last executing test programs: 3m39.024470934s ago: executing program 0 (id=2474): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = getpid() bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = syz_pidfd_open(r1, 0x0) setns(r2, 0x24020000) syz_clone(0xd5ba2180, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) r3 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f00000000c0)) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r4) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@getchain={0x24, 0x11, 0x839, 0x1, 0x0, {0x0, 0x0, 0x0, 0x0, {0xc}, {0x0, 0x3}, {0x0, 0xfff3}}}, 0x24}, 0x1, 0x0, 0x0, 0x8044}, 0x8000) write$nci(r3, &(0x7f0000000040)=ANY=[@ANYBLOB="414601"], 0x4) lstat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0a00000001010000ff7f0000cc00000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00m'], 0x48) r7 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) write$binfmt_elf64(r7, &(0x7f0000000f00)=ANY=[@ANYBLOB="7f454c4600040000ff7f00000000000003003e00ecffffff940200000000000040000000000000000000000000000000000000000000380001000000f3ff000003000000970f000004000000000000000d00000000000000c6010000040000000700"], 0x78) close(r7) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r7, 0xc018937b, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r6, {0xee00}}, './file0\x00'}) setregid(r5, 0x0) 3m38.728723123s ago: executing program 0 (id=2477): perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x57, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0xfffffffdffff18d6, 0x96ef}, 0x1206c, 0x80, 0x7, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) memfd_create(&(0x7f00000000c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x0) syz_io_uring_setup(0x5513, &(0x7f00000002c0)={0x0, 0xb78c, 0x1000, 0x1, 0x3a0}, &(0x7f0000000480), &(0x7f0000000180)) syz_io_uring_setup(0x10b, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0xffffffff}, &(0x7f00000003c0)=0x0, &(0x7f0000000340)=0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000060000000800000005"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000002c0)={r2, &(0x7f0000000080), &(0x7f0000000280)=@udp}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r4 = open(&(0x7f0000000000)='./bus\x00', 0x40, 0x0) fgetxattr(r4, &(0x7f00000003c0)=@known='security.selinux\x00', 0x0, 0x0) r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r6 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r6}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) readv(r5, &(0x7f0000000840)=[{&(0x7f0000000080)=""/45, 0x2d}], 0x1) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x128, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002008207b1af8ff00000000bfb702000008000000b70300000000000085000000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000900bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r10 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r9}, 0x10) write$binfmt_script(r7, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r7, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) syz_memcpy_off$IO_URING_METADATA_GENERIC(r0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r0, r1, &(0x7f00000002c0)=@IORING_OP_WRITE_FIXED={0x5, 0x48, 0x2000, @fd=r10, 0x800, 0x0, 0xa, 0xc, 0x0, {0x2}}) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1b0000000000000000000000008000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000d0e3e2b422fbfcec785adfcc6200"/41], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r11, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000072000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 3m37.943722332s ago: executing program 0 (id=2481): socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r0 = memfd_secret(0x80000) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0x2000000000000194, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000"], &(0x7f0000000040)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) msgget$private(0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000015c0)={r1, 0x0, 0x0}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001600)={0x11, 0x5, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1e4d, @void, @value}, 0x94) r2 = signalfd(0xffffffffffffffff, &(0x7f00007aeff8)={[0xfffffffffffffffc]}, 0x8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sync() sync() bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0}, 0x18) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000001880), 0x4) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_DEV_UP(r3, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', 0xffffffffffffffff, 0x0, 0x1000000000009}, 0x18) getrandom(&(0x7f0000000340)=""/4080, 0xfffffef0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000017c0)={0x6, 0x2b, &(0x7f0000001340)=ANY=[@ANYBLOB="18000000feffffff000000000100000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000ff0f0000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000000000850000008600000018250000", @ANYRES32=r0, @ANYBLOB="000000000600000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b708007b8ab8fb00000000bfb89e757faea20000000000000702ffffff7f00000000000008000000000900000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000000000008500000086000000851000000700000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000cb1f00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020000008500000082000000093803000700000018270000", @ANYRES32=r2, @ANYBLOB="000000001e0700009500000000000000"], &(0x7f0000000300)='syzkaller\x00', 0x6, 0x88, &(0x7f00000014c0)=""/136, 0x41000, 0x1, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f0000001580)={0x2, 0x1}, 0x8, 0x10, &(0x7f00000016c0)={0x1, 0xc, 0x9, 0x4}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001700)=[r0], 0x0, 0x10, 0x1, @void, @value}, 0x94) io_setup(0x8, &(0x7f0000000600)) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000ddffffff850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000003680)='sched_switch\x00', r4}, 0x10) r5 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_misc(r5, &(0x7f0000000240), 0xfffffecc) 3m36.875284639s ago: executing program 0 (id=2489): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1900000004000000080000000600000000000000", @ANYRES32, @ANYBLOB="ff7f00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000000000000000000000000000001e0e422934733dff5ff60800000006c5a6aeffcde1ef77db40e68a6e0184e3a5e4944c382b69c6cc5cc9df7d195d29fa0d8fc1514f06c2cb1df88a0b0500000000000000f406008790a79121d60355cfb5bad2745bc924bf0000"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000", @ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r0}, &(0x7f0000000200), &(0x7f0000000280)=r1}, 0x20) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000200)='./file2\x00', 0x204002, &(0x7f00000000c0), 0xb8, 0x564, &(0x7f00000008c0)="$eJzs3c9rHFUcAPDvbJI2/aFJoRT1IIEerNRumsQfFTzUo2ixoPe6JNNQsumW7KY0sWB7sBcvUgQRC6J37x6L/4B/RUELRUrQg5eV2cym22Y32aSbJu1+PjDJezOzee+7M9+XNzu7bAB9ayz7UYh4NSK+TSJGWrYNRr5xbHW/lYfXp7MliXr9s7+TSPJ1zf2T/PehvPJKRPz+dcTJwvp2q0vLc6VyOV3I6+O1+Svj1aXlU5fmS7PpbHp5cmrqzDtTk++/927PYn3z/L8/fHr3ozPfHF/5/tf7R24ncTYO59ta43gKN1orYzGWPydDcfaJHSd60Nhekux2B9iWgTzPhyIbA0ZiIM/6tuojz7JrwA77KktroE8l8h/6VHMe0Ly279F18HPjwYerF0Dr4x9cfW0khhvXRgdXkseujLLr3dEetJ+18dtfd25nS/TudQiATd24GRGnBwfXj39JPv5t3+ku9nmyDeMfPDt3s/nPW+3mP4W1+U+0mf8capO727F5/hfu96CZjrL53wdt579rN61GB/LaS40531By8VI5zca2lyPiRAztz+ob3M/5orByr95pY+v8L1uy9ptzwbwf9wf3P/6YmVKt9FRBt3hwM+K1tvPfZO34J22Of/Z8nO+yjWPpndc7bds8/p1V/znijbbH/9EdrWTj+5PjjfNhvHlWrPfPrWN/dGp/t+PPjv/BjeMfTVrv11a33sZPw/+lnbZt9/zfl3zeKO/L110r1WoLExH7kk/Wr5989Nhmvbl/Fv+J4xuPf+3O/wNZYncZ/62jt1p3Hd5a/Dsri39mS8d/64V7H3/5Y6f2uzv+bzdKJ/I13Yx/3XbwaZ47AAAAAAAA2GsKEXE4kkJxrVwoFIur7+84GgcL5Uq1dvJiZfHyTDQ+KzsaQ4Xmne6RlvdDTOTvh23WJ5+oT0XEkYj4buBAo16crpRndjt4AAAAAAAAAAAAAAAAAAAA2CMORQy3+/x/5s+B3e4dsOM2+Mpv4AXXOf/zLb34pidgT/L/H/qX/If+Jf+hf8l/6F/yH/qX/If+Jf+hf20l/385t4MdAQAAAAAAAAAAAAAAAAAAAAAAAAAAgBfD+XPnsqW+8vD6dFafubq0OFe5emomrc4V5xeni9OVhSvF2UpltpwWpyvzm/29cqVyZWIyFq+N19Jqbby6tHxhvrJ4uXbh0nxpNr2QDj2TqAAAAAAAAAAAAAAAAAAAAOD5Ul1aniuVy+mCgsK2CoN7oxsKPS7s9sgEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAI/8HwAA///F1Dry") r2 = open(&(0x7f0000000040)='./file2\x00', 0x181042, 0x0) write$P9_RREADDIR(r2, &(0x7f0000000700)={0xb, 0x29, 0x2, {0x5}}, 0xb) sendfile(r2, r2, &(0x7f00000002c0), 0x7f03) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1801000020017e9c0000000000000000850000007b00000095"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) r3 = inotify_init1(0x80800) inotify_add_watch(r3, &(0x7f0000000300)='./file0\x00', 0xe0000401) umount2(0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000000)='kmem_cache_free\x00', r5}, 0x10) r6 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r6, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) sendmsg$nl_route(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="380000001a0001000000000000000a0080002020"], 0x38}}, 0x0) r7 = socket$inet6(0xa, 0x40000080806, 0x0) connect$inet6(r7, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) close(r3) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8, 0x8, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r8}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f00000003c0)='kfree\x00', r9}, 0x10) 3m35.853503337s ago: executing program 0 (id=2493): mount(0x0, &(0x7f0000000080)='.\x00', 0x0, 0x8cffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000013c0)={0x11, 0x13, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000040000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000"], &(0x7f0000001380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000180)='sys_enter\x00', r0}, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f0000000a40)='GPL\x00') ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bond0\x00', 0x4000}) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) timer_create(0x2, 0x0, 0x0) clock_nanosleep(0x2, 0x0, &(0x7f0000000300)={0x0, 0x989680}, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read(r1, &(0x7f0000000040)=""/148, 0xffffff96) r2 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xc, &(0x7f0000000240)=@assoc_value={0x0}, 0x0) setsockopt$inet_sctp6_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000ac0)=@assoc_value={r3, 0xfffff7f9}, 0x8) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, 0x0, 0x840) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89fb, &(0x7f0000000080)) bind$netlink(0xffffffffffffffff, &(0x7f0000000140)={0x10, 0x0, 0x25dfdbfe, 0x8000000}, 0xc) r4 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x4000000000000, 0x40, &(0x7f0000000300)=@raw={'raw\x00', 0x4001, 0x8000000, 0x238, 0xf8, 0x720d, 0x148, 0xf8, 0x148, 0x1c8, 0x240, 0x240, 0x1c8, 0x240, 0x7fffffe, 0x0, {[{{@ip={@remote, @empty, 0x0, 0x0, 'wlan1\x00', 'ip6erspan0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @dev}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x298) sendto$inet(r4, 0x0, 0x0, 0x24000080, 0x0, 0x0) listen(r4, 0x2) bind$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x10, 0x0, 0x25dfdbfe, 0xdbde8f94d813f6d3}, 0xc) mlock(&(0x7f0000bff000/0x400000)=nil, 0x400000) 3m34.507541464s ago: executing program 4 (id=2496): perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x57, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0xfffffffdffff18d6, 0x96ef}, 0x1206c, 0x80, 0x7, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) memfd_create(&(0x7f00000000c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x0) syz_io_uring_setup(0x5513, &(0x7f00000002c0)={0x0, 0xb78c, 0x1000, 0x1, 0x3a0}, &(0x7f0000000480), &(0x7f0000000180)) syz_io_uring_setup(0x10b, 0x0, &(0x7f00000003c0)=0x0, &(0x7f0000000340)) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000060000000800000005"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000002c0)={r1, &(0x7f0000000080), &(0x7f0000000280)=@udp}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r3 = open(&(0x7f0000000000)='./bus\x00', 0x40, 0x0) fgetxattr(r3, &(0x7f00000003c0)=@known='security.selinux\x00', 0x0, 0x0) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r5 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) readv(r4, &(0x7f0000000840)=[{&(0x7f0000000080)=""/45, 0x2d}], 0x1) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x128, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002008207b1af8ff00000000bfb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000900bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r8}, 0x10) write$binfmt_script(r6, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r6, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) syz_memcpy_off$IO_URING_METADATA_GENERIC(r0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1b0000000000000000000000008000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000d0e3e2b422fbfcec785adfcc6200"/41], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000072000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 3m33.866049573s ago: executing program 4 (id=2502): socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) memfd_secret(0x80000) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0x2000000000000194, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000"], &(0x7f0000000040)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) msgget$private(0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000015c0)={r0, 0x0, 0x0}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001600)={0x11, 0x5, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1e4d, @void, @value}, 0x94) r1 = signalfd(0xffffffffffffffff, &(0x7f00007aeff8)={[0xfffffffffffffffc]}, 0x8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sync() sync() bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0}, 0x18) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000001880), 0x4) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_DEV_UP(r2, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', 0xffffffffffffffff, 0x0, 0x1000000000009}, 0x18) getrandom(&(0x7f0000000340)=""/4080, 0xfffffef0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETFLOWTABLE(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="2c000000170aff07"], 0x2c}}, 0x0) io_setup(0x8, &(0x7f0000000600)) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000003680)='sched_switch\x00', r4}, 0x10) r5 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_misc(r5, &(0x7f0000000240), 0xfffffecc) 3m33.705399253s ago: executing program 0 (id=2503): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1900000004000000080000000600000000000000", @ANYRES32, @ANYBLOB="ff7f00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000000000000000000000000000001e0e422934733dff5ff60800000006c5a6aeffcde1ef77db40e68a6e0184e3a5e4944c382b69c6cc5cc9df7d195d29fa0d8fc1514f06c2cb1df88a0b0500000000000000f406008790a79121d60355cfb5bad2745bc924bf0000"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095", @ANYBLOB, @ANYRES32=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r0}, &(0x7f0000000200), &(0x7f0000000280)=r1}, 0x20) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000200)='./file2\x00', 0x204002, &(0x7f00000000c0), 0xb8, 0x564, &(0x7f00000008c0)="$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") r2 = open(&(0x7f0000000040)='./file2\x00', 0x181042, 0x0) write$P9_RREADDIR(r2, &(0x7f0000000700)={0xb, 0x29, 0x2, {0x5}}, 0xb) sendfile(r2, r2, &(0x7f00000002c0), 0x7f03) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1801000020017e9c0000000000000000850000007b00000095"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) r4 = inotify_init1(0x80800) inotify_add_watch(r4, &(0x7f0000000300)='./file0\x00', 0xe0000401) umount2(&(0x7f00000002c0)='./file0\x00', 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000000)='kmem_cache_free\x00', r6}, 0x10) r7 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r7, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) sendmsg$nl_route(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="380000001a0001000000000000000a0080002020"], 0x38}}, 0x0) r8 = socket$inet6(0xa, 0x40000080806, 0x0) connect$inet6(r8, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) close(r4) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8, 0x8, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r9}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f00000003c0)='kfree\x00', r10}, 0x10) 3m33.705063083s ago: executing program 32 (id=2503): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1900000004000000080000000600000000000000", @ANYRES32, @ANYBLOB="ff7f00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000000000000000000000000000001e0e422934733dff5ff60800000006c5a6aeffcde1ef77db40e68a6e0184e3a5e4944c382b69c6cc5cc9df7d195d29fa0d8fc1514f06c2cb1df88a0b0500000000000000f406008790a79121d60355cfb5bad2745bc924bf0000"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095", @ANYBLOB, @ANYRES32=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r0}, &(0x7f0000000200), &(0x7f0000000280)=r1}, 0x20) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000200)='./file2\x00', 0x204002, &(0x7f00000000c0), 0xb8, 0x564, &(0x7f00000008c0)="$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") r2 = open(&(0x7f0000000040)='./file2\x00', 0x181042, 0x0) write$P9_RREADDIR(r2, &(0x7f0000000700)={0xb, 0x29, 0x2, {0x5}}, 0xb) sendfile(r2, r2, &(0x7f00000002c0), 0x7f03) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1801000020017e9c0000000000000000850000007b00000095"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) r4 = inotify_init1(0x80800) inotify_add_watch(r4, &(0x7f0000000300)='./file0\x00', 0xe0000401) umount2(&(0x7f00000002c0)='./file0\x00', 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000000)='kmem_cache_free\x00', r6}, 0x10) r7 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r7, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) sendmsg$nl_route(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="380000001a0001000000000000000a0080002020"], 0x38}}, 0x0) r8 = socket$inet6(0xa, 0x40000080806, 0x0) connect$inet6(r8, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) close(r4) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8, 0x8, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r9}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f00000003c0)='kfree\x00', r10}, 0x10) 3m32.777620791s ago: executing program 4 (id=2509): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x141a82, 0x0) r1 = dup(r0) r2 = syz_io_uring_setup(0x4174, &(0x7f0000000780)={0x0, 0x7e05, 0x10100}, &(0x7f00000005c0)=0x0, &(0x7f0000000340)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000180)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x4004, @fd=r2, 0x4, &(0x7f0000000600)=""/117, 0x75, 0x11}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00'}, 0x18) lsm_get_self_attr(0x67, &(0x7f0000000580)={0x0, 0x0, 0xad, 0x8d, ""/141}, &(0x7f0000000080)=0xad, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000010000700000e0000000000000000000a20000000000a03000000000000000000010000000900010073797a30000000003c000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a30000000000800054000000002600000000c0a01080000000000000000010000000900020073797a32000000003400038030000080080003400000000224000b80200001800e000100636f6e6e6c696d69740000000c00028008000140000000000900010073797a30"], 0xe4}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="1801000000000000000040640000006d00000095a25cb8b16c8df3d0f12d43da58b053c7af5d67c4"], 0x0, 0x3, 0x0, 0x0, 0x41100, 0x40, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r6, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f00000005c0)=""/151, 0x97}], 0x1, &(0x7f0000002f40)=""/229, 0x17}, 0x0) close(r7) r8 = syz_open_procfs(0x0, &(0x7f0000000140)='cgroup\x00') preadv(r8, &(0x7f00000000c0)=[{&(0x7f0000000480)=""/128, 0x80}], 0x1, 0x12e, 0x0) sendfile(r1, 0xffffffffffffffff, 0x0, 0x8000fffffffe) r9 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/pm_test', 0x141a82, 0x0) sendfile(r9, r9, 0x0, 0x2f) 3m32.58703007s ago: executing program 4 (id=2511): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1900000004000000080000000600000000000000", @ANYRES32, @ANYBLOB="ff7f00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000000000000000000000000000001e0e422934733dff5ff60800000006c5a6aeffcde1ef77db40e68a6e0184e3a5e4944c382b69c6cc5cc9df7d195d29fa0d8fc1514f06c2cb1df88a0b0500000000000000f406008790a79121d60355cfb5bad2745bc924bf0000"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000", @ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r0}, &(0x7f0000000200), &(0x7f0000000280)=r1}, 0x20) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000200)='./file2\x00', 0x204002, &(0x7f00000000c0), 0xb8, 0x564, &(0x7f00000008c0)="$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") r2 = open(&(0x7f0000000040)='./file2\x00', 0x181042, 0x0) write$P9_RREADDIR(r2, &(0x7f0000000700)={0xb, 0x29, 0x2, {0x5}}, 0xb) sendfile(r2, r2, &(0x7f00000002c0), 0x7f03) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1801000020017e9c0000000000000000850000007b00000095"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) r3 = inotify_init1(0x80800) inotify_add_watch(r3, &(0x7f0000000300)='./file0\x00', 0xe0000401) umount2(0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000000)='kmem_cache_free\x00', r5}, 0x10) r6 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r6, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) sendmsg$nl_route(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="380000001a0001000000000000000a0080002020"], 0x38}}, 0x0) r7 = socket$inet6(0xa, 0x40000080806, 0x0) connect$inet6(r7, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) close(r3) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8, 0x8, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r8}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f00000003c0)='kfree\x00', r9}, 0x10) 3m31.661764638s ago: executing program 4 (id=2514): r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) quotactl_fd$Q_SETQUOTA(r0, 0xffffffff80000800, 0x0, &(0x7f0000000140)={0x0, 0xa, 0x7fffffff, 0x12000000000008, 0x4, 0x401, 0x3, 0x800000000000590, 0x2}) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0xe4a5}}, &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40fff, 0x0, '\x00', 0x0, @fallback=0x214785d9dd07d43d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_io_uring_setup(0xa94, &(0x7f0000000280), &(0x7f0000000040), &(0x7f00000005c0)) io_uring_enter(0xffffffffffffffff, 0x48e9, 0x0, 0x0, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="27000000009280009589e1d1079a6a9ddba6e5d14098acb8c0818dfcfca2d9b20600ac8a2d0858b4b2b9505aa1a5109dea104bfef1998193971548a9270db8d2505a84ad78d0152ad53a7c53dd614ecae7fd4ef69c614d0f65cb117fe00717dfba32baf7f0b73b9077000003419f974437605f7d3a62d11d8795199625aed9526b045ec7a7381835fa9254ec56fed8cd"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r2}, 0x18) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) bpf$PROG_LOAD(0x5, 0x0, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x0) r6 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r6, &(0x7f0000000140)=[{&(0x7f0000000080)}], 0x1) bind$can_j1939(r4, &(0x7f0000000040)={0x1d, r5, 0x3, {0x1, 0xf0, 0x2}, 0x2}, 0x18) r7 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r3, &(0x7f0000001700)={@val={0x2000, 0x88fb}, @void, @eth={@broadcast, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x29, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, {0x0, 0x0, 0x28, 0x0, @opaque="9b1fa4eee5153e9db9d87bd15ac2629eb59a888c2c94d5ae20b07315c4cbd9ac"}}}}}}, 0x4e) 3m30.669464076s ago: executing program 4 (id=2520): open(&(0x7f0000000000)='./bus\x00', 0x143c62, 0x24) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3e, 0x9, 0xc0, 0x0, 0x0, 0x5, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, @perf_config_ext={0x0, 0x5}, 0x100000, 0x5dd8, 0x5, 0x6, 0x0, 0x8, 0xfffc}, 0x0, 0xe, 0xffffffffffffffff, 0x8) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) io_setup(0x400, &(0x7f0000001080)) prlimit64(0x0, 0xe, &(0x7f0000000780)={0x8, 0x24a}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000240)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) perf_event_open(&(0x7f0000000200)={0x0, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x9, 0x46002, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000009c0), 0x10}, 0x100000, 0x100, 0x0, 0x7, 0x40000003, 0x0, 0x8, 0x0, 0xfffffffe}, r1, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0) pipe2$watch_queue(&(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000980)={&(0x7f0000000900)='sched_kthread_work_queue_work\x00', r4, 0x0, 0xfffffffffffffffa}, 0x18) r5 = socket(0xa, 0x40000000002, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r5, 0x0, 0x80, &(0x7f0000000880)=@nat={'nat\x00', 0x19, 0x2, 0x348, [0x20000280, 0x0, 0x0, 0x200002b0, 0x200002e0], 0x2, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="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"/808]}, 0x3a0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x18) request_key(&(0x7f0000000280)='asymmetric\x00', &(0x7f00000002c0)={'syz', 0x0}, &(0x7f0000000300)='@\x9f+^\xbe-@(/[+\x9f{\x00', 0xfffffffffffffffe) mmap(&(0x7f0000261000/0xc00000)=nil, 0xc00000, 0x3000003, 0x31, 0xffffffffffffffff, 0x0) getpid() 3m30.658961046s ago: executing program 33 (id=2520): open(&(0x7f0000000000)='./bus\x00', 0x143c62, 0x24) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3e, 0x9, 0xc0, 0x0, 0x0, 0x5, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, @perf_config_ext={0x0, 0x5}, 0x100000, 0x5dd8, 0x5, 0x6, 0x0, 0x8, 0xfffc}, 0x0, 0xe, 0xffffffffffffffff, 0x8) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) io_setup(0x400, &(0x7f0000001080)) prlimit64(0x0, 0xe, &(0x7f0000000780)={0x8, 0x24a}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000240)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) perf_event_open(&(0x7f0000000200)={0x0, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x9, 0x46002, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000009c0), 0x10}, 0x100000, 0x100, 0x0, 0x7, 0x40000003, 0x0, 0x8, 0x0, 0xfffffffe}, r1, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0) pipe2$watch_queue(&(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000980)={&(0x7f0000000900)='sched_kthread_work_queue_work\x00', r4, 0x0, 0xfffffffffffffffa}, 0x18) r5 = socket(0xa, 0x40000000002, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r5, 0x0, 0x80, &(0x7f0000000880)=@nat={'nat\x00', 0x19, 0x2, 0x348, [0x20000280, 0x0, 0x0, 0x200002b0, 0x200002e0], 0x2, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="00000000000000000000000000000021000000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000400000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff020000000300000000000000ffff0000000000000000000000000000000062726983676530000000000000000000736974300000000000000000000000007465616d300000000000000000000000aaaaaaaaaaaa000000000000aaaaaaaaaabb0000000000000000d8010000d801000010020000636f6d6d656e7400000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000003f0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073746174697374696300000000000000000000000000000000000000000000001800000000000000000000000000000000000000000000000000000000000000736e6174000000000000000000000000000000000000000000000000000000001000000000000000aaaaaaaaaa000000ffffffff000000001b0000000000000000007465616d5f736c6176655f310000000069726c616e300000000000000000000069726c616e3000e575dd73000000000073797a6b616c6c6572300000000000000180c2000000000000000000f646793b7b3900000000000000007000000070000000a8000000736e617400"/808]}, 0x3a0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x18) request_key(&(0x7f0000000280)='asymmetric\x00', &(0x7f00000002c0)={'syz', 0x0}, &(0x7f0000000300)='@\x9f+^\xbe-@(/[+\x9f{\x00', 0xfffffffffffffffe) mmap(&(0x7f0000261000/0xc00000)=nil, 0xc00000, 0x3000003, 0x31, 0xffffffffffffffff, 0x0) getpid() 38.885368662s ago: executing program 6 (id=4251): perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x57, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0xfffffffdffff18d6, 0x96ef}, 0x1206c, 0x80, 0x7, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) memfd_create(&(0x7f00000000c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x0) syz_io_uring_setup(0x5513, &(0x7f00000002c0)={0x0, 0xb78c, 0x1000, 0x1, 0x3a0}, &(0x7f0000000480), &(0x7f0000000180)) syz_io_uring_setup(0x10b, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0xffffffff}, &(0x7f00000003c0)=0x0, &(0x7f0000000340)) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000060000000800000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000002c0)={r1, &(0x7f0000000080), &(0x7f0000000280)=@udp}, 0x20) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) readv(r2, &(0x7f0000000840)=[{&(0x7f0000000080)=""/45, 0x2d}], 0x1) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r4, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) syz_memcpy_off$IO_URING_METADATA_GENERIC(r0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000072000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 38.676333922s ago: executing program 6 (id=4254): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x141a82, 0x0) r1 = dup(r0) r2 = syz_io_uring_setup(0x4174, &(0x7f0000000780)={0x0, 0x7e05, 0x10100}, &(0x7f00000005c0)=0x0, &(0x7f0000000340)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000180)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x4004, @fd=r2, 0x4, &(0x7f0000000600)=""/117, 0x75, 0x11}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00'}, 0x18) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000010000700000e0000000000000000000a20000000000a03000000000000000000010000000900010073797a30000000003c000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a30000000000800054000000002600000000c0a01080000000000000000010000000900020073797a32000000003400038030000080080003400000000224000b80200001800e000100636f6e6e6c696d69740000000c00028008000140000000000900010073797a30"], 0xe4}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="1801000000000000000040640000006d00000095a25cb8b16c8df3d0f12d43da58b053c7af5d67c4"], 0x0, 0x3, 0x0, 0x0, 0x41100, 0x40, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r6, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000940), 0x0, &(0x7f0000002f40)=""/229, 0xe5}, 0x0) close(r7) r8 = syz_open_procfs(0x0, &(0x7f0000000140)='cgroup\x00') preadv(r8, &(0x7f00000000c0)=[{&(0x7f0000000480)=""/128, 0x80}], 0x1, 0x12e, 0x0) sendfile(r1, 0xffffffffffffffff, 0x0, 0x8000fffffffe) r9 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/pm_test', 0x141a82, 0x0) sendfile(r9, r9, 0x0, 0x2f) 38.633882472s ago: executing program 6 (id=4256): r0 = syz_open_dev$usbfs(&(0x7f0000000240), 0xe, 0x101301) ioctl$USBDEVFS_IOCTL(r0, 0x80045505, 0x0) pipe2(0x0, 0x84800) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000300)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) r1 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$TIOCSETD(r1, 0x5423, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='kfree\x00', r2}, 0x18) eventfd(0x6) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)={0x30, 0x0, 0x301, 0x70bd25, 0x0, {{}, {@val={0x8, 0x7}, @val={0x8}, @val={0xff8d}}}}, 0x30}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x58, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x18, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}]}, 0x58}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x44, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x4}]}, 0x44}}, 0x0) 38.521442602s ago: executing program 6 (id=4257): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000200)='./file2\x00', 0x204002, &(0x7f00000000c0), 0xb8, 0x564, &(0x7f00000008c0)="$eJzs3c9rHFUcAPDvbJI2/aFJoRT1IIEerNRumsQfFTzUo2ixoPe6JNNQsumW7KY0sWB7sBcvUgQRC6J37x6L/4B/RUELRUrQg5eV2cym22Y32aSbJu1+PjDJezOzee+7M9+XNzu7bAB9ayz7UYh4NSK+TSJGWrYNRr5xbHW/lYfXp7MliXr9s7+TSPJ1zf2T/PehvPJKRPz+dcTJwvp2q0vLc6VyOV3I6+O1+Svj1aXlU5fmS7PpbHp5cmrqzDtTk++/927PYn3z/L8/fHr3ozPfHF/5/tf7R24ncTYO59ta43gKN1orYzGWPydDcfaJHSd60Nhekux2B9iWgTzPhyIbA0ZiIM/6tuojz7JrwA77KktroE8l8h/6VHMe0Ly279F18HPjwYerF0Dr4x9cfW0khhvXRgdXkseujLLr3dEetJ+18dtfd25nS/TudQiATd24GRGnBwfXj39JPv5t3+ku9nmyDeMfPDt3s/nPW+3mP4W1+U+0mf8capO727F5/hfu96CZjrL53wdt579rN61GB/LaS40531By8VI5zca2lyPiRAztz+ob3M/5orByr95pY+v8L1uy9ptzwbwf9wf3P/6YmVKt9FRBt3hwM+K1tvPfZO34J22Of/Z8nO+yjWPpndc7bds8/p1V/znijbbH/9EdrWTj+5PjjfNhvHlWrPfPrWN/dGp/t+PPjv/BjeMfTVrv11a33sZPw/+lnbZt9/zfl3zeKO/L110r1WoLExH7kk/Wr5989Nhmvbl/Fv+J4xuPf+3O/wNZYncZ/62jt1p3Hd5a/Dsri39mS8d/64V7H3/5Y6f2uzv+bzdKJ/I13Yx/3XbwaZ47AAAAAAAA2GsKEXE4kkJxrVwoFIur7+84GgcL5Uq1dvJiZfHyTDQ+KzsaQ4Xmne6RlvdDTOTvh23WJ5+oT0XEkYj4buBAo16crpRndjt4AAAAAAAAAAAAAAAAAAAA2CMORQy3+/x/5s+B3e4dsOM2+Mpv4AXXOf/zLb34pidgT/L/H/qX/If+Jf+hf8l/6F/yH/qX/If+Jf+hf20l/385t4MdAQAAAAAAAAAAAAAAAAAAAAAAAAAAgBfD+XPnsqW+8vD6dFafubq0OFe5emomrc4V5xeni9OVhSvF2UpltpwWpyvzm/29cqVyZWIyFq+N19Jqbby6tHxhvrJ4uXbh0nxpNr2QDj2TqAAAAAAAAAAAAAAAAAAAAOD5Ul1aniuVy+mCgsK2CoN7oxsKPS7s9sgEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAI/8HwAA///F1Dry") mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) r0 = inotify_init1(0x80800) inotify_add_watch(r0, &(0x7f0000000300)='./file0\x00', 0xe0000401) umount2(&(0x7f00000002c0)='./file0\x00', 0x0) (fail_nth: 1) 38.209270211s ago: executing program 6 (id=4261): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) ioperm(0x83, 0x4, 0x4) 37.221723389s ago: executing program 6 (id=4276): perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x57, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0xfffffffdffff18d6, 0x96ef}, 0x1206c, 0x80, 0x7, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) memfd_create(&(0x7f00000000c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x0) syz_io_uring_setup(0x5513, &(0x7f00000002c0)={0x0, 0xb78c, 0x1000, 0x1, 0x3a0}, &(0x7f0000000480), &(0x7f0000000180)) syz_io_uring_setup(0x10b, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0xffffffff}, &(0x7f00000003c0)=0x0, &(0x7f0000000340)=0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000060000000800000005"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000002c0)={r2, &(0x7f0000000080), &(0x7f0000000280)=@udp}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r4 = open(&(0x7f0000000000)='./bus\x00', 0x40, 0x0) fgetxattr(r4, &(0x7f00000003c0)=@known='security.selinux\x00', 0x0, 0x0) r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r6 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r6}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) readv(r5, &(0x7f0000000840)=[{&(0x7f0000000080)=""/45, 0x2d}], 0x1) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x128, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002008207b1af8ff00000000bfb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000900bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r10 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r9}, 0x10) write$binfmt_script(r7, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r7, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) syz_memcpy_off$IO_URING_METADATA_GENERIC(r0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r0, r1, &(0x7f00000002c0)=@IORING_OP_WRITE_FIXED={0x5, 0x48, 0x2000, @fd=r10, 0x800, 0x0, 0xa, 0xc, 0x0, {0x2}}) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1b0000000000000000000000008000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000d0e3e2b422fbfcec785adfcc6200"/41], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 37.221344909s ago: executing program 34 (id=4276): perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x57, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0xfffffffdffff18d6, 0x96ef}, 0x1206c, 0x80, 0x7, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) memfd_create(&(0x7f00000000c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x0) syz_io_uring_setup(0x5513, &(0x7f00000002c0)={0x0, 0xb78c, 0x1000, 0x1, 0x3a0}, &(0x7f0000000480), &(0x7f0000000180)) syz_io_uring_setup(0x10b, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0xffffffff}, &(0x7f00000003c0)=0x0, &(0x7f0000000340)=0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000060000000800000005"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000002c0)={r2, &(0x7f0000000080), &(0x7f0000000280)=@udp}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r4 = open(&(0x7f0000000000)='./bus\x00', 0x40, 0x0) fgetxattr(r4, &(0x7f00000003c0)=@known='security.selinux\x00', 0x0, 0x0) r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r6 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r6}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) readv(r5, &(0x7f0000000840)=[{&(0x7f0000000080)=""/45, 0x2d}], 0x1) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x128, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002008207b1af8ff00000000bfb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000900bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r10 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r9}, 0x10) write$binfmt_script(r7, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r7, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) syz_memcpy_off$IO_URING_METADATA_GENERIC(r0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r0, r1, &(0x7f00000002c0)=@IORING_OP_WRITE_FIXED={0x5, 0x48, 0x2000, @fd=r10, 0x800, 0x0, 0xa, 0xc, 0x0, {0x2}}) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1b0000000000000000000000008000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000d0e3e2b422fbfcec785adfcc6200"/41], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 33.546584591s ago: executing program 5 (id=4321): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000180)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0xd0, &(0x7f0000000240), 0x3, 0x42f, &(0x7f0000000940)="$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") lsetxattr$trusted_overlay_upper(&(0x7f0000000200)='./file1\x00', &(0x7f00000000c0), &(0x7f0000000040)=ANY=[], 0xfe37, 0x0) 33.330981001s ago: executing program 5 (id=4323): sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x4, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x3, 0x6, &(0x7f0000000180)=@framed={{0x18, 0x2}, [@map_fd={0x18, 0x1, 0x1, 0x0, r0}, @call={0x85, 0x0, 0x0, 0x86}]}, &(0x7f0000000000)='syzkaller\x00', 0x1, 0xd0, &(0x7f00000003c0)=""/208, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) pread64(0xffffffffffffffff, 0x0, 0x0, 0x5f) close(0xffffffffffffffff) 33.26050279s ago: executing program 5 (id=4325): r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000040)="d6", 0x1}], 0x1, 0x0) timer_create(0xfffffffffffffffc, 0x0, &(0x7f0000001400)=0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) timer_settime(r1, 0x0, &(0x7f00000005c0)={{}, {0x0, 0x989680}}, &(0x7f0000000600)) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x14}, 0x0) r2 = socket(0x15, 0x5, 0x0) getsockopt(r2, 0x200000000114, 0x271e, 0x0, &(0x7f0000000100)) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_GET_TARGET(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000040)={0x14, 0x0, 0x4, 0x70bd26}, 0x14}, 0x1, 0x0, 0x0, 0x861}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000001c0)='sched_switch\x00', r4}, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000140), r3) r5 = syz_io_uring_setup(0x83f, &(0x7f00000000c0)={0x0, 0xa9ee, 0x400, 0x3, 0x8002ae}, &(0x7f0000000140)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x1) syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x109880}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) io_uring_enter(r5, 0x3516, 0x0, 0x0, 0x0, 0xfffffdcf) 32.672396989s ago: executing program 5 (id=4331): bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={0xffffffffffffffff, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="0a000000070000000300000001"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r0, 0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000280)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f00000001c0)=@framed, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f00000009c0)='kfree\x00', r2}, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000240)={[{@user_xattr}, {@nombcache}, {@minixdf}, {@usrquota}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0xe}}, {@lazytime}, {@init_itable_val={'init_itable', 0x3d, 0x5}}, {@user_xattr}, {@errors_remount}]}, 0xee, 0x58a, &(0x7f0000001300)="$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") chdir(&(0x7f0000000000)='./file0\x00') llistxattr(&(0x7f0000000100)='./file1\x00', 0x0, 0x1) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001e80)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021181500001e0a05010000000000000000070000000900020073797a31000000000900010073797a3000000000ec140380300000802c000180250001"], 0x159c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000020d0039000000000000b4a518110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='task_newtask\x00', r4}, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='task_newtask\x00', r5}, 0x10) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 32.467254019s ago: executing program 5 (id=4333): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000017850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000ff0f00000300000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/25], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000004c0)={{r0}, &(0x7f00000003c0), &(0x7f0000000400)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYRESDEC=r1, @ANYRES32=r0, @ANYRES8=r1], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0xfffffffffffffdb0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000008da4b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) socket$packet(0x11, 0x3, 0x300) socket$vsock_stream(0x28, 0x1, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2d, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r4, 0x0, 0x80000000000}, 0x18) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f00000007c0)={0x300, 0x0, &(0x7f0000000780)={&(0x7f0000000b00)=ANY=[@ANYBLOB="020a06000300000028bd7008fcd1df25010018"], 0x18}}, 0x40) 31.765239907s ago: executing program 5 (id=4340): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000008da4b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000240000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f00000004c0)=ANY=[@ANYBLOB="180000000000000000000000000000008500000023000000850000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f00000007c0)={0x300, 0x0, &(0x7f0000000780)={&(0x7f0000000b00)=ANY=[@ANYBLOB="020a06000300000028bd7008fcd1df25010018"], 0x18}}, 0x40) 31.764866417s ago: executing program 35 (id=4340): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000008da4b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000240000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f00000004c0)=ANY=[@ANYBLOB="180000000000000000000000000000008500000023000000850000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f00000007c0)={0x300, 0x0, &(0x7f0000000780)={&(0x7f0000000b00)=ANY=[@ANYBLOB="020a06000300000028bd7008fcd1df25010018"], 0x18}}, 0x40) 5.075289761s ago: executing program 2 (id=4637): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1900000004000000080000000600000000000000", @ANYRES32, @ANYBLOB="ff7f00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000000000000000000000000000001e0e422934733dff5ff60800000006c5a6aeffcde1ef77db40e68a6e0184e3a5e4944c382b69c6cc5cc9df7d195d29fa0d8fc1514f06c2cb1df88a0b0500000000000000f406008790a79121d60355cfb5bad2745bc924bf0000"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000", @ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r0}, &(0x7f0000000200), &(0x7f0000000280)=r1}, 0x20) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000200)='./file2\x00', 0x204002, &(0x7f00000000c0), 0xb8, 0x564, &(0x7f00000008c0)="$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") r2 = open(&(0x7f0000000040)='./file2\x00', 0x181042, 0x0) write$P9_RREADDIR(r2, &(0x7f0000000700)={0xb, 0x29, 0x2, {0x5}}, 0xb) sendfile(r2, r2, &(0x7f00000002c0), 0x7f03) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1801000020017e9c0000000000000000850000007b00000095"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) r3 = inotify_init1(0x80800) inotify_add_watch(r3, &(0x7f0000000300)='./file0\x00', 0xe0000401) umount2(&(0x7f00000002c0)='./file0\x00', 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000000)='kmem_cache_free\x00', r5}, 0x10) r6 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r6, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) sendmsg$nl_route(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="380000001a0001000000000000000a0080002020"], 0x38}}, 0x0) r7 = socket$inet6(0xa, 0x40000080806, 0x0) connect$inet6(r7, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) close(r3) r8 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r8}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f00000003c0)='kfree\x00', r9}, 0x10) 3.715561748s ago: executing program 8 (id=4644): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x141a82, 0x0) r1 = dup(r0) r2 = syz_io_uring_setup(0x4174, &(0x7f0000000780)={0x0, 0x7e05, 0x10100}, &(0x7f00000005c0)=0x0, &(0x7f0000000340)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000180)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x4004, @fd=r2, 0x4, &(0x7f0000000600)=""/117, 0x75, 0x11}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00'}, 0x18) lsm_get_self_attr(0x67, &(0x7f0000000580)={0x0, 0x0, 0xad, 0x8d, ""/141}, &(0x7f0000000080)=0xad, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000010000700000e0000000000000000000a20000000000a03000000000000000000010000000900010073797a30000000003c000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a30000000000800054000000002600000000c0a01080000000000000000010000000900020073797a32000000003400038030000080080003400000000224000b80200001800e000100636f6e6e6c696d69740000000c00028008000140000000000900010073797a30"], 0xe4}}, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, 0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="5400000002060104000000000000000000000000050005000a000300050004000000000010000300686173683a69702c6d61630005000100070000000c0007800800124000000900090002"], 0x54}}, 0x0) socket$igmp(0x2, 0x3, 0x2) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r7 = open(&(0x7f0000000100)='./bus\x00', 0x40542, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="1801000000000000000040640000006d00000095a25cb8b16c8df3d0f12d43da58b053c7af5d67c4"], 0x0, 0x3, 0x0, 0x0, 0x41100, 0x40, '\x00', 0x0, 0x2, r7, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r8}, 0x10) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r9, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f00000005c0)=""/151, 0x97}], 0x1, &(0x7f0000002f40)=""/229, 0x17}, 0x0) close(r10) syz_open_procfs(0x0, &(0x7f0000000140)='cgroup\x00') sendfile(r1, r7, 0x0, 0x8000fffffffe) r11 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/pm_test', 0x141a82, 0x0) sendfile(r11, r11, 0x0, 0x2f) 3.664416567s ago: executing program 2 (id=4645): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x45, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) lsm_get_self_attr(0x64, 0x0, &(0x7f0000000040), 0x0) 3.295382337s ago: executing program 8 (id=4649): r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) write$cgroup_pid(r0, &(0x7f00000031c0), 0x12) io_uring_enter(r0, 0x3105, 0x4d52, 0x42, &(0x7f0000000000)={[0x8]}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0xa, &(0x7f00000000c0)=@raw=[@map_val={0x18, 0x9, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x3}, @printk={@x, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfffffa29}}], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = socket(0x10, 0x80002, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000080)={'netdevsim0\x00', &(0x7f0000000380)=@ethtool_rxnfc={0x4b, 0xa, 0x5, {0xd, @udp_ip4_spec={@dev={0xac, 0x14, 0x14, 0xd}, @broadcast, 0x4e62, 0x4c20, 0x7f}, {0x0, @random="6c0497d1476d", 0x3c74, 0x9, [0x2, 0xc]}, @tcp_ip6_spec={@local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4e22, 0x4e20, 0x2}, {0x0, @local, 0x1, 0x7, [0xb7, 0x10]}, 0x8, 0xa9}}}) 3.270275887s ago: executing program 7 (id=4651): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00', r2}, 0x10) ptrace(0x10, r0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffb}]}) wait4(r0, 0x0, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x7, &(0x7f0000006680)) getresuid(&(0x7f0000000340), &(0x7f0000000380)=0x0, &(0x7f00000003c0)) r4 = io_uring_setup(0x67bb, &(0x7f00000000c0)={0x0, 0x93cb, 0x3000, 0x3, 0xfffffffd}) io_uring_enter(r4, 0x7dc, 0x775a, 0x10, &(0x7f00000004c0), 0x8) r5 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, 0x0, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYRESHEX=r3], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r7, 0x0, 0x3}, 0x18) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180500000000c800000000004b64ffec850000007d000000850000002a00000095"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r8}, 0x10) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="980000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000700012800b00010062726964676500006000028006002700040000000c002e0001000000010000000c001f00030000000000000008001a0001000000080004"], 0x98}}, 0x0) syz_clone(0x40005080, 0x0, 0x0, &(0x7f00000015c0), &(0x7f0000001600), 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, @void, @value}, 0x94) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r7, 0x0, 0x0, 0x0, 0x0, 0xffffff0f, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r10, 0x0, 0x2}, 0x18) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000b80)=ANY=[@ANYRES8=r5], &(0x7f0000000200)='GPL\x00', 0x0, 0x36, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000b40)={&(0x7f0000000600)='kfree\x00', r11}, 0x10) request_key(&(0x7f0000000180)='asymmetric\x00', &(0x7f00000001c0)={'syz', 0x0}, &(0x7f00000002c0)=',\x00', 0xffffffffffffffff) 3.266116457s ago: executing program 2 (id=4661): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x45, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) lsm_get_self_attr(0x64, 0x0, &(0x7f0000000040), 0x0) 3.205044586s ago: executing program 8 (id=4652): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000000000000000001ab718c3000000000000"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000f00)={0x11, 0xf, &(0x7f0000000e00)=ANY=[@ANYBLOB="1800000001040001000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7f600000000000085000000830018cf97750000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000085000000b7000000000000009500000000000000bea8fd8c777839f55b95d67689c2359a9782974a0c3e89ffa646dc44395f2ceca26d08c29f40364532569d8509f96692c580142c5bd6e7ae293f7b610cf53fde3fe054fafa5daef427d7678196c19ee503fa748774135c715e2f1102e54caea2b9ed8924f43a24d7566c7918e71d9a5b8530c753d3ec8af1d2a1acda2b5a0c6d"], &(0x7f0000000080)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000095980000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f0ffffffb702000005000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) ioctl$USBDEVFS_CONTROL(r3, 0xc0105500, &(0x7f0000000000)={0x80, 0x6, 0xf00, 0xec, 0x2, 0x0, 0x0}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x10) r4 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r4, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000000e80), 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f00000008c0)={[{@bsdgroups}, {@nodiscard}, {@noblock_validity}, {@grpjquota}, {@grpjquota}, {@orlov}, {@abort}, {@nombcache}, {@stripe={'stripe', 0x3d, 0x10}}]}, 0x64, 0x50a, &(0x7f0000000200)="$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") bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x40f00, 0x24, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r5, 0x4b72, &(0x7f0000000000)={0x0, 0x0, 0x8, 0x1e, 0x200, &(0x7f0000000880)="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"}) r6 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r6, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty, 0x0, 0x1}, 0x20) r7 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r7, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty, 0x1, 0x400000}, 0x20) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x2000081, &(0x7f0000000080)=ANY=[@ANYRES8=0x0, @ANYRES8, @ANYRES64, @ANYRES64=0x0], 0x0, 0x23e, &(0x7f0000000bc0)="$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") mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) keyctl$search(0xa, 0x0, &(0x7f0000000200)='.request_key_auth\x00', 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) r8 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x3) pwrite64(r8, &(0x7f0000000140)='2', 0xfdef, 0xfecc) 3.204311577s ago: executing program 2 (id=4653): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1900000004000000080000000600000000000000", @ANYRES32, @ANYBLOB="ff7f00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000000000000000000000000000001e0e422934733dff5ff60800000006c5a6aeffcde1ef77db40e68a6e0184e3a5e4944c382b69c6cc5cc9df7d195d29fa0d8fc1514f06c2cb1df88a0b0500000000000000f406008790a79121d60355cfb5bad2745bc924bf0000"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000", @ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r0}, &(0x7f0000000200), &(0x7f0000000280)=r1}, 0x20) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000200)='./file2\x00', 0x204002, &(0x7f00000000c0), 0xb8, 0x564, &(0x7f00000008c0)="$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") r2 = open(&(0x7f0000000040)='./file2\x00', 0x181042, 0x0) write$P9_RREADDIR(r2, &(0x7f0000000700)={0xb, 0x29, 0x2, {0x5}}, 0xb) sendfile(r2, r2, &(0x7f00000002c0), 0x7f03) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1801000020017e9c0000000000000000850000007b00000095"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) r3 = inotify_init1(0x80800) inotify_add_watch(r3, &(0x7f0000000300)='./file0\x00', 0xe0000401) umount2(&(0x7f00000002c0)='./file0\x00', 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000000)='kmem_cache_free\x00', r5}, 0x10) r6 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r6, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) sendmsg$nl_route(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="380000001a0001000000000000000a0080002020"], 0x38}}, 0x0) r7 = socket$inet6(0xa, 0x40000080806, 0x0) connect$inet6(r7, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) close(r3) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8, 0x8, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r8 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f00000003c0)='kfree\x00', r8}, 0x10) 2.839942096s ago: executing program 7 (id=4654): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000040)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x1000410, &(0x7f0000000080)={[{@nolazytime}, {}]}, 0x6, 0x4eb, &(0x7f0000000a40)="$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") rename(&(0x7f0000000040)='./file1\x00', 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={0x0}, 0x1, 0x0, 0x0, 0x4004000}, 0x10000000) open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 2.731640206s ago: executing program 8 (id=4657): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000ffffffff000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) syz_clone3(&(0x7f0000000700)={0x5324400, 0x0, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) 2.541224775s ago: executing program 1 (id=4659): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x141a82, 0x0) r1 = dup(r0) r2 = syz_io_uring_setup(0x4174, &(0x7f0000000780)={0x0, 0x7e05, 0x10100}, &(0x7f00000005c0)=0x0, &(0x7f0000000340)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000180)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x4004, @fd=r2, 0x4, &(0x7f0000000600)=""/117, 0x75, 0x11}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00'}, 0x18) lsm_get_self_attr(0x67, &(0x7f0000000580)={0x0, 0x0, 0xad, 0x8d, ""/141}, &(0x7f0000000080)=0xad, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000010000700000e0000000000000000000a20000000000a03000000000000000000010000000900010073797a30000000003c000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a30000000000800054000000002600000000c0a01080000000000000000010000000900020073797a32000000003400038030000080080003400000000224000b80200001800e000100636f6e6e6c696d69740000000c00028008000140000000000900010073797a30"], 0xe4}}, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, 0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="5400000002060104000000000000000000000000050005000a000300050004000000000010000300686173683a69702c6d61630005000100070000000c0007800800124000000900090002"], 0x54}}, 0x0) socket$igmp(0x2, 0x3, 0x2) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r7 = open(&(0x7f0000000100)='./bus\x00', 0x40542, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="1801000000000000000040640000006d00000095a25cb8b16c8df3d0f12d43da58b053c7af5d67c4"], 0x0, 0x3, 0x0, 0x0, 0x41100, 0x40, '\x00', 0x0, 0x2, r7, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r8}, 0x10) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r9, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f00000005c0)=""/151, 0x97}], 0x1, &(0x7f0000002f40)=""/229, 0x17}, 0x0) close(r10) syz_open_procfs(0x0, &(0x7f0000000140)='cgroup\x00') sendfile(r1, r7, 0x0, 0x8000fffffffe) r11 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/pm_test', 0x141a82, 0x0) sendfile(r11, r11, 0x0, 0x2f) 2.030053094s ago: executing program 8 (id=4660): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000040)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x1000410, &(0x7f0000000080)={[{@nolazytime}, {}]}, 0x6, 0x4eb, &(0x7f0000000a40)="$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") rename(&(0x7f0000000040)='./file1\x00', &(0x7f0000001300)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0xffffffff, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={0xffffffffffffffff, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$TOKEN_CREATE(0x24, &(0x7f0000000280), 0x8) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={0x0, r3}, 0x18) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@newtaction={0x64, 0x30, 0xb, 0x0, 0x0, {}, [{0x50, 0x1, [@m_ct={0x4c, 0x1, 0x0, 0x0, {{0x7}, {0x24, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xfdb}}, @TCA_CT_MARK={0x8, 0x10}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x4004000}, 0x10000000) syz_read_part_table(0x5e5, &(0x7f0000000c00)="$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") open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f00000005c0)=ANY=[@ANYBLOB="050000000000000061110c00000000008510000002000000850000000500000095000000000000009500a5050000000077d8f3b423cdac8d80000000000000002be16ad10a48b243ccc42606d25dfd73a015e0ca7fc2506a0f7535f7866907dc6751dfb265a0e3ccae669e17fd6587d452d6453559c3421eed73d56615fe6c54c3b3ffe1b4ce25d7c983c044c03bf3a48dfe47ec9dd6c091c30b93bfae76d9ebacd3ed3e26e7a23129d6606fd28a69989d552af6bda9df2c3af36effff9af2551ce896165127cb3f011a7d06602e2fd52347125907000000000000003ed38ae89d24e1cebfba2f87925bfacba83109751fe6c05405d027edd68149ee99eef6a6992308a4fc0b7c70bc677d6dd4aed4af7500d7900a820b6347184e9a217b5614cd50cbe43a1ed2526814bc0000e9e086ce48e90defb6670c3df262ad0a97aec7291c25447c106a99893e10db21901eb397b2f5fd71d20fa7a050fbbef9e326ea27e513e96068fd1e8a43e89f9c85c822a961546ed5363c17ff1432d08806bc376e3e49ee52b59d13182e1f24ed200ada12f7a1001500a710eb1affb87ba55b2d72078e9f40b4ae7d01000000d11cd22c35d32940000088dde499000000fdffffff000000000000000000000000000000000000000000000c52f4ebd2c893bb97a068bd10734a83584898eccb26f7b789cfc4cd995fa3e11a5c74c85404e2df3ad37b729ac83b0dcb4f48f3c3356b9997fc455a17690b6f7f9ccbe4b1701941b18a904c0e585a66c3b84b138efc20a546d3d5227e23b03f2a834391ad24fe7d9b20cf92cb151763d41f5c76e2ff3e93ee296c4082ee73e7e197253a2b66c353312c9d75711ce1623e9c54bdff59d2a69dcb7d84c235b23a4480c2461b405cfd1a38992f295ad3adc94cd07c850d1ce6d0b2fea02c24e9280333152fb794e4ddea02017a6c139b50101caecaf2abc0842b99a96fc4275ad107274e2934a87a4ddcdb112754ca5bdec0ead14b6c0f19a43a2f04c7f0be31491eb8c9ff68236c8600000000000000000000000066e034c81c3cab4e33fc8dc55ce0ada18dcbf31c6e82893add3bee3e10fc873d1d922b0877cbcd95b839d3059d5140a1f742f6e75741e39e5cb6a193e06a1043375b0f"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000380)='sched_switch\x00', r5}, 0x10) unshare(0x22020600) syz_clone(0x10eb22b000, 0x0, 0x0, 0x0, 0x0, 0x0) 2.028589324s ago: executing program 2 (id=4662): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/10, @ANYRES32], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000f00)={0x11, 0xf, &(0x7f0000000e00)=ANY=[@ANYBLOB="1800000001040001000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7f600000000000085000000830018cf97750000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000085000000b7000000000000009500000000000000bea8fd8c777839f55b95d67689c2359a9782974a0c3e89ffa646dc44395f2ceca26d08c29f40364532569d8509f96692c580142c5bd6e7ae293f7b610cf53fde3fe054fafa5daef427d7678196c19ee503fa748774135c715e2f1102e54caea2b9ed8924f43a24d7566c7918e71d9a5b8530c753d3ec8af1d2a1acda2b5a0c6d"], &(0x7f0000000080)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000095980000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f0ffffffb702000005000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) writev(0xffffffffffffffff, &(0x7f0000000e80), 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f00000008c0)={[{@bsdgroups}, {@nodiscard}, {@noblock_validity}, {@grpjquota}, {@grpjquota}, {@orlov}, {@abort}, {@nombcache}, {@stripe={'stripe', 0x3d, 0x10}}]}, 0x64, 0x50a, &(0x7f0000000200)="$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") 1.599069743s ago: executing program 7 (id=4663): perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x57, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0xfffffffdffff18d6, 0x96ef}, 0x1206c, 0x80, 0x7, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) memfd_create(&(0x7f00000000c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x0) syz_io_uring_setup(0x5513, &(0x7f00000002c0)={0x0, 0xb78c, 0x1000, 0x1, 0x3a0}, &(0x7f0000000480), &(0x7f0000000180)) syz_io_uring_setup(0x10b, 0x0, &(0x7f00000003c0)=0x0, &(0x7f0000000340)=0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000060000000800000005"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000002c0)={r2, &(0x7f0000000080), &(0x7f0000000280)=@udp}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r4 = open(&(0x7f0000000000)='./bus\x00', 0x40, 0x0) fgetxattr(r4, &(0x7f00000003c0)=@known='security.selinux\x00', 0x0, 0x0) r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r6 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r6}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) readv(r5, &(0x7f0000000840)=[{&(0x7f0000000080)=""/45, 0x2d}], 0x1) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x128, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002008207b1af8ff00000000bfb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000900bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r10 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r9}, 0x10) write$binfmt_script(r7, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r7, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) syz_memcpy_off$IO_URING_METADATA_GENERIC(r0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r0, r1, &(0x7f00000002c0)=@IORING_OP_WRITE_FIXED={0x5, 0x48, 0x2000, @fd=r10, 0x800, 0x0, 0xa, 0xc, 0x0, {0x2}}) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1b0000000000000000000000008000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000d0e3e2b422fbfcec785adfcc6200"/41], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r11, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000072000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 1.579503703s ago: executing program 1 (id=4664): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x45, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) lsm_get_self_attr(0x64, 0x0, &(0x7f0000000040), 0x0) 1.540963043s ago: executing program 1 (id=4665): r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x0, 0x3}, 0x10) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000500)='kmem_cache_free\x00', r2}, 0x18) r3 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r3, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) r4 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000300)={0x43, 0x3, 0x3, 0x3}, 0x10) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) sendmsg$tipc(r3, &(0x7f0000000240)={&(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x40, 0x0, 0x2}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x40c4}, 0x20000000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00'}, 0x10) sendmsg$tipc(r1, &(0x7f0000000540)={&(0x7f0000000200)=@name, 0x10, 0x0}, 0x0) 833.409871ms ago: executing program 3 (id=4666): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYRES32=r2], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e22, @broadcast}, 0x10) ioprio_set$pid(0x2, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x1b, 0xb, &(0x7f0000000180)=ANY=[@ANYRES32], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r3}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00'}, 0x10) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) close(r4) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0) 728.811311ms ago: executing program 3 (id=4667): r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x109000, 0x84) fcntl$setlease(r0, 0x400, 0x2) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0xb, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x10}, [@printk={@s, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x97e}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r1}, 0x10) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x200000005c831, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x7) syz_mount_image$iso9660(&(0x7f0000000080), &(0x7f0000000540)='./file0\x00', 0x204018, &(0x7f00000000c0)=ANY=[@ANYBLOB="636865636b3d7374726963742c6d61703d61636f726e2c000000002c756e68696442d3fdb924b16a73b70fd8c704652c6e6f72f3636b2c6e6f6a6f6c6965742c6d6f64653d3078303030303030303030303030303830302c626c6f636b3d307830303030303030303030303030348d56589d"], 0xff, 0x52c, &(0x7f0000000580)="$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") chdir(&(0x7f0000000300)='./file0\x00') r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0, 0x0) setsockopt$WPAN_SECURITY(r2, 0x0, 0x1, &(0x7f00000002c0), 0x4) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=@framed={{}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r3}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x89, 0x8, 0x0) set_mempolicy_home_node(&(0x7f0000349000/0xa000)=nil, 0xa000, 0x0, 0x0) ioctl$FIBMAP(r2, 0x1, &(0x7f0000000000)=0x1) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="020000000400000003000000050000000010"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000240)='./file2\x00', 0x2000410, &(0x7f0000000440)={[], [{@smackfsdef={'smackfsdef', 0x3d, '/dev/bsg\x00'}}, {@func={'func', 0x3d, 'MODULE_CHECK'}}, {@defcontext={'defcontext', 0x3d, 'user_u'}}, {@subj_type={'subj_type', 0x3d, '}[-}'}}, {@obj_role={'obj_role', 0x3d, 'sched_switch\x00'}}, {@dont_appraise}, {@hash}, {@fsmagic={'fsmagic', 0x3d, 0x8000}}, {@pcr={'pcr', 0x3d, 0x2a}}]}, 0x81, 0x7a5, &(0x7f0000000f80)="$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") 705.139371ms ago: executing program 1 (id=4668): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) write$UHID_INPUT(r1, &(0x7f0000000000)={0xfc, {"a2e3ad09edfc09f91b44090987f70e06d038e7ff7fc6e5539b0d3d0e8b089b0732306c090890e0879b0a0ac6e70a9b3361959b4b9a240d5b0af3988f7ef319520100ffe8d178708c523c921b1b5b31070d074a0936cd3b78130daa61d8e8040000005802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb000000002f17959d1f416e56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6a62fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce7cd9f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a0270e4c10d6ced5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed700129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d4ac01b75d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9e53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4350aeae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b813076038e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40427db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afa2d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02daee67918e5d6787463183b4b87c1050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7340002008000000000f288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4108b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb784ed7148b6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb21fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b8081c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c6b00000000000000f96f06817fb903729a7db6ff957697c9ede7885d94ffb0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f9000", 0x1000}}, 0x1006) 679.392721ms ago: executing program 8 (id=4669): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x1c0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000008000000850000009500000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001680)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000001640)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000002c0)='sys_enter\x00', r1}, 0x10) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$nl_route(0x10, 0x3, 0x0) read(r2, &(0x7f0000000200)=""/209, 0xd1) tkill(0x0, 0x7) 665.558241ms ago: executing program 7 (id=4670): set_mempolicy(0x3, 0x0, 0xdf) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) syz_clone3(&(0x7f0000000700)={0x5324400, 0x0, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 1) 446.792541ms ago: executing program 2 (id=4671): socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r0 = memfd_secret(0x80000) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0x2000000000000194, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) msgget$private(0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000015c0)={r1, 0x0, 0x0}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001600)={0x11, 0x5, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1e4d, @void, @value}, 0x94) r2 = signalfd(0xffffffffffffffff, &(0x7f00007aeff8)={[0xfffffffffffffffc]}, 0x8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sync() sync() bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0}, 0x18) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000001880), 0x4) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_DEV_UP(r3, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', 0xffffffffffffffff, 0x0, 0x1000000000009}, 0x18) getrandom(&(0x7f0000000340)=""/4080, 0xfffffef0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000017c0)={0x6, 0x2b, &(0x7f0000001340)=ANY=[@ANYBLOB="18000000feffffff000000000100000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000ff0f0000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000000000850000008600000018250000", @ANYRES32=r0, @ANYBLOB="000000000600000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b708007b8ab8fb00000000bfb89e757faea20000000000000702ffffff7f00000000000008000000000900000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000000000008500000086000000851000000700000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000cb1f00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020000008500000082000000093803000700000018270000", @ANYRES32=r2, @ANYBLOB="000000001e0700009500000000000000"], &(0x7f0000000300)='syzkaller\x00', 0x6, 0x88, &(0x7f00000014c0)=""/136, 0x41000, 0x1, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f0000001580)={0x2, 0x1}, 0x8, 0x10, &(0x7f00000016c0)={0x1, 0xc, 0x9, 0x4}, 0x10, 0x0, 0x0, 0x6, &(0x7f0000001700)=[r0], &(0x7f0000001740)=[{0x2, 0x2, 0x4, 0xe}, {0x5, 0x1, 0x7}, {0x5, 0x1, 0xc}, {0x1, 0x2, 0x6, 0x7}, {0x7c, 0x2, 0x10, 0xc}, {0x0, 0x2, 0x9, 0x1}], 0x10, 0x1, @void, @value}, 0x94) sendmsg$NFT_MSG_GETFLOWTABLE(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="2c000000170aff07"], 0x2c}}, 0x0) io_setup(0x8, &(0x7f0000000600)) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000003680)='sched_switch\x00', r5}, 0x10) r6 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_misc(r6, &(0x7f0000000240), 0xfffffecc) 393.43094ms ago: executing program 1 (id=4672): perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x57, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0xfffffffdffff18d6, 0x96ef}, 0x1206c, 0x80, 0x7, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) memfd_create(&(0x7f00000000c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x0) syz_io_uring_setup(0x5513, &(0x7f00000002c0)={0x0, 0xb78c, 0x1000, 0x1, 0x3a0}, &(0x7f0000000480), &(0x7f0000000180)) syz_io_uring_setup(0x10b, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0xffffffff}, &(0x7f00000003c0)=0x0, &(0x7f0000000340)) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000060000000800000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000002c0)={r1, &(0x7f0000000080), &(0x7f0000000280)=@udp}, 0x20) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) readv(r2, &(0x7f0000000840)=[{&(0x7f0000000080)=""/45, 0x2d}], 0x1) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r4, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) syz_memcpy_off$IO_URING_METADATA_GENERIC(r0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000072000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 393.09717ms ago: executing program 7 (id=4673): r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) quotactl_fd$Q_SETQUOTA(r0, 0xffffffff80000800, 0x0, &(0x7f0000000140)={0x0, 0xa, 0x7fffffff, 0x12000000000008, 0x4, 0x401, 0x3, 0x800000000000590, 0x2}) syz_io_uring_setup(0xa94, &(0x7f0000000280), &(0x7f0000000040), &(0x7f00000005c0)) io_uring_enter(0xffffffffffffffff, 0x48e9, 0x0, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000ac0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r3, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r2}, 0x10) r4 = socket$can_j1939(0x1d, 0x2, 0x7) socket$nl_route(0x10, 0x3, 0x0) open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r5, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000200040010000800014004000000", 0x58}], 0x1) bind$can_j1939(r4, &(0x7f0000000040)={0x1d, 0x0, 0x3, {0x1, 0xf0, 0x2}, 0x2}, 0x18) r6 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000001700)={@val={0x2000, 0x88fb}, @void, @eth={@broadcast, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x29, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, {0x0, 0x0, 0x28, 0x0, @opaque="9b1fa4eee5153e9db9d87bd15ac2629eb59a888c2c94d5ae20b07315c4cbd9ac"}}}}}}, 0x4e) (fail_nth: 2) 380.55125ms ago: executing program 3 (id=4674): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000010000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) preadv(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000080)=""/4094, 0xffe}], 0x1, 0x33, 0x1) lsm_set_self_attr(0x66, 0x0, 0x20, 0x0) 145.17522ms ago: executing program 3 (id=4675): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x45, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) lsm_get_self_attr(0x64, 0x0, &(0x7f0000000040), 0x0) 144.90094ms ago: executing program 3 (id=4676): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB, @ANYRES32], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000f00)={0x11, 0xf, &(0x7f0000000e00)=ANY=[@ANYBLOB="1800000001040001000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7f600000000000085000000830018cf97750000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000085000000b7000000000000009500000000000000bea8fd8c777839f55b95d67689c2359a9782974a0c3e89ffa646dc44395f2ceca26d08c29f40364532569d8509f96692c580142c5bd6e7ae293f7b610cf53fde3fe054fafa5daef427d7678196c19ee503fa748774135c715e2f1102e54caea2b9ed8924f43a24d7566c7918e71d9a5b8530c753d3ec8af1d2a1acda2b5a0c6d"], &(0x7f0000000080)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000095980000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f0ffffffb702000005000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) writev(0xffffffffffffffff, &(0x7f0000000e80), 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f00000008c0)={[{@bsdgroups}, {@nodiscard}, {@noblock_validity}, {@grpjquota}, {@grpjquota}, {@orlov}, {@abort}, {@nombcache}, {@stripe={'stripe', 0x3d, 0x10}}]}, 0x64, 0x50a, &(0x7f0000000200)="$eJzs3VFrHFsdAPD/bHZr06Y3ueqDXvB6tZW0aHeTxrbBh1pB9Kmg1vcak00I2WRDdtM2oWiKH0AQUcEnffFF8AMIUvDFRxEK+qyoKKKtPvigncvuTtI03U227TabZn8/mMw5Z2b2f86GmZ0zc5gJYGC9FxHXI+JJmqYXImI0K89lU2y1psZ6jx/dm21MSaTpzX8mkWRl25+VZPPT2WYnI+JrX474ZvJ83NrG5tJMpVJey/Kl+vJqqbaxeXFxeWahvFBemZqavDJ9dfry9ERP2nkmIq598a8/+O7PvnTtV5+586dbfz//rUa1RrLlu9vxgvL7LWw1vdD8LnZvsPaSwY6ifLOFmeF2aww9V3L/NdcJAID2Guf4H4yIT0bEhRiNof1PZwEAAIA3UPr5kfhfEpG2d6JDOQAAAPAGyTXHwCa5YjYWYCRyuWKxNYb3w3EqV6nW6p+er66vzLXGyo5FITe/WClPZGOFx6KQNPKTzfTT/KU9+amIeDsivj863MwXZ6uVuX5f/AAAAIABcXpP//8/o63+PwAAAHDMjPW7AgAAAMBrp/8PAAAAx5/+PwAAABxrX7lxozGl2++/nru9sb5UvX1xrlxbKi6vzxZnq2urxYVqdaH5zL7lgz6vUq2ufjZW1u+W6uVavVTb2Ly1XF1fqd9afOYV2AAAAMAhevvjD/6QRMTW54abU8OJ7jbtcjXgqMrvpJJs3ma3/uNbrflfDqlSwKEY6ncFgL7J97sCQN8U+l0BoO+SA5Z3HLzz22z+id7WBwAA6L3xj3a+/5/bd8ut/RcDR56dGAaX+/8wuJr3/7sdyetkAY6VgjMAGHivfP//QGn6QhUCAAB6bqQ5JblidnlvJHK5YjHiTPO1AIVkfrFSnoiItyLi96OFDzTyk80tkwP7DAAAAAAAAAAAAAAAAAAAAAAAAABAS5omkQIAAADHWkTub8mvW8/yHx89N7L3+sCJ5L+jkb0i9M6Pb/7w7ky9vjbZKP/XTnn9R1n5pX5cwQAAAICB8EIv8N/up2/34wEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACglx4/uje7PR1m3H98ISLG2sXPx8nm/GQUIuLUv5PI79ouiYihHsQfbvz5SLv4SaNaOyHbxR/uQfyt+/vGj7HsW2gX/3QP4sMge9A4/lxvt//l4r3mvP3+l494Jv+yOh//Yuf4N9Rh/z/TZYx3Hv6i1DH+/Yh38u2PP9vxkw7xz3YZ/xtf39zstCz9ScR429+f5JlYpfryaqm2sXlxcXlmobxQXpmamrwyfXX68vREaX6xUs7+to3xvY/98sl+7T/VIf7YAe0/12X7///w7qMPtZKFdvHPn20T/zc/zdZ4Pn4u++37VJZuLB/fTm+10ru9+/Pfvbtf++c6tP+g///5Ltt/4avf+XOXqwIAh6C2sbk0U6mU145totFLPwLVkDiCiW/39APTNE0b+9QrfE4SR+FraSb6fWQCAAB67elJf79rAgAAAAAAAAAAAAAAAAAAAIPrMB4ntjfm1k4q6cUjtAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeuL9AAAA//+GAdlV") 19.2424ms ago: executing program 7 (id=4677): bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) unshare(0x22020600) mkdir(&(0x7f0000000300)='./file0\x00', 0xfffffffffffffffe) mknod$loop(&(0x7f0000000080)='./file0/bus\x00', 0x6210, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) r1 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) lchown(&(0x7f0000000400)='./file0/bus\x00', 0xee00, 0xffffffffffffffff) creat(&(0x7f0000000040)='./file0/bus\x00', 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x80801c, &(0x7f0000000f40), 0x1, 0x503, &(0x7f0000000880)="$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") r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x40842, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) fallocate(r3, 0x0, 0x0, 0x8001) sendfile(r2, r3, 0x0, 0x1000000000008) syz_clone(0x10eb22b000, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='hrtimer_init\x00', r4}, 0x18) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1600000000000000040000000100000000000000", @ANYRES32=0x1, @ANYBLOB="001000fbffffff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x22a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) 18.63242ms ago: executing program 1 (id=4678): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000ffffffff000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r1}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) syz_clone3(&(0x7f0000000700)={0x5324400, 0x0, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) 0s ago: executing program 3 (id=4679): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1900000004000000080000000600000000000000", @ANYRES32, @ANYBLOB="ff7f00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000000000000000000000000000001e0e422934733dff5ff60800000006c5a6aeffcde1ef77db40e68a6e0184e3a5e4944c382b69c6cc5cc9df7d195d29fa0d8fc1514f06c2cb1df88a0b0500000000000000f406008790a79121d60355cfb5bad2745bc924bf0000"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000", @ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r0}, &(0x7f0000000200), &(0x7f0000000280)=r1}, 0x20) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000200)='./file2\x00', 0x204002, &(0x7f00000000c0), 0xb8, 0x564, &(0x7f00000008c0)="$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") r2 = open(&(0x7f0000000040)='./file2\x00', 0x181042, 0x0) write$P9_RREADDIR(r2, &(0x7f0000000700)={0xb, 0x29, 0x2, {0x5}}, 0xb) sendfile(r2, r2, &(0x7f00000002c0), 0x7f03) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1801000020017e9c0000000000000000850000007b00000095"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) r3 = inotify_init1(0x80800) inotify_add_watch(r3, &(0x7f0000000300)='./file0\x00', 0xe0000401) umount2(&(0x7f00000002c0)='./file0\x00', 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000000)='kmem_cache_free\x00', r5}, 0x10) r6 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r6, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) sendmsg$nl_route(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="380000001a0001000000000000000a0080002020"], 0x38}}, 0x0) r7 = socket$inet6(0xa, 0x40000080806, 0x0) connect$inet6(r7, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) close(r3) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8, 0x8, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f00000003c0)='kfree\x00', r8}, 0x10) kernel console output (not intermixed with test programs): EXT4-fs warning (device loop6): ext4_empty_dir:3105: inode #11: comm syz-executor: directory missing '.' [ 604.459586][T14343] EXT4-fs error (device loop6): ext4_readdir:261: inode #11: block 32: comm syz-executor: path /337/file2/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 604.460010][T14343] EXT4-fs error (device loop6): ext4_empty_dir:3103: inode #11: block 32: comm syz-executor: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 604.460177][T14343] EXT4-fs warning (device loop6): ext4_empty_dir:3105: inode #11: comm syz-executor: directory missing '.' [ 604.460591][T14343] EXT4-fs warning (device loop6): ext4_empty_dir:3105: inode #11: comm syz-executor: directory missing '.' [ 604.460951][T14343] EXT4-fs warning (device loop6): ext4_empty_dir:3105: inode #11: comm syz-executor: directory missing '.' [ 604.461377][T14343] EXT4-fs warning (device loop6): ext4_empty_dir:3105: inode #11: comm syz-executor: directory missing '.' [ 604.461972][T14343] EXT4-fs warning (device loop6): ext4_empty_dir:3105: inode #11: comm syz-executor: directory missing '.' [ 604.462481][T14343] EXT4-fs warning (device loop6): ext4_empty_dir:3105: inode #11: comm syz-executor: directory missing '.' [ 604.518868][T20531] hsr_slave_1 (unregistering): left promiscuous mode [ 604.575220][T20543] loop3: detected capacity change from 0 to 256 [ 604.581778][T20543] FAT-fs (loop3): bogus number of FAT sectors [ 604.581795][T20543] FAT-fs (loop3): Can't find a valid FAT filesystem [ 604.633605][T20549] loop5: detected capacity change from 0 to 1024 [ 604.647090][T20551] FAULT_INJECTION: forcing a failure. [ 604.647090][T20551] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 604.686148][T20551] CPU: 1 UID: 0 PID: 20551 Comm: syz.2.4271 Not tainted 6.13.0-rc6-syzkaller-00130-g2144da25584e #0 [ 604.696920][T20551] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 604.706993][T20551] Call Trace: [ 604.710266][T20551] [ 604.714516][T20551] dump_stack_lvl+0xf2/0x150 [ 604.719182][T20551] dump_stack+0x15/0x1a [ 604.723478][T20551] should_fail_ex+0x223/0x230 [ 604.728280][T20551] should_fail+0xb/0x10 [ 604.732957][T20551] should_fail_usercopy+0x1a/0x20 [ 604.737981][T20551] _copy_from_user+0x1e/0xb0 [ 604.742593][T20551] __se_sys_memfd_create+0x26b/0x5c0 [ 604.747919][T20551] __x64_sys_memfd_create+0x31/0x40 [ 604.753180][T20551] x64_sys_call+0x2d4c/0x2dc0 [ 604.757887][T20551] do_syscall_64+0xc9/0x1c0 [ 604.762416][T20551] ? clear_bhb_loop+0x55/0xb0 [ 604.767128][T20551] ? clear_bhb_loop+0x55/0xb0 [ 604.771923][T20551] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 604.777986][T20551] RIP: 0033:0x7f734ecc5d29 [ 604.782393][T20551] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 604.802031][T20551] RSP: 002b:00007f734d336e18 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 604.810593][T20551] RAX: ffffffffffffffda RBX: 0000000000000576 RCX: 00007f734ecc5d29 [ 604.818573][T20551] RDX: 00007f734d336ef0 RSI: 0000000000000000 RDI: 00007f734ed42469 [ 604.826536][T20551] RBP: 0000000020000640 R08: 00007f734d336bb7 R09: 00007f734d336e40 [ 604.834528][T20551] R10: 000000000000000a R11: 0000000000000202 R12: 00000000200005c0 [ 604.842604][T20551] R13: 00007f734d336ef0 R14: 00007f734d336eb0 R15: 0000000020000600 [ 604.850592][T20551] [ 604.921435][T20555] vhci_hcd: invalid port number 236 [ 604.930261][T20555] loop3: detected capacity change from 0 to 512 [ 604.936901][T20555] EXT4-fs: Ignoring removed orlov option [ 604.957634][T20555] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 604.980747][ T483] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 605.040889][T20555] EXT4-fs (loop3): orphan cleanup on readonly fs [ 605.060800][T20555] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.4273: bg 0: block 248: padding at end of block bitmap is not set [ 605.083038][T20555] EXT4-fs error (device loop3): ext4_acquire_dquot:6938: comm syz.3.4273: Failed to acquire dquot type 1 [ 605.106649][ T483] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 605.143714][T20555] EXT4-fs (loop3): 1 truncate cleaned up [ 605.177533][T20570] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4275'. [ 605.195481][ T483] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 605.273262][ T483] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 605.420182][T20549] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 605.420367][T20549] EXT4-fs (loop5): Delayed block allocation failed for inode 16 at logical offset 16 with max blocks 1 with error 28 [ 605.420423][T20549] EXT4-fs (loop5): This should not happen!! Data will be lost [ 605.420423][T20549] [ 605.420512][T20549] EXT4-fs (loop5): Total free blocks count 0 [ 605.420526][T20549] EXT4-fs (loop5): Free/Dirty block details [ 605.420538][T20549] EXT4-fs (loop5): free_blocks=68451041280 [ 605.420552][T20549] EXT4-fs (loop5): dirty_blocks=16 [ 605.420563][T20549] EXT4-fs (loop5): Block reservation details [ 605.420573][T20549] EXT4-fs (loop5): i_reserved_data_blocks=1 [ 605.444592][ T483] bridge_slave_1: left allmulticast mode [ 605.444610][ T483] bridge_slave_1: left promiscuous mode [ 605.444729][ T483] bridge0: port 2(bridge_slave_1) entered disabled state [ 605.447138][ T483] bridge_slave_0: left allmulticast mode [ 605.447155][ T483] bridge_slave_0: left promiscuous mode [ 605.447291][ T483] bridge0: port 1(bridge_slave_0) entered disabled state [ 605.652140][ T483] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 605.653480][ T483] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 605.654540][ T483] bond0 (unregistering): Released all slaves [ 605.759246][ T483] hsr_slave_0: left promiscuous mode [ 605.769933][ T483] hsr_slave_1: left promiscuous mode [ 605.772394][ T483] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 605.772423][ T483] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 605.779822][ T483] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 605.803344][ T483] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 605.814447][T20628] bpf_get_probe_write_proto: 14 callbacks suppressed [ 605.814464][T20628] syz.1.4285[20628] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 605.814517][T20628] syz.1.4285[20628] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 605.814706][T20628] syz.1.4285[20628] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 605.817185][T20628] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4285'. [ 605.849454][ T483] veth0_macvtap: left promiscuous mode [ 605.849546][ T483] veth1_vlan: left promiscuous mode [ 605.849602][ T483] veth0_vlan: left promiscuous mode [ 605.851584][T20631] FAULT_INJECTION: forcing a failure. [ 605.851584][T20631] name failslab, interval 1, probability 0, space 0, times 0 [ 605.851606][T20631] CPU: 1 UID: 0 PID: 20631 Comm: syz.5.4286 Not tainted 6.13.0-rc6-syzkaller-00130-g2144da25584e #0 [ 605.851631][T20631] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 605.851642][T20631] Call Trace: [ 605.851647][T20631] [ 605.851653][T20631] dump_stack_lvl+0xf2/0x150 [ 605.851744][T20631] dump_stack+0x15/0x1a [ 605.851807][T20631] should_fail_ex+0x223/0x230 [ 605.851831][T20631] should_failslab+0x8f/0xb0 [ 605.851861][T20631] kmem_cache_alloc_node_noprof+0x59/0x320 [ 605.851936][T20631] ? __alloc_skb+0x10b/0x310 [ 605.851958][T20631] __alloc_skb+0x10b/0x310 [ 605.851979][T20631] netlink_alloc_large_skb+0xad/0xe0 [ 605.852071][T20631] netlink_sendmsg+0x3b4/0x6e0 [ 605.852097][T20631] ? __pfx_netlink_sendmsg+0x10/0x10 [ 605.852117][T20631] __sock_sendmsg+0x140/0x180 [ 605.852195][T20631] ____sys_sendmsg+0x312/0x410 [ 605.852221][T20631] __sys_sendmsg+0x19d/0x230 [ 605.852257][T20631] __x64_sys_sendmsg+0x46/0x50 [ 605.852280][T20631] x64_sys_call+0x2734/0x2dc0 [ 605.852299][T20631] do_syscall_64+0xc9/0x1c0 [ 605.852389][T20631] ? clear_bhb_loop+0x55/0xb0 [ 605.852407][T20631] ? clear_bhb_loop+0x55/0xb0 [ 605.852428][T20631] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 605.852526][T20631] RIP: 0033:0x7f9cdd145d29 [ 605.852539][T20631] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 605.852558][T20631] RSP: 002b:00007f9cdb7b7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 605.852655][T20631] RAX: ffffffffffffffda RBX: 00007f9cdd335fa0 RCX: 00007f9cdd145d29 [ 605.852669][T20631] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000004 [ 605.852683][T20631] RBP: 00007f9cdb7b7090 R08: 0000000000000000 R09: 0000000000000000 [ 605.852770][T20631] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 605.852781][T20631] R13: 0000000000000000 R14: 00007f9cdd335fa0 R15: 00007ffeee94c228 [ 605.852801][T20631] [ 605.888331][T20634] loop3: detected capacity change from 0 to 512 [ 605.934466][T20634] ext4 filesystem being mounted at /862/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 606.095131][ T483] team0 (unregistering): Port device team_slave_1 removed [ 606.382856][T20628] loop1: detected capacity change from 0 to 65536 [ 606.464807][ T483] team0 (unregistering): Port device team_slave_0 removed [ 606.588837][T20628] vfat: Unknown parameter 'ê' [ 606.633515][T20572] chnl_net:caif_netlink_parms(): no params data found [ 606.820422][T20663] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4293'. [ 606.836777][T20670] loop1: detected capacity change from 0 to 512 [ 606.844683][T20572] bridge0: port 1(bridge_slave_0) entered blocking state [ 606.851869][T20572] bridge0: port 1(bridge_slave_0) entered disabled state [ 606.868529][T20572] bridge_slave_0: entered allmulticast mode [ 606.875271][T20572] bridge_slave_0: entered promiscuous mode [ 606.882930][T20572] bridge0: port 2(bridge_slave_1) entered blocking state [ 606.890020][T20572] bridge0: port 2(bridge_slave_1) entered disabled state [ 606.894151][T20670] ext4 filesystem being mounted at /849/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 606.899083][T20572] bridge_slave_1: entered allmulticast mode [ 606.928023][T20572] bridge_slave_1: entered promiscuous mode [ 607.006181][ T29] kauditd_printk_skb: 600 callbacks suppressed [ 607.006196][ T29] audit: type=1400 audit(1736537314.213:46078): avc: denied { write } for pid=20683 comm="syz.2.4298" name="uhid" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 607.037361][T20572] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 607.050832][T20690] FAULT_INJECTION: forcing a failure. [ 607.050832][T20690] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 607.053893][T20691] loop5: detected capacity change from 0 to 512 [ 607.063896][T20690] CPU: 1 UID: 0 PID: 20690 Comm: syz.3.4302 Not tainted 6.13.0-rc6-syzkaller-00130-g2144da25584e #0 [ 607.080904][T20690] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 607.091029][T20690] Call Trace: [ 607.094311][T20690] [ 607.097239][T20690] dump_stack_lvl+0xf2/0x150 [ 607.101874][T20690] dump_stack+0x15/0x1a [ 607.106027][T20690] should_fail_ex+0x223/0x230 [ 607.110768][T20690] should_fail+0xb/0x10 [ 607.115057][T20690] should_fail_usercopy+0x1a/0x20 [ 607.120089][T20690] _copy_to_user+0x20/0xa0 [ 607.124506][T20690] simple_read_from_buffer+0xa0/0x110 [ 607.129878][T20690] proc_fail_nth_read+0xf9/0x140 [ 607.134920][T20690] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 607.140462][T20690] vfs_read+0x1a2/0x700 [ 607.144618][T20690] ? __rcu_read_unlock+0x4e/0x70 [ 607.149550][T20690] ? __fget_files+0x17c/0x1c0 [ 607.154229][T20690] ksys_read+0xe8/0x1b0 [ 607.158381][T20690] __x64_sys_read+0x42/0x50 [ 607.162971][T20690] x64_sys_call+0x2874/0x2dc0 [ 607.167672][T20690] do_syscall_64+0xc9/0x1c0 [ 607.172257][T20690] ? clear_bhb_loop+0x55/0xb0 [ 607.176930][T20690] ? clear_bhb_loop+0x55/0xb0 [ 607.181647][T20690] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 607.187610][T20690] RIP: 0033:0x7f1aba14473c [ 607.192088][T20690] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 607.211729][T20690] RSP: 002b:00007f1ab87b7030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 607.220150][T20690] RAX: ffffffffffffffda RBX: 00007f1aba335fa0 RCX: 00007f1aba14473c [ 607.228132][T20690] RDX: 000000000000000f RSI: 00007f1ab87b70a0 RDI: 0000000000000004 [ 607.236131][T20690] RBP: 00007f1ab87b7090 R08: 0000000000000000 R09: 0000000000000000 [ 607.244096][T20690] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 607.252082][T20690] R13: 0000000000000000 R14: 00007f1aba335fa0 R15: 00007ffe0f8b4538 [ 607.260182][T20690] [ 607.287496][T20572] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 607.326441][T20695] loop3: detected capacity change from 0 to 512 [ 607.344459][T20691] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 607.355562][T20572] team0: Port device team_slave_0 added [ 607.375001][T20572] team0: Port device team_slave_1 added [ 607.387456][T20695] ext4 filesystem being mounted at /867/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 607.409778][T20691] EXT4-fs (loop5): 1 truncate cleaned up [ 607.454170][T20572] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 607.461308][T20572] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 607.487386][T20572] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 607.517239][T20572] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 607.524320][T20572] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 607.550293][T20572] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 607.640603][ T29] audit: type=1326 audit(1736537314.853:46079): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20717 comm="syz.5.4308" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9cdd145d29 code=0x7ffc0000 [ 607.804237][ T29] audit: type=1326 audit(1736537314.933:46080): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20713 comm="syz.2.4307" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f734ecc5d29 code=0x7ffc0000 [ 607.827959][ T29] audit: type=1326 audit(1736537314.933:46081): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20713 comm="syz.2.4307" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f734ecc5d29 code=0x7ffc0000 [ 607.851596][ T29] audit: type=1326 audit(1736537314.933:46082): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20713 comm="syz.2.4307" exe="/root/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7f734ecc5d29 code=0x7ffc0000 [ 607.875254][ T29] audit: type=1326 audit(1736537314.933:46083): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20717 comm="syz.5.4308" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9cdd145d29 code=0x7ffc0000 [ 607.898974][ T29] audit: type=1326 audit(1736537314.933:46084): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20717 comm="syz.5.4308" exe="/root/syz-executor" sig=0 arch=c000003e syscall=68 compat=0 ip=0x7f9cdd145d29 code=0x7ffc0000 [ 607.922533][ T29] audit: type=1326 audit(1736537314.933:46085): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20717 comm="syz.5.4308" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9cdd145d29 code=0x7ffc0000 [ 607.946090][ T29] audit: type=1326 audit(1736537314.933:46086): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20717 comm="syz.5.4308" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9cdd145d29 code=0x7ffc0000 [ 607.969735][ T29] audit: type=1326 audit(1736537314.933:46087): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20717 comm="syz.5.4308" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9cdd145d29 code=0x7ffc0000 [ 608.045383][T20572] hsr_slave_0: entered promiscuous mode [ 608.052753][T20572] hsr_slave_1: entered promiscuous mode [ 608.061447][T20572] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 608.071338][T20718] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4308'. [ 608.105720][T20572] Cannot create hsr debugfs directory [ 608.333694][T20572] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 608.359754][T20572] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 608.382318][T20572] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 608.387248][T20572] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 608.389669][T20760] netlink: 'syz.2.4315': attribute type 39 has an invalid length. [ 608.461902][T20770] loop3: detected capacity change from 0 to 512 [ 608.467137][T20770] EXT4-fs: Ignoring removed orlov option [ 608.484329][T20770] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 608.488735][T20770] EXT4-fs (loop3): orphan cleanup on readonly fs [ 608.502000][T20758] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4316'. [ 608.504642][T20770] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.4318: bg 0: block 248: padding at end of block bitmap is not set [ 608.508761][T20572] 8021q: adding VLAN 0 to HW filter on device bond0 [ 608.510584][T20770] EXT4-fs error (device loop3): ext4_acquire_dquot:6938: comm syz.3.4318: Failed to acquire dquot type 1 [ 608.521987][T20770] EXT4-fs (loop3): 1 truncate cleaned up [ 608.546993][T20572] 8021q: adding VLAN 0 to HW filter on device team0 [ 608.568759][ T483] bridge0: port 1(bridge_slave_0) entered blocking state [ 608.568790][ T483] bridge0: port 1(bridge_slave_0) entered forwarding state [ 608.569985][ T483] bridge0: port 2(bridge_slave_1) entered blocking state [ 608.570067][ T483] bridge0: port 2(bridge_slave_1) entered forwarding state [ 608.603448][T20572] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 608.690243][T20572] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 608.784122][T20572] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 608.803846][T20788] loop5: detected capacity change from 0 to 512 [ 608.837686][T20788] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 608.888011][T20788] EXT4-fs (loop5): 1 truncate cleaned up [ 609.020231][T20785] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4320'. [ 609.117915][T20572] veth0_vlan: entered promiscuous mode [ 609.121014][T20572] veth1_vlan: entered promiscuous mode [ 609.151333][T20572] veth0_macvtap: entered promiscuous mode [ 609.180290][T20572] veth1_macvtap: entered promiscuous mode [ 609.195918][T20572] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 609.195938][T20572] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 609.196425][T20572] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 609.210071][T20572] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 609.210093][T20572] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 609.210808][T20572] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 609.211656][T20572] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 609.211771][T20572] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 609.211802][T20572] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 609.211886][T20572] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 609.331814][T20842] syz.2.4326[20842] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 609.331930][T20842] syz.2.4326[20842] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 609.331992][T20842] syz.2.4326[20842] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 609.333851][T20842] xt_hashlimit: max too large, truncated to 1048576 [ 609.407143][T20851] loop7: detected capacity change from 0 to 512 [ 609.420082][T20851] EXT4-fs (loop7): orphan cleanup on readonly fs [ 609.421107][T20851] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.4327: bg 0: block 248: padding at end of block bitmap is not set [ 609.421325][T20851] EXT4-fs error (device loop7): ext4_acquire_dquot:6938: comm syz.7.4327: Failed to acquire dquot type 1 [ 609.421867][T20851] EXT4-fs (loop7): 1 truncate cleaned up [ 609.561820][T20858] loop7: detected capacity change from 0 to 1024 [ 609.571419][T20865] vhci_hcd: invalid port number 236 [ 609.687861][T20870] loop5: detected capacity change from 0 to 1024 [ 609.700538][T20865] loop2: detected capacity change from 0 to 512 [ 609.700913][T20865] EXT4-fs: Ignoring removed orlov option [ 609.702437][T20865] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 609.703028][T20865] EXT4-fs (loop2): orphan cleanup on readonly fs [ 609.703481][T20865] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.4330: bg 0: block 248: padding at end of block bitmap is not set [ 609.703614][T20865] EXT4-fs error (device loop2): ext4_acquire_dquot:6938: comm syz.2.4330: Failed to acquire dquot type 1 [ 609.709305][T20865] EXT4-fs (loop2): 1 truncate cleaned up [ 609.728151][T20870] EXT4-fs error (device loop5): ext4_lookup:1813: inode #14: comm syz.5.4331: iget: immutable or append flags not allowed on symlinks [ 609.728274][T20870] EXT4-fs (loop5): Remounting filesystem read-only [ 609.798602][T14241] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop5 ino=11 [ 609.813626][T20877] vhci_hcd: invalid port number 236 [ 609.822012][T14241] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop5 ino=11 [ 609.844986][T20877] loop1: detected capacity change from 0 to 512 [ 609.861293][T14241] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop5 ino=11 [ 609.869489][T20877] EXT4-fs: Ignoring removed orlov option [ 609.871665][T14241] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop5 ino=11 [ 609.887076][T20877] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 609.911528][T14241] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop5 ino=11 [ 609.911705][T14241] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop5 ino=11 [ 609.911934][T14241] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop5 ino=11 [ 609.912001][T14241] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop5 ino=11 [ 609.934154][T20877] EXT4-fs (loop1): orphan cleanup on readonly fs [ 609.960086][T20877] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.4332: bg 0: block 248: padding at end of block bitmap is not set [ 609.999608][T20877] EXT4-fs error (device loop1): ext4_acquire_dquot:6938: comm syz.1.4332: Failed to acquire dquot type 1 [ 610.026263][T20877] EXT4-fs (loop1): 1 truncate cleaned up [ 610.129644][T20877] EXT4-fs error (device loop1): ext4_lookup:1817: inode #2: comm syz.1.4332: deleted inode referenced: 12 [ 610.296496][T20911] FAULT_INJECTION: forcing a failure. [ 610.296496][T20911] name failslab, interval 1, probability 0, space 0, times 0 [ 610.309235][T20911] CPU: 1 UID: 0 PID: 20911 Comm: syz.3.4338 Not tainted 6.13.0-rc6-syzkaller-00130-g2144da25584e #0 [ 610.320275][T20911] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 610.330459][T20911] Call Trace: [ 610.333801][T20911] [ 610.336752][T20911] dump_stack_lvl+0xf2/0x150 [ 610.341478][T20911] dump_stack+0x15/0x1a [ 610.345793][T20911] should_fail_ex+0x223/0x230 [ 610.350497][T20911] should_failslab+0x8f/0xb0 [ 610.355167][T20911] kmem_cache_alloc_node_noprof+0x59/0x320 [ 610.361087][T20911] ? perf_event_alloc+0x157/0x12e0 [ 610.366267][T20911] perf_event_alloc+0x157/0x12e0 [ 610.371226][T20911] ? __fget_files+0x17c/0x1c0 [ 610.376102][T20911] __se_sys_perf_event_open+0x7f2/0x2230 [ 610.381785][T20911] ? vfs_write+0x596/0x920 [ 610.386213][T20911] ? putname+0xcf/0xf0 [ 610.390335][T20911] __x64_sys_perf_event_open+0x67/0x80 [ 610.395840][T20911] x64_sys_call+0x1deb/0x2dc0 [ 610.400577][T20911] do_syscall_64+0xc9/0x1c0 [ 610.405290][T20911] ? clear_bhb_loop+0x55/0xb0 [ 610.410638][T20911] ? clear_bhb_loop+0x55/0xb0 [ 610.415414][T20911] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 610.421621][T20911] RIP: 0033:0x7f1aba145d29 [ 610.426036][T20911] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 610.445658][T20911] RSP: 002b:00007f1ab87b7038 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 610.454195][T20911] RAX: ffffffffffffffda RBX: 00007f1aba335fa0 RCX: 00007f1aba145d29 [ 610.462181][T20911] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000180 [ 610.470265][T20911] RBP: 00007f1ab87b7090 R08: 0000000000000000 R09: 0000000000000000 [ 610.478270][T20911] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000001 [ 610.486235][T20911] R13: 0000000000000000 R14: 00007f1aba335fa0 R15: 00007ffe0f8b4538 [ 610.494206][T20911] [ 610.505550][T20914] xt_hashlimit: max too large, truncated to 1048576 [ 610.546654][ T57] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 610.605088][ T57] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 610.667301][T20924] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 610.699019][ T57] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 610.769184][T20932] loop1: detected capacity change from 0 to 512 [ 610.777784][T20932] EXT4-fs: Ignoring removed orlov option [ 610.790686][ T57] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 610.802568][T20932] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 610.812151][T20935] loop7: detected capacity change from 0 to 512 [ 610.830703][T20932] EXT4-fs (loop1): orphan cleanup on readonly fs [ 610.846519][T20935] EXT4-fs (loop7): blocks per group (95) and clusters per group (32768) inconsistent [ 610.846800][T20932] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.4343: bg 0: block 248: padding at end of block bitmap is not set [ 610.873197][T20932] EXT4-fs error (device loop1): ext4_acquire_dquot:6938: comm syz.1.4343: Failed to acquire dquot type 1 [ 610.892259][T20935] loop7: detected capacity change from 0 to 256 [ 610.907136][T20935] FAT-fs (loop7): error, invalid access to FAT (entry 0x00000001) [ 610.926173][T20932] EXT4-fs (loop1): 1 truncate cleaned up [ 610.964309][T20935] Process accounting resumed [ 611.026304][T20951] loop2: detected capacity change from 0 to 512 [ 611.033132][T20951] EXT4-fs: Ignoring removed orlov option [ 611.044004][T20951] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 611.072926][T20951] EXT4-fs (loop2): orphan cleanup on readonly fs [ 611.081683][T20951] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.4348: bg 0: block 248: padding at end of block bitmap is not set [ 611.119520][T20951] EXT4-fs error (device loop2): ext4_acquire_dquot:6938: comm syz.2.4348: Failed to acquire dquot type 1 [ 611.149516][ T57] bond0 (unregistering): (slave geneve1): Releasing backup interface [ 611.151932][T20951] EXT4-fs (loop2): 1 truncate cleaned up [ 611.189486][ T57] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 611.216240][ T57] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 611.228533][ T57] bond0 (unregistering): Released all slaves [ 611.246973][T20927] chnl_net:caif_netlink_parms(): no params data found [ 611.284894][ T57] hsr_slave_0: left promiscuous mode [ 611.299885][ T57] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 611.307609][ T57] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 611.316141][ T57] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 611.323790][ T57] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 611.333969][ T57] veth1_macvtap: left promiscuous mode [ 611.339490][ T57] veth0_macvtap: left promiscuous mode [ 611.345119][ T57] veth1_vlan: left promiscuous mode [ 611.350384][ T57] veth0_vlan: left promiscuous mode [ 611.352311][T20982] loop2: detected capacity change from 0 to 1024 [ 611.456291][ T57] team0 (unregistering): Port device team_slave_1 removed [ 611.471273][ T57] team0 (unregistering): Port device team_slave_0 removed [ 611.565160][T20927] bridge0: port 1(bridge_slave_0) entered blocking state [ 611.572489][T20927] bridge0: port 1(bridge_slave_0) entered disabled state [ 611.579733][T20927] bridge_slave_0: entered allmulticast mode [ 611.586214][T20927] bridge_slave_0: entered promiscuous mode [ 611.592772][T20927] bridge0: port 2(bridge_slave_1) entered blocking state [ 611.600082][T20927] bridge0: port 2(bridge_slave_1) entered disabled state [ 611.607234][T20927] bridge_slave_1: entered allmulticast mode [ 611.613945][T20927] bridge_slave_1: entered promiscuous mode [ 611.651807][T20927] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 611.662431][T20927] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 611.701557][T20927] team0: Port device team_slave_0 added [ 611.708347][T20927] team0: Port device team_slave_1 added [ 611.728013][T20927] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 611.735075][T20927] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 611.761221][T20927] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 611.798777][T20982] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 611.827436][T20927] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 611.834747][T20927] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 611.860759][T20927] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 611.862643][T20982] EXT4-fs (loop2): Delayed block allocation failed for inode 16 at logical offset 16 with max blocks 1 with error 28 [ 611.883559][T20982] EXT4-fs (loop2): This should not happen!! Data will be lost [ 611.883559][T20982] [ 611.893228][T20982] EXT4-fs (loop2): Total free blocks count 0 [ 611.899248][T20982] EXT4-fs (loop2): Free/Dirty block details [ 611.905229][T20982] EXT4-fs (loop2): free_blocks=68451041280 [ 611.911151][T20982] EXT4-fs (loop2): dirty_blocks=16 [ 611.916301][T20982] EXT4-fs (loop2): Block reservation details [ 611.922324][T20982] EXT4-fs (loop2): i_reserved_data_blocks=1 [ 611.942588][T21012] loop7: detected capacity change from 0 to 512 [ 611.963012][T21012] ext4 filesystem being mounted at /7/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 612.094250][ T29] kauditd_printk_skb: 221 callbacks suppressed [ 612.094265][ T29] audit: type=1326 audit(1736537319.303:46297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21019 comm="syz.2.4356" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f734ecc5d29 code=0x7ffc0000 [ 612.094534][T21023] syz.1.4357[21023] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 612.100560][ T29] audit: type=1326 audit(1736537319.303:46298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21019 comm="syz.2.4356" exe="/root/syz-executor" sig=0 arch=c000003e syscall=68 compat=0 ip=0x7f734ecc5d29 code=0x7ffc0000 [ 612.149593][T21023] syz.1.4357[21023] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 612.160634][ T29] audit: type=1326 audit(1736537319.303:46299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21019 comm="syz.2.4356" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f734ecc5d29 code=0x7ffc0000 [ 612.160666][ T29] audit: type=1326 audit(1736537319.303:46300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21022 comm="syz.1.4357" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff29d6b5d29 code=0x7ffc0000 [ 612.160687][ T29] audit: type=1326 audit(1736537319.303:46301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21022 comm="syz.1.4357" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff29d6b5d29 code=0x7ffc0000 [ 612.208872][T21023] syz.1.4357[21023] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 612.219443][ T29] audit: type=1326 audit(1736537319.303:46302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21022 comm="syz.1.4357" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff29d6b5d29 code=0x7ffc0000 [ 612.277969][ T29] audit: type=1326 audit(1736537319.343:46303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21019 comm="syz.2.4356" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f734ecc5d29 code=0x7ffc0000 [ 612.301666][ T29] audit: type=1326 audit(1736537319.393:46304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21019 comm="syz.2.4356" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f734ecc5d29 code=0x7ffc0000 [ 612.325305][ T29] audit: type=1326 audit(1736537319.393:46305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21019 comm="syz.2.4356" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f734ecc5d29 code=0x7ffc0000 [ 612.349035][ T29] audit: type=1326 audit(1736537319.393:46306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21019 comm="syz.2.4356" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f734ecc5d29 code=0x7ffc0000 [ 612.381030][T21027] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4356'. [ 612.423464][T20927] hsr_slave_0: entered promiscuous mode [ 612.433171][T20927] hsr_slave_1: entered promiscuous mode [ 612.442929][T20927] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 612.465339][T20927] Cannot create hsr debugfs directory [ 612.615765][T20959] loop3: detected capacity change from 0 to 512 [ 612.615966][T20959] EXT4-fs: Ignoring removed nomblk_io_submit option [ 612.616128][T20959] ext4: Unknown parameter 'minixdf"errors' [ 612.654399][T21053] netlink: 596 bytes leftover after parsing attributes in process `syz.1.4363'. [ 612.665491][T20927] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 612.680110][T20927] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 612.698755][T20927] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 612.726127][T20927] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 612.828213][T20927] 8021q: adding VLAN 0 to HW filter on device bond0 [ 612.839444][T20927] 8021q: adding VLAN 0 to HW filter on device team0 [ 612.858244][ T28] bridge0: port 1(bridge_slave_0) entered blocking state [ 612.858293][ T28] bridge0: port 1(bridge_slave_0) entered forwarding state [ 612.860541][ T28] bridge0: port 2(bridge_slave_1) entered blocking state [ 612.860639][ T28] bridge0: port 2(bridge_slave_1) entered forwarding state [ 612.877584][T21068] loop7: detected capacity change from 0 to 1024 [ 612.895864][T20927] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 612.929733][T20927] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 613.037436][T21086] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4369'. [ 613.051563][T20927] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 613.170747][T21092] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4368'. [ 613.228268][T21106] loop3: detected capacity change from 0 to 512 [ 613.239678][T21106] EXT4-fs (loop3): blocks per group (95) and clusters per group (32768) inconsistent [ 613.313207][T21121] FAULT_INJECTION: forcing a failure. [ 613.313207][T21121] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 613.326364][T21121] CPU: 0 UID: 0 PID: 21121 Comm: syz.3.4373 Not tainted 6.13.0-rc6-syzkaller-00130-g2144da25584e #0 [ 613.337244][T21121] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 613.347332][T21121] Call Trace: [ 613.350614][T21121] [ 613.353640][T21121] dump_stack_lvl+0xf2/0x150 [ 613.353715][T21121] dump_stack+0x15/0x1a [ 613.353744][T21121] should_fail_ex+0x223/0x230 [ 613.353771][T21121] should_fail+0xb/0x10 [ 613.353792][T21121] should_fail_usercopy+0x1a/0x20 [ 613.353815][T21121] strncpy_from_user+0x25/0x210 [ 613.353830][T21121] ? kmem_cache_alloc_noprof+0x18e/0x320 [ 613.353851][T21121] ? getname_flags+0x81/0x3b0 [ 613.353873][T21121] getname_flags+0xb0/0x3b0 [ 613.353964][T21121] __x64_sys_renameat2+0x61/0xa0 [ 613.353989][T21121] x64_sys_call+0x1bf1/0x2dc0 [ 613.354006][T21121] do_syscall_64+0xc9/0x1c0 [ 613.354071][T21121] ? clear_bhb_loop+0x55/0xb0 [ 613.354089][T21121] ? clear_bhb_loop+0x55/0xb0 [ 613.354162][T21121] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 613.354254][T21121] RIP: 0033:0x7f1aba145d29 [ 613.354267][T21121] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 613.354333][T21121] RSP: 002b:00007f1ab87b7038 EFLAGS: 00000246 ORIG_RAX: 000000000000013c [ 613.354355][T21121] RAX: ffffffffffffffda RBX: 00007f1aba335fa0 RCX: 00007f1aba145d29 [ 613.354368][T21121] RDX: ffffffffffffff9c RSI: 0000000020000780 RDI: ffffffffffffff9c [ 613.354382][T21121] RBP: 00007f1ab87b7090 R08: 0000000000000000 R09: 0000000000000000 [ 613.354396][T21121] R10: 00000000200007c0 R11: 0000000000000246 R12: 0000000000000001 [ 613.354410][T21121] R13: 0000000000000000 R14: 00007f1aba335fa0 R15: 00007ffe0f8b4538 [ 613.354429][T21121] [ 613.376289][T20927] veth0_vlan: entered promiscuous mode [ 613.378298][T20927] veth1_vlan: entered promiscuous mode [ 613.388555][T20927] veth0_macvtap: entered promiscuous mode [ 613.400557][T20927] veth1_macvtap: entered promiscuous mode [ 613.414333][T20927] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 613.414353][T20927] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 613.415046][T20927] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 613.419398][T20927] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 613.419416][T20927] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 613.419927][T20927] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 613.436673][T20927] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 613.436742][T20927] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 613.436780][T20927] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 613.436806][T20927] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 613.440331][T21068] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 613.440438][T21068] EXT4-fs (loop7): Delayed block allocation failed for inode 16 at logical offset 16 with max blocks 1 with error 28 [ 613.440527][T21068] EXT4-fs (loop7): This should not happen!! Data will be lost [ 613.440527][T21068] [ 613.440539][T21068] EXT4-fs (loop7): Total free blocks count 0 [ 613.440549][T21068] EXT4-fs (loop7): Free/Dirty block details [ 613.440559][T21068] EXT4-fs (loop7): free_blocks=68451041280 [ 613.440570][T21068] EXT4-fs (loop7): dirty_blocks=16 [ 613.440598][T21068] EXT4-fs (loop7): Block reservation details [ 613.440609][T21068] EXT4-fs (loop7): i_reserved_data_blocks=1 [ 613.447123][T21118] loop1: detected capacity change from 0 to 8192 [ 613.579132][T21134] loop8: detected capacity change from 0 to 1024 [ 613.594536][T21137] loop1: detected capacity change from 0 to 512 [ 613.600926][T21137] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 613.620299][T21137] EXT4-fs (loop1): 1 truncate cleaned up [ 613.702026][T21153] loop7: detected capacity change from 0 to 512 [ 613.717882][T21153] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 613.718958][T21153] EXT4-fs (loop7): 1 truncate cleaned up [ 613.918705][T21170] vhci_hcd: invalid port number 236 [ 613.919978][T21160] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4377'. [ 613.921715][T21170] loop7: detected capacity change from 0 to 512 [ 613.934151][T21170] EXT4-fs: Ignoring removed orlov option [ 613.934600][T21170] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 613.935293][T21170] EXT4-fs (loop7): orphan cleanup on readonly fs [ 613.935735][T21170] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.4379: bg 0: block 248: padding at end of block bitmap is not set [ 613.935982][T21170] EXT4-fs error (device loop7): ext4_acquire_dquot:6938: comm syz.7.4379: Failed to acquire dquot type 1 [ 613.936339][T21170] EXT4-fs (loop7): 1 truncate cleaned up [ 614.241744][T21186] loop1: detected capacity change from 0 to 512 [ 614.241992][T21186] EXT4-fs: Ignoring removed orlov option [ 614.251577][T21186] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 614.258776][T21186] EXT4-fs (loop1): orphan cleanup on readonly fs [ 614.259623][T21186] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.4380: bg 0: block 248: padding at end of block bitmap is not set [ 614.259815][T21186] EXT4-fs error (device loop1): ext4_acquire_dquot:6938: comm syz.1.4380: Failed to acquire dquot type 1 [ 614.260265][T21186] EXT4-fs (loop1): 1 truncate cleaned up [ 614.298484][T21134] EXT4-fs error (device loop8): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 614.298556][T21134] EXT4-fs (loop8): Delayed block allocation failed for inode 16 at logical offset 16 with max blocks 1 with error 28 [ 614.298577][T21134] EXT4-fs (loop8): This should not happen!! Data will be lost [ 614.298577][T21134] [ 614.298588][T21134] EXT4-fs (loop8): Total free blocks count 0 [ 614.298598][T21134] EXT4-fs (loop8): Free/Dirty block details [ 614.298625][T21134] EXT4-fs (loop8): free_blocks=68451041280 [ 614.298636][T21134] EXT4-fs (loop8): dirty_blocks=16 [ 614.298647][T21134] EXT4-fs (loop8): Block reservation details [ 614.298659][T21134] EXT4-fs (loop8): i_reserved_data_blocks=1 [ 614.571537][T21208] loop8: detected capacity change from 0 to 512 [ 614.575484][T21208] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 614.586521][T21208] EXT4-fs (loop8): 1 truncate cleaned up [ 614.828144][T21222] vhci_hcd: invalid port number 236 [ 614.832226][T21222] loop8: detected capacity change from 0 to 512 [ 614.832569][T21222] EXT4-fs: Ignoring removed orlov option [ 614.849673][T21222] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 614.940603][T21222] EXT4-fs (loop8): orphan cleanup on readonly fs [ 614.948086][T21222] EXT4-fs error (device loop8): ext4_validate_block_bitmap:441: comm syz.8.4386: bg 0: block 248: padding at end of block bitmap is not set [ 614.977830][T21222] EXT4-fs error (device loop8): ext4_acquire_dquot:6938: comm syz.8.4386: Failed to acquire dquot type 1 [ 614.983144][T21237] loop2: detected capacity change from 0 to 512 [ 614.991178][T21222] EXT4-fs (loop8): 1 truncate cleaned up [ 615.003386][T21237] EXT4-fs: Ignoring removed orlov option [ 615.015648][T21235] loop3: detected capacity change from 0 to 512 [ 615.023493][T21235] EXT4-fs warning (device loop3): ext4_multi_mount_protect:292: Invalid MMP block in superblock [ 615.035247][T21237] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 615.054885][T21237] EXT4-fs (loop2): orphan cleanup on readonly fs [ 615.070397][T21237] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.4392: bg 0: block 248: padding at end of block bitmap is not set [ 615.095200][T21237] EXT4-fs error (device loop2): ext4_acquire_dquot:6938: comm syz.2.4392: Failed to acquire dquot type 1 [ 615.099793][T21240] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4389'. [ 615.121492][T21237] EXT4-fs (loop2): 1 truncate cleaned up [ 615.181155][T21222] EXT4-fs error (device loop8): ext4_lookup:1817: inode #2: comm syz.8.4386: deleted inode referenced: 12 [ 615.364629][T21261] loop7: detected capacity change from 0 to 1024 [ 615.425367][T21263] loop8: detected capacity change from 0 to 512 [ 615.465219][T21263] ext4 filesystem being mounted at /7/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 615.638185][T21278] vhci_hcd: invalid port number 236 [ 615.663918][T21278] loop2: detected capacity change from 0 to 512 [ 615.666575][T21278] EXT4-fs: Ignoring removed orlov option [ 615.765539][T21284] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4401'. [ 615.820681][T21278] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 615.825840][T21278] EXT4-fs (loop2): orphan cleanup on readonly fs [ 615.826563][T21278] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.4403: bg 0: block 248: padding at end of block bitmap is not set [ 615.826878][T21278] EXT4-fs error (device loop2): ext4_acquire_dquot:6938: comm syz.2.4403: Failed to acquire dquot type 1 [ 615.827550][T21278] EXT4-fs (loop2): 1 truncate cleaned up [ 616.083901][T21261] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 616.113713][T21261] EXT4-fs (loop7): Delayed block allocation failed for inode 16 at logical offset 16 with max blocks 1 with error 28 [ 616.126047][T21261] EXT4-fs (loop7): This should not happen!! Data will be lost [ 616.126047][T21261] [ 616.135834][T21261] EXT4-fs (loop7): Total free blocks count 0 [ 616.141889][T21261] EXT4-fs (loop7): Free/Dirty block details [ 616.147819][T21261] EXT4-fs (loop7): free_blocks=68451041280 [ 616.153672][T21261] EXT4-fs (loop7): dirty_blocks=16 [ 616.158809][T21261] EXT4-fs (loop7): Block reservation details [ 616.164847][T21261] EXT4-fs (loop7): i_reserved_data_blocks=1 [ 616.174826][T21290] FAULT_INJECTION: forcing a failure. [ 616.174826][T21290] name failslab, interval 1, probability 0, space 0, times 0 [ 616.187582][T21290] CPU: 0 UID: 0 PID: 21290 Comm: syz.2.4405 Not tainted 6.13.0-rc6-syzkaller-00130-g2144da25584e #0 [ 616.198401][T21290] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 616.208512][T21290] Call Trace: [ 616.211804][T21290] [ 616.214740][T21290] dump_stack_lvl+0xf2/0x150 [ 616.219397][T21290] dump_stack+0x15/0x1a [ 616.223621][T21290] should_fail_ex+0x223/0x230 [ 616.228955][T21290] should_failslab+0x8f/0xb0 [ 616.233551][T21290] kmem_cache_alloc_node_noprof+0x59/0x320 [ 616.239367][T21290] ? __alloc_skb+0x10b/0x310 [ 616.244004][T21290] __alloc_skb+0x10b/0x310 [ 616.248491][T21290] netlink_alloc_large_skb+0xad/0xe0 [ 616.253789][T21290] netlink_sendmsg+0x3b4/0x6e0 [ 616.258699][T21290] ? __pfx_netlink_sendmsg+0x10/0x10 [ 616.264048][T21290] __sock_sendmsg+0x140/0x180 [ 616.268777][T21290] ____sys_sendmsg+0x312/0x410 [ 616.273550][T21290] __sys_sendmsg+0x19d/0x230 [ 616.278190][T21290] __x64_sys_sendmsg+0x46/0x50 [ 616.282956][T21290] x64_sys_call+0x2734/0x2dc0 [ 616.287692][T21290] do_syscall_64+0xc9/0x1c0 [ 616.292218][T21290] ? clear_bhb_loop+0x55/0xb0 [ 616.296958][T21290] ? clear_bhb_loop+0x55/0xb0 [ 616.301740][T21290] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 616.307838][T21290] RIP: 0033:0x7f734ecc5d29 [ 616.312257][T21290] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 616.331985][T21290] RSP: 002b:00007f734d337038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 616.340391][T21290] RAX: ffffffffffffffda RBX: 00007f734eeb5fa0 RCX: 00007f734ecc5d29 [ 616.348464][T21290] RDX: 0000000000000000 RSI: 0000000020000600 RDI: 0000000000000003 [ 616.356462][T21290] RBP: 00007f734d337090 R08: 0000000000000000 R09: 0000000000000000 [ 616.364509][T21290] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 616.372470][T21290] R13: 0000000000000000 R14: 00007f734eeb5fa0 R15: 00007fff1eea36b8 [ 616.380463][T21290] [ 616.435889][T21296] vhci_hcd: invalid port number 236 [ 616.450309][T21296] loop2: detected capacity change from 0 to 512 [ 616.458562][T21296] EXT4-fs: Ignoring removed orlov option [ 616.481473][T21296] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 616.589483][T21296] EXT4-fs (loop2): orphan cleanup on readonly fs [ 616.599057][T21296] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.4407: bg 0: block 248: padding at end of block bitmap is not set [ 616.640227][T21306] FAULT_INJECTION: forcing a failure. [ 616.640227][T21306] name failslab, interval 1, probability 0, space 0, times 0 [ 616.652986][T21306] CPU: 1 UID: 0 PID: 21306 Comm: syz.3.4410 Not tainted 6.13.0-rc6-syzkaller-00130-g2144da25584e #0 [ 616.663833][T21306] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 616.673896][T21306] Call Trace: [ 616.677215][T21306] [ 616.680267][T21306] dump_stack_lvl+0xf2/0x150 [ 616.684911][T21306] dump_stack+0x15/0x1a [ 616.689112][T21306] should_fail_ex+0x223/0x230 [ 616.693813][T21306] should_failslab+0x8f/0xb0 [ 616.698472][T21306] kmem_cache_alloc_node_noprof+0x59/0x320 [ 616.704286][T21306] ? __alloc_skb+0x10b/0x310 [ 616.708954][T21306] __alloc_skb+0x10b/0x310 [ 616.713385][T21306] netlink_alloc_large_skb+0xad/0xe0 [ 616.718677][T21306] netlink_sendmsg+0x3b4/0x6e0 [ 616.723514][T21306] ? __pfx_netlink_sendmsg+0x10/0x10 [ 616.728823][T21306] __sock_sendmsg+0x140/0x180 [ 616.733595][T21306] ____sys_sendmsg+0x312/0x410 [ 616.738367][T21306] __sys_sendmsg+0x19d/0x230 [ 616.743023][T21306] __x64_sys_sendmsg+0x46/0x50 [ 616.747795][T21306] x64_sys_call+0x2734/0x2dc0 [ 616.752598][T21306] do_syscall_64+0xc9/0x1c0 [ 616.757118][T21306] ? clear_bhb_loop+0x55/0xb0 [ 616.761808][T21306] ? clear_bhb_loop+0x55/0xb0 [ 616.766494][T21306] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 616.772485][T21306] RIP: 0033:0x7f1aba145d29 [ 616.776912][T21306] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 616.796544][T21306] RSP: 002b:00007f1ab87b7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 616.804974][T21306] RAX: ffffffffffffffda RBX: 00007f1aba335fa0 RCX: 00007f1aba145d29 [ 616.813069][T21306] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000000000003 [ 616.821051][T21306] RBP: 00007f1ab87b7090 R08: 0000000000000000 R09: 0000000000000000 [ 616.829039][T21306] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 616.837152][T21306] R13: 0000000000000000 R14: 00007f1aba335fa0 R15: 00007ffe0f8b4538 [ 616.845210][T21306] [ 616.923548][T21296] EXT4-fs error (device loop2): ext4_acquire_dquot:6938: comm syz.2.4407: Failed to acquire dquot type 1 [ 617.059328][T21296] EXT4-fs (loop2): 1 truncate cleaned up [ 617.191602][ T29] kauditd_printk_skb: 349 callbacks suppressed [ 617.191616][ T29] audit: type=1400 audit(1736537324.353:46644): avc: denied { write } for pid=21318 comm="syz.7.4411" name="mcfilter" dev="proc" ino=4026533748 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 617.221031][ T29] audit: type=1326 audit(1736537324.353:46645): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21318 comm="syz.7.4411" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43d0675d29 code=0x7ffc0000 [ 617.244689][ T29] audit: type=1326 audit(1736537324.353:46646): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21318 comm="syz.7.4411" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f43d0675d29 code=0x7ffc0000 [ 617.268286][ T29] audit: type=1326 audit(1736537324.353:46647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21318 comm="syz.7.4411" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43d0675d29 code=0x7ffc0000 [ 617.292359][ T29] audit: type=1326 audit(1736537324.353:46648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21318 comm="syz.7.4411" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f43d0675d29 code=0x7ffc0000 [ 617.315936][ T29] audit: type=1326 audit(1736537324.353:46649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21318 comm="syz.7.4411" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43d0675d29 code=0x7ffc0000 [ 617.339491][ T29] audit: type=1326 audit(1736537324.353:46650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21318 comm="syz.7.4411" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f43d0675d29 code=0x7ffc0000 [ 617.363083][ T29] audit: type=1326 audit(1736537324.353:46651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21318 comm="syz.7.4411" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43d0675d29 code=0x7ffc0000 [ 617.386635][ T29] audit: type=1326 audit(1736537324.353:46652): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21318 comm="syz.7.4411" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f43d0675d29 code=0x7ffc0000 [ 617.410703][ T29] audit: type=1326 audit(1736537324.353:46653): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21318 comm="syz.7.4411" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43d0675d29 code=0x7ffc0000 [ 617.447406][T21296] EXT4-fs error (device loop2): ext4_lookup:1817: inode #2: comm syz.2.4407: deleted inode referenced: 12 [ 617.923436][T21344] netlink: 24 bytes leftover after parsing attributes in process `syz.8.4415'. [ 618.038936][T21349] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4419'. [ 618.375510][T21355] loop2: detected capacity change from 0 to 512 [ 618.375954][T21355] EXT4-fs: Ignoring removed orlov option [ 618.376735][T21355] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 618.377792][T21355] EXT4-fs (loop2): orphan cleanup on readonly fs [ 618.378438][T21355] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.4412: bg 0: block 248: padding at end of block bitmap is not set [ 618.378651][T21355] EXT4-fs error (device loop2): ext4_acquire_dquot:6938: comm syz.2.4412: Failed to acquire dquot type 1 [ 618.379887][T21355] EXT4-fs (loop2): 1 truncate cleaned up [ 618.380731][T21355] EXT4-fs mount: 101 callbacks suppressed [ 618.380802][T21355] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 618.405883][ T3298] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 618.650836][T21362] loop7: detected capacity change from 0 to 512 [ 618.699856][T21362] EXT4-fs (loop7): blocks per group (95) and clusters per group (32768) inconsistent [ 619.357093][T21362] loop7: detected capacity change from 0 to 256 [ 619.381167][T21362] FAT-fs (loop7): error, invalid access to FAT (entry 0x00000001) [ 619.397407][T21362] Process accounting resumed [ 619.686158][T21384] loop8: detected capacity change from 0 to 512 [ 619.688693][T21389] loop3: detected capacity change from 0 to 512 [ 619.699165][T21389] EXT4-fs: Ignoring removed orlov option [ 619.705313][T21389] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 619.723148][T21389] EXT4-fs (loop3): orphan cleanup on readonly fs [ 619.765594][T21389] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.4432: bg 0: block 248: padding at end of block bitmap is not set [ 619.858790][T21399] pim6reg: entered allmulticast mode [ 619.864767][T21389] EXT4-fs error (device loop3): ext4_acquire_dquot:6938: comm syz.3.4432: Failed to acquire dquot type 1 [ 619.881692][T21403] pim6reg: left allmulticast mode [ 619.887714][T21389] EXT4-fs (loop3): 1 truncate cleaned up [ 619.930623][T21384] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 619.998442][T21384] ext4 filesystem being mounted at /11/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 620.028036][T21409] netlink: 'syz.1.4433': attribute type 21 has an invalid length. [ 620.044236][T21408] netlink: 'syz.7.4434': attribute type 39 has an invalid length. [ 620.061382][T21409] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4433'. [ 620.070478][T21409] netlink: 'syz.1.4433': attribute type 1 has an invalid length. [ 620.164845][T21399] x_tables: duplicate underflow at hook 2 [ 620.680632][T21389] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 620.705152][ T3302] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 620.716880][T20927] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 620.834671][T21459] loop8: detected capacity change from 0 to 512 [ 620.867611][T21463] netlink: 'syz.7.4439': attribute type 4 has an invalid length. [ 620.895046][T21459] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 620.944640][T21459] EXT4-fs (loop8): 1 truncate cleaned up [ 620.961513][T21459] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 620.982909][T21463] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4439'. [ 621.012596][T21463] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4439'. [ 621.044233][T21474] loop3: detected capacity change from 0 to 1024 [ 621.060719][T21463] hsr_slave_1 (unregistering): left promiscuous mode [ 621.095568][T21474] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 621.125982][T20927] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 621.525592][T21507] loop2: detected capacity change from 0 to 1024 [ 621.531673][T21474] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 621.549780][T21474] EXT4-fs (loop3): Delayed block allocation failed for inode 16 at logical offset 16 with max blocks 1 with error 28 [ 621.562294][T21474] EXT4-fs (loop3): This should not happen!! Data will be lost [ 621.562294][T21474] [ 621.572155][T21474] EXT4-fs (loop3): Total free blocks count 0 [ 621.576955][T21507] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 621.578134][T21474] EXT4-fs (loop3): Free/Dirty block details [ 621.578148][T21474] EXT4-fs (loop3): free_blocks=68451041280 [ 621.602056][T21474] EXT4-fs (loop3): dirty_blocks=16 [ 621.607169][T21474] EXT4-fs (loop3): Block reservation details [ 621.613176][T21474] EXT4-fs (loop3): i_reserved_data_blocks=1 [ 621.733943][T21526] loop1: detected capacity change from 0 to 512 [ 621.749703][T21526] EXT4-fs: Ignoring removed orlov option [ 621.763819][T21526] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 621.781103][T21474] syz.3.4443 (21474) used greatest stack depth: 9216 bytes left [ 621.802224][ T3302] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 621.812589][T21526] EXT4-fs (loop1): orphan cleanup on readonly fs [ 621.835989][T21526] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.4450: bg 0: block 248: padding at end of block bitmap is not set [ 621.867180][T21526] EXT4-fs error (device loop1): ext4_acquire_dquot:6938: comm syz.1.4450: Failed to acquire dquot type 1 [ 621.932126][T21526] EXT4-fs (loop1): 1 truncate cleaned up [ 621.944460][T21549] loop3: detected capacity change from 0 to 512 [ 621.965644][T21555] loop7: detected capacity change from 0 to 512 [ 621.966769][T21526] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 621.987297][T21555] EXT4-fs: Ignoring removed orlov option [ 621.996144][T21549] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 622.013273][T21555] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 622.014106][T21549] ext4 filesystem being mounted at /899/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 622.039626][T21526] EXT4-fs error (device loop1): ext4_lookup:1817: inode #2: comm syz.1.4450: deleted inode referenced: 12 [ 622.058538][T21555] EXT4-fs (loop7): orphan cleanup on readonly fs [ 622.132171][T21555] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.4455: bg 0: block 248: padding at end of block bitmap is not set [ 622.170238][T21555] EXT4-fs error (device loop7): ext4_acquire_dquot:6938: comm syz.7.4455: Failed to acquire dquot type 1 [ 622.182258][ T3299] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 622.200261][T21555] EXT4-fs (loop7): 1 truncate cleaned up [ 622.348486][T21507] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 622.377008][T21507] EXT4-fs (loop2): Delayed block allocation failed for inode 16 at logical offset 16 with max blocks 1 with error 28 [ 622.389363][T21507] EXT4-fs (loop2): This should not happen!! Data will be lost [ 622.389363][T21507] [ 622.398984][T21507] EXT4-fs (loop2): Total free blocks count 0 [ 622.405037][T21507] EXT4-fs (loop2): Free/Dirty block details [ 622.410935][T21507] EXT4-fs (loop2): free_blocks=68451041280 [ 622.416732][T21507] EXT4-fs (loop2): dirty_blocks=16 [ 622.421860][T21507] EXT4-fs (loop2): Block reservation details [ 622.427838][T21507] EXT4-fs (loop2): i_reserved_data_blocks=1 [ 622.489649][ T29] kauditd_printk_skb: 129 callbacks suppressed [ 622.489685][ T29] audit: type=1326 audit(1736537329.683:46775): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21570 comm="syz.1.4457" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff29d6b5d29 code=0x7ffc0000 [ 622.519728][ T29] audit: type=1326 audit(1736537329.683:46776): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21570 comm="syz.1.4457" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff29d6b5d29 code=0x7ffc0000 [ 622.543472][ T29] audit: type=1326 audit(1736537329.683:46777): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21570 comm="syz.1.4457" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff29d6b5d29 code=0x7ffc0000 [ 622.567687][ T29] audit: type=1326 audit(1736537329.693:46778): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21570 comm="syz.1.4457" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff29d6b5d29 code=0x7ffc0000 [ 622.591360][ T29] audit: type=1326 audit(1736537329.693:46779): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21570 comm="syz.1.4457" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff29d6b5d29 code=0x7ffc0000 [ 622.615373][ T29] audit: type=1326 audit(1736537329.693:46780): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21570 comm="syz.1.4457" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff29d6b5d29 code=0x7ffc0000 [ 622.638926][ T29] audit: type=1326 audit(1736537329.693:46781): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21570 comm="syz.1.4457" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff29d6b5d29 code=0x7ffc0000 [ 622.663025][ T29] audit: type=1326 audit(1736537329.693:46782): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21570 comm="syz.1.4457" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff29d6b5d29 code=0x7ffc0000 [ 622.686642][ T29] audit: type=1326 audit(1736537329.693:46783): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21570 comm="syz.1.4457" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7ff29d6b5d29 code=0x7ffc0000 [ 622.702055][T21555] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 622.724951][ T29] audit: type=1326 audit(1736537329.853:46784): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21570 comm="syz.1.4457" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff29d6b5d29 code=0x7ffc0000 [ 622.755102][ T3298] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 622.809824][ T3302] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 622.811915][T21577] loop1: detected capacity change from 0 to 164 [ 622.882748][T21586] loop3: detected capacity change from 0 to 512 [ 622.904448][T21591] loop2: detected capacity change from 0 to 512 [ 622.905949][T20572] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 622.932561][T21591] EXT4-fs: Ignoring removed orlov option [ 622.956747][T21591] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 622.961807][T21586] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 622.992955][T21591] EXT4-fs (loop2): orphan cleanup on readonly fs [ 623.009428][T21591] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.4459: bg 0: block 248: padding at end of block bitmap is not set [ 623.032471][T21586] ext4 filesystem being mounted at /900/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 623.042207][T21591] EXT4-fs error (device loop2): ext4_acquire_dquot:6938: comm syz.2.4459: Failed to acquire dquot type 1 [ 623.109062][T21591] EXT4-fs (loop2): 1 truncate cleaned up [ 623.122755][T21611] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4461'. [ 623.184534][T21591] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 623.407930][ T3298] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 623.622155][T21628] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4466'. [ 623.767996][ T3302] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 623.813961][T21638] loop3: detected capacity change from 0 to 512 [ 623.834491][T21638] EXT4-fs: Ignoring removed orlov option [ 623.834994][T21638] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 623.835771][T21638] EXT4-fs (loop3): orphan cleanup on readonly fs [ 623.837308][T21638] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.4470: bg 0: block 248: padding at end of block bitmap is not set [ 623.837488][T21638] EXT4-fs error (device loop3): ext4_acquire_dquot:6938: comm syz.3.4470: Failed to acquire dquot type 1 [ 623.838022][T21638] EXT4-fs (loop3): 1 truncate cleaned up [ 623.911402][T21640] loop7: detected capacity change from 0 to 512 [ 623.976062][T21645] loop8: detected capacity change from 0 to 512 [ 623.976370][T21645] EXT4-fs: Ignoring removed orlov option [ 623.976994][T21645] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 623.987199][T21640] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 623.987379][T21640] ext4 filesystem being mounted at /34/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 623.988479][T21645] EXT4-fs (loop8): orphan cleanup on readonly fs [ 623.988957][T21645] EXT4-fs error (device loop8): ext4_validate_block_bitmap:441: comm syz.8.4473: bg 0: block 248: padding at end of block bitmap is not set [ 624.039752][T21638] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 624.073516][T21645] EXT4-fs error (device loop8): ext4_acquire_dquot:6938: comm syz.8.4473: Failed to acquire dquot type 1 [ 624.133194][ T3302] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 624.328717][T21658] loop3: detected capacity change from 0 to 164 [ 624.422195][T21645] EXT4-fs (loop8): 1 truncate cleaned up [ 624.504610][T21645] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 624.568029][T20927] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 624.606314][T21674] loop8: detected capacity change from 0 to 128 [ 624.717703][T20572] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 624.811486][T21700] loop7: detected capacity change from 0 to 1024 [ 624.816276][T21702] loop8: detected capacity change from 0 to 512 [ 624.824866][T21702] EXT4-fs: Ignoring removed orlov option [ 624.831837][T21702] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 624.843151][T21700] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 624.858901][T21702] EXT4-fs (loop8): orphan cleanup on readonly fs [ 624.866160][T21702] EXT4-fs error (device loop8): ext4_validate_block_bitmap:441: comm syz.8.4487: bg 0: block 248: padding at end of block bitmap is not set [ 624.884416][T21702] EXT4-fs error (device loop8): ext4_acquire_dquot:6938: comm syz.8.4487: Failed to acquire dquot type 1 [ 624.919820][T21702] EXT4-fs (loop8): 1 truncate cleaned up [ 624.920436][T21710] netlink: 28 bytes leftover after parsing attributes in process `syz.7.4486'. [ 624.926187][T21702] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 624.969618][T20927] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 624.998745][T17749] hid-generic 0000:0000:0000.0001: unknown main item tag 0x1 [ 625.006235][T17749] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 625.013926][T17749] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 625.021513][T17749] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 625.028914][T17749] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 625.036409][T17749] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 625.047076][T17749] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 625.054608][T17749] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 625.062097][T17749] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 625.069528][T17749] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 625.077033][T17749] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 625.084483][T17749] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 625.092566][T17749] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 625.099976][T17749] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 625.100004][T17749] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 625.100026][T17749] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 625.100051][T17749] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 625.100075][T17749] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 625.100099][T17749] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 625.100120][T17749] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 625.100140][T17749] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 625.100159][T17749] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 625.100180][T17749] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 625.100233][T17749] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 625.100252][T17749] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 625.100272][T17749] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 625.100293][T17749] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 625.100317][T17749] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 625.100339][T17749] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 625.100371][T17749] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 625.100454][T17749] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 625.100474][T17749] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 625.100493][T17749] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 625.100517][T17749] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 625.100541][T17749] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 625.100561][T17749] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 625.100592][T17749] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 625.100614][T17749] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 625.103951][T17749] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz0] on syz1 [ 625.118697][T21718] loop8: detected capacity change from 0 to 1024 [ 625.146164][T21718] EXT4-fs (loop8): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 625.151363][T21718] EXT4-fs (loop8): revision level too high, forcing read-only mode [ 625.151448][T21718] EXT4-fs (loop8): orphan cleanup on readonly fs [ 625.152177][T21718] EXT4-fs error (device loop8) in ext4_reserve_inode_write:5837: Corrupt filesystem [ 625.152348][T21718] EXT4-fs (loop8): Remounting filesystem read-only [ 625.152612][T21718] EXT4-fs (loop8): 1 orphan inode deleted [ 625.153183][T21718] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 625.153214][T21718] SELinux: (dev loop8, type ext4) getxattr errno 5 [ 625.153634][T21718] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 625.298369][T21725] loop1: detected capacity change from 0 to 512 [ 625.353958][T21725] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 625.482089][T21725] ext4 filesystem being mounted at /899/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 625.499902][T21726] netlink: 24 bytes leftover after parsing attributes in process `syz.8.4492'. [ 625.704986][T20572] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 626.153669][ T3299] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 626.317471][T21778] loop7: detected capacity change from 0 to 1024 [ 626.363693][T21778] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 626.391167][T21792] loop2: detected capacity change from 0 to 2048 [ 626.399540][T21792] ext4: Unknown parameter 'smackfsdef' [ 626.466930][T21794] loop8: detected capacity change from 0 to 8192 [ 626.569946][T21814] netlink: 'syz.8.4512': attribute type 13 has an invalid length. [ 626.624256][T21818] loop2: detected capacity change from 0 to 512 [ 626.642117][T21814] gretap0: refused to change device tx_queue_len [ 626.648512][T21814] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 626.700189][T21818] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 626.700252][T21818] ext4 filesystem being mounted at /877/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 626.830437][T21778] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 626.830514][T21778] EXT4-fs (loop7): Delayed block allocation failed for inode 16 at logical offset 16 with max blocks 1 with error 28 [ 626.830536][T21778] EXT4-fs (loop7): This should not happen!! Data will be lost [ 626.830536][T21778] [ 626.830603][T21778] EXT4-fs (loop7): Total free blocks count 0 [ 626.830618][T21778] EXT4-fs (loop7): Free/Dirty block details [ 626.830630][T21778] EXT4-fs (loop7): free_blocks=68451041280 [ 626.830644][T21778] EXT4-fs (loop7): dirty_blocks=16 [ 626.830715][T21778] EXT4-fs (loop7): Block reservation details [ 626.830775][T21778] EXT4-fs (loop7): i_reserved_data_blocks=1 [ 627.305506][T20572] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 627.360579][T21862] vhci_hcd: invalid port number 236 [ 627.363406][T21862] loop3: detected capacity change from 0 to 512 [ 627.363680][T21862] EXT4-fs: Ignoring removed orlov option [ 627.364019][T21862] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 627.377144][T21862] EXT4-fs (loop3): orphan cleanup on readonly fs [ 627.377546][T21862] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.4520: bg 0: block 248: padding at end of block bitmap is not set [ 627.377728][T21862] EXT4-fs error (device loop3): ext4_acquire_dquot:6938: comm syz.3.4520: Failed to acquire dquot type 1 [ 627.378222][T21862] EXT4-fs (loop3): 1 truncate cleaned up [ 627.378744][T21862] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 627.442086][T21871] EXT4-fs error (device loop3): ext4_lookup:1817: inode #2: comm syz.3.4520: deleted inode referenced: 12 [ 627.496653][ T3298] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 627.528838][T21879] loop8: detected capacity change from 0 to 512 [ 627.594122][ T29] kauditd_printk_skb: 313 callbacks suppressed [ 627.594138][ T29] audit: type=1326 audit(1736537334.803:47084): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21882 comm="syz.2.4522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f734ecc5d29 code=0x7ffc0000 [ 627.624130][ T29] audit: type=1326 audit(1736537334.803:47085): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21882 comm="syz.2.4522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f734ecc5d29 code=0x7ffc0000 [ 627.624155][ T29] audit: type=1326 audit(1736537334.803:47086): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21882 comm="syz.2.4522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f734ecc5d29 code=0x7ffc0000 [ 627.624175][ T29] audit: type=1326 audit(1736537334.803:47087): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21882 comm="syz.2.4522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f734ecc5d29 code=0x7ffc0000 [ 627.624221][ T29] audit: type=1326 audit(1736537334.803:47088): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21882 comm="syz.2.4522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f734ecc5d29 code=0x7ffc0000 [ 627.624244][ T29] audit: type=1326 audit(1736537334.803:47089): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21882 comm="syz.2.4522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f734ecc5d29 code=0x7ffc0000 [ 627.624264][ T29] audit: type=1326 audit(1736537334.803:47090): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21882 comm="syz.2.4522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f734ecc5d29 code=0x7ffc0000 [ 627.624283][ T29] audit: type=1326 audit(1736537334.803:47091): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21882 comm="syz.2.4522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f734ecc5d29 code=0x7ffc0000 [ 627.624393][ T29] audit: type=1326 audit(1736537334.803:47092): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21882 comm="syz.2.4522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=149 compat=0 ip=0x7f734ecc5d29 code=0x7ffc0000 [ 627.624413][ T29] audit: type=1326 audit(1736537334.813:47093): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21882 comm="syz.2.4522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f734ecc5d29 code=0x7ffc0000 [ 627.629820][T21879] EXT4-fs: Ignoring removed orlov option [ 627.877146][T21879] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 627.890190][ T3302] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 627.914073][T21879] EXT4-fs (loop8): orphan cleanup on readonly fs [ 627.956087][T21879] EXT4-fs error (device loop8): ext4_validate_block_bitmap:441: comm syz.8.4523: bg 0: block 248: padding at end of block bitmap is not set [ 628.003029][T21917] loop7: detected capacity change from 0 to 512 [ 628.009596][T21879] EXT4-fs error (device loop8): ext4_acquire_dquot:6938: comm syz.8.4523: Failed to acquire dquot type 1 [ 628.039536][T21917] EXT4-fs (loop7): blocks per group (95) and clusters per group (32768) inconsistent [ 628.050163][T21879] EXT4-fs (loop8): 1 truncate cleaned up [ 628.072252][T21917] loop7: detected capacity change from 0 to 256 [ 628.088894][T21879] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 628.117260][T21917] FAT-fs (loop7): error, invalid access to FAT (entry 0x00000001) [ 628.127534][T21917] Process accounting resumed [ 628.137537][T21932] loop2: detected capacity change from 0 to 512 [ 628.160508][T21932] EXT4-fs (loop2): blocks per group (95) and clusters per group (32768) inconsistent [ 628.173949][T21932] loop2: detected capacity change from 0 to 256 [ 628.199088][T21934] loop7: detected capacity change from 0 to 512 [ 628.200798][T21932] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000001) [ 628.222035][T20927] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 628.268167][T21934] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 628.286095][T21934] ext4 filesystem being mounted at /45/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 628.307092][T21932] Process accounting resumed [ 628.316489][T21947] vhci_hcd: invalid port number 236 [ 628.324960][T21947] loop8: detected capacity change from 0 to 512 [ 628.332109][T21947] EXT4-fs: Ignoring removed orlov option [ 628.338773][T21947] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 628.376550][T21947] EXT4-fs (loop8): orphan cleanup on readonly fs [ 628.398541][T21947] EXT4-fs error (device loop8): ext4_validate_block_bitmap:441: comm syz.8.4537: bg 0: block 248: padding at end of block bitmap is not set [ 628.431313][T21947] EXT4-fs error (device loop8): ext4_acquire_dquot:6938: comm syz.8.4537: Failed to acquire dquot type 1 [ 628.441432][T21955] loop2: detected capacity change from 0 to 512 [ 628.450632][T21955] EXT4-fs: Ignoring removed orlov option [ 628.450938][T21947] EXT4-fs (loop8): 1 truncate cleaned up [ 628.451231][T21955] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 628.621812][T21955] EXT4-fs (loop2): orphan cleanup on readonly fs [ 628.622611][T21955] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.4539: bg 0: block 248: padding at end of block bitmap is not set [ 628.623057][T21955] EXT4-fs error (device loop2): ext4_acquire_dquot:6938: comm syz.2.4539: Failed to acquire dquot type 1 [ 628.623764][T21955] EXT4-fs (loop2): 1 truncate cleaned up [ 628.787301][T21947] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 628.812936][T21955] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 628.840964][ T3298] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 628.869985][T21947] EXT4-fs error (device loop8): ext4_lookup:1817: inode #2: comm syz.8.4537: deleted inode referenced: 12 [ 628.893079][T20927] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 628.975565][T21970] loop8: detected capacity change from 0 to 1024 [ 629.018424][T21970] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 629.081149][T20572] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 629.094350][T21975] loop2: detected capacity change from 0 to 512 [ 629.140596][T21975] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 629.164736][T21975] ext4 filesystem being mounted at /885/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 629.217251][T21982] loop1: detected capacity change from 0 to 512 [ 629.299828][T21982] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 629.316498][T21982] ext4 filesystem being mounted at /906/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 629.579846][T21982] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 629.746941][T21970] EXT4-fs error (device loop8): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 629.777238][T22002] tipc: Started in network mode [ 629.777286][T22002] tipc: Node identity 7f000001, cluster identity 4711 [ 629.777416][T22002] tipc: Enabled bearer , priority 10 [ 629.784455][T22002] tipc: Enabled bearer , priority 0 [ 629.792807][T21970] EXT4-fs (loop8): Delayed block allocation failed for inode 16 at logical offset 16 with max blocks 1 with error 28 [ 629.821581][T21970] EXT4-fs (loop8): This should not happen!! Data will be lost [ 629.821581][T21970] [ 629.831452][T21970] EXT4-fs (loop8): Total free blocks count 0 [ 629.837809][T21970] EXT4-fs (loop8): Free/Dirty block details [ 629.844034][T21970] EXT4-fs (loop8): free_blocks=68451041280 [ 629.849906][T21970] EXT4-fs (loop8): dirty_blocks=16 [ 629.855013][T21970] EXT4-fs (loop8): Block reservation details [ 629.861008][T21970] EXT4-fs (loop8): i_reserved_data_blocks=1 [ 629.958237][ T3298] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 629.965426][T20927] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 630.053202][T22014] FAULT_INJECTION: forcing a failure. [ 630.053202][T22014] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 630.053281][T22014] CPU: 1 UID: 0 PID: 22014 Comm: syz.2.4556 Not tainted 6.13.0-rc6-syzkaller-00130-g2144da25584e #0 [ 630.053315][T22014] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 630.053329][T22014] Call Trace: [ 630.053336][T22014] [ 630.053345][T22014] dump_stack_lvl+0xf2/0x150 [ 630.053441][T22014] dump_stack+0x15/0x1a [ 630.053468][T22014] should_fail_ex+0x223/0x230 [ 630.053489][T22014] should_fail_alloc_page+0xfd/0x110 [ 630.053594][T22014] __alloc_pages_noprof+0x109/0x340 [ 630.053682][T22014] alloc_pages_mpol_noprof+0xb1/0x1e0 [ 630.053703][T22014] alloc_pages_noprof+0xe1/0x100 [ 630.053807][T22014] __pmd_alloc+0x4b/0x430 [ 630.053883][T22014] handle_mm_fault+0x1a77/0x2ac0 [ 630.053911][T22014] exc_page_fault+0x296/0x650 [ 630.053943][T22014] asm_exc_page_fault+0x26/0x30 [ 630.053964][T22014] RIP: 0010:__get_user_4+0x1a/0x30 [ 630.054026][T22014] Code: 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 48 ba 00 f0 ff ff ff 7f 00 00 48 39 c2 48 19 d2 48 09 d0 0f 01 cb <8b> 10 31 c0 0f 01 ca c3 cc cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 [ 630.054042][T22014] RSP: 0018:ffffc90001547dd0 EFLAGS: 00050202 [ 630.054107][T22014] RAX: 000000110e22fff7 RBX: 0000000000005421 RCX: ffffffff816d0c2b [ 630.054118][T22014] RDX: 0000000000000000 RSI: ffffffff8678ef80 RDI: 0000000000005421 [ 630.054130][T22014] RBP: 0000000000000003 R08: 0000000000000005 R09: ffffffff816d0c42 [ 630.054141][T22014] R10: 0000000000000013 R11: ffff88812cfdd280 R12: ffff88810b192b40 [ 630.054152][T22014] R13: 0000000000005421 R14: 000000110e22fff7 R15: ffff888106bb8c08 [ 630.054184][T22014] ? do_vfs_ioctl+0x52/0x1530 [ 630.054210][T22014] ? do_vfs_ioctl+0x3b/0x1530 [ 630.054235][T22014] do_vfs_ioctl+0x3f1/0x1530 [ 630.054321][T22014] ? selinux_file_ioctl+0x1ac/0x380 [ 630.054348][T22014] ? __fget_files+0x17c/0x1c0 [ 630.054408][T22014] __se_sys_ioctl+0x80/0x140 [ 630.054429][T22014] __x64_sys_ioctl+0x43/0x50 [ 630.054448][T22014] x64_sys_call+0x1690/0x2dc0 [ 630.054480][T22014] do_syscall_64+0xc9/0x1c0 [ 630.054501][T22014] ? clear_bhb_loop+0x55/0xb0 [ 630.054522][T22014] ? clear_bhb_loop+0x55/0xb0 [ 630.054600][T22014] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 630.054632][T22014] RIP: 0033:0x7f734ecc5d29 [ 630.054647][T22014] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 630.054666][T22014] RSP: 002b:00007f734d337038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 630.054685][T22014] RAX: ffffffffffffffda RBX: 00007f734eeb5fa0 RCX: 00007f734ecc5d29 [ 630.054736][T22014] RDX: 000000110e22fff7 RSI: 0000000000005421 RDI: 0000000000000003 [ 630.054749][T22014] RBP: 00007f734d337090 R08: 0000000000000000 R09: 0000000000000000 [ 630.054763][T22014] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 630.054829][T22014] R13: 0000000000000000 R14: 00007f734eeb5fa0 R15: 00007fff1eea36b8 [ 630.054845][T22014] [ 630.257967][T22026] loop1: detected capacity change from 0 to 512 [ 630.515301][T22026] EXT4-fs (loop1): blocks per group (95) and clusters per group (32768) inconsistent [ 630.527803][T22026] loop1: detected capacity change from 0 to 256 [ 630.538758][T22026] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000001) [ 630.553651][T22026] Process accounting resumed [ 630.560361][T22036] loop7: detected capacity change from 0 to 512 [ 630.590782][T22036] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 630.609875][T22036] ext4 filesystem being mounted at /48/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 630.718700][T22046] loop8: detected capacity change from 0 to 164 [ 630.873770][T22054] loop8: detected capacity change from 0 to 512 [ 630.898730][T22054] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 630.919250][ T3374] tipc: Node number set to 2130706433 [ 631.040535][T22056] loop1: detected capacity change from 0 to 1024 [ 631.077420][T22058] loop2: detected capacity change from 0 to 512 [ 631.095647][T22060] loop3: detected capacity change from 0 to 512 [ 631.112181][T22054] EXT4-fs (loop8): 1 truncate cleaned up [ 631.119540][T22060] EXT4-fs: Ignoring removed orlov option [ 631.125417][T22058] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 631.129287][T22056] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 631.147982][T22054] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 631.157214][T22060] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 631.180685][T22058] EXT4-fs (loop2): 1 truncate cleaned up [ 631.184570][T22060] EXT4-fs (loop3): orphan cleanup on readonly fs [ 631.186893][T22058] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 631.194284][T22060] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.4572: bg 0: block 248: padding at end of block bitmap is not set [ 631.222058][T22060] EXT4-fs error (device loop3): ext4_acquire_dquot:6938: comm syz.3.4572: Failed to acquire dquot type 1 [ 631.234189][T22060] EXT4-fs (loop3): 1 truncate cleaned up [ 631.241908][T22060] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 631.272624][ T3302] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 631.307085][T20927] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 631.318788][ T3298] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 631.370900][T22075] loop8: detected capacity change from 0 to 512 [ 631.371053][T22068] FAULT_INJECTION: forcing a failure. [ 631.371053][T22068] name failslab, interval 1, probability 0, space 0, times 0 [ 631.389938][T22068] CPU: 1 UID: 0 PID: 22068 Comm: syz.3.4573 Not tainted 6.13.0-rc6-syzkaller-00130-g2144da25584e #0 [ 631.401781][T22068] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 631.411959][T22068] Call Trace: [ 631.415324][T22068] [ 631.418326][T22068] dump_stack_lvl+0xf2/0x150 [ 631.423092][T22068] dump_stack+0x15/0x1a [ 631.427541][T22068] should_fail_ex+0x223/0x230 [ 631.432238][T22068] ? assoc_array_delete+0x6a/0x920 [ 631.437550][T22068] should_failslab+0x8f/0xb0 [ 631.442234][T22068] __kmalloc_cache_noprof+0x4e/0x320 [ 631.447550][T22068] assoc_array_delete+0x6a/0x920 [ 631.452540][T22068] ? security_key_permission+0x26/0x80 [ 631.458051][T22068] key_move+0x125/0x5a0 [ 631.462252][T22068] ? __pfx_lookup_user_key_possessed+0x10/0x10 [ 631.468511][T22068] ? __pfx_keyring_search_iterator+0x10/0x10 [ 631.474517][T22068] keyctl_keyring_move+0xd6/0x110 [ 631.477997][T22056] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, [ 631.479608][T22068] __se_sys_keyctl+0x69e/0xbb0 [ 631.479641][T22068] ? putname+0xcf/0xf0 [ 631.479660][T22068] ? __fget_files+0x17c/0x1c0 [ 631.487896][T22056] block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 631.492620][T22068] ? fput+0x1c4/0x200 [ 631.492642][T22068] ? ksys_write+0x176/0x1b0 [ 631.492666][T22068] __x64_sys_keyctl+0x67/0x80 [ 631.498014][T22056] EXT4-fs (loop1): Delayed block allocation failed for inode 16 at logical offset 16 with max blocks 1 with error 28 [ 631.501454][T22068] x64_sys_call+0x163d/0x2dc0 [ 631.501495][T22068] do_syscall_64+0xc9/0x1c0 [ 631.501513][T22068] ? clear_bhb_loop+0x55/0xb0 [ 631.501535][T22068] ? clear_bhb_loop+0x55/0xb0 [ 631.510473][T22056] EXT4-fs (loop1): This should not happen!! Data will be lost [ 631.510473][T22056] [ 631.514406][T22068] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 631.518888][T22056] EXT4-fs (loop1): Total free blocks count 0 [ 631.523655][T22068] RIP: 0033:0x7f1aba145d29 [ 631.523672][T22068] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 631.523689][T22068] RSP: 002b:00007f1ab87b7038 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 631.523709][T22068] RAX: ffffffffffffffda RBX: 00007f1aba335fa0 RCX: 00007f1aba145d29 [ 631.536223][T22056] EXT4-fs (loop1): Free/Dirty block details [ 631.540929][T22068] RDX: fffffffffffffffe RSI: 0000000028a1758c RDI: 000000000000001e [ 631.540945][T22068] RBP: 00007f1ab87b7090 R08: 0000000000000000 R09: 0000000000000000 [ 631.540958][T22068] R10: 0000000028a1758c R11: 0000000000000246 R12: 0000000000000001 [ 631.545470][T22056] EXT4-fs (loop1): free_blocks=68451041280 [ 631.550115][T22068] R13: 0000000000000000 R14: 00007f1aba335fa0 R15: 00007ffe0f8b4538 [ 631.550136][T22068] [ 631.616370][T22072] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4575'. [ 631.617012][T22056] EXT4-fs (loop1): dirty_blocks=16 [ 631.622946][T22072] netlink: 44 bytes leftover after parsing attributes in process `syz.2.4575'. [ 631.626879][T22072] bridge1: the hash_elasticity option has been deprecated and is always 16 [ 631.630986][T22056] EXT4-fs (loop1): Block reservation details [ 631.684885][T22075] ext4 filesystem being mounted at /44/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 631.687168][T22056] EXT4-fs (loop1): i_reserved_data_blocks=1 [ 631.914056][T22089] loop1: detected capacity change from 0 to 512 [ 631.923009][T22089] EXT4-fs (loop1): blocks per group (95) and clusters per group (32768) inconsistent [ 632.089018][T22104] FAULT_INJECTION: forcing a failure. [ 632.089018][T22104] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 632.102548][T22104] CPU: 0 UID: 0 PID: 22104 Comm: syz.8.4584 Not tainted 6.13.0-rc6-syzkaller-00130-g2144da25584e #0 [ 632.113330][T22104] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 632.123385][T22104] Call Trace: [ 632.126672][T22104] [ 632.129612][T22104] dump_stack_lvl+0xf2/0x150 [ 632.134255][T22104] dump_stack+0x15/0x1a [ 632.138549][T22104] should_fail_ex+0x223/0x230 [ 632.143240][T22104] should_fail+0xb/0x10 [ 632.147399][T22104] should_fail_usercopy+0x1a/0x20 [ 632.152459][T22104] _copy_from_user+0x1e/0xb0 [ 632.157106][T22104] do_sock_getsockopt+0xd3/0x260 [ 632.162115][T22104] __x64_sys_getsockopt+0x18c/0x200 [ 632.167314][T22104] x64_sys_call+0x1288/0x2dc0 [ 632.172060][T22104] do_syscall_64+0xc9/0x1c0 [ 632.176579][T22104] ? clear_bhb_loop+0x55/0xb0 [ 632.181340][T22104] ? clear_bhb_loop+0x55/0xb0 [ 632.186056][T22104] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 632.191956][T22104] RIP: 0033:0x7f242cee5d29 [ 632.196382][T22104] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 632.216341][T22104] RSP: 002b:00007f242b557038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 632.224796][T22104] RAX: ffffffffffffffda RBX: 00007f242d0d5fa0 RCX: 00007f242cee5d29 [ 632.232783][T22104] RDX: 000000000000006f RSI: 0000000000000084 RDI: 0000000000000003 [ 632.240765][T22104] RBP: 00007f242b557090 R08: 00000000200006c0 R09: 0000000000000000 [ 632.248793][T22104] R10: 0000000020000680 R11: 0000000000000246 R12: 0000000000000001 [ 632.256863][T22104] R13: 0000000000000000 R14: 00007f242d0d5fa0 R15: 00007ffd4cb9c4d8 [ 632.264877][T22104] [ 632.320857][T22106] loop2: detected capacity change from 0 to 512 [ 632.335938][T22106] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 632.393269][T22106] EXT4-fs (loop2): 1 truncate cleaned up [ 632.917391][T22089] loop1: detected capacity change from 0 to 256 [ 632.940689][T22119] loop2: detected capacity change from 0 to 164 [ 632.961291][T22089] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000001) [ 632.984426][ T29] kauditd_printk_skb: 491 callbacks suppressed [ 632.984439][ T29] audit: type=1326 audit(1736537340.193:47577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22117 comm="syz.2.4586" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f734ecc5d29 code=0x7ffc0000 [ 633.016859][T22114] netlink: 24 bytes leftover after parsing attributes in process `syz.8.4588'. [ 633.036611][T22089] Process accounting resumed [ 633.105387][ T29] audit: type=1326 audit(1736537340.233:47578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22117 comm="syz.2.4586" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f734ecc5d29 code=0x7ffc0000 [ 633.105487][ T29] audit: type=1326 audit(1736537340.233:47579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22117 comm="syz.2.4586" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f734ecc5d29 code=0x7ffc0000 [ 633.105512][ T29] audit: type=1326 audit(1736537340.233:47580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22117 comm="syz.2.4586" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f734ecc5d29 code=0x7ffc0000 [ 633.105605][ T29] audit: type=1326 audit(1736537340.233:47581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22117 comm="syz.2.4586" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f734ecc5d29 code=0x7ffc0000 [ 633.105664][ T29] audit: type=1326 audit(1736537340.243:47582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22117 comm="syz.2.4586" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f734ecc5d29 code=0x7ffc0000 [ 633.105714][ T29] audit: type=1326 audit(1736537340.243:47583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22117 comm="syz.2.4586" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f734ecc5d29 code=0x7ffc0000 [ 633.105736][ T29] audit: type=1326 audit(1736537340.243:47584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22117 comm="syz.2.4586" exe="/root/syz-executor" sig=0 arch=c000003e syscall=237 compat=0 ip=0x7f734ecc5d29 code=0x7ffc0000 [ 633.105762][ T29] audit: type=1326 audit(1736537340.243:47585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22117 comm="syz.2.4586" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f734ecc5d29 code=0x7ffc0000 [ 633.105909][ T29] audit: type=1326 audit(1736537340.243:47586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22117 comm="syz.2.4586" exe="/root/syz-executor" sig=0 arch=c000003e syscall=450 compat=0 ip=0x7f734ecc5d29 code=0x7ffc0000 [ 633.143717][T22122] loop3: detected capacity change from 0 to 1024 [ 633.183417][T22126] loop2: detected capacity change from 0 to 512 [ 633.211084][T22126] ext4 filesystem being mounted at /895/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 633.723429][T22144] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4594'. [ 634.457204][T22147] loop8: detected capacity change from 0 to 512 [ 634.464657][T22147] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 634.475819][T22147] EXT4-fs (loop8): 1 truncate cleaned up [ 634.641947][T22158] vhci_hcd: invalid port number 236 [ 634.679488][T22158] loop3: detected capacity change from 0 to 512 [ 634.701546][T22161] can: request_module (can-proto-0) failed. [ 634.713807][T22154] loop1: detected capacity change from 0 to 512 [ 634.721352][T22158] EXT4-fs: Ignoring removed orlov option [ 634.749840][T22158] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 634.765324][T22154] EXT4-fs: Ignoring removed oldalloc option [ 634.784065][T22158] EXT4-fs (loop3): orphan cleanup on readonly fs [ 634.796237][T22154] EXT4-fs error (device loop1): ext4_xattr_inode_iget:436: comm syz.1.4599: Parent and EA inode have the same ino 15 [ 634.809632][T22158] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.4600: bg 0: block 248: padding at end of block bitmap is not set [ 634.824134][T22154] EXT4-fs (loop1): Remounting filesystem read-only [ 634.830704][T22154] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2863: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 634.843885][T22154] EXT4-fs warning (device loop1): ext4_evict_inode:259: couldn't mark inode dirty (err -5) [ 634.854866][T22158] EXT4-fs error (device loop3): ext4_acquire_dquot:6938: comm syz.3.4600: Failed to acquire dquot type 1 [ 634.856355][T22154] EXT4-fs (loop1): 1 orphan inode deleted [ 634.872419][T22154] SELinux: (dev loop1, type ext4) getxattr errno 5 [ 634.883103][T22158] EXT4-fs (loop3): 1 truncate cleaned up [ 634.975796][T22175] vhci_hcd: invalid port number 236 [ 634.984313][T22175] loop8: detected capacity change from 0 to 512 [ 634.999446][T22175] EXT4-fs: Ignoring removed orlov option [ 635.008819][T22175] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 635.030139][T22175] EXT4-fs (loop8): orphan cleanup on readonly fs [ 635.037174][T22175] EXT4-fs error (device loop8): ext4_validate_block_bitmap:441: comm syz.8.4605: bg 0: block 248: padding at end of block bitmap is not set [ 635.053999][T22175] EXT4-fs error (device loop8): ext4_acquire_dquot:6938: comm syz.8.4605: Failed to acquire dquot type 1 [ 635.066178][T22175] EXT4-fs (loop8): 1 truncate cleaned up [ 635.118828][T22186] loop3: detected capacity change from 0 to 512 [ 635.126235][T22186] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 635.142692][T22186] EXT4-fs (loop3): 1 truncate cleaned up [ 635.207018][T22192] loop8: detected capacity change from 0 to 8192 [ 635.226772][T22194] loop7: detected capacity change from 0 to 512 [ 635.358893][T22206] vhci_hcd: invalid port number 236 [ 635.361409][T22194] ext4 filesystem being mounted at /52/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 635.367489][T22206] loop8: detected capacity change from 0 to 512 [ 635.419380][T22206] EXT4-fs: Ignoring removed orlov option [ 635.541303][T22206] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 635.627220][T22206] EXT4-fs (loop8): orphan cleanup on readonly fs [ 635.635608][T22206] EXT4-fs error (device loop8): ext4_validate_block_bitmap:441: comm syz.8.4616: bg 0: block 248: padding at end of block bitmap is not set [ 635.652219][T22206] EXT4-fs error (device loop8): ext4_acquire_dquot:6938: comm syz.8.4616: Failed to acquire dquot type 1 [ 635.665667][T22206] EXT4-fs (loop8): 1 truncate cleaned up [ 635.918785][T22220] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4618'. [ 636.197673][T22225] loop3: detected capacity change from 0 to 164 [ 636.342211][T22229] loop3: detected capacity change from 0 to 512 [ 636.370722][T22229] ext4 filesystem being mounted at /935/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 636.519817][T22235] FAULT_INJECTION: forcing a failure. [ 636.519817][T22235] name failslab, interval 1, probability 0, space 0, times 0 [ 636.519844][T22235] CPU: 1 UID: 0 PID: 22235 Comm: syz.3.4623 Not tainted 6.13.0-rc6-syzkaller-00130-g2144da25584e #0 [ 636.519867][T22235] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 636.519880][T22235] Call Trace: [ 636.519887][T22235] [ 636.519972][T22235] dump_stack_lvl+0xf2/0x150 [ 636.520006][T22235] dump_stack+0x15/0x1a [ 636.520036][T22235] should_fail_ex+0x223/0x230 [ 636.520074][T22235] should_failslab+0x8f/0xb0 [ 636.520105][T22235] kmem_cache_alloc_noprof+0x52/0x320 [ 636.520201][T22235] ? copy_fs_struct+0x31/0x110 [ 636.520223][T22235] ? __fget_files+0x17c/0x1c0 [ 636.520254][T22235] copy_fs_struct+0x31/0x110 [ 636.520276][T22235] ksys_unshare+0x2c0/0x6e0 [ 636.520342][T22235] ? ksys_write+0x176/0x1b0 [ 636.520371][T22235] __x64_sys_unshare+0x1f/0x30 [ 636.520444][T22235] x64_sys_call+0x1a3e/0x2dc0 [ 636.520534][T22235] do_syscall_64+0xc9/0x1c0 [ 636.520554][T22235] ? clear_bhb_loop+0x55/0xb0 [ 636.520576][T22235] ? clear_bhb_loop+0x55/0xb0 [ 636.520595][T22235] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 636.520644][T22235] RIP: 0033:0x7f1aba145d29 [ 636.520656][T22235] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 636.520676][T22235] RSP: 002b:00007f1ab8796038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 636.520734][T22235] RAX: ffffffffffffffda RBX: 00007f1aba336080 RCX: 00007f1aba145d29 [ 636.520746][T22235] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000022020600 [ 636.520768][T22235] RBP: 00007f1ab8796090 R08: 0000000000000000 R09: 0000000000000000 [ 636.520782][T22235] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 636.520796][T22235] R13: 0000000000000000 R14: 00007f1aba336080 R15: 00007ffe0f8b4538 [ 636.520817][T22235] [ 636.843241][T22244] loop7: detected capacity change from 0 to 512 [ 636.879658][T22244] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 636.896442][T22244] EXT4-fs (loop7): 1 truncate cleaned up [ 636.997042][T22258] loop2: detected capacity change from 0 to 512 [ 637.001809][T22260] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4627'. [ 637.012285][T22260] netlink: 24 bytes leftover after parsing attributes in process `syz.8.4627'. [ 637.024859][T22258] ext4 filesystem being mounted at /902/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 637.254550][T22277] loop2: detected capacity change from 0 to 1024 [ 637.338332][T22278] loop3: detected capacity change from 0 to 1024 [ 637.946040][T22297] loop1: detected capacity change from 0 to 512 [ 638.025369][T22277] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 638.047158][ T29] kauditd_printk_skb: 376 callbacks suppressed [ 638.047173][ T29] audit: type=1326 audit(1736537345.253:47957): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22298 comm="syz.8.4641" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f242cee5d29 code=0x7ffc0000 [ 638.077517][ T29] audit: type=1326 audit(1736537345.253:47958): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22298 comm="syz.8.4641" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f242cee5d29 code=0x7ffc0000 [ 638.101141][ T29] audit: type=1326 audit(1736537345.253:47959): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22298 comm="syz.8.4641" exe="/root/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7f242cee5d29 code=0x7ffc0000 [ 638.135588][T22277] EXT4-fs (loop2): Delayed block allocation failed for inode 16 at logical offset 16 with max blocks 1 with error 28 [ 638.147952][T22277] EXT4-fs (loop2): This should not happen!! Data will be lost [ 638.147952][T22277] [ 638.157629][T22277] EXT4-fs (loop2): Total free blocks count 0 [ 638.163903][T22277] EXT4-fs (loop2): Free/Dirty block details [ 638.169813][T22277] EXT4-fs (loop2): free_blocks=68451041280 [ 638.175622][T22277] EXT4-fs (loop2): dirty_blocks=16 [ 638.180850][T22277] EXT4-fs (loop2): Block reservation details [ 638.187254][T22277] EXT4-fs (loop2): i_reserved_data_blocks=1 [ 638.198061][T22297] ext4 filesystem being mounted at /927/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 638.332115][ T29] audit: type=1326 audit(1736537345.343:47960): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22300 comm="syz.8.4641" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f242cf185e5 code=0x7ffc0000 [ 638.356036][ T29] audit: type=1326 audit(1736537345.503:47961): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22300 comm="syz.8.4641" exe="/root/syz-executor" sig=0 arch=c000003e syscall=60 compat=0 ip=0x7f242cee5d29 code=0x7ffc0000 [ 638.379674][ T29] audit: type=1326 audit(1736537345.503:47962): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22298 comm="syz.8.4641" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f242cee5d29 code=0x7ffc0000 [ 638.403349][ T29] audit: type=1326 audit(1736537345.503:47963): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22298 comm="syz.8.4641" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f242cee5d29 code=0x7ffc0000 [ 638.615932][T22308] FAULT_INJECTION: forcing a failure. [ 638.615932][T22308] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 638.629147][T22308] CPU: 0 UID: 0 PID: 22308 Comm: syz.3.4642 Not tainted 6.13.0-rc6-syzkaller-00130-g2144da25584e #0 [ 638.639972][T22308] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 638.650034][T22308] Call Trace: [ 638.653346][T22308] [ 638.656307][T22308] dump_stack_lvl+0xf2/0x150 [ 638.661003][T22308] dump_stack+0x15/0x1a [ 638.665150][T22308] should_fail_ex+0x223/0x230 [ 638.669885][T22308] should_fail+0xb/0x10 [ 638.674125][T22308] should_fail_usercopy+0x1a/0x20 [ 638.679281][T22308] _copy_from_user+0x1e/0xb0 [ 638.683915][T22308] do_sock_getsockopt+0xd3/0x260 [ 638.688912][T22308] __x64_sys_getsockopt+0x18c/0x200 [ 638.694171][T22308] x64_sys_call+0x1288/0x2dc0 [ 638.698850][T22308] do_syscall_64+0xc9/0x1c0 [ 638.703362][T22308] ? clear_bhb_loop+0x55/0xb0 [ 638.708075][T22308] ? clear_bhb_loop+0x55/0xb0 [ 638.712840][T22308] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 638.718827][T22308] RIP: 0033:0x7f1aba145d29 [ 638.723227][T22308] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 638.742838][T22308] RSP: 002b:00007f1ab87b7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 638.751262][T22308] RAX: ffffffffffffffda RBX: 00007f1aba335fa0 RCX: 00007f1aba145d29 [ 638.759298][T22308] RDX: 000000000000006f RSI: 0000000000000084 RDI: 0000000000000003 [ 638.767268][T22308] RBP: 00007f1ab87b7090 R08: 00000000200006c0 R09: 0000000000000000 [ 638.775229][T22308] R10: 0000000020000680 R11: 0000000000000246 R12: 0000000000000001 [ 638.783279][T22308] R13: 0000000000000000 R14: 00007f1aba335fa0 R15: 00007ffe0f8b4538 [ 638.791280][T22308] [ 638.903687][T22316] loop7: detected capacity change from 0 to 164 [ 638.936583][ T29] audit: type=1326 audit(1736537346.143:47964): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22315 comm="syz.7.4647" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43d0675d29 code=0x7ffc0000 [ 638.960477][ T29] audit: type=1326 audit(1736537346.143:47965): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22315 comm="syz.7.4647" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43d0675d29 code=0x7ffc0000 [ 638.984410][ T29] audit: type=1326 audit(1736537346.143:47966): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22315 comm="syz.7.4647" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f43d0675d29 code=0x7ffc0000 [ 639.067608][T22330] vhci_hcd: invalid port number 236 [ 639.076387][T22330] loop8: detected capacity change from 0 to 512 [ 639.083772][T22330] EXT4-fs: Ignoring removed orlov option [ 639.100294][T22326] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4651'. [ 639.109415][T22326] netlink: 44 bytes leftover after parsing attributes in process `syz.7.4651'. [ 639.122437][T22330] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 639.127435][T22326] bridge1: the hash_elasticity option has been deprecated and is always 16 [ 639.140517][T22333] loop2: detected capacity change from 0 to 1024 [ 639.153620][T22330] EXT4-fs (loop8): orphan cleanup on readonly fs [ 639.156698][T17749] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 639.167446][T17749] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 639.175320][T17749] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 639.182849][T17749] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 639.190288][T17749] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 639.197714][T17749] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 639.198427][T22330] EXT4-fs error (device loop8): ext4_validate_block_bitmap:441: comm syz.8.4652: bg 0: block 248: padding at end of block bitmap is not set [ 639.205290][T17749] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 639.205315][T17749] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 639.205337][T17749] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 639.205359][T17749] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 639.249336][T17749] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 639.255896][T22342] syz.1.4650[22342] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 639.256714][T17749] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 639.275986][T17749] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 639.283485][T17749] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 639.290918][T17749] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 639.291526][T22330] EXT4-fs error (device loop8): ext4_acquire_dquot:6938: comm syz.8.4652: Failed to acquire dquot type 1 [ 639.298328][T17749] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 639.310873][T22330] EXT4-fs (loop8): 1 truncate cleaned up [ 639.316981][T17749] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 639.330203][T17749] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 639.337609][T17749] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 639.345060][T17749] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 639.352553][T17749] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 639.360046][T17749] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 639.367456][T17749] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 639.374969][T17749] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 639.382406][T17749] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 639.389913][T17749] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 639.397405][T17749] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 639.409398][T17749] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz0] on syz1 [ 639.409845][T22342] syz.1.4650[22342] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 639.457121][T22342] syz.1.4650[22342] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 639.488653][T22348] loop7: detected capacity change from 0 to 512 [ 639.534855][T22330] EXT4-fs error (device loop8): ext4_lookup:1817: inode #2: comm syz.8.4652: deleted inode referenced: 12 [ 639.557685][T22348] ext4 filesystem being mounted at /61/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 640.220708][T22167] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 640.706932][T22369] loop8: detected capacity change from 0 to 512 [ 640.794749][T22369] ext4 filesystem being mounted at /65/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 640.928342][T22379] loop2: detected capacity change from 0 to 512 [ 640.936442][T22379] EXT4-fs: Ignoring removed orlov option [ 640.949322][T22379] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 641.312906][T22379] EXT4-fs (loop2): orphan cleanup on readonly fs [ 641.437633][T22379] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.4662: bg 0: block 248: padding at end of block bitmap is not set [ 641.524124][T22379] EXT4-fs error (device loop2): ext4_acquire_dquot:6938: comm syz.2.4662: Failed to acquire dquot type 1 [ 641.568577][T22379] EXT4-fs (loop2): 1 truncate cleaned up [ 641.659113][T22395] FAULT_INJECTION: forcing a failure. [ 641.659113][T22395] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 641.672563][T22395] CPU: 0 UID: 0 PID: 22395 Comm: syz.7.4670 Not tainted 6.13.0-rc6-syzkaller-00130-g2144da25584e #0 [ 641.683401][T22395] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 641.693508][T22395] Call Trace: [ 641.696839][T22395] [ 641.699795][T22395] dump_stack_lvl+0xf2/0x150 [ 641.704469][T22395] dump_stack+0x15/0x1a [ 641.708645][T22395] should_fail_ex+0x223/0x230 [ 641.714772][T22395] should_fail+0xb/0x10 [ 641.718952][T22395] should_fail_usercopy+0x1a/0x20 [ 641.723991][T22395] _copy_from_user+0x1e/0xb0 [ 641.728613][T22395] copy_clone_args_from_user+0x145/0x460 [ 641.734301][T22395] ? kstrtouint_from_user+0xb0/0xe0 [ 641.739519][T22395] __se_sys_clone3+0x6e/0x200 [ 641.744241][T22395] __x64_sys_clone3+0x31/0x40 [ 641.748921][T22395] x64_sys_call+0x2d56/0x2dc0 [ 641.753643][T22395] do_syscall_64+0xc9/0x1c0 [ 641.758139][T22395] ? clear_bhb_loop+0x55/0xb0 [ 641.762845][T22395] ? clear_bhb_loop+0x55/0xb0 [ 641.767555][T22395] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 641.773451][T22395] RIP: 0033:0x7f43d0675d29 [ 641.777856][T22395] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 641.797915][T22395] RSP: 002b:00007f43cece0f08 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 641.806603][T22395] RAX: ffffffffffffffda RBX: 0000000000000058 RCX: 00007f43d0675d29 [ 641.814568][T22395] RDX: 00007f43cece0f20 RSI: 0000000000000058 RDI: 00007f43cece0f20 [ 641.822645][T22395] RBP: 00007f43cece1090 R08: 0000000000000000 R09: 0000000000000058 [ 641.830701][T22395] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 641.838664][T22395] R13: 0000000000000000 R14: 00007f43d0865fa0 R15: 00007ffd821f4228 [ 641.846693][T22395] [ 641.872749][T22391] loop3: detected capacity change from 0 to 164 [ 641.943700][T22399] FAULT_INJECTION: forcing a failure. [ 641.943700][T22399] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 641.956947][T22399] CPU: 1 UID: 0 PID: 22399 Comm: syz.7.4673 Not tainted 6.13.0-rc6-syzkaller-00130-g2144da25584e #0 [ 641.967714][T22399] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 641.977788][T22399] Call Trace: [ 641.981080][T22399] [ 641.982728][T22409] loop3: detected capacity change from 0 to 512 [ 641.984090][T22399] dump_stack_lvl+0xf2/0x150 [ 641.990750][T22409] EXT4-fs: Ignoring removed orlov option [ 641.995107][T22399] dump_stack+0x15/0x1a [ 642.003357][T22409] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 642.004874][T22399] should_fail_ex+0x223/0x230 [ 642.018420][T22399] should_fail+0xb/0x10 [ 642.022590][T22399] should_fail_usercopy+0x1a/0x20 [ 642.027713][T22399] _copy_from_iter+0xd5/0xd00 [ 642.032570][T22399] ? selinux_file_open+0x34a/0x3b0 [ 642.037707][T22399] ? should_fail_ex+0xd7/0x230 [ 642.042530][T22399] ? __virt_addr_valid+0x1ed/0x250 [ 642.047689][T22399] ? __check_object_size+0x364/0x520 [ 642.053221][T22399] skb_copy_datagram_from_iter+0xb3/0x460 [ 642.058977][T22399] tun_get_user+0x1132/0x25c0 [ 642.063749][T22399] ? _parse_integer+0x27/0x30 [ 642.068445][T22399] ? ref_tracker_alloc+0x1f5/0x2f0 [ 642.073682][T22399] tun_chr_write_iter+0x188/0x240 [ 642.078733][T22399] vfs_write+0x77f/0x920 [ 642.083174][T22399] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 642.088751][T22399] ksys_write+0xe8/0x1b0 [ 642.093097][T22399] __x64_sys_write+0x42/0x50 [ 642.097789][T22399] x64_sys_call+0x287e/0x2dc0 [ 642.102501][T22399] do_syscall_64+0xc9/0x1c0 [ 642.107019][T22399] ? clear_bhb_loop+0x55/0xb0 [ 642.111727][T22399] ? clear_bhb_loop+0x55/0xb0 [ 642.116659][T22399] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 642.123493][T22399] RIP: 0033:0x7f43d0675d29 [ 642.127923][T22399] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 642.148059][T22399] RSP: 002b:00007f43cece1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 642.156472][T22399] RAX: ffffffffffffffda RBX: 00007f43d0865fa0 RCX: 00007f43d0675d29 [ 642.164463][T22399] RDX: 000000000000004e RSI: 0000000020001700 RDI: 0000000000000005 [ 642.172516][T22399] RBP: 00007f43cece1090 R08: 0000000000000000 R09: 0000000000000000 [ 642.180477][T22399] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 642.188439][T22399] R13: 0000000000000000 R14: 00007f43d0865fa0 R15: 00007ffd821f4228 [ 642.196487][T22399] [ 642.210088][T22415] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4671'. [ 642.219830][T22409] EXT4-fs (loop3): orphan cleanup on readonly fs [ 642.226880][T22409] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.4676: bg 0: block 248: padding at end of block bitmap is not set [ 642.242583][T22409] EXT4-fs error (device loop3): ext4_acquire_dquot:6938: comm syz.3.4676: Failed to acquire dquot type 1 [ 642.254474][T22409] EXT4-fs (loop3): 1 truncate cleaned up [ 642.297617][T22417] loop7: detected capacity change from 0 to 512 [ 642.313517][T22417] ext4 filesystem being mounted at /65/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 642.395335][T22425] loop3: detected capacity change from 0 to 1024 [ 642.426954][T22415] ================================================================== [ 642.435070][T22415] BUG: KCSAN: data-race in n_tty_receive_char / n_tty_write [ 642.442388][T22415] [ 642.444712][T22415] write to 0xffffc9000efc9028 of 8 bytes by task 11 on cpu 0: [ 642.452179][T22415] n_tty_receive_char+0x4c4/0x680 [ 642.457225][T22415] n_tty_receive_buf_standard+0x4bd/0x2e30 [ 642.463054][T22415] n_tty_receive_buf_common+0x83a/0xbe0 [ 642.468631][T22415] n_tty_receive_buf2+0x33/0x40 [ 642.473500][T22415] tty_ldisc_receive_buf+0x63/0x100 [ 642.478729][T22415] tty_port_default_receive_buf+0x59/0x90 [ 642.484485][T22415] flush_to_ldisc+0x1ce/0x410 [ 642.489195][T22415] process_scheduled_works+0x483/0x9a0 [ 642.494769][T22415] worker_thread+0x51d/0x6f0 [ 642.499373][T22415] kthread+0x1d1/0x210 [ 642.503446][T22415] ret_from_fork+0x4b/0x60 [ 642.507866][T22415] ret_from_fork_asm+0x1a/0x30 [ 642.512642][T22415] [ 642.515046][T22415] read to 0xffffc9000efc9028 of 8 bytes by task 22415 on cpu 1: [ 642.522753][T22415] n_tty_write+0x15c/0xb80 [ 642.527166][T22415] file_tty_write+0x37a/0x680 [ 642.531841][T22415] tty_write+0x28/0x30 [ 642.535909][T22415] vfs_write+0x77f/0x920 [ 642.540150][T22415] ksys_write+0xe8/0x1b0 [ 642.544387][T22415] __x64_sys_write+0x42/0x50 [ 642.549522][T22415] x64_sys_call+0x287e/0x2dc0 [ 642.554190][T22415] do_syscall_64+0xc9/0x1c0 [ 642.558945][T22415] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 642.564943][T22415] [ 642.567368][T22415] value changed: 0x0000000000000006 -> 0x0000000000000008 [ 642.574471][T22415] [ 642.576958][T22415] Reported by Kernel Concurrency Sanitizer on: [ 642.583105][T22415] CPU: 1 UID: 0 PID: 22415 Comm: syz.2.4671 Not tainted 6.13.0-rc6-syzkaller-00130-g2144da25584e #0 [ 642.594587][T22415] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 642.605882][T22415] ================================================================== [ 642.827668][T22425] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 642.842906][T22425] EXT4-fs (loop3): Delayed block allocation failed for inode 16 at logical offset 16 with max blocks 1 with error 28 [ 642.855321][T22425] EXT4-fs (loop3): This should not happen!! Data will be lost [ 642.855321][T22425] [ 642.865083][T22425] EXT4-fs (loop3): Total free blocks count 0 [ 642.871112][T22425] EXT4-fs (loop3): Free/Dirty block details [ 642.877009][T22425] EXT4-fs (loop3): free_blocks=68451041280 [ 642.882836][T22425] EXT4-fs (loop3): dirty_blocks=16 [ 642.887942][T22425] EXT4-fs (loop3): Block reservation details [ 642.894029][T22425] EXT4-fs (loop3): i_reserved_data_blocks=1