x190 [ 276.252135][T15592] ? __build_skb_around+0x196/0x1f0 [ 276.252257][T15592] ? __alloc_skb+0x21f/0x310 [ 276.252280][T15592] ? __virt_addr_valid+0x1ed/0x250 [ 276.252352][T15592] ? __check_object_size+0x364/0x520 [ 276.252456][T15592] netlink_sendmsg+0x460/0x6e0 [ 276.252482][T15592] ? __pfx_netlink_sendmsg+0x10/0x10 [ 276.252502][T15592] __sock_sendmsg+0x140/0x180 [ 276.252537][T15592] sock_write_iter+0x15e/0x1a0 [ 276.252585][T15592] do_iter_readv_writev+0x403/0x4b0 [ 276.252644][T15592] vfs_writev+0x2d9/0x880 [ 276.252663][T15592] ? get_pid_task+0x8e/0xc0 [ 276.252759][T15592] ? proc_fail_nth_write+0x12a/0x150 [ 276.252799][T15592] do_writev+0xf4/0x220 [ 276.252821][T15592] __x64_sys_writev+0x45/0x50 [ 276.252902][T15592] x64_sys_call+0x1fab/0x2dc0 [ 276.252931][T15592] do_syscall_64+0xc9/0x1c0 [ 276.252966][T15592] ? clear_bhb_loop+0x55/0xb0 [ 276.252995][T15592] ? clear_bhb_loop+0x55/0xb0 [ 276.253103][T15592] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 276.253132][T15592] RIP: 0033:0x7f84517ed169 [ 276.253148][T15592] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 276.253168][T15592] RSP: 002b:00007f844fe57038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 276.253201][T15592] RAX: ffffffffffffffda RBX: 00007f8451a05fa0 RCX: 00007f84517ed169 [ 276.253214][T15592] RDX: 0000000000000001 RSI: 00002000000000c0 RDI: 0000000000000008 [ 276.253227][T15592] RBP: 00007f844fe57090 R08: 0000000000000000 R09: 0000000000000000 [ 276.253240][T15592] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 276.253253][T15592] R13: 0000000000000000 R14: 00007f8451a05fa0 R15: 00007ffcc85a8548 [ 276.253273][T15592] [ 276.564495][T15604] loop7: detected capacity change from 0 to 1024 [ 276.574618][T15604] journal_path: Non-blockdev passed as './file1' [ 276.581142][T15604] EXT4-fs: error: could not find journal device path [ 276.592139][T15606] netlink: 'syz.0.3844': attribute type 10 has an invalid length. [ 276.600389][T15606] team0: Device hsr_slave_0 failed to register rx_handler [ 276.664342][T15614] netlink: 'syz.1.3848': attribute type 10 has an invalid length. [ 276.694382][T15614] team0: Device hsr_slave_0 failed to register rx_handler [ 276.754258][T15620] __nla_validate_parse: 24 callbacks suppressed [ 276.754285][T15620] netlink: 3 bytes leftover after parsing attributes in process `syz.1.3850'. [ 276.773539][T15620] 0ªX¹¦À: renamed from caif0 [ 276.794058][T15620] 0ªX¹¦À: entered allmulticast mode [ 276.799315][T15620] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 276.847008][T15631] FAULT_INJECTION: forcing a failure. [ 276.847008][T15631] name failslab, interval 1, probability 0, space 0, times 0 [ 276.861866][T15631] CPU: 0 UID: 0 PID: 15631 Comm: syz.7.3854 Not tainted 6.14.0-syzkaller #0 [ 276.861893][T15631] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 276.861906][T15631] Call Trace: [ 276.861912][T15631] [ 276.861939][T15631] dump_stack_lvl+0xf2/0x150 [ 276.861970][T15631] dump_stack+0x15/0x1a [ 276.861996][T15631] should_fail_ex+0x24a/0x260 [ 276.862032][T15631] should_failslab+0x8f/0xb0 [ 276.862135][T15631] kmem_cache_alloc_noprof+0x52/0x320 [ 276.862159][T15631] ? copy_signal+0x54/0x350 [ 276.862192][T15631] ? copy_sighand+0x52/0x1b0 [ 276.862226][T15631] copy_signal+0x54/0x350 [ 276.862320][T15631] copy_process+0xcdf/0x1f50 [ 276.862357][T15631] kernel_clone+0x167/0x5e0 [ 276.862416][T15631] ? __rcu_read_unlock+0x4e/0x70 [ 276.862504][T15631] __x64_sys_clone+0xe7/0x120 [ 276.862550][T15631] x64_sys_call+0x2d7e/0x2dc0 [ 276.862578][T15631] do_syscall_64+0xc9/0x1c0 [ 276.862611][T15631] ? clear_bhb_loop+0x55/0xb0 [ 276.862646][T15631] ? clear_bhb_loop+0x55/0xb0 [ 276.862689][T15631] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 276.862723][T15631] RIP: 0033:0x7f348416d169 [ 276.862738][T15631] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 276.862795][T15631] RSP: 002b:00007f34827d6fe8 EFLAGS: 00000202 ORIG_RAX: 0000000000000038 [ 276.862817][T15631] RAX: ffffffffffffffda RBX: 00007f3484385fa0 RCX: 00007f348416d169 [ 276.862869][T15631] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000080 [ 276.862884][T15631] RBP: 00007f34827d7090 R08: 0000000000000000 R09: 0000000000000000 [ 276.862899][T15631] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000002 [ 276.862953][T15631] R13: 0000000000000000 R14: 00007f3484385fa0 R15: 00007ffe005198a8 [ 276.862971][T15631] [ 277.061129][T15635] loop4: detected capacity change from 0 to 1024 [ 277.068066][T15635] journal_path: Non-blockdev passed as './file1' [ 277.074468][T15635] EXT4-fs: error: could not find journal device path [ 277.074530][T15637] loop1: detected capacity change from 0 to 512 [ 277.087846][T15637] EXT4-fs: Ignoring removed i_version option [ 277.113322][T15639] netlink: 'syz.3.3857': attribute type 10 has an invalid length. [ 277.121677][T15639] team0: Device hsr_slave_0 failed to register rx_handler [ 277.130522][T15637] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 277.140400][T15637] EXT4-fs (loop1): couldn't mount as ext3 due to feature incompatibilities [ 277.205772][T15647] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=15647 comm=syz.7.3860 [ 277.273594][T15649] loop7: detected capacity change from 0 to 164 [ 277.283479][T15649] Unable to read rock-ridge attributes [ 277.290621][T15649] Unable to read rock-ridge attributes [ 277.298129][T15649] Unable to read rock-ridge attributes [ 277.346599][T15649] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 277.437322][T15654] loop4: detected capacity change from 0 to 512 [ 277.462551][T15655] block device autoloading is deprecated and will be removed. [ 277.470126][T15655] syz.3.3861: attempt to access beyond end of device [ 277.470126][T15655] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 277.501371][T15654] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 277.666202][T15661] loop0: detected capacity change from 0 to 512 [ 277.674663][T15661] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 277.689575][T15661] EXT4-fs (loop0): 1 truncate cleaned up [ 277.789000][T15664] loop0: detected capacity change from 0 to 512 [ 277.796554][T15664] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 277.808136][T15664] EXT4-fs (loop0): 1 truncate cleaned up [ 277.853110][T15669] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3866'. [ 278.107879][T15676] FAULT_INJECTION: forcing a failure. [ 278.107879][T15676] name failslab, interval 1, probability 0, space 0, times 0 [ 278.120740][T15676] CPU: 0 UID: 0 PID: 15676 Comm: syz.0.3869 Not tainted 6.14.0-syzkaller #0 [ 278.120764][T15676] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 278.120776][T15676] Call Trace: [ 278.120784][T15676] [ 278.120791][T15676] dump_stack_lvl+0xf2/0x150 [ 278.120826][T15676] dump_stack+0x15/0x1a [ 278.120902][T15676] should_fail_ex+0x24a/0x260 [ 278.120936][T15676] should_failslab+0x8f/0xb0 [ 278.120975][T15676] kmem_cache_alloc_node_noprof+0x59/0x320 [ 278.121006][T15676] ? __alloc_skb+0x10b/0x310 [ 278.121092][T15676] __alloc_skb+0x10b/0x310 [ 278.121121][T15676] netlink_alloc_large_skb+0xad/0xe0 [ 278.121153][T15676] netlink_sendmsg+0x3b4/0x6e0 [ 278.121225][T15676] ? __pfx_netlink_sendmsg+0x10/0x10 [ 278.121249][T15676] __sock_sendmsg+0x140/0x180 [ 278.121291][T15676] ____sys_sendmsg+0x326/0x4b0 [ 278.121395][T15676] __sys_sendmsg+0x19d/0x230 [ 278.121445][T15676] __x64_sys_sendmsg+0x46/0x50 [ 278.121478][T15676] x64_sys_call+0x2734/0x2dc0 [ 278.121566][T15676] do_syscall_64+0xc9/0x1c0 [ 278.121646][T15676] ? clear_bhb_loop+0x55/0xb0 [ 278.121682][T15676] ? clear_bhb_loop+0x55/0xb0 [ 278.121776][T15676] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 278.121810][T15676] RIP: 0033:0x7f84517ed169 [ 278.121828][T15676] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 278.121851][T15676] RSP: 002b:00007f844fe57038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 278.121873][T15676] RAX: ffffffffffffffda RBX: 00007f8451a05fa0 RCX: 00007f84517ed169 [ 278.121954][T15676] RDX: 0000000000000000 RSI: 0000200000000300 RDI: 0000000000000006 [ 278.122026][T15676] RBP: 00007f844fe57090 R08: 0000000000000000 R09: 0000000000000000 [ 278.122120][T15676] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 278.122134][T15676] R13: 0000000000000000 R14: 00007f8451a05fa0 R15: 00007ffcc85a8548 [ 278.122155][T15676] [ 278.417827][T15685] loop7: detected capacity change from 0 to 1024 [ 278.426923][T15685] EXT4-fs: Ignoring removed nobh option [ 278.432575][T15685] EXT4-fs: Ignoring removed bh option [ 278.464105][T15685] EXT4-fs error (device loop7): ext4_mb_mark_diskspace_used:4115: comm syz.7.3871: Allocating blocks 481-513 which overlap fs metadata [ 278.494324][T15692] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=35 sclass=netlink_route_socket pid=15692 comm=syz.4.3873 [ 278.509173][ T29] kauditd_printk_skb: 238 callbacks suppressed [ 278.509192][ T29] audit: type=1400 audit(18763476.222:25220): avc: denied { lock } for pid=15684 comm="syz.7.3871" path="/461/file1/blkio.bfq.avg_queue_size" dev="loop7" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 278.577625][ T8590] ================================================================== [ 278.585767][ T8590] BUG: KCSAN: data-race in __find_get_block / has_bh_in_lru [ 278.593098][ T8590] [ 278.595433][ T8590] read-write to 0xffff888237d2ba28 of 8 bytes by task 15699 on cpu 1: [ 278.603601][ T8590] __find_get_block+0x42e/0x890 [ 278.608476][ T8590] bdev_getblk+0x30/0x3b0 [ 278.612826][ T8590] __ext4_get_inode_loc+0x2f7/0x940 [ 278.618054][ T8590] ext4_reserve_inode_write+0xb0/0x200 [ 278.623518][ T8590] __ext4_mark_inode_dirty+0x8e/0x440 [ 278.628903][ T8590] ext4_dirty_inode+0x91/0xb0 [ 278.633589][ T8590] __mark_inode_dirty+0x166/0x7e0 [ 278.638655][ T8590] file_update_time+0x285/0x2b0 [ 278.643516][ T8590] ext4_page_mkwrite+0x19e/0xb70 [ 278.648473][ T8590] handle_mm_fault+0x12f7/0x2b00 [ 278.653416][ T8590] exc_page_fault+0x3b9/0x650 [ 278.658109][ T8590] asm_exc_page_fault+0x26/0x30 [ 278.662989][ T8590] [ 278.665312][ T8590] read to 0xffff888237d2ba28 of 8 bytes by task 8590 on cpu 0: [ 278.672861][ T8590] has_bh_in_lru+0x35/0x1f0 [ 278.677391][ T8590] __lru_add_drain_all+0x23f/0x3f0 [ 278.682512][ T8590] lru_add_drain_all+0x10/0x20 [ 278.687283][ T8590] invalidate_bdev+0x47/0x70 [ 278.691886][ T8590] ext4_put_super+0x571/0x810 [ 278.696608][ T8590] generic_shutdown_super+0xe5/0x220 [ 278.701907][ T8590] kill_block_super+0x2a/0x70 [ 278.706620][ T8590] ext4_kill_sb+0x44/0x80 [ 278.710964][ T8590] deactivate_locked_super+0x7d/0x1c0 [ 278.716348][ T8590] deactivate_super+0x9f/0xb0 [ 278.721032][ T8590] cleanup_mnt+0x268/0x2e0 [ 278.725454][ T8590] __cleanup_mnt+0x19/0x20 [ 278.729876][ T8590] task_work_run+0x13a/0x1a0 [ 278.734505][ T8590] syscall_exit_to_user_mode+0xa8/0x120 [ 278.740113][ T8590] do_syscall_64+0xd6/0x1c0 [ 278.744655][ T8590] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 278.750563][ T8590] [ 278.752885][ T8590] value changed: 0x0000000000000000 -> 0xffff888106124478 [ 278.760001][ T8590] [ 278.762323][ T8590] Reported by Kernel Concurrency Sanitizer on: [ 278.768478][ T8590] CPU: 0 UID: 0 PID: 8590 Comm: syz-executor Not tainted 6.14.0-syzkaller #0 [ 278.777246][ T8590] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 278.787310][ T8590] ================================================================== [ 278.798391][T15700] netlink: 3 bytes leftover after parsing attributes in process `syz.4.3879'. [ 278.807527][T15700] 1ªX¹¦À: renamed from 60ªX¹¦À [ 278.834148][T15700] A link change request failed with some changes committed already. Interface 61ªX¹¦À may have been left with an inconsistent configuration, please check.