last executing test programs: 1m37.449550118s ago: executing program 4 (id=1554): r0 = syz_io_uring_setup(0xef, &(0x7f0000000200)={0x0, 0x10c85b, 0x10100, 0x0, 0xfffffffd}, &(0x7f0000000180)=0x0, &(0x7f0000000080)=0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000000)={0x100, 0x1c0, 0x2}, 0x0, 0x18, 0x0, 0x23456}) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x44000) io_uring_enter(r0, 0x15a3, 0x0, 0x8, 0x0, 0x0) (fail_nth: 1) 1m37.402856891s ago: executing program 4 (id=1555): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/14, @ANYRES32=r0], 0x0, 0x400000, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) timer_create(0x0, 0x0, &(0x7f0000bbdffc)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x18) mount$9p_tcp(0x0, 0x0, 0x0, 0x801, &(0x7f0000000740)=ANY=[]) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) r3 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x80, 0x2, 0x8b6}, &(0x7f0000000000)=0x0, &(0x7f0000000300)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002) io_uring_enter(r3, 0x47f6, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000540)='fib6_table_lookup\x00'}, 0x10) syz_emit_ethernet(0x5e, &(0x7f0000003680)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x28, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @loopback={0xfffffffffffffff5, 0x1ff0000aa}, @private1}}}}}}, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x891e, &(0x7f0000000000)={'wg1\x00', @ifru_flags=0x2000}) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', 0x1c0) umount2(&(0x7f00000002c0)='./file0\x00', 0x0) 1m37.359011435s ago: executing program 4 (id=1559): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000010100008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000001dc0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x2d) (async) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, &(0x7f00000000c0)}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000200)={0x0, &(0x7f0000000180)}) (async) socket$netlink(0x10, 0x3, 0x10) (async, rerun: 64) r2 = socket$netlink(0x10, 0x3, 0x10) (rerun: 64) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r2, &(0x7f0000000080)={0x0, 0xffa1, &(0x7f0000000700)={&(0x7f00000000c0)=ANY=[@ANYBLOB="340000003e59d0bc27d9a969641a6d433de787e908f1a6c3ff704ea499943f7814580c8e64172004058dd18f4fe5b2ad84d033affda0a029e2a38993f6bfc72137394d457aebb7dd76b70cc03299dbd1", @ANYRES16=r3, @ANYBLOB="010000000000fbdbdf25250000000e0001006e657464657673696d0000000f0002006e657464657673696d300000"], 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) 1m37.261435982s ago: executing program 4 (id=1561): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x0, &(0x7f00000001c0), 0x1, 0x4bc, &(0x7f0000000a40)="$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") mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000100)='./file1\x00', 0x0, 0x5000, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(r0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4040}, 0x0) r1 = socket$kcm(0x29, 0x6, 0x0) sendmsg$kcm(r1, 0x0, 0x4000801) openat$vcsa(0xffffffffffffff9c, 0x0, 0x1c0, 0x0) r2 = open(&(0x7f0000000140)='./file1\x00', 0x100, 0x110) futex(0x0, 0x5, 0x0, 0x0, &(0x7f0000004000)=0x200000, 0xa3020000) ioctl$LOOP_SET_STATUS64(r2, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x8, 0x0, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x200]}) openat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000240)='./file2\x00', 0x0, &(0x7f0000000080), 0xc1, 0x7c0, &(0x7f0000000f80)="$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") mkdir(&(0x7f0000000000)='./control\x00', 0x81) 1m36.91743175s ago: executing program 4 (id=1564): r0 = socket$netlink(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r2, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) r3 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_config_ext={0x8, 0x6}, 0x0, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000240)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000840)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002abd7000fcdbdf250100000008000100", @ANYRES32=r4, @ANYBLOB="3c00028038000100240001006d636173745f72656a6f696e5f696e744c7276216c0000000000000000000000040003000300000008000400f9fffbff"], 0x58}, 0x1, 0x1000000, 0x0, 0x24004000}, 0x24040840) 1m36.614370993s ago: executing program 4 (id=1575): syz_emit_ethernet(0x7a, &(0x7f0000000100)={@multicast, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x6c, 0xf5, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x1, 0x0, 0x3, 0x61, 0x0, {0x14, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x2f, 0x9, @dev={0xac, 0x14, 0x14, 0x10}, @remote, {[@timestamp_addr={0x44, 0x3c, 0x0, 0x1, 0x0, [{@rand_addr=0x86dd}, {@remote}, {@dev={0xac, 0x14, 0x14, 0x32}}, {@multicast2}, {@loopback}, {@local, 0x4}, {@multicast1}]}]}}}}}}}, 0x0) 1m36.586923576s ago: executing program 32 (id=1575): syz_emit_ethernet(0x7a, &(0x7f0000000100)={@multicast, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x6c, 0xf5, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x1, 0x0, 0x3, 0x61, 0x0, {0x14, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x2f, 0x9, @dev={0xac, 0x14, 0x14, 0x10}, @remote, {[@timestamp_addr={0x44, 0x3c, 0x0, 0x1, 0x0, [{@rand_addr=0x86dd}, {@remote}, {@dev={0xac, 0x14, 0x14, 0x32}}, {@multicast2}, {@loopback}, {@local, 0x4}, {@multicast1}]}]}}}}}}}, 0x0) 1m24.28296022s ago: executing program 5 (id=1759): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = memfd_secret(0x80000) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x33, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f60000008500000043"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0xe, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='block_plug\x00', r2}, 0x10) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) fchownat(r0, &(0x7f0000000040)='\x00', 0x0, 0x0, 0x1000) 1m23.988789513s ago: executing program 5 (id=1760): bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r0}, 0x10) r1 = io_uring_setup(0x1379, &(0x7f0000000080)={0x0, 0xfffffffd}) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, 0x0) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000380), 0x101040) ioctl$SNDRV_TIMER_IOCTL_SELECT(r3, 0x40345410, &(0x7f0000000300)={{0x0, 0x2}}) close_range(r1, 0xffffffffffffffff, 0x0) 1m23.973619074s ago: executing program 5 (id=1761): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x6}, 0x0, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x48) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) r3 = dup(r2) write$P9_RLERRORu(r3, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2f00000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b7030000000000008500000006000000850000000700000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r4}, 0x10) r5 = gettid() r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x2082) read(r6, &(0x7f0000000100)=""/140, 0xde) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r6, 0x4040534e, &(0x7f0000000040)={0x197, @tick, 0x0, {}, 0xff, 0x2}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r6, 0xc0605345, &(0x7f00000001c0)={0xfffffffd, 0x2, {0xffffffffffffffff, 0x0, 0x8, 0x3, 0x8}, 0x3}) tkill(r5, 0x7) write$RDMA_USER_CM_CMD_SET_OPTION(r3, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @ib_path={0x0}}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000800)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085"], 0x0, 0x101, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) write$binfmt_elf64(r3, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) r7 = open(&(0x7f0000000300)='./file0\x00', 0x145142, 0x102) write$bt_hci(r7, &(0x7f00000001c0)={0x1, @pin_code_neg_reply={{0x40e, 0x6}, {@none}}}, 0x600) openat(r0, &(0x7f0000000040)='./file0\x00', 0x1000, 0x180) 1m23.696576496s ago: executing program 5 (id=1769): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x1, 0xc, 0x9}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='sys_enter\x00', r1, 0x0, 0x8001}, 0x18) syz_emit_ethernet(0x56, &(0x7f0000000280)={@local, @multicast, @void, {@canfd={0xd, {{0x0, 0x0, 0x1, 0x1}, 0x32, 0x2, 0x0, 0x0, "7c8d5fa6afdbff1ac92bf1421f28362f6301a73a455438354b7bda372f609a814634aa3058899be84e43901212bf7ccbfcf84ecba84bd004127eb49c7daa0985"}}}}, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x3000046, &(0x7f0000000280)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@dioread_lock}, {@data_err_ignore}, {@resgid}, {@data_err_ignore}, {@jqfmt_vfsv0}, {@nobh}, {@errors_remount}, {@bh}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000001080)="$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") open(&(0x7f0000000180)='./bus\x00', 0x14937e, 0x111) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r2, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x15, 0x0, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x200, 0x400000]}) chdir(&(0x7f0000000140)='./file0\x00') r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x141842, 0x0) pwritev2(r3, &(0x7f0000000940)=[{&(0x7f0000000340)="be85809842d43cbb78329613b3aa8b78f87e932d0db6f110e00ef09327f497b6c6bc81aa4e792dc9c48a1b9a75cf44ce8ce1b856b626a7e4777204471d63392de989c63d", 0x44}], 0x1, 0x9, 0x10000, 0x0) quotactl_fd$Q_GETFMT(0xffffffffffffffff, 0x0, 0x0, 0x0) 1m23.257485911s ago: executing program 5 (id=1773): r0 = socket(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x38, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x1, @perf_bp={0x0}, 0x10024, 0x10000, 0x1, 0x1, 0xa, 0x20005, 0x2b, 0x0, 0x0, 0x0, 0xffffffffffffff7d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r1, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000000302010227bd7000fe9d4e96e604aac0dbdf2500000003a32400f137b97346f039d82bd9112748753c5cf7620beada9cd791ccea56aae308ea0902cd2107a8bff5e3560284435f7a7809278eba85b9d9d03ae9d5b2553133869a09489f32566b23614b4436d95ba758ddf62942fd4b32252f4cc214e4746b"], 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x4004) recvmmsg(r1, &(0x7f0000003bc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) r5 = syz_io_uring_setup(0xbc3, &(0x7f0000001480)={0x0, 0x1064, 0x80, 0x200003, 0x1af}, &(0x7f00000001c0)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x2, 0x1, 0xffffffffffffffff, 0x0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000200)=[{0x0}, {0x0}], 0x2}, 0x0, 0x3, 0x0, {0x2}}) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) io_uring_enter(r5, 0x47f8, 0x0, 0x0, 0x0, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r8, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000bc0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x2, 0x0, 0x0, 0x0, 0xf, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x2000, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{}, 0x3548, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, 0x4}}}]}, 0x78}}, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000400000000000"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x41, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe26}, 0x94) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='kfree\x00', r10}, 0x18) r11 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r11, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r11, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x4, 0x3, 0x3}, 0x10) sendmsg$tipc(r11, &(0x7f0000000400)={&(0x7f00000008c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2400c09d}, 0x20) sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x10, 0x2, [@TCA_BASIC_EMATCHES={0xc, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xffff}}]}]}}]}, 0x40}}, 0x0) 1m22.447577395s ago: executing program 5 (id=1782): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x4000, &(0x7f0000000c00)={[{@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@nombcache}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x4}}, {@mblk_io_submit}, {@resuid}, {@norecovery}]}, 0x8, 0x445, &(0x7f0000001dc0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./bus\x00', 0x1c5042, 0x12) write(r1, &(0x7f00000009c0)="3bf58d7d45d32c", 0x7) (async) sendfile(r1, r0, 0x0, 0x3ffff) (async) r2 = socket$inet(0xa, 0x801, 0x84) listen(r2, 0x8) (async) sendmmsg(r2, &(0x7f00000049c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0xc000) (async) sendfile(r1, r0, 0x0, 0x7fffeffd) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000003c0)='sched_switch\x00', r3}, 0x18) (async, rerun: 64) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) (async, rerun: 64) bpf$MAP_CREATE(0x0, 0x0, 0x48) r4 = open(0x0, 0x145c7e, 0x0) (async) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1b00000000ef0d0000000000000067c49953ae463e6f40f27c9cb92a8e6b4fc9a2a222bbd0b399d79b5d64398922edcda0efd39b228dc599671a4c3beee6f1c8f9b07d64590b3811840a4021ad48a1"], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000040340000000000000800000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000357500007b8af8ff00000000bfa200000000000007"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0xa, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r6}, 0x18) (async) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000500)={{r4, 0xffffffffffffffff}, &(0x7f0000000440), &(0x7f0000000480)='%ps \x00'}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x1b, 0x2, 0x0, 0x20000000, 0x110, r7, 0x476, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3, 0x3}, 0x50) (async, rerun: 32) renameat2(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x4) (rerun: 32) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000900)=ANY=[@ANYBLOB="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"], 0x118}}, 0x0) (async, rerun: 32) r9 = syz_init_net_socket$x25(0x9, 0x5, 0x0) (rerun: 32) connect$pppl2tp(r1, &(0x7f0000000280)=@pppol2tpv3in6={0x18, 0x1, {0x0, r9, 0x4, 0x0, 0x4, 0x3, {0xa, 0x4e21, 0x0, @local, 0x7fff}}}, 0x3a) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x0, 0x0, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) syz_io_uring_setup(0xa4d, &(0x7f0000000480)={0x0, 0x0, 0x80, 0x1, 0x24f}, &(0x7f00000000c0)=0x0, &(0x7f0000000340)) (async, rerun: 64) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f0000000600)=ANY=[@ANYBLOB="18000000000000000000000000000400180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (rerun: 64) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kmem_cache_free\x00', r11}, 0x10) syz_memcpy_off$IO_URING_METADATA_GENERIC(r10, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) (async) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x2c, 0x0, 0x0, 0x4}]}, 0x10) 1m22.403422518s ago: executing program 33 (id=1782): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x4000, &(0x7f0000000c00)={[{@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@nombcache}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x4}}, {@mblk_io_submit}, {@resuid}, {@norecovery}]}, 0x8, 0x445, &(0x7f0000001dc0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./bus\x00', 0x1c5042, 0x12) write(r1, &(0x7f00000009c0)="3bf58d7d45d32c", 0x7) (async) sendfile(r1, r0, 0x0, 0x3ffff) (async) r2 = socket$inet(0xa, 0x801, 0x84) listen(r2, 0x8) (async) sendmmsg(r2, &(0x7f00000049c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0xc000) (async) sendfile(r1, r0, 0x0, 0x7fffeffd) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000003c0)='sched_switch\x00', r3}, 0x18) (async, rerun: 64) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) (async, rerun: 64) bpf$MAP_CREATE(0x0, 0x0, 0x48) r4 = open(0x0, 0x145c7e, 0x0) (async) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1b00000000ef0d0000000000000067c49953ae463e6f40f27c9cb92a8e6b4fc9a2a222bbd0b399d79b5d64398922edcda0efd39b228dc599671a4c3beee6f1c8f9b07d64590b3811840a4021ad48a1"], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000040340000000000000800000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000357500007b8af8ff00000000bfa200000000000007"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0xa, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r6}, 0x18) (async) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000500)={{r4, 0xffffffffffffffff}, &(0x7f0000000440), &(0x7f0000000480)='%ps \x00'}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x1b, 0x2, 0x0, 0x20000000, 0x110, r7, 0x476, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3, 0x3}, 0x50) (async, rerun: 32) renameat2(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x4) (rerun: 32) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000900)=ANY=[@ANYBLOB="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"], 0x118}}, 0x0) (async, rerun: 32) r9 = syz_init_net_socket$x25(0x9, 0x5, 0x0) (rerun: 32) connect$pppl2tp(r1, &(0x7f0000000280)=@pppol2tpv3in6={0x18, 0x1, {0x0, r9, 0x4, 0x0, 0x4, 0x3, {0xa, 0x4e21, 0x0, @local, 0x7fff}}}, 0x3a) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x0, 0x0, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) syz_io_uring_setup(0xa4d, &(0x7f0000000480)={0x0, 0x0, 0x80, 0x1, 0x24f}, &(0x7f00000000c0)=0x0, &(0x7f0000000340)) (async, rerun: 64) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f0000000600)=ANY=[@ANYBLOB="18000000000000000000000000000400180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (rerun: 64) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kmem_cache_free\x00', r11}, 0x10) syz_memcpy_off$IO_URING_METADATA_GENERIC(r10, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) (async) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x2c, 0x0, 0x0, 0x4}]}, 0x10) 1m5.657309133s ago: executing program 3 (id=2072): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000001100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='sched_switch\x00', r0, 0x0, 0x100a}, 0x18) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x3, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000910095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) r2 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000000)={r1, r1, 0x2f, 0x0, @void}, 0x10) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x40, 0x972, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) shmdt(0x0) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) bind$unix(r4, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) setsockopt$sock_timeval(r3, 0x1, 0x43, &(0x7f0000000080)={0x0, 0x2710}, 0x10) r5 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) fcntl$setlease(r5, 0x400, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x58, 0x0, 0x1, 0x101, 0x0, 0x0, {0x2, 0x0, 0x4}, [@CTA_TUPLE_ORIG={0x44, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @private=0xa010102}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}]}]}, 0x58}}, 0x800) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000200)='kmem_cache_free\x00'}, 0x18) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000100), 0xfffffd9d) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x2000c16, &(0x7f0000000000)={[{@usrquota}, {@acl}]}, 0xff, 0x257, &(0x7f0000000500)="$eJzs3U9oFFccB/DfzO42TbKUtL0USv9AKaUNhPRW6CW9tBAoIZRSaAsppfSiJEJM8JZ48uJBj6KSk5cg3oweJZfgRRE8Rc0hXgQNHgweVFjZnQTyTxOzmx1xPh+YzEzy5v3eMPN9ExaGDaCweiJiICJKEdEbEZWISDY2+DJbetZ2ZzoXRiJqtd8eJ4122X5m/bjuiJiOiB8iYj5N4lA5YnLur+Wni798c3Ki8vWFuT8723qSa1aWl35dPT904vLg95M3bz8cSmIgqpvOq/WSHX5XTiI+Oohib4mknPcI2IvhY5fu1HP/cUR81ch/JdLILt6p8ffmK/HduVcde/rRrU/bOVag9Wq1Sv0ZOF0DCieNiGokaV9EZNtp2teX/Q9/t9SVHh4bP9r7/9jE6H95z1RAq1Qjln6+2nGle0v+H5Sy/APvqOxDqaXfh2fv1TdWS3kPCGiLz7JV/fnf+8/UtyH/UDjyD8Ul/1Bc8g/FJf9QXPIPxSX/UFzyD8Ul/1Bc+87/mRcHNyigLTbmHwAollrHvt4abv2LyEDb5T3/AAAAAAAAAAAAAAAAAAAA2810LoysL63psbxri+tnI1Z+yppur19qfB9xxPuNn11Pkk09Jnuq8Hp/f9FkB026mPPb1x/cz7f+jc/zrT81GjF9PCL6y+Xt91+ydv/t34e7/L3yb5MF3lCyZf/HP9pbf6vns/nWH1yMuFaff/p3mn/S+KSx3nn+qdavX5P1jzxrsgMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADa5mUAAAD//7FLbdg=") r7 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x101042, 0x45) ioctl$FS_IOC_SETFLAGS(r7, 0x40086602, &(0x7f0000000140)) r8 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x48241, 0x141) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000600000000000000000085000000070000004e"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) pwrite64(r8, &(0x7f0000000140)="f6", 0xffffff07, 0x8000c61) ioctl$EXT4_IOC_MIGRATE(r8, 0x6609) bpf$LINK_DETACH(0x22, &(0x7f0000000140)=r2, 0x4) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r2, 0xf501, 0x0) 1m5.249021826s ago: executing program 3 (id=2083): r0 = socket$kcm(0x1e, 0x2, 0x0) setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, &(0x7f0000000140), 0x4d) recvmsg(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000080)=""/43, 0x2b}], 0x1}, 0x80) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r1, 0x0, &(0x7f0000000080)=""/59, 0x4}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYRESOCT=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3af, 0x4}, 0x100000, 0x0, 0x0, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) mbind(&(0x7f00005b4000/0x4000)=nil, 0x100000000004000, 0x0, 0x0, 0x0, 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r2}, 0x10) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000380)={'#! ', './file0'}, 0xb) r4 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000000100)=@phonet={0x23, 0x4, 0x0, 0x3}, 0x80, &(0x7f0000000040)=[{&(0x7f0000000180)="00010100000000000000", 0xa}, {0x0}], 0x2}, 0x24000008) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r3, 0x0) io_uring_register$IORING_REGISTER_RESTRICTIONS(r3, 0xb, &(0x7f00000007c0)=[@ioring_restriction_register_op={0x0, 0x5}, @ioring_restriction_sqe_op={0x1, 0xa}, @ioring_restriction_sqe_flags_required={0x3, 0x1e}, @ioring_restriction_sqe_flags_required={0x3, 0xc}, @ioring_restriction_sqe_flags_required={0x3, 0x13}, @ioring_restriction_sqe_op={0x1, 0x1c}, @ioring_restriction_sqe_flags_required={0x3, 0x1b}, @ioring_restriction_register_op={0x0, 0x11}, @ioring_restriction_register_op], 0x9) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x25, 0x1, 0xfe, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x1, @perf_bp={0x0, 0x4}, 0x800, 0x10000, 0x0, 0x1, 0x8, 0x9, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r5, 0x40345410, &(0x7f0000000080)={{0x1, 0x1, 0x0, 0x2, 0x7}}) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000009900000001"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r7}, 0x18) syz_emit_ethernet(0x12, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], 0x0) r8 = socket$kcm(0x1e, 0x4, 0x0) close(r0) setsockopt$sock_attach_bpf(r8, 0x10f, 0x87, &(0x7f00000008c0), 0x43) write$cgroup_subtree(r8, &(0x7f0000000040)=ANY=[], 0xfdef) setsockopt$inet_mreq(r3, 0x0, 0x24, &(0x7f0000000240)={@empty, @broadcast}, 0x8) 1m4.609494496s ago: executing program 3 (id=2099): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000001c0)='cdg\x00', 0x4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r1}, 0x4) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r2}, 0x10) connect$inet(r0, &(0x7f0000000280)={0x2, 0x10, @dev={0xac, 0x14, 0x14, 0x1}}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000340)='dctcp\x00', 0x6) bpf$PROG_LOAD(0x5, &(0x7f0000001080)={0x11, 0xc, &(0x7f0000001040)=ANY=[], 0x0, 0x200, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) 1m4.609132027s ago: executing program 3 (id=2100): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x1, 0xc, 0x9}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x94) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x3000046, &(0x7f0000000280)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@dioread_lock}, {@data_err_ignore}, {@resgid}, {@data_err_ignore}, {@jqfmt_vfsv0}, {@nobh}, {@errors_remount}, {@bh}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000001080)="$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") open(&(0x7f0000000180)='./bus\x00', 0x14937e, 0x111) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x15, 0x0, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x200, 0x400000]}) chdir(&(0x7f0000000140)='./file0\x00') 1m4.384485714s ago: executing program 3 (id=2105): r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) r1 = socket$tipc(0x1e, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, 0x0, &(0x7f0000000100)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f00000001c0)='w\xde\xa3\x05\xff\a\x00\x00\x00\x00\x00\x00\x8f\xc0\x9b\x86\xef\\\xc0\x89\av\x9f\xd6\xd1\x98,\xc8\x18E/\x8c\x1a\xe3\xbd') bind$tipc(r1, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000300)={0x43, 0x0, 0x3, 0x3}, 0x10) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x4, 0x3, 0x3}, 0x10) sendmsg$tipc(r1, &(0x7f0000000400)={&(0x7f00000008c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2400c09d}, 0x20) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r3, &(0x7f0000000200)={0x10, 0x0, 0x0, 0x80065c9}, 0xc) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0xa6c3, 0x0) write$nbd(r5, &(0x7f0000019200)={0x67446698, 0x0, 0x1, 0x0, 0x1, "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"}, 0x1010) getsockopt$WPAN_WANTACK(r5, 0x0, 0x0, &(0x7f0000000040), &(0x7f0000000140)=0x4) sendmsg$NFT_BATCH(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x301, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0xa}]}], {0x14}}, 0x64}, 0x1, 0x0, 0x0, 0xc000}, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x318, 0x1, 0x24}, 0x9c) 1m4.229363646s ago: executing program 3 (id=2109): r0 = syz_open_dev$usbfs(&(0x7f0000000240), 0x75, 0x109301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {0x9}, 0xa, 0x5, &(0x7f0000000000)={0x0, 0x3, 0x81, 0x2a, 0x3}, 0x8, 0x8, 0x7ff, 0x0, 0x7, 0x4, &(0x7f0000000080)="68963e0d5a89a2af28dead684b4e8c9080cbf54bde240b94a64be2f2d9b3656bbb0daa113598b0c38be4a5c8e92717314ffd2d0c5a6a43135d01ddea881de1d0d01473c7400dd3a8ef69ee90f0fcdab1922ef391b311789f1d932cab388aa96c720dea0ba183d8d497"}) 1m4.209609618s ago: executing program 34 (id=2109): r0 = syz_open_dev$usbfs(&(0x7f0000000240), 0x75, 0x109301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {0x9}, 0xa, 0x5, &(0x7f0000000000)={0x0, 0x3, 0x81, 0x2a, 0x3}, 0x8, 0x8, 0x7ff, 0x0, 0x7, 0x4, &(0x7f0000000080)="68963e0d5a89a2af28dead684b4e8c9080cbf54bde240b94a64be2f2d9b3656bbb0daa113598b0c38be4a5c8e92717314ffd2d0c5a6a43135d01ddea881de1d0d01473c7400dd3a8ef69ee90f0fcdab1922ef391b311789f1d932cab388aa96c720dea0ba183d8d497"}) 1m2.929220129s ago: executing program 1 (id=2135): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7070000080000008500000069000000"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000400000000000000000000008500000041000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b703000000000000a282000000000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b7000100000000009500000000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x5, 0x1}, 0xd00, 0x10000, 0x697, 0x7, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_open_procfs(0x0, &(0x7f0000000140)='map_files\x00') sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="b8000000190001000000000000000000fc020000000000000000000000000000000000000000000000000000000000000800000300000000020000005e00", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES64], 0xb8}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000480)={&(0x7f0000000680)=ANY=[@ANYBLOB="5a8b59a1", @ANYRES16=0x0, @ANYBLOB="00012bbd7000fedbdf25010000000c0004800500030001000000400008800c0007800800050035096a73040007802c00078008000600f100000008000500d80eca430800060006000000080005006a531b00080006006b0000002c000480050003000200000005000300070000000500030001000000050003000d00000005000300000000001c00048005000300070000000500030000000000050003000600000008000100000000000800010000000000"], 0xb8}, 0x1, 0x0, 0x0, 0x4000}, 0x44010) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x0, 0x2) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r3}, 0x10) write$UHID_CREATE2(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="0b00000073790101000000000000000000000000000af7f4f0c55de8ca0000000000000000000000000000000000000000f3c800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a310000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ff00000000000000000000000000000020000000000000030000000000000000000000004119202532aeecfcdbb73887feb3f14db126c935954a335f6469a793"], 0x138) write$UHID_DESTROY(r2, &(0x7f0000000340), 0x4) 1m2.645799802s ago: executing program 1 (id=2136): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/14, @ANYRES32=r0], 0x0, 0x400000, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) timer_create(0x0, 0x0, &(0x7f0000bbdffc)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x18) mount$9p_tcp(0x0, 0x0, 0x0, 0x801, &(0x7f0000000740)=ANY=[]) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000013000000850000008600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) r4 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x80, 0x2, 0x8b6}, &(0x7f0000000000)=0x0, &(0x7f0000000300)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002) io_uring_enter(r4, 0x47f6, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000540)='fib6_table_lookup\x00'}, 0x10) syz_emit_ethernet(0x5e, &(0x7f0000003680)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x28, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @loopback={0xfffffffffffffff5, 0x1ff0000aa}, @private1}}}}}}, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x891e, &(0x7f0000000000)={'wg1\x00', @ifru_flags=0x2000}) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', 0x1c0) umount2(&(0x7f00000002c0)='./file0\x00', 0x0) 1m2.493867994s ago: executing program 1 (id=2141): socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_xfrm(0x10, 0x3, 0x6) (async) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060", @ANYRESOCT], 0xb8}}, 0x20040014) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0x2, 0x0, 0x25dfdbfe, {{@in6=@private0, @in=@remote, 0x0, 0x4, 0x0, 0x0, 0xa, 0x60, 0x0, 0x3b, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0xfffffffffffffffe}, 0x9, 0x0, 0x0, 0x0, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x50) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9"], 0xb8}}, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x25dfdbfe, {{@in6=@private0={0xfc, 0x0, '\x00', 0x40}, @in6=@ipv4={'\x00', '\xff\xff', @loopback}, 0x0, 0x400, 0x0, 0x0, 0xa, 0x60, 0x80, 0x0, 0x0, 0xee01}, {}, {}, 0x1}}, 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in6=@private0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x40, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x9}, {0x0, 0x5}}}, 0xb8}}, 0x4000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$igmp(0x2, 0x3, 0x2) (async) r4 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_TABLE(r4, 0x0, 0xcf, &(0x7f0000000700)=0xfef835e5e20f46c0, 0x4) setsockopt$MRT_INIT(r4, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000400)={0x3a, @remote, 0x4e22, 0x1, 'rr\x00', 0x2, 0x71d, 0x36}, 0x2c) setsockopt$MRT_ADD_VIF(r4, 0x0, 0xca, &(0x7f0000000100)={0x1, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @remote}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000005000000020000000410"], 0x50) (async) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000005000000020000000410"], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000000)='kmem_cache_free\x00', r6}, 0x18) socket$can_raw(0x1d, 0x3, 0x1) (async) r7 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000080)={'vxcan1\x00', 0x0}) sendmsg$can_raw(r7, &(0x7f0000000240)={&(0x7f0000000780)={0x1d, r8}, 0x10, &(0x7f0000000200)={&(0x7f00000007c0)=@can={{0x2, 0x0, 0x1, 0x1}, 0x1, 0x3f57955e7be81d83, 0x0, 0x0, "f97003b8750e5566"}, 0x10}}, 0x4000040) socket$inet_icmp_raw(0x2, 0x3, 0x1) (async) r9 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreq(r9, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x9d, &(0x7f0000000200)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb8100460008004533c92b09fb008b0066000009549078ac1414360a0101004414e3500000000300000002000000050000006d89088c5b465bbdd700830f4cac1414bb7f000001e000000188030800860e0000000200020206315d35da00000e0426ff5b109b418a1c8d5a5a7e67fd7f76a4280a304ac3964d8215a02f803fdaa8a456022f7ea79075ad5e7bf2ef7852596b0c7ccaea"], 0x0) (async) syz_emit_ethernet(0x9d, &(0x7f0000000200)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb8100460008004533c92b09fb008b0066000009549078ac1414360a0101004414e3500000000300000002000000050000006d89088c5b465bbdd700830f4cac1414bb7f000001e000000188030800860e0000000200020206315d35da00000e0426ff5b109b418a1c8d5a5a7e67fd7f76a4280a304ac3964d8215a02f803fdaa8a456022f7ea79075ad5e7bf2ef7852596b0c7ccaea"], 0x0) getsockopt$EBT_SO_GET_INIT_ENTRIES(r9, 0x0, 0x83, &(0x7f0000000380)={'filter\x00', 0x0, 0x3, 0x28, [0x8, 0x8000, 0x7, 0x9, 0x8, 0x6], 0x7, &(0x7f0000000300)=[{}, {}, {}, {}, {}, {}, {}], &(0x7f0000000140)=""/40}, &(0x7f00000001c0)=0x78) (async) getsockopt$EBT_SO_GET_INIT_ENTRIES(r9, 0x0, 0x83, &(0x7f0000000380)={'filter\x00', 0x0, 0x3, 0x28, [0x8, 0x8000, 0x7, 0x9, 0x8, 0x6], 0x7, &(0x7f0000000300)=[{}, {}, {}, {}, {}, {}, {}], &(0x7f0000000140)=""/40}, &(0x7f00000001c0)=0x78) r10 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC_PROXY(r10, 0x0, 0xd2, &(0x7f00000000c0)={@multicast1=0x1c, @empty=0xe0000300, 0x0, "8a791d8df05f496d0403392f45a71c02008b630068cd060526c41ef8d3a4a422", 0x7f, 0x1, 0x4, 0x4}, 0x3c) (async) setsockopt$MRT_ADD_MFC_PROXY(r10, 0x0, 0xd2, &(0x7f00000000c0)={@multicast1=0x1c, @empty=0xe0000300, 0x0, "8a791d8df05f496d0403392f45a71c02008b630068cd060526c41ef8d3a4a422", 0x7f, 0x1, 0x4, 0x4}, 0x3c) 1m2.226638235s ago: executing program 1 (id=2144): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x1, 0xc, 0x9}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x94) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x3000046, &(0x7f0000000280)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@dioread_lock}, {@data_err_ignore}, {@resgid}, {@data_err_ignore}, {@jqfmt_vfsv0}, {@nobh}, {@errors_remount}, {@bh}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000001080)="$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") open(&(0x7f0000000180)='./bus\x00', 0x14937e, 0x111) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x15, 0x0, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x200, 0x400000]}) chdir(&(0x7f0000000140)='./file0\x00') 1m1.809263318s ago: executing program 1 (id=2150): r0 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xd, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000021007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000240)='4', 0x1}], 0x1) (fail_nth: 12) 1m1.548409909s ago: executing program 1 (id=2151): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x4000) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000080008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b700000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000004c0)='mm_page_free\x00', r1}, 0x18) r3 = syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200008, &(0x7f0000000380)={[{@nolazytime}, {@auto_da_alloc}, {@oldalloc}, {@norecovery}, {@jqfmt_vfsv0}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@user_xattr}]}, 0x3, 0x56a, &(0x7f00000015c0)="$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") r4 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0xb, &(0x7f0000000180)=ANY=[@ANYRES16=r3, @ANYRES64=r2, @ANYRESOCT=r4, @ANYBLOB="8a4d89c4fd"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000020000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r6}, 0x10) r7 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000007c0)=@bpf_tracing={0x1a, 0xf, &(0x7f0000000440)=@raw=[@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r4}}, @map_fd={0x18, 0x1, 0x1, 0x0, r0}, @ringbuf_query, @call={0x85, 0x0, 0x0, 0x4b}, @map_idx={0x18, 0x0, 0x5, 0x0, 0x9}, @exit, @call={0x85, 0x0, 0x0, 0xba}], &(0x7f00000001c0)='syzkaller\x00', 0x784, 0x22, &(0x7f0000000300)=""/34, 0x40f00, 0x62, '\x00', 0x0, 0x1c, 0xffffffffffffffff, 0x8, &(0x7f0000000500)={0x7, 0x1}, 0x8, 0x10, &(0x7f0000000540)={0x3, 0x3, 0x9, 0x81}, 0x10, 0x15107, 0xffffffffffffffff, 0x3, &(0x7f0000000580)=[r0, r3, r4], &(0x7f00000005c0)=[{0x0, 0x5, 0x2, 0x5}, {0x0, 0x2, 0xf, 0x5}, {0x5, 0x4, 0xf, 0x2}], 0x10, 0xb}, 0x94) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000900)={@map=r4, 0x2b, 0x1, 0x5, &(0x7f0000000600)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x0, &(0x7f0000000640)=[0x0, 0x0], &(0x7f0000000880)=[0x0, 0x0], &(0x7f00000008c0)=[0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) r9 = syz_open_dev$vcsa(&(0x7f0000000980), 0x5, 0x4100) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000940)={@cgroup=r9, r7, 0x33, 0x2, r5, @void, @value=r6, @void, @void, r8}, 0x20) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r10}, 0x10) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x3fffffffc}, 0x0, 0x0, 0x0, 0x3, 0xfff, 0x8001, 0x7fff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) r11 = gettid() process_vm_writev(r11, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0x7ffff000}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) r12 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) ftruncate(r12, 0x2007ffc) sendfile(r12, r12, 0x0, 0x800000009) r13 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000040000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r13}, 0x18) r14 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r14, 0x29, 0x3, &(0x7f0000000000)=0x1, 0x4) bind$inet6(r14, &(0x7f0000000280)={0xa, 0x4e22, 0x9, @loopback, 0x6}, 0x1c) connect$inet6(r14, &(0x7f0000000140)={0xa, 0x4e22, 0x23, @loopback, 0x23}, 0x1c) 1m1.513019861s ago: executing program 35 (id=2151): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x4000) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000080008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b700000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000004c0)='mm_page_free\x00', r1}, 0x18) r3 = syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200008, &(0x7f0000000380)={[{@nolazytime}, {@auto_da_alloc}, {@oldalloc}, {@norecovery}, {@jqfmt_vfsv0}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@user_xattr}]}, 0x3, 0x56a, &(0x7f00000015c0)="$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") r4 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0xb, &(0x7f0000000180)=ANY=[@ANYRES16=r3, @ANYRES64=r2, @ANYRESOCT=r4, @ANYBLOB="8a4d89c4fd"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000020000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r6}, 0x10) r7 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000007c0)=@bpf_tracing={0x1a, 0xf, &(0x7f0000000440)=@raw=[@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r4}}, @map_fd={0x18, 0x1, 0x1, 0x0, r0}, @ringbuf_query, @call={0x85, 0x0, 0x0, 0x4b}, @map_idx={0x18, 0x0, 0x5, 0x0, 0x9}, @exit, @call={0x85, 0x0, 0x0, 0xba}], &(0x7f00000001c0)='syzkaller\x00', 0x784, 0x22, &(0x7f0000000300)=""/34, 0x40f00, 0x62, '\x00', 0x0, 0x1c, 0xffffffffffffffff, 0x8, &(0x7f0000000500)={0x7, 0x1}, 0x8, 0x10, &(0x7f0000000540)={0x3, 0x3, 0x9, 0x81}, 0x10, 0x15107, 0xffffffffffffffff, 0x3, &(0x7f0000000580)=[r0, r3, r4], &(0x7f00000005c0)=[{0x0, 0x5, 0x2, 0x5}, {0x0, 0x2, 0xf, 0x5}, {0x5, 0x4, 0xf, 0x2}], 0x10, 0xb}, 0x94) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000900)={@map=r4, 0x2b, 0x1, 0x5, &(0x7f0000000600)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x0, &(0x7f0000000640)=[0x0, 0x0], &(0x7f0000000880)=[0x0, 0x0], &(0x7f00000008c0)=[0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) r9 = syz_open_dev$vcsa(&(0x7f0000000980), 0x5, 0x4100) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000940)={@cgroup=r9, r7, 0x33, 0x2, r5, @void, @value=r6, @void, @void, r8}, 0x20) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r10}, 0x10) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x3fffffffc}, 0x0, 0x0, 0x0, 0x3, 0xfff, 0x8001, 0x7fff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) r11 = gettid() process_vm_writev(r11, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0x7ffff000}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) r12 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) ftruncate(r12, 0x2007ffc) sendfile(r12, r12, 0x0, 0x800000009) r13 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000040000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r13}, 0x18) r14 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r14, 0x29, 0x3, &(0x7f0000000000)=0x1, 0x4) bind$inet6(r14, &(0x7f0000000280)={0xa, 0x4e22, 0x9, @loopback, 0x6}, 0x1c) connect$inet6(r14, &(0x7f0000000140)={0xa, 0x4e22, 0x23, @loopback, 0x23}, 0x1c) 58.352219172s ago: executing program 0 (id=2204): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[], 0x3c}}, 0x0) open$dir(&(0x7f00000000c0)='./file0\x00', 0x202, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4044080) sendto$inet6(r0, 0x0, 0x0, 0x880, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000280), &(0x7f00000002c0)='./file0\x00', 0x2bc3c1f, 0xffffffffffffffff, 0x7, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r2, 0x0, 0xfffffffffffff001}, 0x18) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r3) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r4, 0x0) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) syz_emit_ethernet(0x36, &(0x7f0000000080)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x65, 0x0, 0xf, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x300, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2, 0xffff}}}}}}, 0x0) syz_emit_ethernet(0x36, &(0x7f00000001c0)={@local, @empty, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2}}}}}}, 0x0) open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x8, 0x80, 0x0, 0x4, 0x0, 0x7, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x4}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$char_usb(0xc, 0xb4, 0x5) read$char_usb(r5, &(0x7f0000000040)=""/7, 0x7) 58.280462777s ago: executing program 0 (id=2206): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000001c0)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc0004}]}) r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x400}, 0x100002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0xf4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000c}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) r3 = dup2(r1, r2) ioctl$BLKTRACESETUP(r3, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x200000a, 0x1, 0x8}) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001200)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r4}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='kfree\x00', r5, 0x0, 0x6}, 0x18) r6 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) syz_emit_ethernet(0x25, &(0x7f0000000640)=ANY=[], &(0x7f00000004c0)={0x1, 0x1, [0x111, 0xa4b, 0x6de, 0xf94]}) write$UHID_CREATE(r6, &(0x7f0000000780)={0x0, {'syz0\x00', 'syz0\x00', 'syz1\x00', &(0x7f00000000c0)=""/43, 0x2b, 0x0, 0x0, 0x0, 0x800}}, 0x120) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r7, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000080)='kmem_cache_free\x00', r8, 0x0, 0x100000000}, 0x18) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x3000010, &(0x7f0000000040)={[{@errors_remount}, {@discard}]}, 0x1, 0x512, &(0x7f0000000380)="$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") socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) 57.61290304s ago: executing program 0 (id=2214): r0 = socket(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x38, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x1, @perf_bp={0x0}, 0x10024, 0x10000, 0x1, 0x1, 0xa, 0x20005, 0x2b, 0x0, 0x0, 0x0, 0xffffffffffffff7d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r1, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000000302010227bd7000fe9d4e96e604aac0dbdf2500000003a32400f137b97346f039d82bd9112748753c5cf7620beada9cd791ccea56aae308ea0902cd2107a8bff5e3560284435f7a7809278eba85b9d9d03ae9d5b2553133869a09489f32566b23614b4436d95ba758ddf62942fd4b32252f4cc214e4746b"], 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x4004) recvmmsg(r1, &(0x7f0000003bc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) r5 = syz_io_uring_setup(0xbc3, &(0x7f0000001480)={0x0, 0x1064, 0x80, 0x200003, 0x1af}, &(0x7f00000001c0)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x2, 0x1, 0xffffffffffffffff, 0x0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000200)=[{0x0}, {0x0}], 0x2}, 0x0, 0x3, 0x0, {0x2}}) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) io_uring_enter(r5, 0x47f8, 0x0, 0x0, 0x0, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r8, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000bc0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x2, 0x0, 0x0, 0x0, 0xf, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x2000, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{}, 0x3548, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, 0x4}}}]}, 0x78}}, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000400000000000"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x41, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe26}, 0x94) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='kfree\x00', r10}, 0x18) r11 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r11, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r11, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x4, 0x3, 0x3}, 0x10) sendmsg$tipc(r11, &(0x7f0000000400)={&(0x7f00000008c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2400c09d}, 0x20) sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@newtfilter={0x78, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x48, 0x2, [@TCA_BASIC_EMATCHES={0x44, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xffff}}, @TCA_EMATCH_TREE_LIST={0x38, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1, 0x0, 0x0, {{}, {0x0, 0x0, 0x1}}}, @TCF_EM_META={0x24, 0x2, 0x0, 0x0, {{0x0, 0x4, 0x4}, [@TCA_EM_META_HDR={0xc}, @TCA_EM_META_RVALUE={0x4}, @TCA_EM_META_LVALUE={0x5, 0x2, [@TCF_META_TYPE_VAR='3']}]}}]}]}]}}]}, 0x78}}, 0x0) 57.251137549s ago: executing program 0 (id=2218): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x3000046, &(0x7f0000000280)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@dioread_lock}, {@data_err_ignore}, {@resgid}, {@data_err_ignore}, {@jqfmt_vfsv0}, {@nobh}, {@errors_remount}, {@bh}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000001080)="$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") open(&(0x7f0000000180)='./bus\x00', 0x14937e, 0x111) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x15, 0x0, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x200, 0x400000]}) chdir(&(0x7f0000000140)='./file0\x00') 56.976788461s ago: executing program 0 (id=2225): syz_mount_image$ext4(&(0x7f0000000400)='ext4\x00', &(0x7f0000000440)='./file0\x00', 0x0, &(0x7f0000000480), 0x1, 0x3e3, &(0x7f00000004c0)="$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") r0 = socket(0x11, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000005c0)={'gre0\x00', 0x0}) bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @dev}, 0x14) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000240)=0xeb, 0x4) sendmsg$netlink(r0, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000004c0)=ANY=[@ANYBLOB="02011400012918000e3580009f0001140000002f0600ac141414e0000003808a8972bd0b72e41082b1a3"], 0xdd12}], 0x1}, 0x0) 56.740294739s ago: executing program 0 (id=2229): syz_open_dev$usbfs(&(0x7f0000000080), 0x10000000074, 0x141303) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x2125099, 0x0) r0 = syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x3000010, &(0x7f0000000600)={[{@nobh}, {@dax_always}], [{@obj_user={'obj_user', 0x3d, 'n*'}}, {@func={'func', 0x3d, 'FIRMWARE_CHECK'}}, {@obj_user={'obj_user', 0x3d, '\xa5S\xc8f\xdc\xf7\xde\xebb\x95\xb9z\x95r\xd0P~3\x8e\xc8\xe9\x8fu\xa2\xc2E\x1b\xb1\xaf n\r\xb4T:~\x1f\x9c\xa9P\xdf(\xa8\x00dP\xc9]\xae\x81\xed\x11ql\x90\x13N\xc2\x9d\xe0qzl\xfa\xb2\xa7\xe2\x92a\xd8\x11\xc6\xe8q\xd1oD\xf4h\'=\a\xa8'}}, {@dont_appraise}, {@defcontext={'defcontext', 0x3d, 'user_u'}}, {@fsmagic={'fsmagic', 0x3d, 0x6}}, {@fowner_lt}, {@mask={'mask', 0x3d, 'MAY_APPEND'}}, {@smackfsroot={'smackfsroot', 0x3d, 'dax=always'}}]}, 0x1, 0x52a, &(0x7f0000000a00)="$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") mount$bind(&(0x7f0000000000)='.\x00', 0x0, 0x0, 0x101097, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0/../file0\x00', 0x0, 0x8b100a, 0x0) mount$bind(0x0, 0x0, 0x0, 0x101091, 0x0) lsetxattr$security_capability(&(0x7f0000000080)='./cgroup/cgroup.procs\x00', &(0x7f0000000140), 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x50) r1 = openat$selinux_load(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$selinux_load(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="8cff7cf9080000005345204c696e757813"], 0x65) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x9, 0x8, &(0x7f0000000740)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x2e, '\x00', 0x0, @fallback=0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000, 0x0, 0x4000000}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000003c0)=ANY=[@ANYRESOCT=r0, @ANYRES32=r2, @ANYRES16=0x0, @ANYRES8, @ANYRESDEC], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) syz_clone(0x40200080, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000400180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kmem_cache_free\x00', r4}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x1, 0x0, 0x7ffc1ffb}]}) 56.717135171s ago: executing program 36 (id=2229): syz_open_dev$usbfs(&(0x7f0000000080), 0x10000000074, 0x141303) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x2125099, 0x0) r0 = syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x3000010, &(0x7f0000000600)={[{@nobh}, {@dax_always}], [{@obj_user={'obj_user', 0x3d, 'n*'}}, {@func={'func', 0x3d, 'FIRMWARE_CHECK'}}, {@obj_user={'obj_user', 0x3d, '\xa5S\xc8f\xdc\xf7\xde\xebb\x95\xb9z\x95r\xd0P~3\x8e\xc8\xe9\x8fu\xa2\xc2E\x1b\xb1\xaf n\r\xb4T:~\x1f\x9c\xa9P\xdf(\xa8\x00dP\xc9]\xae\x81\xed\x11ql\x90\x13N\xc2\x9d\xe0qzl\xfa\xb2\xa7\xe2\x92a\xd8\x11\xc6\xe8q\xd1oD\xf4h\'=\a\xa8'}}, {@dont_appraise}, {@defcontext={'defcontext', 0x3d, 'user_u'}}, {@fsmagic={'fsmagic', 0x3d, 0x6}}, {@fowner_lt}, {@mask={'mask', 0x3d, 'MAY_APPEND'}}, {@smackfsroot={'smackfsroot', 0x3d, 'dax=always'}}]}, 0x1, 0x52a, &(0x7f0000000a00)="$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") mount$bind(&(0x7f0000000000)='.\x00', 0x0, 0x0, 0x101097, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0/../file0\x00', 0x0, 0x8b100a, 0x0) mount$bind(0x0, 0x0, 0x0, 0x101091, 0x0) lsetxattr$security_capability(&(0x7f0000000080)='./cgroup/cgroup.procs\x00', &(0x7f0000000140), 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x50) r1 = openat$selinux_load(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$selinux_load(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="8cff7cf9080000005345204c696e757813"], 0x65) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x9, 0x8, &(0x7f0000000740)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x2e, '\x00', 0x0, @fallback=0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000, 0x0, 0x4000000}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000003c0)=ANY=[@ANYRESOCT=r0, @ANYRES32=r2, @ANYRES16=0x0, @ANYRES8, @ANYRESDEC], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) syz_clone(0x40200080, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000400180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kmem_cache_free\x00', r4}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x1, 0x0, 0x7ffc1ffb}]}) 1.731136622s ago: executing program 6 (id=3359): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000840), 0x81, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = openat$selinux_member(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$selinux_access(r2, &(0x7f0000000200)=ANY=[@ANYBLOB="73797374656d5f753a6f626a6563745f723a63726f6e645f756e69745f66696c655f743a733020756e636f6e66696e656620307f30303030303030303231343734384b9fe63336"], 0x47) 1.699966535s ago: executing program 6 (id=3361): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000021b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = socket$kcm(0x2, 0x1000000000000002, 0x0) sendmsg$inet(r2, &(0x7f0000000380)={&(0x7f0000000240)={0x2, 0x4e1f, @multicast2=0xe0000020}, 0x10, 0x0, 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB='8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a'], 0x38}, 0x40014) 1.682348546s ago: executing program 6 (id=3363): bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000700)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], &(0x7f0000000640)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r0}, &(0x7f0000000800), &(0x7f0000000840)=r1}, 0x20) symlink(&(0x7f0000001780)='./file0/../file0\x00', &(0x7f00000017c0)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1/file2\x00', 0x81c0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1/file2\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x21081e, &(0x7f00000002c0), 0x1, 0x4f2, &(0x7f0000000600)="$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") 1.649852839s ago: executing program 6 (id=3366): r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) bind$tipc(0xffffffffffffffff, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) sendmsg$tipc(0xffffffffffffffff, 0x0, 0x20) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r2 = openat(0xffffffffffffff9c, 0x0, 0xa6c3, 0x0) write$nbd(r2, 0x0, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWSET={0x34, 0x12, 0xa, 0x301, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0xa}]}], {0x14}}, 0x5c}, 0x1, 0x0, 0x0, 0xc000}, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x318, 0x1, 0x24}, 0x9c) 1.171157017s ago: executing program 2 (id=3385): syz_mount_image$ext4(&(0x7f00000007c0)='ext4\x00', &(0x7f00000006c0)='./file1\x00', 0x40, &(0x7f00000000c0)={[{@user_xattr}, {@nodioread_nolock}]}, 0x1, 0x576, &(0x7f0000000140)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x4, 0x590, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcf74, 0x2, @perf_config_ext={0xa9e7, 0x3}, 0x548, 0x10000, 0x0, 0x3, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) writev(r1, &(0x7f00000025c0)=[{&(0x7f0000000240)='4', 0x1}, {0x0, 0x900}], 0x2) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x58) copy_file_range(r2, 0x0, r2, &(0x7f00000000c0)=0xae8, 0x863, 0x0) 1.009477219s ago: executing program 2 (id=3388): syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x5, 0x800, 0x0, &(0x7f00000001c0), 0x3000000) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0500000004000000990000000b"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000181100", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$VT_DISALLOCATE(r2, 0x5608) socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f00000002c0)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = inotify_init1(0x0) inotify_add_watch(r3, &(0x7f00000000c0)='.\x00', 0xa4000061) read(r3, &(0x7f0000000140)=""/68, 0x44) 662.517727ms ago: executing program 9 (id=3393): sendmsg$NLBL_MGMT_C_ADDDEF(0xffffffffffffffff, 0x0, 0x4000) r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmsg$802154_dgram(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x24, @short={0x2, 0xffff, 0xaaa1}}, 0x14, &(0x7f0000000080)={0x0}, 0x7, 0x0, 0x0, 0x6004a014}, 0x600c010) openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TCSBRKP(r1, 0x5425, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000000c0)=0x3) ioctl$TIOCGPGRP(r1, 0x5437, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000200)='./bus\x00', 0x4006, &(0x7f0000000380)={[{@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@block_validity}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@quota}, {@resuid}, {@lazytime}]}, 0x1, 0x443, &(0x7f0000001040)="$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") r3 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r4 = fcntl$dupfd(r3, 0x0, r3) write$tun(r4, &(0x7f0000000400)=ANY=[], 0xa2) copy_file_range(0xffffffffffffffff, 0x0, r2, &(0x7f00000001c0)=0x10, 0x7de, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000300)={'#! ', '', [{0x20, 'memory.events\x00'}]}, 0x13) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0xfe, 0x82, 0x500, 0xf2ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x2, @perf_bp={&(0x7f0000000080)}, 0x400, 0x200000000000, 0x0, 0x0, 0x0, 0x1fffffff, 0x0, 0x0, 0x40, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 661.536107ms ago: executing program 6 (id=3394): r0 = syz_io_uring_setup(0x49a, &(0x7f00000000c0)={0x0, 0x79af, 0x3180, 0x8000, 0x400252}, &(0x7f0000000340)=0x0, &(0x7f0000000300)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000500)=@IORING_OP_READ=@pass_buffer={0x16, 0x2, 0x2004, @fd, 0x9, 0x0, 0x0, 0xf}) io_uring_enter(r0, 0x627, 0x4c1, 0x43, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000003c0)='sched_switch\x00', r3}, 0x18) 584.153003ms ago: executing program 6 (id=3397): epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4000000010001fff00000000000000", @ANYRES32=0x0, @ANYBLOB="81ffffff00000000180012800e0001007769726567756172640000000400028008000a00"], 0x40}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x11, 0x8, &(0x7f0000000740)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket(0x10, 0x3, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000300)) r1 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) sendmsg$nl_generic(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="300000003e000701fcfffffffddbdf25047c0000100036800c00020007009300000000000c0001"], 0x30}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'batadv_slave_1\x00'}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x18) r2 = gettid() timer_create(0x0, &(0x7f00000002c0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)=0x0) timer_settime(r3, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r4 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100), 0x40200, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) preadv2(r4, &(0x7f0000000180)=[{&(0x7f0000000000)=""/167, 0xa7}], 0x1, 0x0, 0x4, 0x1) 399.553107ms ago: executing program 9 (id=3402): bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000700)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], &(0x7f0000000640)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r0}, &(0x7f0000000800), &(0x7f0000000840)=r1}, 0x20) symlink(&(0x7f0000001780)='./file0/../file0\x00', &(0x7f00000017c0)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1/file2\x00', 0x81c0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1/file2\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x21081e, &(0x7f00000002c0), 0x1, 0x4f2, &(0x7f0000000600)="$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") 347.444062ms ago: executing program 8 (id=3405): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000580)='kmem_cache_free\x00', r1}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) io_getevents(0x0, 0xfffe, 0x0, 0x0, 0x0) 333.260393ms ago: executing program 8 (id=3406): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0x5, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000050000000000000000800000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) close(0xffffffffffffffff) ioprio_get$pid(0x2, 0x0) 318.238144ms ago: executing program 8 (id=3407): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.net/devices.allow\x00', 0x2, 0x48) write$cgroup_devices(r0, &(0x7f0000000040)=ANY=[], 0x9) 291.803166ms ago: executing program 9 (id=3408): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x34120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000008c0)={0x18, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x12}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) add_key$keyring(&(0x7f0000000300), 0x0, 0x0, 0x0, 0xffffffffffffffff) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000040)={'bond0\x00', &(0x7f0000000300)=@ethtool_sfeatures={0x3b, 0x2, [{0xffff, 0x7426}, {0x1, 0x10000}]}}) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454da, &(0x7f0000000080)={'batadv0\x00'}) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000240)={'pim6reg0\x00', 0x2}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x103442, 0x0) ioctl$TUNSETIFF(r5, 0x400454da, &(0x7f0000000140)={'batadv0\x00'}) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000100)={'pimreg0\x00', 0x411}) 290.613326ms ago: executing program 7 (id=3409): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000340), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000480)={0xfffffffc, 0x5, 0x0, 'queue0\x00', 0x10000}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r1, 0x404c534a, &(0x7f0000000380)) 255.645249ms ago: executing program 8 (id=3410): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f000001b240)={0x0, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000840)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a48000000160a01080000000000000000020000000900020073797a30000000000900010073797a30000000001c000380180003800d0001006261746164765f736c"], 0x70}}, 0x24040880) 255.021499ms ago: executing program 7 (id=3411): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$kcm(0xa, 0x2, 0x73) sendmsg$inet(r1, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x0, @empty=0xf5ff}, 0x1b, &(0x7f0000001080)=[{&(0x7f0000000040)="a72d11a15c048c0a7d63aebc5cea1f81510ff6091475aeec600831aa9d3944e60bc2ad06a619c560aa0118b28f68f1eb14549d633b4b23f179fb680716faa43414787559be90843c35ab30acad8a6740140e00721abc2eb362f7bde53b3c992d3e28ccc20ec84fdc569947047f6c09a647ee8c0a747b951e66c068ccf1af93ee9e6f9528ff79e2f989383b05a690a6bec4634b867c9446c1c644b3010e8a3514c6328323b4bbdd602b8f0dace6aea70902c4ddd2a2f2810f1348b0d0df3c1e6a5938fcfdc87e7580c6be0c6a06eca62d6f787dd16add086a21391c4c707d8b61929d1252681b84c245e0efafe2e6e73ad86a3cf59235ab0eacbb414af92ec3cdac420a064a98e8cc18bdf63f8997f96436e0fe6f06fdbf47fff353b01a861babd4a38d126bfe3e29049e6cc883e6efae6e70ef9ed124b1b09887a58c991e223b6420dca5ae238027e91b17b1707dc5c0d5f59f0ca95614f1ea1d263c1ee54dfe31ae35eb3c8e3b931dff7920c57fbba89adf2e392c1ad719b90c7ade0d38ff9792934ef1fb12f51d8e2fad12486d5883d5b1a46696fad128c6805cfb25bc6487e1e407d6b266971b09d0d864a7a550284e24b6cdc9f4ae1081a638175dffef002c76ac5558d23e41edbe68f4b4950a13aa000326dae5a857603dc5a40d6c6618a98c7b6e1eebd325ea2c14601a25658965f40864fd015d9b2fff83ee5ed3212ebd9fa429f0140f633556ac07c0c08e67a1848c9942ecc47dd4ffede9a429e9e0472be7cdbcd117e621ddf745c00a814ffff0224634472577dc0b35a9c153409f1a2bddc193b20b4d244d9cbbd59816c46000c596865f58b4e640ed4a9ab6086cede697fb113560925498da83273e679e0e28b84961eb7b9c9b4fa916590965c76b48e5d453f27a821bd2bf0946ff2413ec30f7893d1f046e18f736c40ceda26dfc4a0a62f71a3606d3f72c0a858dfd7895e2572292e11af913c6b513a141d28e501ae7c49618d104aac9abb78466a636efb88120d0eef0a501558a5aa34784a9823f2802a0bcdf318f9b436b34b42a2a7cf513f80364ad9a699d2e23eb4f3a2bbce818bd20da61882b3dac699d05dc24f29b72471b712423ace6278c43df2be7a09e815517b86d8b3ce16af3d64a575958c5fd52aac53b391f3d2a67c24c6c13ec11428b61b80a6a58cbba1790a98d190a572070f63fc0b809669895ea9865c3066b06102f6f2c7171dc7f76e1931b3e4deb569ef9d07d5f86a848f50942e93c419c3a23489f14803b08182dfd48b8d4375be6b7f805a21209c05e5927693a8834c8d5a5acbd47ed8a30a8a741d1ad77639b56b3b90c0b2023fa334befd28b2e27cbcd94b0ce7437f88ce67a925cea6d6d7e5313de6d328b1124a8b9ef83fe39ca3da97d33c60b7fd4af67d3c8fccb595a27a5bffc71e5a5b2ec966828993b0c0f83cbc55f9a7fb66a4101d5c83b77885072b6e2b2ceebe32f635509698c05089b9ff1cb1959b211e114dadb224ef2d5e7a3c55b3ac00fcdc9018577603c6301e5d4341b3d7eeb2665349d448d28d5d108f576408cbe533a6adbba18ebb2d84bb9af81108506a2f50fb56d595579000747930449fdf4ed01715ec624a0cb73636a35b9136f10b79e3d7ded09008b92e92c64e26e6b6d17f18b70b1d9813de8d2ff151c7a6a0452c660a57c33f13e2d9b88fa5f5c0505722d2e787a425e4a3e9b5efa9668e9199f5fb9fe7d5b8a57719a57df152e7f2c6a1087a2a24084f82455b65353a70559f04d5ed12defb81497ea69c1c7e69c373524770b7473c16a69c7a3648a9dd93377b89cdff61cf62512d1ee67a55ea67993937c1f55a2179bc9c8a337364cfb84d295adda1ad9700fc2f5c11cbfc1b90affb4666c6e7e23a6f7751410a5651819f29f690c6dba2b8a67e0f7f8cc377feb1854c393578994c85391ba21b3961aed477f771645571dc7d6cae72bf79c82a92a4edc3742b1398060a0a5c9e81c016b7f2ae3db529c6ff824cc28678764d8ab49d7dc68e5b0556c9e7ffb6fef442776d86fbd458741830e57f22a1f8513b92abd5b2df93a67cc560134078f0b8ecc3276e40aadef5cd579888b86b4988f396679250701f3869e7493b33692035ecd94aca5189fd0a0893ccc5bb19c0b4caca86cf90ebc2a5558f39cccb33f6773a4e425bf551fb3b6456ee1cc62fa1843a9e5539bb2d02ae6ef82533a9dbcfb562c1ab18c1f639ae7ff02083746f74a15ba2d10e4b955940a5d6f488d326a99f287c48ad463ce40367aeeff519cbad0a2d7fdbfa48bff75955467977764c2be2bd2ffa18396c46920c40c50a4037003666406d177e2cd20aee423d07169d8f611f635ba0b62b61265ff2c5548446a2423dd1038482b6852b2d9d2f90aa05d82c5e2c3d1af0c7aad72d82b3da67471af7b037bb0424a785e73f35b5a10a2ab300a195c20cd119a5390e0cd5d49c70bd80883b933e843d0d2902749dcf3c140c708a0f004b7a2f50bf311305dc01719016fcce5863815ca7951de710fcb71cd177551ff6fcd9f8bf01b93868f24c6129b6d7917125338cf62110083093fc7f862015d48450d992f2bb43e601cab19b2ea7b83962a382fc2a31fdf2358bf8a9a9e506eaa7b6eb5e7444d1ef459b24ffa51362abce902dfd84201a0e4b5a3b62757aad54fb65b83821c6bba663886de092065a565921ea3eb6781bb8ed4f4db3abcfeeb379b7e52fca790bea719918e299ab01bf5e92177d134360bf7a16a59e9d03d3dcfb0a25599237e3d41b3f0026c9402b1fb1894426303413a2cbcf7c72807ca694afa285990d07c3bca26413c9947b3b344aafc04544b8c11416e0312b028da7302e316c3966d41884b15055a49a4a0b3eac8e11f88a5615fb0af582f065d28e5a454447e9d0cfc60356439ebf7e1d0a00f5b9cc6daf2bd7195ba96b4d1a0679ff0fb1c01282c378a880f90f460889b67d76d4d0e8db6c928d113533d1d10b810303c43d8ff622c5bab7f095b96e64bf9daa48a2bdf3d9d40bac00cf1b66df61a4f7c3e21938e876f81b1179dce6a008f28eb682cae690ced0ea0d542da604d8056f2b1813ed36683c4c51aeb2650772cfb1c55d4e60604ff06344cfc271b2175a6c94defb807af240b483e24298ca73bfc743ca2ca2e77e6d5b817b3c1986601537faf59ac84c74d8bd0c068cb8e6bd03ac2dcf5793fb4a00b3c901a33aa3ee86e4f0db317b94bb8678ab26e36d305ebac4b0f7f164947148255b562dd0f87648499d45bccfb7d8c9d5624cadf8160a396e79fbcdc100058ba4606e41c02fb2cc0dc6c36196bd28acfde82a18cda2321d2d83fecd3b85380667cd1d0bc68298c6c8f10421a80c8fa86912b6c3e8ddd9d9668520d5151409e6b77f0d7730b374a68a744151bfbd123cfdf871e8c24e70d2ca3b50e84a48e0b78c1781000cfc848d43584985763a76c0ab9ba882c55e3e4aa8f2174255db38adb8350b48a77be22a869d13d183325f859b883464e5e46de5ea8a92532b9a794daaeff657cd361f7f158f8bebe36e9de1f5b9721d4263dcc9472229bc02d3f552180abfb25ca7aa36cb914d99c09fd5bb99dcab9b4e3c634d18fc7dfe84dc4425ad1e39c3e7410d49b4ea0a8a2958688c7725822f6dfc0827d19dc385e0e35a949941e4dd1aaeaab9ebe402f8c584bca7efc829f2ccfb63fd7bde1c182a67c14f9d3f033ca674e2604e89cd55a15419f956cd61a755c1b13554dae98e77be078aadfc131c9677381f1dbe6ef194eb17603a463e8b844ab46a6046e1f07d96d66de669359bff4c3d80948a4de3abb2f171a09b5d8999c379fb62244114e218c79805df7d899e5661320ee6721d652b95f09e4dfe69bd67099c73294b17ab574e0b966aa3ab44478965b9dca3cb3b9282945f24ccdd07c638ae25a84a728ca24f87ff49d718121a694be46f3616e27b1041b3c6cd24b9cf775bfc28dfbe0a009048f0599f2d5d6586cfd1e7f7fe69872d08b98f60d28e6af0d49d7f06ad71a7b5c41df261aba5de114022c7288bc265cc17909fdeadc3d7b256d7ab3b96e40f857060f16b54a6bb7248ee571f87ace5ee39eab412706cf52fa711468b21ea129c3f44bceb429fcc1a0ac2aa87b9365077dcfcfa9a1b32a0a09699197c20019a66cbd0a897feab3706c23123b888ada643d4560082033e31596b0483578968e3c9593ebd97141c228a42fc7645f92171c120aabca36657683fd7c72fcb87217f124d6fabc52f1d221d8410b47b0ad4bd944bf4085365e9b52a53911ab4ee142c5a1ebbe034c9d98c538c066f2dc0acf372eb2397dcac765055123e0ba19be22b18c886bf0f7490abe9fde91ffa62e059962bd134be8501cb5b715a744b1398e2c4c7e8afe72e189dda0654296afa1c1f99ab7d800fa40f72a758625c833b6fc7b7d42250522b456e1e7de815350c36c9cb2f4d1c9cb99109f89b456c559463f11b8b58247809b17a4ed4912bd0a47a529f1364d6dc593ea7f3eb98962078ac90e5012ee1c7b4b9ed5a8c7a9c0231b4ce425693faab64fa0f3482a04d4be2e06ee5d103694d288810a1a7f4d1e908dd82dd2016a064ece5cd67ef1dd5f4cda728fc6f1ccdd949dd8f775d862621507248ef4c83ae274969d19c7ddb02a4e8a1ab2b7aa539a442b22735ceedeefe60a1059dfaaa0979ce8d5387b5a047841fd9749b88ca91216b02d7926408a01916b7781bb7167528ccdb9a486d173437a5ba3e552c8674dff2cc9b21054e0e4f86b61b8723fca58ceef4413bffae9e9be79c5b9788f5449811ce78be9bc7a86375a670197baaef751beabcba0aa6c7c33f1cd702cb78ec39fa1f17d9da733d6abf2b80f9c51ac8f6f664b24edc53a7c9525c3016bd05c67272375fe816b2b121f2de68b885a0fd8f8b8c6c342237b632f6414a3eb3480f5f42106c5812e9bfd4e8c8dea8d08525d9aa1da7c7c2ee7ff3d31b79b211dd01e304a8ffc83a89a59f3b1e2ef5e969b6d90bea7e161066f25622fad914bff52bacd2807093dda1838b529ee57f718b374ce2841b924a42457867547a6edcb8412d85f11796742bf640b5819a9546357df778c332af5983c4373a95d9c58b52dba445eee92e6911824f0c534e7a5934d9eac9b7f6fec22002fc53a3003a3304217f567b47cd326edc5f48eb1f46bb20d1e10e72239afc9769344590cf48902aba5405b7d4baa31a912ab398a2f2d3f037614bb56a89244ece50f3a1e058d274f1e70f944eb8a305be91e561e5eb843d057a81f4deb84a6335ec81ca964cdae5f318d4e9aaea2c477cc279c00c698bcfe4b8e04c09079d8f3f5438d9d45a00f50d2f9b245c8c68eebf247e25ba8d26f8b95b21ac9ceb50c0aa2e4bdc032024db216b92f9350a90ac79341af14d3fa8ba908096e1b503341aed667bb184c672dac85fc4f335b3871c3b4e55ea219a857d2d2e135358f6b45a20b3e7de8e09b2041eb7c5084a80258fb524a983752659298a251e178b56f96bc67ae0a78ec92f92d92c9cf0edb5dcb11e739d69410ad44c8df00caa030d7d89f2ec38bd7698115c423cf3e6048793aca08ffbcdac766f1553773fa00031c1d75246e4e1eddf8948d02a3de6d67fd7329e45070f29044587f1e0db50d04e673191a63e30f96ee0d8d52738fab36a7fe2c6ab9301d401e7ca5b1f039193a580e40abbdf40c2d7e27809dec80815d37adae9fe7fb9d3a974c9fc03944d7338d000b81170be4c6792ed6b3b827194b3ae11e2acfca48498d1126aacf80f3d574256ef7f75552ff087a819e", 0x1000}, {&(0x7f00000011c0)="9d7fcf3efc6316a6a555ba8b4726d7ccaf8a060000009cfac4377876021d7131b838059f96bd206d4776368ed2a92432e5af71ad21b965f615b31105d60a4b16fa2fa1371850a1be85ffcad45b49422b2121d709014f49cf6bd1d18acc4c19e4356669a2ac3e05d5cdc6f0f485c1eb52ea8faf7e83a1468b6a491e71ae3d03cd9677e72413954feae71b5775a6e3e9fa9db9e1ed56e56bff66a7a86214d8145d878e26fa35bd55db98ecdef374d26a5d9cd0e89f3ae45be2d8e1d98ee0865fb64d6dd1e8c89608733370f12be1495d81b36dd72cc28e9c9b2c45f925b38b21818d93ce604772c21824e45793c4073eb44773f8e42c9ebb297dd5e76e856a22253c0e8a80f33b4d015c3f9c0c26bcdd6b440322a23b10d507eecead59faa166bdac1bd840211336dc0c", 0x33}], 0x2, &(0x7f00000010c0)=[@ip_tos_int={{0x14, 0x29, 0x3e}}, @ip_tos_u8={{0x38, 0x29, 0x2}}, @ip_tos_u8={{0x100000000000000}}], 0x50}, 0xff00) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500001000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r2}, 0x10) r3 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x1, 0x8) fchdir(r4) creat(&(0x7f00000000c0)='./file0\x00', 0x48) 254.575899ms ago: executing program 8 (id=3412): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000021b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = socket$kcm(0x2, 0x1000000000000002, 0x0) sendmsg$inet(r1, &(0x7f0000000380)={&(0x7f0000000240)={0x2, 0x4e1f, @multicast2=0xe0000020}, 0x10, 0x0, 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB='8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a'], 0x38}, 0x40014) 239.83334ms ago: executing program 7 (id=3413): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) r0 = socket(0xa, 0x5, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000200)=[@in6={0xa, 0x4e24, 0x4, @loopback}], 0x1c) sendto$inet6(r0, &(0x7f0000000040)="00d8", 0x20a00, 0x44004, &(0x7f0000000100)={0xa, 0x4e24, 0xb, @loopback, 0xc5f}, 0x1c) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r2, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x3, &(0x7f0000000880)=ANY=[@ANYRESDEC=r1], &(0x7f0000000000)='GPL\x00', 0x800005, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r5 = bpf$MAP_CREATE(0x0, 0x0, 0x48) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x103, 0x30120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xf, &(0x7f0000000440)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x20000001}, {{0x18, 0x1, 0x1, 0x0, r6}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000180)='kmem_cache_free\x00', r7}, 0x10) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r9, &(0x7f00000003c0)={&(0x7f0000000180), 0x10, &(0x7f0000000380)=[{&(0x7f0000000480)="c3e972bd85a6d84136d6dd55048d3593a74f338ce6772ab9a6f64041c2f6fbbecdc08ebcd3192b6a53662dae7c8e9c665e80a5d0925f728dcac30c29793992e588952653d414cb8ccdabc38767fee819ec5af0c5ee936880fe8549b4ed347779cab4ffd4e0b62c53a1c01db28f2b3f91c34211c9353bc1dece61511917c2245fd66cb8dffeacb4d46d627c97b498bf1ff6b313bfbc9765457c831771d5eec7997ec242e4505f01c1bb3e069b2e630f42a2be86598a61", 0x64}, {&(0x7f0000000300)='V', 0xffffff6c}, {&(0x7f0000001600)="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", 0x1000}, {&(0x7f0000000340)="b768eb20304f2fdc5a9694a4867840d93170ca1a86406f", 0xfffffec0}], 0x4, 0x0, 0x0, 0x8000}, 0x0) dup2(r10, r9) setsockopt$sock_attach_bpf(r9, 0x1, 0x21, &(0x7f0000000040), 0x4) sendmmsg(r9, &(0x7f0000000640)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x6, 0x200000d1) close_range(r8, 0xffffffffffffffff, 0x0) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000300)=@o_path={&(0x7f0000000180)='./file0\x00', r5, 0x4000, r4}, 0x18) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r11, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x94) r12 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='tlb_flush\x00', r12}, 0x10) 239.0649ms ago: executing program 8 (id=3414): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="030000b911663a3a60e52d00040000df8775b5cd", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="02000000050000000200"/28], 0x50) bpf$TOKEN_CREATE(0x24, &(0x7f0000000080)={0x0, r0}, 0x8) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0xb}]}) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='freezer.state\x00', 0x275a, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) fcntl$lock(r2, 0x5, &(0x7f00000001c0)={0x300, 0x0, 0x0, 0x200}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8010, 0xffffffffffffffff, 0x3ff30000) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='tlb_flush\x00', r4, 0x0, 0x8}, 0x18) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000980)='kfree\x00', r5}, 0x18) madvise(&(0x7f0000bc0000/0x400000)=nil, 0x400000, 0x9) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f0000000080)={[{@i_version}, {@nogrpid}, {@bh}]}, 0x1, 0x51d, &(0x7f0000000200)="$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") r6 = creat(&(0x7f00000000c0)='./bus\x00', 0x182) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x181242, 0x148) pwrite64(r7, &(0x7f0000000140)='2', 0xfdef, 0xfecc) fallocate(r6, 0x0, 0xbf5, 0x2000402) fallocate(0xffffffffffffffff, 0x0, 0xbf5, 0x2000402) ioctl$EXT4_IOC_MOVE_EXT(r7, 0xc028660f, &(0x7f0000000040)={0xc, r6, 0x0, 0x0, 0x0, 0xfffffffffdffffff}) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000340)='kmem_cache_free\x00', r9, 0x0, 0xf7}, 0x18) mq_open(&(0x7f0000000380)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\x01\x00\x00\x00a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|\x00\x17\xc0\xa3\xd5\xf9\xaa\x98/\xa4v\xe4)I\xf3+[e\x95\x89\x99\xca\x8e\xc5\xd3\\T\xf0\x1a|5\xfff\xff\x99\xa4\xbb\x9e#oR\xa4\xf1\xba\x04c\xb3-\xf7R\xb85\xb5\xdb\xe9?\xfa/\xdf\xb4R\xbfx=\v_j\x8e\xb0\'\xf4\xe5\xff!\xe1\xbf\x82e\xb1\x9b\x8d\xf3L\t\xd21\x9cbwV\xc8\xcc\xe4\x96M_w\xbc\xdf9\b\r\xf6\x95\xae\xb5,\x92\x8c\xc0DQm\x80\xd1w\xa2\x1a\x12Z\xe5\xf4H\xf7D\n\x96J\x93\xfb\xf0$\x9f\xf7\xa2\xae$O\xa3\xb6\xf5\x98\xd3\v\x00\x86\xa5\x8b\x81\x04\xaf\x03s\xe5\x86>\x0e\xa6\xe6\x1aV\x17\x8b\xed\xa7\'\xd0\r_\xe8,XVR\x13\xe5%\xb9\x88\xb8W@D\'\x17A\xc8\x80\x02J\xd4V\x00wH(\xc5v\f\xc9\xb6\xdf..$\xe6P(_\xf1\'\xc1:\xa3\xcb\xd9\xd1\xc7\x13\x99Md\x1dc\xf1\'j\x03!\x13\xd1\xb8\xbf\xe6\xb2M\b/\rp\xa5\x00\x00\x00\x00', 0x40, 0x0, 0x0) 215.794292ms ago: executing program 2 (id=3415): r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) bind$tipc(0xffffffffffffffff, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) sendmsg$tipc(0xffffffffffffffff, 0x0, 0x20) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r2 = openat(0xffffffffffffff9c, 0x0, 0xa6c3, 0x0) write$nbd(r2, 0x0, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWSET={0x30, 0x12, 0xa, 0x301, 0x0, 0x0, {0x2}, [@NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0xa}]}], {0x14}}, 0x58}, 0x1, 0x0, 0x0, 0xc000}, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x318, 0x1, 0x24}, 0x9c) 188.213234ms ago: executing program 9 (id=3416): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x2000001, 0x20010, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'wg0\x00', 0x0}) sendto$packet(r1, &(0x7f0000000180)="0b03feff4f00141202004788aa96a13bb1000011000088", 0x17, 0x0, &(0x7f0000000140)={0x11, 0x0, r2}, 0x14) 172.500726ms ago: executing program 2 (id=3417): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000200)='kmem_cache_free\x00', r1}, 0x18) syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x800002, &(0x7f0000000000)={[{@noblock_validity}, {@dioread_nolock}, {@errors_continue}, {@minixdf}, {@jqfmt_vfsv0}, {@usrjquota, 0x2e}], [], 0x22}, 0x84, 0x464, &(0x7f0000000f40)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x0, 0x0) open_by_handle_at(r2, &(0x7f0000000140)=ANY=[@ANYBLOB="08000000020000000b0000000000000005fdb805b1de47b81ba60f73731911ba2f0e2900000000000000936a6ce1b76b2e54a281ba61a922ff01d5ca3177752d2c267c76aa77c441334eebe4340843ea0300f3"], 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480), 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32, @ANYBLOB="0000000000000000b70500001000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_RTHDR(r3, 0x29, 0x39, &(0x7f0000000140)=ANY=[@ANYBLOB="3b0002"], 0x8) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000005f00)={0x44, 0x0, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}]}, @ETHTOOL_A_FEATURES_WANTED={0x18, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x6}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_VALUE={0x8, 0x4, "3423d5d2"}]}]}, 0x44}}, 0x4004) getsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f00000001c0)={@initdev}, &(0x7f0000000240)=0x14) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r4) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="f5af24bd7000000000000e00000008000300", @ANYRES32=r5], 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) 171.437856ms ago: executing program 9 (id=3418): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB="ffffffff000000004000"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000280)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x6, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x18) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000100)={0xa, 0x4e22, 0x5ccc6e75, @rand_addr, 0xffff1fc6}, 0x1c) listen(r2, 0x3) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000300)='kfree\x00'}, 0x18) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000040000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000440)='kfree\x00', r4, 0x0, 0x5}, 0x18) getsockopt$inet_sctp_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, &(0x7f0000000000), &(0x7f0000000040)=0x4) mount$9p_tcp(&(0x7f0000000100), &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='trans=tcp,port=0x0000000000004e22']) close_range(r2, r2, 0x0) 145.315378ms ago: executing program 7 (id=3419): bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000700)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], &(0x7f0000000640)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r0}, &(0x7f0000000800), &(0x7f0000000840)=r1}, 0x20) symlink(&(0x7f0000001780)='./file0/../file0\x00', &(0x7f00000017c0)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1/file2\x00', 0x81c0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1/file2\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x21081e, &(0x7f00000002c0), 0x1, 0x4f2, &(0x7f0000000600)="$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") 144.602608ms ago: executing program 9 (id=3420): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="07000000040000000001"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYRES16=r1, @ANYRES32=r1, @ANYRESHEX=r1], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x18) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x0) r4 = eventfd2(0x0, 0x0) io_setup(0x6, &(0x7f0000000140)=0x0) io_submit(r5, 0x2, &(0x7f00000000c0)=[&(0x7f0000000000)={0x1802, 0x0, 0x0, 0x5, 0xfffd, r3, 0x0, 0x0, 0x0, 0x0, 0x3, r4}, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x5, 0x0, r3, 0x0}]) shutdown(r3, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) write$selinux_context(0xffffffffffffffff, &(0x7f0000000040)='system_u:object_r:var_spool_t:s0\x00', 0x21) futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x1, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, 0x0, &(0x7f0000000100)=0xfffffffc, 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, &(0x7f0000000200)={0x0, 0x989680}, &(0x7f00000001c0)=0x1, 0x1) socket(0x8, 0x5, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r6, 0xc08c5332, &(0x7f00000002c0)={0x0, 0x0, 0x0, 'queue1\x00'}) r7 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r7, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x3, 0x0, 0x6}, 0x4}) 128.089329ms ago: executing program 2 (id=3421): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000400000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f0000001ff0), 0x10) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000280)={{}, &(0x7f0000000080), &(0x7f00000006c0)='%pS \x00'}, 0x20) close_range(r1, 0xffffffffffffffff, 0x0) 100.071661ms ago: executing program 2 (id=3422): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, r0}, 0x18) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000180)={{0x1, 0x1, 0x18, r1, {0x2}}, './file0\x00'}) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000280)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="3800000002060102004000000000000005000006050005000500000005000100070000000900020073797a32000000000500010007000000"], 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x800) connect$inet(r1, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x3f}, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x6, 0x0, 0xee01}, {0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, {0x8}, 0x0, 0x0, 0x1}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x32}, 0x0, @in6=@local, 0x0, 0x0, 0x0, 0xb7, 0x2, 0xfffffffe, 0xfffffffe}}, 0xe8) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x1c) timerfd_create(0x1, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000240)={'#! ', './file0'}, 0xb) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000740)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x800) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0xc, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000001100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/bus/input/devices\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0100000004000000080000000b"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000181100"/20, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x19, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000027"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000500)='page_pool_state_release\x00', r6}, 0x10) 47.581426ms ago: executing program 7 (id=3423): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f000001b240)={0x0, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x68}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000840)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a48000000160a01080000000000000000020000000900020073797a30000000000900010073797a30000000001c000380180003800d0001006261746164765f736c"], 0x70}}, 0x24040880) 0s ago: executing program 7 (id=3424): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000340), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000480)={0xfffffffc, 0x5, 0x0, 'queue0\x00', 0x10000}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r1, 0x404c534a, &(0x7f0000000380)) kernel console output (not intermixed with test programs): ournal superblock found [ 208.274631][T13385] EXT4-fs (loop7): Could not load journal inode [ 208.357406][T13397] loop7: detected capacity change from 0 to 2048 [ 208.382346][T13410] loop8: detected capacity change from 0 to 512 [ 208.482701][T13424] EXT4-fs (loop7): shut down requested (1) [ 208.598811][T13397] netlink: 44 bytes leftover after parsing attributes in process `syz.7.2704'. [ 208.646361][ T1036] hid-generic 0000:3000000:0000.0044: unknown main item tag 0x4 [ 208.655941][ T1036] hid-generic 0000:3000000:0000.0044: hidraw0: HID v0.00 Device [sy] on syz0 [ 208.725314][T13444] FAULT_INJECTION: forcing a failure. [ 208.725314][T13444] name failslab, interval 1, probability 0, space 0, times 0 [ 208.737986][T13444] CPU: 1 UID: 0 PID: 13444 Comm: syz.6.2722 Not tainted 6.17.0-rc2-syzkaller-00028-gbe48bcf004f9 #0 PREEMPT(voluntary) [ 208.738088][T13444] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 208.738101][T13444] Call Trace: [ 208.738169][T13444] [ 208.738177][T13444] __dump_stack+0x1d/0x30 [ 208.738197][T13444] dump_stack_lvl+0xe8/0x140 [ 208.738251][T13444] dump_stack+0x15/0x1b [ 208.738270][T13444] should_fail_ex+0x265/0x280 [ 208.738291][T13444] should_failslab+0x8c/0xb0 [ 208.738339][T13444] kmem_cache_alloc_noprof+0x50/0x310 [ 208.738364][T13444] ? audit_log_start+0x365/0x6c0 [ 208.738423][T13444] audit_log_start+0x365/0x6c0 [ 208.738493][T13444] audit_seccomp+0x48/0x100 [ 208.738517][T13444] ? __seccomp_filter+0x68c/0x10d0 [ 208.738537][T13444] __seccomp_filter+0x69d/0x10d0 [ 208.738558][T13444] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 208.738657][T13444] ? vfs_write+0x7e8/0x960 [ 208.738681][T13444] __secure_computing+0x82/0x150 [ 208.738702][T13444] syscall_trace_enter+0xcf/0x1e0 [ 208.738726][T13444] do_syscall_64+0xac/0x200 [ 208.738750][T13444] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 208.738805][T13444] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 208.738826][T13444] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 208.738846][T13444] RIP: 0033:0x7f463920ebe9 [ 208.738868][T13444] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 208.738887][T13444] RSP: 002b:00007f4637c77038 EFLAGS: 00000246 ORIG_RAX: 00000000000000e1 [ 208.738977][T13444] RAX: ffffffffffffffda RBX: 00007f4639435fa0 RCX: 00007f463920ebe9 [ 208.738989][T13444] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 208.739001][T13444] RBP: 00007f4637c77090 R08: 0000000000000000 R09: 0000000000000000 [ 208.739040][T13444] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 208.739050][T13444] R13: 00007f4639436038 R14: 00007f4639435fa0 R15: 00007fff8a352f28 [ 208.739065][T13444] [ 208.946523][T13449] loop7: detected capacity change from 0 to 512 [ 208.966577][T13452] netlink: 64 bytes leftover after parsing attributes in process `syz.6.2725'. [ 208.977278][T13454] FAULT_INJECTION: forcing a failure. [ 208.977278][T13454] name failslab, interval 1, probability 0, space 0, times 0 [ 208.990037][T13454] CPU: 1 UID: 0 PID: 13454 Comm: syz.7.2726 Not tainted 6.17.0-rc2-syzkaller-00028-gbe48bcf004f9 #0 PREEMPT(voluntary) [ 208.990064][T13454] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 208.990110][T13454] Call Trace: [ 208.990115][T13454] [ 208.990122][T13454] __dump_stack+0x1d/0x30 [ 208.990142][T13454] dump_stack_lvl+0xe8/0x140 [ 208.990158][T13454] dump_stack+0x15/0x1b [ 208.990173][T13454] should_fail_ex+0x265/0x280 [ 208.990191][T13454] should_failslab+0x8c/0xb0 [ 208.990280][T13454] kmem_cache_alloc_noprof+0x50/0x310 [ 208.990309][T13454] ? skb_clone+0x151/0x1f0 [ 208.990330][T13454] skb_clone+0x151/0x1f0 [ 208.990430][T13454] __netlink_deliver_tap+0x2c9/0x500 [ 208.990457][T13454] netlink_unicast+0x66b/0x690 [ 208.990492][T13454] netlink_sendmsg+0x58b/0x6b0 [ 208.990518][T13454] ? __pfx_netlink_sendmsg+0x10/0x10 [ 208.990619][T13454] __sock_sendmsg+0x142/0x180 [ 208.990672][T13454] ____sys_sendmsg+0x31e/0x4e0 [ 208.990697][T13454] ___sys_sendmsg+0x17b/0x1d0 [ 208.990732][T13454] __x64_sys_sendmsg+0xd4/0x160 [ 208.990760][T13454] x64_sys_call+0x191e/0x2ff0 [ 208.990862][T13454] do_syscall_64+0xd2/0x200 [ 208.990885][T13454] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 208.990908][T13454] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 208.990931][T13454] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 208.991006][T13454] RIP: 0033:0x7f6b33d6ebe9 [ 208.991019][T13454] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 208.991035][T13454] RSP: 002b:00007f6b327d7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 208.991055][T13454] RAX: ffffffffffffffda RBX: 00007f6b33f95fa0 RCX: 00007f6b33d6ebe9 [ 208.991068][T13454] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000005 [ 208.991080][T13454] RBP: 00007f6b327d7090 R08: 0000000000000000 R09: 0000000000000000 [ 208.991113][T13454] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 208.991126][T13454] R13: 00007f6b33f96038 R14: 00007f6b33f95fa0 R15: 00007ffdb12226e8 [ 208.991146][T13454] [ 208.991375][T13454] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2726'. [ 209.249966][T13466] 9pnet_fd: Insufficient options for proto=fd [ 209.276008][T13472] loop7: detected capacity change from 0 to 128 [ 209.284459][T13472] ext4 filesystem being mounted at /139/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 209.356585][T13482] netlink: 'syz.7.2736': attribute type 1 has an invalid length. [ 209.410639][ T1036] hid-generic 0000:3000000:0000.0045: hidraw0: HID v0.00 Device [sy] on syz0 [ 209.472258][ T29] kauditd_printk_skb: 216 callbacks suppressed [ 209.472272][ T29] audit: type=1400 audit(1755607207.647:4885): avc: denied { create } for pid=13498 comm="syz.6.2738" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 209.499507][ T29] audit: type=1400 audit(1755607207.677:4886): avc: denied { ioctl } for pid=13498 comm="syz.6.2738" path="socket:[35662]" dev="sockfs" ino=35662 ioctlcmd=0x4943 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 209.540426][ T29] audit: type=1400 audit(1755607207.677:4887): avc: denied { getattr } for pid=13498 comm="syz.6.2738" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=35661 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 209.610215][ T29] audit: type=1326 audit(1755607207.757:4888): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13501 comm="syz.6.2740" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f463920ebe9 code=0x7ffc0000 [ 209.633867][ T29] audit: type=1326 audit(1755607207.757:4889): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13501 comm="syz.6.2740" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f463920ebe9 code=0x7ffc0000 [ 209.657541][ T29] audit: type=1326 audit(1755607207.757:4890): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13501 comm="syz.6.2740" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f463920ebe9 code=0x7ffc0000 [ 209.681139][ T29] audit: type=1326 audit(1755607207.757:4891): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13501 comm="syz.6.2740" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f463920ebe9 code=0x7ffc0000 [ 209.690318][T13509] netlink: 'syz.2.2741': attribute type 1 has an invalid length. [ 209.704753][ T29] audit: type=1326 audit(1755607207.757:4892): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13501 comm="syz.6.2740" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f463920ebe9 code=0x7ffc0000 [ 209.736044][ T29] audit: type=1326 audit(1755607207.767:4893): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13501 comm="syz.6.2740" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f463920ebe9 code=0x7ffc0000 [ 209.759616][ T29] audit: type=1326 audit(1755607207.767:4894): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13501 comm="syz.6.2740" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f463920ebe9 code=0x7ffc0000 [ 209.805071][T13515] 9pnet_fd: Insufficient options for proto=fd [ 209.990016][ T3418] hid-generic 0000:3000000:0000.0046: hidraw0: HID v0.00 Device [sy] on syz0 [ 210.092701][T13549] loop8: detected capacity change from 0 to 512 [ 210.185511][T13558] loop8: detected capacity change from 0 to 1024 [ 210.200519][T13558] ext4 filesystem being mounted at /101/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 210.213254][T13558] EXT4-fs error (device loop8): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 210.489272][ T3398] hid-generic 0000:3000000:0000.0047: hidraw0: HID v0.00 Device [sy] on syz0 [ 210.605302][T13599] loop7: detected capacity change from 0 to 512 [ 210.756344][T13610] FAULT_INJECTION: forcing a failure. [ 210.756344][T13610] name failslab, interval 1, probability 0, space 0, times 0 [ 210.769110][T13610] CPU: 0 UID: 0 PID: 13610 Comm: syz.7.2772 Not tainted 6.17.0-rc2-syzkaller-00028-gbe48bcf004f9 #0 PREEMPT(voluntary) [ 210.769137][T13610] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 210.769150][T13610] Call Trace: [ 210.769156][T13610] [ 210.769163][T13610] __dump_stack+0x1d/0x30 [ 210.769183][T13610] dump_stack_lvl+0xe8/0x140 [ 210.769201][T13610] dump_stack+0x15/0x1b [ 210.769217][T13610] should_fail_ex+0x265/0x280 [ 210.769237][T13610] should_failslab+0x8c/0xb0 [ 210.769260][T13610] kmem_cache_alloc_noprof+0x50/0x310 [ 210.769288][T13610] ? mas_alloc_nodes+0x265/0x520 [ 210.769322][T13610] mas_alloc_nodes+0x265/0x520 [ 210.769350][T13610] mas_preallocate+0x33e/0x520 [ 210.769379][T13610] __split_vma+0x240/0x650 [ 210.769406][T13610] ? mas_find+0x5d5/0x700 [ 210.769428][T13610] vms_gather_munmap_vmas+0x2b2/0x7b0 [ 210.769452][T13610] mmap_region+0x53f/0x1630 [ 210.769472][T13610] ? mntput_no_expire+0x6f/0x460 [ 210.769562][T13610] ? mntput+0x4b/0x80 [ 210.769600][T13610] do_mmap+0x9b3/0xbe0 [ 210.769631][T13610] vm_mmap_pgoff+0x17a/0x2e0 [ 210.769656][T13610] ksys_mmap_pgoff+0x268/0x310 [ 210.769686][T13610] x64_sys_call+0x14a3/0x2ff0 [ 210.769704][T13610] do_syscall_64+0xd2/0x200 [ 210.769725][T13610] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 210.769746][T13610] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 210.769769][T13610] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 210.769789][T13610] RIP: 0033:0x7f6b33d6ebe9 [ 210.769804][T13610] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 210.769822][T13610] RSP: 002b:00007f6b327d7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 210.769841][T13610] RAX: ffffffffffffffda RBX: 00007f6b33f95fa0 RCX: 00007f6b33d6ebe9 [ 210.769860][T13610] RDX: 000000000100000a RSI: 0000000000b36000 RDI: 0000200000000000 [ 210.769872][T13610] RBP: 00007f6b327d7090 R08: 0000000000000007 R09: 0000000000000000 [ 210.769884][T13610] R10: 0000000000000012 R11: 0000000000000246 R12: 0000000000000001 [ 210.769895][T13610] R13: 00007f6b33f96038 R14: 00007f6b33f95fa0 R15: 00007ffdb12226e8 [ 210.769912][T13610] [ 210.995746][T13608] loop9: detected capacity change from 0 to 512 [ 211.012322][T13608] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 211.029299][T13608] EXT4-fs (loop9): 1 truncate cleaned up [ 211.037546][T13605] sg_write: data in/out 11329/120 bytes for SCSI command 0x0-- guessing data in; [ 211.037546][T13605] program syz.9.2770 not setting count and/or reply_len properly [ 211.078957][T13620] __nla_validate_parse: 3 callbacks suppressed [ 211.078971][T13620] netlink: 32 bytes leftover after parsing attributes in process `syz.7.2777'. [ 211.105985][T13620] netlink: 'syz.7.2777': attribute type 1 has an invalid length. [ 211.179690][T13634] FAULT_INJECTION: forcing a failure. [ 211.179690][T13634] name failslab, interval 1, probability 0, space 0, times 0 [ 211.192368][T13634] CPU: 0 UID: 0 PID: 13634 Comm: syz.8.2783 Not tainted 6.17.0-rc2-syzkaller-00028-gbe48bcf004f9 #0 PREEMPT(voluntary) [ 211.192430][T13634] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 211.192443][T13634] Call Trace: [ 211.192449][T13634] [ 211.192457][T13634] __dump_stack+0x1d/0x30 [ 211.192479][T13634] dump_stack_lvl+0xe8/0x140 [ 211.192500][T13634] dump_stack+0x15/0x1b [ 211.192558][T13634] should_fail_ex+0x265/0x280 [ 211.192579][T13634] should_failslab+0x8c/0xb0 [ 211.192648][T13634] kmem_cache_alloc_node_noprof+0x57/0x320 [ 211.192676][T13634] ? __alloc_skb+0x101/0x320 [ 211.192728][T13634] __alloc_skb+0x101/0x320 [ 211.192759][T13634] netlink_alloc_large_skb+0xba/0xf0 [ 211.192791][T13634] netlink_sendmsg+0x3cf/0x6b0 [ 211.192872][T13634] ? __pfx_netlink_sendmsg+0x10/0x10 [ 211.192896][T13634] __sock_sendmsg+0x142/0x180 [ 211.192923][T13634] ____sys_sendmsg+0x31e/0x4e0 [ 211.192947][T13634] ___sys_sendmsg+0x17b/0x1d0 [ 211.193004][T13634] __x64_sys_sendmsg+0xd4/0x160 [ 211.193030][T13634] x64_sys_call+0x191e/0x2ff0 [ 211.193052][T13634] do_syscall_64+0xd2/0x200 [ 211.193078][T13634] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 211.193146][T13634] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 211.193171][T13634] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 211.193191][T13634] RIP: 0033:0x7fc03dd7ebe9 [ 211.193240][T13634] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 211.193259][T13634] RSP: 002b:00007fc03c7df038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 211.193280][T13634] RAX: ffffffffffffffda RBX: 00007fc03dfa5fa0 RCX: 00007fc03dd7ebe9 [ 211.193291][T13634] RDX: 0000000004000040 RSI: 0000200000000640 RDI: 0000000000000003 [ 211.193304][T13634] RBP: 00007fc03c7df090 R08: 0000000000000000 R09: 0000000000000000 [ 211.193339][T13634] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 211.193351][T13634] R13: 00007fc03dfa6038 R14: 00007fc03dfa5fa0 R15: 00007ffd4e8b6a08 [ 211.193368][T13634] [ 211.411253][ T3391] hid-generic 0000:3000000:0000.0048: hidraw0: HID v0.00 Device [sy] on syz0 [ 211.443699][T13643] FAULT_INJECTION: forcing a failure. [ 211.443699][T13643] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 211.456842][T13643] CPU: 0 UID: 0 PID: 13643 Comm: syz.9.2785 Not tainted 6.17.0-rc2-syzkaller-00028-gbe48bcf004f9 #0 PREEMPT(voluntary) [ 211.456868][T13643] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 211.456879][T13643] Call Trace: [ 211.456885][T13643] [ 211.456891][T13643] __dump_stack+0x1d/0x30 [ 211.456914][T13643] dump_stack_lvl+0xe8/0x140 [ 211.456979][T13643] dump_stack+0x15/0x1b [ 211.456994][T13643] should_fail_ex+0x265/0x280 [ 211.457014][T13643] should_fail+0xb/0x20 [ 211.457031][T13643] should_fail_usercopy+0x1a/0x20 [ 211.457090][T13643] strncpy_from_user+0x25/0x230 [ 211.457119][T13643] ? kmem_cache_alloc_noprof+0x186/0x310 [ 211.457197][T13643] ? getname_flags+0x80/0x3b0 [ 211.457222][T13643] getname_flags+0xae/0x3b0 [ 211.457246][T13643] user_path_at+0x28/0x130 [ 211.457298][T13643] __se_sys_quotactl+0xb6/0x670 [ 211.457318][T13643] __x64_sys_quotactl+0x55/0x70 [ 211.457337][T13643] x64_sys_call+0x15d6/0x2ff0 [ 211.457388][T13643] do_syscall_64+0xd2/0x200 [ 211.457413][T13643] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 211.457437][T13643] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 211.457460][T13643] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 211.457483][T13643] RIP: 0033:0x7f303f97ebe9 [ 211.457496][T13643] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 211.457522][T13643] RSP: 002b:00007f303e3df038 EFLAGS: 00000246 ORIG_RAX: 00000000000000b3 [ 211.457550][T13643] RAX: ffffffffffffffda RBX: 00007f303fba5fa0 RCX: 00007f303f97ebe9 [ 211.457561][T13643] RDX: 0000000000000000 RSI: 0000200000000380 RDI: ffffffff80000202 [ 211.457572][T13643] RBP: 00007f303e3df090 R08: 0000000000000000 R09: 0000000000000000 [ 211.457583][T13643] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 211.457593][T13643] R13: 00007f303fba6038 R14: 00007f303fba5fa0 R15: 00007ffc8a7223b8 [ 211.457610][T13643] [ 211.473115][T13645] lo speed is unknown, defaulting to 1000 [ 211.759087][T13645] lo speed is unknown, defaulting to 1000 [ 211.839015][T13670] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2793'. [ 211.842987][T13651] lo speed is unknown, defaulting to 1000 [ 211.853971][T13671] loop9: detected capacity change from 0 to 512 [ 211.884603][T13671] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 211.903177][T13671] EXT4-fs (loop9): 1 truncate cleaned up [ 211.909458][T13651] lo speed is unknown, defaulting to 1000 [ 211.937055][T13653] sg_write: data in/out 11329/120 bytes for SCSI command 0x0-- guessing data in; [ 211.937055][T13653] program syz.9.2788 not setting count and/or reply_len properly [ 212.119788][T13687] loop7: detected capacity change from 0 to 1024 [ 212.121175][ T3419] hid_parser_main: 14 callbacks suppressed [ 212.121191][ T3419] hid-generic 0000:3000000:0000.0049: unknown main item tag 0x4 [ 212.139627][ T3419] hid-generic 0000:3000000:0000.0049: unknown main item tag 0x2 [ 212.149349][T13687] EXT4-fs (loop7): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 212.160334][T13687] EXT4-fs (loop7): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 212.177406][ T3419] hid-generic 0000:3000000:0000.0049: unknown main item tag 0x3 [ 212.209505][ T3419] hid-generic 0000:3000000:0000.0049: hidraw0: HID v0.00 Device [sy] on syz0 [ 212.228068][T13687] JBD2: no valid journal superblock found [ 212.233936][T13687] EXT4-fs (loop7): Could not load journal inode [ 212.333668][T13707] wireguard3: entered promiscuous mode [ 212.339402][T13707] wireguard3: entered allmulticast mode [ 212.345286][T13711] FAULT_INJECTION: forcing a failure. [ 212.345286][T13711] name failslab, interval 1, probability 0, space 0, times 0 [ 212.357942][T13711] CPU: 0 UID: 0 PID: 13711 Comm: syz.8.2807 Not tainted 6.17.0-rc2-syzkaller-00028-gbe48bcf004f9 #0 PREEMPT(voluntary) [ 212.357972][T13711] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 212.357983][T13711] Call Trace: [ 212.357988][T13711] [ 212.357994][T13711] __dump_stack+0x1d/0x30 [ 212.358063][T13711] dump_stack_lvl+0xe8/0x140 [ 212.358083][T13711] dump_stack+0x15/0x1b [ 212.358144][T13711] should_fail_ex+0x265/0x280 [ 212.358167][T13711] should_failslab+0x8c/0xb0 [ 212.358194][T13711] __kmalloc_noprof+0xa5/0x3e0 [ 212.358260][T13711] ? do_sys_poll+0x19b/0xbd0 [ 212.358286][T13711] do_sys_poll+0x19b/0xbd0 [ 212.358383][T13711] ? selinux_file_open+0x2df/0x330 [ 212.358437][T13711] __se_sys_poll+0xdd/0x200 [ 212.358462][T13711] __x64_sys_poll+0x43/0x50 [ 212.358609][T13711] x64_sys_call+0x27d2/0x2ff0 [ 212.358631][T13711] do_syscall_64+0xd2/0x200 [ 212.358677][T13711] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 212.358701][T13711] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 212.358769][T13711] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 212.358797][T13711] RIP: 0033:0x7fc03dd7ebe9 [ 212.358811][T13711] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 212.358899][T13711] RSP: 002b:00007fc03c7df038 EFLAGS: 00000246 ORIG_RAX: 0000000000000007 [ 212.358958][T13711] RAX: ffffffffffffffda RBX: 00007fc03dfa5fa0 RCX: 00007fc03dd7ebe9 [ 212.358971][T13711] RDX: 0000000000000009 RSI: 20000000000000b5 RDI: 0000200000000000 [ 212.358984][T13711] RBP: 00007fc03c7df090 R08: 0000000000000000 R09: 0000000000000000 [ 212.358995][T13711] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 212.359028][T13711] R13: 00007fc03dfa6038 R14: 00007fc03dfa5fa0 R15: 00007ffd4e8b6a08 [ 212.359048][T13711] [ 212.382328][T13707] netlink: 'syz.7.2806': attribute type 1 has an invalid length. [ 212.580665][T13716] loop8: detected capacity change from 0 to 512 [ 212.588110][T13716] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 212.602775][T13716] EXT4-fs (loop8): 1 truncate cleaned up [ 212.610390][T13716] sg_write: data in/out 11329/120 bytes for SCSI command 0x0-- guessing data in; [ 212.610390][T13716] program syz.8.2808 not setting count and/or reply_len properly [ 212.687286][T13676] 9pnet_fd: p9_fd_create_tcp (13676): problem connecting socket to 127.0.0.1 [ 212.729923][T13723] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1280 [ 212.745026][T13723] usb usb3: usbfs: process 13723 (syz.9.2811) did not claim interface 0 before use [ 212.809808][T13732] loop8: detected capacity change from 0 to 1024 [ 212.819065][T13732] EXT4-fs (loop8): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 212.830002][T13732] EXT4-fs (loop8): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 212.845886][T13732] JBD2: no valid journal superblock found [ 212.851675][T13732] EXT4-fs (loop8): Could not load journal inode [ 212.916715][ T10] hid-generic 0000:3000000:0000.004A: unknown main item tag 0x4 [ 212.924421][ T10] hid-generic 0000:3000000:0000.004A: unknown main item tag 0x2 [ 212.932541][ T10] hid-generic 0000:3000000:0000.004A: unknown main item tag 0x3 [ 212.941327][ T10] hid-generic 0000:3000000:0000.004A: hidraw0: HID v0.00 Device [sy] on syz0 [ 212.942491][T13748] netlink: 40 bytes leftover after parsing attributes in process `syz.8.2820'. [ 213.296336][T13768] FAULT_INJECTION: forcing a failure. [ 213.296336][T13768] name failslab, interval 1, probability 0, space 0, times 0 [ 213.309034][T13768] CPU: 0 UID: 0 PID: 13768 Comm: syz.9.2826 Not tainted 6.17.0-rc2-syzkaller-00028-gbe48bcf004f9 #0 PREEMPT(voluntary) [ 213.309067][T13768] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 213.309080][T13768] Call Trace: [ 213.309086][T13768] [ 213.309109][T13768] __dump_stack+0x1d/0x30 [ 213.309194][T13768] dump_stack_lvl+0xe8/0x140 [ 213.309212][T13768] dump_stack+0x15/0x1b [ 213.309226][T13768] should_fail_ex+0x265/0x280 [ 213.309245][T13768] should_failslab+0x8c/0xb0 [ 213.309267][T13768] kmem_cache_alloc_node_noprof+0x57/0x320 [ 213.309359][T13768] ? __alloc_skb+0x101/0x320 [ 213.309389][T13768] __alloc_skb+0x101/0x320 [ 213.309447][T13768] netlink_alloc_large_skb+0xba/0xf0 [ 213.309478][T13768] netlink_sendmsg+0x3cf/0x6b0 [ 213.309500][T13768] ? __pfx_netlink_sendmsg+0x10/0x10 [ 213.309521][T13768] __sock_sendmsg+0x142/0x180 [ 213.309603][T13768] ____sys_sendmsg+0x31e/0x4e0 [ 213.309623][T13768] ___sys_sendmsg+0x17b/0x1d0 [ 213.309651][T13768] __x64_sys_sendmsg+0xd4/0x160 [ 213.309729][T13768] x64_sys_call+0x191e/0x2ff0 [ 213.309748][T13768] do_syscall_64+0xd2/0x200 [ 213.309772][T13768] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 213.309815][T13768] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 213.309840][T13768] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 213.309909][T13768] RIP: 0033:0x7f303f97ebe9 [ 213.309924][T13768] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 213.309946][T13768] RSP: 002b:00007f303e3df038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 213.309965][T13768] RAX: ffffffffffffffda RBX: 00007f303fba5fa0 RCX: 00007f303f97ebe9 [ 213.310026][T13768] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000004 [ 213.310038][T13768] RBP: 00007f303e3df090 R08: 0000000000000000 R09: 0000000000000000 [ 213.310050][T13768] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 213.310061][T13768] R13: 00007f303fba6038 R14: 00007f303fba5fa0 R15: 00007ffc8a7223b8 [ 213.310076][T13768] [ 213.682846][T13785] loop9: detected capacity change from 0 to 128 [ 213.702763][T13785] EXT4-fs mount: 16 callbacks suppressed [ 213.702778][T13785] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 213.726070][T13785] ext4 filesystem being mounted at /125/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 213.779740][T13791] wireguard5: entered promiscuous mode [ 213.785245][T13791] wireguard5: entered allmulticast mode [ 213.798152][T13791] netlink: 'syz.6.2832': attribute type 1 has an invalid length. [ 213.824460][T11699] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 213.884121][T13811] FAULT_INJECTION: forcing a failure. [ 213.884121][T13811] name failslab, interval 1, probability 0, space 0, times 0 [ 213.896953][T13811] CPU: 1 UID: 0 PID: 13811 Comm: syz.2.2839 Not tainted 6.17.0-rc2-syzkaller-00028-gbe48bcf004f9 #0 PREEMPT(voluntary) [ 213.896971][T13811] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 213.896978][T13811] Call Trace: [ 213.897011][T13811] [ 213.897015][T13811] __dump_stack+0x1d/0x30 [ 213.897028][T13811] dump_stack_lvl+0xe8/0x140 [ 213.897039][T13811] dump_stack+0x15/0x1b [ 213.897048][T13811] should_fail_ex+0x265/0x280 [ 213.897096][T13811] should_failslab+0x8c/0xb0 [ 213.897109][T13811] kmem_cache_alloc_node_noprof+0x57/0x320 [ 213.897126][T13811] ? __alloc_skb+0x101/0x320 [ 213.897144][T13811] __alloc_skb+0x101/0x320 [ 213.897186][T13811] netlink_alloc_large_skb+0xba/0xf0 [ 213.897236][T13811] netlink_sendmsg+0x3cf/0x6b0 [ 213.897249][T13811] ? __pfx_netlink_sendmsg+0x10/0x10 [ 213.897261][T13811] __sock_sendmsg+0x142/0x180 [ 213.897276][T13811] ____sys_sendmsg+0x31e/0x4e0 [ 213.897311][T13811] ___sys_sendmsg+0x17b/0x1d0 [ 213.897336][T13811] __x64_sys_sendmsg+0xd4/0x160 [ 213.897361][T13811] x64_sys_call+0x191e/0x2ff0 [ 213.897376][T13811] do_syscall_64+0xd2/0x200 [ 213.897433][T13811] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 213.897447][T13811] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 213.897461][T13811] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 213.897473][T13811] RIP: 0033:0x7fd684bdebe9 [ 213.897484][T13811] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 213.897494][T13811] RSP: 002b:00007fd68363f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 213.897576][T13811] RAX: ffffffffffffffda RBX: 00007fd684e05fa0 RCX: 00007fd684bdebe9 [ 213.897584][T13811] RDX: 0000000000000040 RSI: 0000200000009b40 RDI: 0000000000000003 [ 213.897591][T13811] RBP: 00007fd68363f090 R08: 0000000000000000 R09: 0000000000000000 [ 213.897627][T13811] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 213.897633][T13811] R13: 00007fd684e06038 R14: 00007fd684e05fa0 R15: 00007ffc32e96168 [ 213.897644][T13811] [ 214.140878][T13816] netlink: 40 bytes leftover after parsing attributes in process `syz.9.2841'. [ 214.523936][T13819] netlink: 4 bytes leftover after parsing attributes in process `wޣ'. [ 214.633922][ T29] kauditd_printk_skb: 448 callbacks suppressed [ 214.633937][ T29] audit: type=1400 audit(1755607212.809:5343): avc: denied { setopt } for pid=13820 comm="syz.6.2843" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 214.769131][T13828] loop7: detected capacity change from 0 to 128 [ 214.807661][T13828] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 214.841665][T13828] ext4 filesystem being mounted at /167/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 214.874490][T11240] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 214.925889][ T29] audit: type=1326 audit(1755607213.099:5344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13840 comm="syz.7.2849" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f6b33d65ba7 code=0x7ffc0000 [ 214.949474][ T29] audit: type=1326 audit(1755607213.099:5345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13840 comm="syz.7.2849" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f6b33d0add9 code=0x7ffc0000 [ 214.972997][ T29] audit: type=1326 audit(1755607213.099:5346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13840 comm="syz.7.2849" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f6b33d65ba7 code=0x7ffc0000 [ 214.996538][ T29] audit: type=1326 audit(1755607213.099:5347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13840 comm="syz.7.2849" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f6b33d0add9 code=0x7ffc0000 [ 215.020167][ T29] audit: type=1326 audit(1755607213.099:5348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13840 comm="syz.7.2849" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b33d6ebe9 code=0x7ffc0000 [ 215.043756][ T29] audit: type=1326 audit(1755607213.099:5349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13840 comm="syz.7.2849" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b33d6ebe9 code=0x7ffc0000 [ 215.069809][ T29] audit: type=1326 audit(1755607213.199:5350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13840 comm="syz.7.2849" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6b33d6ebe9 code=0x7ffc0000 [ 215.093583][ T29] audit: type=1326 audit(1755607213.199:5351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13840 comm="syz.7.2849" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b33d6ebe9 code=0x7ffc0000 [ 215.117257][ T29] audit: type=1326 audit(1755607213.199:5352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13840 comm="syz.7.2849" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b33d6ebe9 code=0x7ffc0000 [ 215.145278][T13845] FAULT_INJECTION: forcing a failure. [ 215.145278][T13845] name failslab, interval 1, probability 0, space 0, times 0 [ 215.157965][T13845] CPU: 1 UID: 0 PID: 13845 Comm: syz.6.2850 Not tainted 6.17.0-rc2-syzkaller-00028-gbe48bcf004f9 #0 PREEMPT(voluntary) [ 215.158122][T13845] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 215.158136][T13845] Call Trace: [ 215.158143][T13845] [ 215.158152][T13845] __dump_stack+0x1d/0x30 [ 215.158174][T13845] dump_stack_lvl+0xe8/0x140 [ 215.158194][T13845] dump_stack+0x15/0x1b [ 215.158208][T13845] should_fail_ex+0x265/0x280 [ 215.158284][T13845] should_failslab+0x8c/0xb0 [ 215.158310][T13845] kmem_cache_alloc_noprof+0x50/0x310 [ 215.158335][T13845] ? audit_log_start+0x365/0x6c0 [ 215.158445][T13845] audit_log_start+0x365/0x6c0 [ 215.158557][T13845] audit_seccomp+0x48/0x100 [ 215.158647][T13845] ? __seccomp_filter+0x68c/0x10d0 [ 215.158669][T13845] __seccomp_filter+0x69d/0x10d0 [ 215.158715][T13845] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 215.158740][T13845] ? vfs_write+0x7e8/0x960 [ 215.158761][T13845] ? __rcu_read_unlock+0x4f/0x70 [ 215.158815][T13845] __secure_computing+0x82/0x150 [ 215.158837][T13845] syscall_trace_enter+0xcf/0x1e0 [ 215.158862][T13845] do_syscall_64+0xac/0x200 [ 215.158888][T13845] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 215.158948][T13845] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 215.158973][T13845] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 215.159017][T13845] RIP: 0033:0x7f463920ebe9 [ 215.159032][T13845] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 215.159051][T13845] RSP: 002b:00007f4637c77038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 215.159071][T13845] RAX: ffffffffffffffda RBX: 00007f4639435fa0 RCX: 00007f463920ebe9 [ 215.159115][T13845] RDX: 0000000004004881 RSI: 0000200000000600 RDI: 0000000000000007 [ 215.159127][T13845] RBP: 00007f4637c77090 R08: 0000000000000000 R09: 0000000000000000 [ 215.159141][T13845] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 215.159222][T13845] R13: 00007f4639436038 R14: 00007f4639435fa0 R15: 00007fff8a352f28 [ 215.159240][T13845] [ 215.401374][T13853] wireguard11: entered promiscuous mode [ 215.407206][T13853] wireguard11: entered allmulticast mode [ 215.416093][T13853] netlink: 'syz.2.2854': attribute type 1 has an invalid length. [ 215.770993][ T10] hid-generic 0000:3000000:0000.004B: unknown main item tag 0x4 [ 215.778836][ T10] hid-generic 0000:3000000:0000.004B: unknown main item tag 0x2 [ 215.787133][ T10] hid-generic 0000:3000000:0000.004B: unknown main item tag 0x3 [ 215.795576][ T10] hid-generic 0000:3000000:0000.004B: hidraw0: HID v0.00 Device [sy] on syz0 [ 215.888272][ T36] hid-generic 0000:3000000:0000.004C: unknown main item tag 0x4 [ 215.896417][ T36] hid-generic 0000:3000000:0000.004C: hidraw0: HID v0.00 Device [sy] on syz0 [ 216.061989][T13891] Dead loop on virtual device ip6_vti0, fix it urgently! [ 216.070885][T13891] FAULT_INJECTION: forcing a failure. [ 216.070885][T13891] name failslab, interval 1, probability 0, space 0, times 0 [ 216.083538][T13891] CPU: 0 UID: 0 PID: 13891 Comm: syz.8.2862 Not tainted 6.17.0-rc2-syzkaller-00028-gbe48bcf004f9 #0 PREEMPT(voluntary) [ 216.083611][T13891] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 216.083619][T13891] Call Trace: [ 216.083669][T13891] [ 216.083674][T13891] __dump_stack+0x1d/0x30 [ 216.083687][T13891] dump_stack_lvl+0xe8/0x140 [ 216.083765][T13891] dump_stack+0x15/0x1b [ 216.083774][T13891] should_fail_ex+0x265/0x280 [ 216.083787][T13891] should_failslab+0x8c/0xb0 [ 216.083863][T13891] kmem_cache_alloc_node_noprof+0x57/0x320 [ 216.083882][T13891] ? __alloc_skb+0x101/0x320 [ 216.083900][T13891] __alloc_skb+0x101/0x320 [ 216.083948][T13891] netlink_alloc_large_skb+0xba/0xf0 [ 216.083967][T13891] netlink_sendmsg+0x3cf/0x6b0 [ 216.083980][T13891] ? __pfx_netlink_sendmsg+0x10/0x10 [ 216.084045][T13891] __sock_sendmsg+0x142/0x180 [ 216.084060][T13891] ____sys_sendmsg+0x31e/0x4e0 [ 216.084140][T13891] ___sys_sendmsg+0x17b/0x1d0 [ 216.084158][T13891] __x64_sys_sendmsg+0xd4/0x160 [ 216.084172][T13891] x64_sys_call+0x191e/0x2ff0 [ 216.084238][T13891] do_syscall_64+0xd2/0x200 [ 216.084264][T13891] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 216.084322][T13891] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 216.084336][T13891] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 216.084348][T13891] RIP: 0033:0x7fc03dd7ebe9 [ 216.084357][T13891] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 216.084413][T13891] RSP: 002b:00007fc03c7df038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 216.084424][T13891] RAX: ffffffffffffffda RBX: 00007fc03dfa5fa0 RCX: 00007fc03dd7ebe9 [ 216.084431][T13891] RDX: 00000000240008c4 RSI: 0000200000000000 RDI: 0000000000000008 [ 216.084457][T13891] RBP: 00007fc03c7df090 R08: 0000000000000000 R09: 0000000000000000 [ 216.084464][T13891] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 216.084471][T13891] R13: 00007fc03dfa6038 R14: 00007fc03dfa5fa0 R15: 00007ffd4e8b6a08 [ 216.084481][T13891] [ 216.467791][T13914] sg_write: data in/out 11329/120 bytes for SCSI command 0x0-- guessing data in; [ 216.467791][T13914] program syz.2.2865 not setting count and/or reply_len properly [ 216.489977][T13919] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2873'. [ 216.499002][T13919] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2873'. [ 216.547435][T13925] netlink: 'syz.9.2873': attribute type 1 has an invalid length. [ 216.556361][T13919] wireguard1: entered promiscuous mode [ 216.561839][T13919] wireguard1: entered allmulticast mode [ 216.595602][ T1036] hid-generic 0000:3000000:0000.004D: hidraw0: HID v0.00 Device [sy] on syz0 [ 216.628474][T13937] netlink: 4 bytes leftover after parsing attributes in process `wޣ'. [ 216.715213][T13944] FAULT_INJECTION: forcing a failure. [ 216.715213][T13944] name failslab, interval 1, probability 0, space 0, times 0 [ 216.727943][T13944] CPU: 1 UID: 0 PID: 13944 Comm: syz.7.2879 Not tainted 6.17.0-rc2-syzkaller-00028-gbe48bcf004f9 #0 PREEMPT(voluntary) [ 216.728025][T13944] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 216.728034][T13944] Call Trace: [ 216.728040][T13944] [ 216.728047][T13944] __dump_stack+0x1d/0x30 [ 216.728066][T13944] dump_stack_lvl+0xe8/0x140 [ 216.728091][T13944] dump_stack+0x15/0x1b [ 216.728119][T13944] should_fail_ex+0x265/0x280 [ 216.728138][T13944] should_failslab+0x8c/0xb0 [ 216.728219][T13944] kmem_cache_alloc_node_noprof+0x57/0x320 [ 216.728244][T13944] ? __alloc_skb+0x101/0x320 [ 216.728272][T13944] __alloc_skb+0x101/0x320 [ 216.728356][T13944] netlink_alloc_large_skb+0xba/0xf0 [ 216.728384][T13944] netlink_sendmsg+0x3cf/0x6b0 [ 216.728404][T13944] ? __pfx_netlink_sendmsg+0x10/0x10 [ 216.728462][T13944] __sock_sendmsg+0x142/0x180 [ 216.728555][T13944] ____sys_sendmsg+0x31e/0x4e0 [ 216.728574][T13944] ___sys_sendmsg+0x17b/0x1d0 [ 216.728602][T13944] __x64_sys_sendmsg+0xd4/0x160 [ 216.728624][T13944] x64_sys_call+0x191e/0x2ff0 [ 216.728694][T13944] do_syscall_64+0xd2/0x200 [ 216.728722][T13944] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 216.728745][T13944] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 216.728772][T13944] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 216.728791][T13944] RIP: 0033:0x7f6b33d6ebe9 [ 216.728804][T13944] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 216.728886][T13944] RSP: 002b:00007f6b327d7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 216.728903][T13944] RAX: ffffffffffffffda RBX: 00007f6b33f95fa0 RCX: 00007f6b33d6ebe9 [ 216.728928][T13944] RDX: 0000000000044080 RSI: 0000200000000040 RDI: 0000000000000003 [ 216.728970][T13944] RBP: 00007f6b327d7090 R08: 0000000000000000 R09: 0000000000000000 [ 216.728984][T13944] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 216.728997][T13944] R13: 00007f6b33f96038 R14: 00007f6b33f95fa0 R15: 00007ffdb12226e8 [ 216.729017][T13944] [ 216.948571][ T8830] smc: removing ib device syz1 [ 217.015780][T13956] FAULT_INJECTION: forcing a failure. [ 217.015780][T13956] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 217.028910][T13956] CPU: 1 UID: 0 PID: 13956 Comm: syz.6.2882 Not tainted 6.17.0-rc2-syzkaller-00028-gbe48bcf004f9 #0 PREEMPT(voluntary) [ 217.028943][T13956] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 217.029014][T13956] Call Trace: [ 217.029020][T13956] [ 217.029026][T13956] __dump_stack+0x1d/0x30 [ 217.029045][T13956] dump_stack_lvl+0xe8/0x140 [ 217.029062][T13956] dump_stack+0x15/0x1b [ 217.029141][T13956] should_fail_ex+0x265/0x280 [ 217.029229][T13956] should_fail+0xb/0x20 [ 217.029244][T13956] should_fail_usercopy+0x1a/0x20 [ 217.029268][T13956] _copy_from_user+0x1c/0xb0 [ 217.029375][T13956] memdup_user+0x5e/0xd0 [ 217.029467][T13956] strndup_user+0x68/0xb0 [ 217.029493][T13956] __se_sys_mount+0x4d/0x2e0 [ 217.029516][T13956] ? fput+0x8f/0xc0 [ 217.029546][T13956] ? ksys_write+0x192/0x1a0 [ 217.029570][T13956] __x64_sys_mount+0x67/0x80 [ 217.029601][T13956] x64_sys_call+0x2b4d/0x2ff0 [ 217.029625][T13956] do_syscall_64+0xd2/0x200 [ 217.029666][T13956] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 217.029692][T13956] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 217.029762][T13956] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 217.029785][T13956] RIP: 0033:0x7f463920ebe9 [ 217.029801][T13956] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 217.029820][T13956] RSP: 002b:00007f4637c77038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 217.029857][T13956] RAX: ffffffffffffffda RBX: 00007f4639435fa0 RCX: 00007f463920ebe9 [ 217.029870][T13956] RDX: 00002000000002c0 RSI: 0000200000000080 RDI: 0000000000000000 [ 217.029883][T13956] RBP: 00007f4637c77090 R08: 0000200000000240 R09: 0000000000000000 [ 217.029918][T13956] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 217.029931][T13956] R13: 00007f4639436038 R14: 00007f4639435fa0 R15: 00007fff8a352f28 [ 217.029978][T13956] [ 217.229342][T13946] lo speed is unknown, defaulting to 1000 [ 217.235525][T13946] lo speed is unknown, defaulting to 1000 [ 217.425533][T13969] loop8: detected capacity change from 0 to 512 [ 217.456307][T13969] EXT4-fs (loop8): too many log groups per flexible block group [ 217.464092][T13969] EXT4-fs (loop8): failed to initialize mballoc (-12) [ 217.509284][T13969] EXT4-fs (loop8): mount failed [ 217.544594][T13946] chnl_net:caif_netlink_parms(): no params data found [ 217.605330][T13987] SELinux: failed to load policy [ 217.632519][T13978] loop9: detected capacity change from 0 to 512 [ 217.640026][T13946] bridge0: port 1(bridge_slave_0) entered blocking state [ 217.647121][T13946] bridge0: port 1(bridge_slave_0) entered disabled state [ 217.654936][T13946] bridge_slave_0: entered allmulticast mode [ 217.656304][T13978] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 217.661728][T13946] bridge_slave_0: entered promiscuous mode [ 217.680118][ T3398] hid_parser_main: 5 callbacks suppressed [ 217.680135][ T3398] hid-generic 0000:3000000:0000.004E: unknown main item tag 0x4 [ 217.693555][ T3398] hid-generic 0000:3000000:0000.004E: unknown main item tag 0x2 [ 217.702162][T13946] bridge0: port 2(bridge_slave_1) entered blocking state [ 217.709467][T13946] bridge0: port 2(bridge_slave_1) entered disabled state [ 217.709560][ T3398] hid-generic 0000:3000000:0000.004E: unknown main item tag 0x3 [ 217.722549][T13978] EXT4-fs (loop9): 1 truncate cleaned up [ 217.728308][T13946] bridge_slave_1: entered allmulticast mode [ 217.731556][T13978] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 217.737096][ T3398] hid-generic 0000:3000000:0000.004E: hidraw0: HID v0.00 Device [sy] on syz0 [ 217.753004][T13978] sg_write: data in/out 11329/120 bytes for SCSI command 0x0-- guessing data in; [ 217.753004][T13978] program syz.9.2888 not setting count and/or reply_len properly [ 217.759388][T13946] bridge_slave_1: entered promiscuous mode [ 217.802097][T13946] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 217.818428][T13946] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 217.872927][T11699] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 217.931783][T14011] loop7: detected capacity change from 0 to 512 [ 217.938426][T14011] EXT4-fs: Ignoring removed nobh option [ 217.955377][T14011] EXT4-fs error (device loop7): ext4_do_update_inode:5653: inode #3: comm syz.7.2898: corrupted inode contents [ 217.967532][T14011] EXT4-fs error (device loop7): ext4_dirty_inode:6538: inode #3: comm syz.7.2898: mark_inode_dirty error [ 217.979218][T14011] EXT4-fs error (device loop7): ext4_do_update_inode:5653: inode #3: comm syz.7.2898: corrupted inode contents [ 217.991173][T14011] EXT4-fs error (device loop7): __ext4_ext_dirty:206: inode #3: comm syz.7.2898: mark_inode_dirty error [ 218.002802][T14011] EXT4-fs error (device loop7): ext4_acquire_dquot:6937: comm syz.7.2898: Failed to acquire dquot type 0 [ 218.016343][T14011] EXT4-fs error (device loop7): ext4_do_update_inode:5653: inode #16: comm syz.7.2898: corrupted inode contents [ 218.028625][T14011] EXT4-fs error (device loop7): ext4_dirty_inode:6538: inode #16: comm syz.7.2898: mark_inode_dirty error [ 218.040293][T14011] EXT4-fs error (device loop7): ext4_do_update_inode:5653: inode #16: comm syz.7.2898: corrupted inode contents [ 218.052406][T14011] EXT4-fs error (device loop7): __ext4_ext_dirty:206: inode #16: comm syz.7.2898: mark_inode_dirty error [ 218.064431][T14011] EXT4-fs error (device loop7): ext4_do_update_inode:5653: inode #16: comm syz.7.2898: corrupted inode contents [ 218.076565][T14011] EXT4-fs error (device loop7) in ext4_orphan_del:305: Corrupt filesystem [ 218.085248][T14011] EXT4-fs error (device loop7): ext4_do_update_inode:5653: inode #16: comm syz.7.2898: corrupted inode contents [ 218.098107][T14011] EXT4-fs error (device loop7): ext4_truncate:4666: inode #16: comm syz.7.2898: mark_inode_dirty error [ 218.109418][T14011] EXT4-fs error (device loop7) in ext4_process_orphan:347: Corrupt filesystem [ 218.118663][T14011] EXT4-fs (loop7): 1 truncate cleaned up [ 218.124688][T14011] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 218.137342][T14011] ext4 filesystem being mounted at /181/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 218.446215][ T8818] $H (unregistering): Released all slaves [ 218.454137][ T8818] bond1 (unregistering): Released all slaves [ 218.471090][T13946] team0: Port device team_slave_0 added [ 218.487502][T13946] team0: Port device team_slave_1 added [ 218.506383][ T8818] tipc: Left network mode [ 218.506812][T13946] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 218.516826][T14017] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2900'. [ 218.517780][T13946] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 218.552623][T13946] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 218.566951][T14017] wireguard0: entered promiscuous mode [ 218.572518][T14017] wireguard0: entered allmulticast mode [ 218.584417][T14017] netlink: 'syz.8.2900': attribute type 1 has an invalid length. [ 218.593569][T13946] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 218.600553][T13946] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 218.605333][T14023] netlink: 4 bytes leftover after parsing attributes in process `wޣ'. [ 218.626488][T13946] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 218.647678][T11240] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 218.702239][ T8818] hsr_slave_0: left promiscuous mode [ 218.708015][ T8818] hsr_slave_1: left promiscuous mode [ 218.736879][T14032] loop7: detected capacity change from 0 to 128 [ 218.745270][T14032] FAT-fs (loop7): bogus number of reserved sectors [ 218.751802][T14032] FAT-fs (loop7): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 218.761250][T14032] FAT-fs (loop7): Can't find a valid FAT filesystem [ 218.771671][ T8832] smc: removing ib device sz1 [ 218.813397][T13946] hsr_slave_0: entered promiscuous mode [ 218.821752][T13946] hsr_slave_1: entered promiscuous mode [ 218.830280][T13946] debugfs: 'hsr0' already exists in 'hsr' [ 218.836052][T13946] Cannot create hsr debugfs directory [ 218.901862][T14041] loop7: detected capacity change from 0 to 512 [ 218.935022][T14041] EXT4-fs error (device loop7): ext4_iget_extra_inode:5104: inode #15: comm syz.7.2909: corrupted in-inode xattr: invalid ea_ino [ 218.950872][T14041] EXT4-fs error (device loop7): ext4_orphan_get:1397: comm syz.7.2909: couldn't read orphan inode 15 (err -117) [ 218.964772][T14041] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 219.000466][T14041] FAULT_INJECTION: forcing a failure. [ 219.000466][T14041] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 219.013853][T14041] CPU: 0 UID: 0 PID: 14041 Comm: syz.7.2909 Not tainted 6.17.0-rc2-syzkaller-00028-gbe48bcf004f9 #0 PREEMPT(voluntary) [ 219.013920][T14041] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 219.013932][T14041] Call Trace: [ 219.013938][T14041] [ 219.013945][T14041] __dump_stack+0x1d/0x30 [ 219.013967][T14041] dump_stack_lvl+0xe8/0x140 [ 219.014033][T14041] dump_stack+0x15/0x1b [ 219.014061][T14041] should_fail_ex+0x265/0x280 [ 219.014081][T14041] should_fail_alloc_page+0xf2/0x100 [ 219.014109][T14041] __alloc_frozen_pages_noprof+0xff/0x360 [ 219.014187][T14041] alloc_pages_mpol+0xb3/0x250 [ 219.014256][T14041] alloc_pages_noprof+0x90/0x130 [ 219.014286][T14041] pte_alloc_one+0x2d/0x120 [ 219.014305][T14041] ? xa_load+0xb1/0xe0 [ 219.014330][T14041] __pte_alloc+0x32/0x2b0 [ 219.014417][T14041] handle_mm_fault+0x1c55/0x2c20 [ 219.014501][T14041] ? check_vma_flags+0x26e/0x340 [ 219.014527][T14041] __get_user_pages+0x102e/0x1fa0 [ 219.014572][T14041] get_user_pages_remote+0x1d5/0x6d0 [ 219.014597][T14041] __access_remote_vm+0x15c/0x590 [ 219.014672][T14041] access_remote_vm+0x32/0x40 [ 219.014695][T14041] environ_read+0x1d3/0x320 [ 219.014717][T14041] ? __pfx_environ_read+0x10/0x10 [ 219.014736][T14041] vfs_readv+0x3fb/0x690 [ 219.014818][T14041] __x64_sys_preadv+0xfd/0x1c0 [ 219.014855][T14041] x64_sys_call+0x282a/0x2ff0 [ 219.014875][T14041] do_syscall_64+0xd2/0x200 [ 219.014907][T14041] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 219.014996][T14041] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 219.015009][T14041] RIP: 0033:0x7f6b33d6ebe9 [ 219.015018][T14041] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 219.015028][T14041] RSP: 002b:00007f6b327d7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 219.015151][T14041] RAX: ffffffffffffffda RBX: 00007f6b33f95fa0 RCX: 00007f6b33d6ebe9 [ 219.015158][T14041] RDX: 0000000000000001 RSI: 0000200000001400 RDI: 0000000000000005 [ 219.015165][T14041] RBP: 00007f6b327d7090 R08: 0000000000000000 R09: 0000000000000000 [ 219.015172][T14041] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 219.015180][T14041] R13: 00007f6b33f96038 R14: 00007f6b33f95fa0 R15: 00007ffdb12226e8 [ 219.015189][T14041] [ 219.248326][T11240] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 219.262885][T14049] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2911'. [ 219.271848][T14049] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2911'. [ 219.284829][T14049] wireguard4: entered promiscuous mode [ 219.290300][T14049] wireguard4: entered allmulticast mode [ 219.301230][T14049] netlink: 'syz.7.2911': attribute type 1 has an invalid length. [ 219.322168][T14052] FAULT_INJECTION: forcing a failure. [ 219.322168][T14052] name failslab, interval 1, probability 0, space 0, times 0 [ 219.334861][T14052] CPU: 1 UID: 0 PID: 14052 Comm: syz.7.2912 Not tainted 6.17.0-rc2-syzkaller-00028-gbe48bcf004f9 #0 PREEMPT(voluntary) [ 219.334888][T14052] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 219.334900][T14052] Call Trace: [ 219.334907][T14052] [ 219.334915][T14052] __dump_stack+0x1d/0x30 [ 219.335001][T14052] dump_stack_lvl+0xe8/0x140 [ 219.335018][T14052] dump_stack+0x15/0x1b [ 219.335100][T14052] should_fail_ex+0x265/0x280 [ 219.335122][T14052] should_failslab+0x8c/0xb0 [ 219.335148][T14052] kmem_cache_alloc_node_noprof+0x57/0x320 [ 219.335234][T14052] ? alloc_vmap_area+0x231/0xe50 [ 219.335279][T14052] alloc_vmap_area+0x231/0xe50 [ 219.335326][T14052] ? __kmalloc_cache_node_noprof+0x18a/0x320 [ 219.335357][T14052] __get_vm_area_node+0x173/0x1d0 [ 219.335390][T14052] __vmalloc_node_range_noprof+0x273/0xe00 [ 219.335417][T14052] ? sel_write_load+0x158/0x380 [ 219.335470][T14052] ? __rcu_read_unlock+0x4f/0x70 [ 219.335496][T14052] ? sel_write_load+0x158/0x380 [ 219.335567][T14052] vmalloc_noprof+0x82/0xc0 [ 219.335595][T14052] ? sel_write_load+0x158/0x380 [ 219.335620][T14052] sel_write_load+0x158/0x380 [ 219.335646][T14052] ? __pfx_sel_write_load+0x10/0x10 [ 219.335765][T14052] vfs_write+0x269/0x960 [ 219.335788][T14052] ? __rcu_read_unlock+0x4f/0x70 [ 219.335809][T14052] ? __fget_files+0x184/0x1c0 [ 219.335832][T14052] ksys_write+0xda/0x1a0 [ 219.335852][T14052] __x64_sys_write+0x40/0x50 [ 219.335907][T14052] x64_sys_call+0x27fe/0x2ff0 [ 219.335934][T14052] do_syscall_64+0xd2/0x200 [ 219.335960][T14052] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 219.335979][T14052] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 219.335999][T14052] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 219.336012][T14052] RIP: 0033:0x7f6b33d6ebe9 [ 219.336022][T14052] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 219.336032][T14052] RSP: 002b:00007f6b327d7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 219.336043][T14052] RAX: ffffffffffffffda RBX: 00007f6b33f95fa0 RCX: 00007f6b33d6ebe9 [ 219.336112][T14052] RDX: 0000000000000065 RSI: 0000200000000280 RDI: 0000000000000006 [ 219.336119][T14052] RBP: 00007f6b327d7090 R08: 0000000000000000 R09: 0000000000000000 [ 219.336125][T14052] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 219.336167][T14052] R13: 00007f6b33f96038 R14: 00007f6b33f95fa0 R15: 00007ffdb12226e8 [ 219.336237][T14052] [ 219.336244][T14052] syz.7.2912: vmalloc error: size 101, vm_struct allocation failed, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=/,mems_allowed=0 [ 219.592666][T14052] CPU: 1 UID: 0 PID: 14052 Comm: syz.7.2912 Not tainted 6.17.0-rc2-syzkaller-00028-gbe48bcf004f9 #0 PREEMPT(voluntary) [ 219.592685][T14052] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 219.592692][T14052] Call Trace: [ 219.592697][T14052] [ 219.592702][T14052] __dump_stack+0x1d/0x30 [ 219.592769][T14052] dump_stack_lvl+0xe8/0x140 [ 219.592780][T14052] dump_stack+0x15/0x1b [ 219.592789][T14052] warn_alloc+0x12b/0x1a0 [ 219.592809][T14052] __vmalloc_node_range_noprof+0x297/0xe00 [ 219.592844][T14052] ? __rcu_read_unlock+0x4f/0x70 [ 219.592867][T14052] ? sel_write_load+0x158/0x380 [ 219.592896][T14052] vmalloc_noprof+0x82/0xc0 [ 219.592999][T14052] ? sel_write_load+0x158/0x380 [ 219.593067][T14052] sel_write_load+0x158/0x380 [ 219.593088][T14052] ? __pfx_sel_write_load+0x10/0x10 [ 219.593111][T14052] vfs_write+0x269/0x960 [ 219.593241][T14052] ? __rcu_read_unlock+0x4f/0x70 [ 219.593262][T14052] ? __fget_files+0x184/0x1c0 [ 219.593286][T14052] ksys_write+0xda/0x1a0 [ 219.593309][T14052] __x64_sys_write+0x40/0x50 [ 219.593333][T14052] x64_sys_call+0x27fe/0x2ff0 [ 219.593425][T14052] do_syscall_64+0xd2/0x200 [ 219.593478][T14052] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 219.593502][T14052] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 219.593533][T14052] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 219.593552][T14052] RIP: 0033:0x7f6b33d6ebe9 [ 219.593567][T14052] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 219.593586][T14052] RSP: 002b:00007f6b327d7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 219.593608][T14052] RAX: ffffffffffffffda RBX: 00007f6b33f95fa0 RCX: 00007f6b33d6ebe9 [ 219.593621][T14052] RDX: 0000000000000065 RSI: 0000200000000280 RDI: 0000000000000006 [ 219.593712][T14052] RBP: 00007f6b327d7090 R08: 0000000000000000 R09: 0000000000000000 [ 219.593725][T14052] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 219.593738][T14052] R13: 00007f6b33f96038 R14: 00007f6b33f95fa0 R15: 00007ffdb12226e8 [ 219.593758][T14052] [ 219.799765][T14052] Mem-Info: [ 219.803011][T14052] active_anon:4364 inactive_anon:27 isolated_anon:0 [ 219.803011][T14052] active_file:18893 inactive_file:2315 isolated_file:0 [ 219.803011][T14052] unevictable:0 dirty:460 writeback:4 [ 219.803011][T14052] slab_reclaimable:3721 slab_unreclaimable:46603 [ 219.803011][T14052] mapped:29481 shmem:760 pagetables:1122 [ 219.803011][T14052] sec_pagetables:0 bounce:0 [ 219.803011][T14052] kernel_misc_reclaimable:0 [ 219.803011][T14052] free:1831540 free_pcp:17713 free_cma:0 [ 219.848084][T14052] Node 0 active_anon:17340kB inactive_anon:108kB active_file:75572kB inactive_file:9260kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:117924kB dirty:1840kB writeback:16kB shmem:3040kB kernel_stack:4896kB pagetables:4488kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 219.867291][ T29] kauditd_printk_skb: 136 callbacks suppressed [ 219.867306][ T29] audit: type=1326 audit(1755607218.032:5485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14058 comm="syz.9.2915" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f303f97ebe9 code=0x7ffc0000 [ 219.875654][T14052] Node 0 [ 219.885166][ T29] audit: type=1326 audit(1755607218.062:5486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14058 comm="syz.9.2915" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f303f97ebe9 code=0x7ffc0000 [ 219.905264][T14052] DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 219.908147][ T29] audit: type=1326 audit(1755607218.062:5487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14058 comm="syz.9.2915" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f303f97ebe9 code=0x7ffc0000 [ 219.931589][T14052] lowmem_reserve[]: 0 2883 7862 7862 [ 219.931678][T14052] Node 0 DMA32 free:2949212kB boost:0kB min:4132kB low:7064kB high:9996kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2952844kB mlocked:0kB bounce:0kB free_pcp:3632kB local_pcp:3532kB free_cma:0kB [ 219.931801][T14052] lowmem_reserve[]: 0 [ 219.959779][ T29] audit: type=1326 audit(1755607218.062:5488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14058 comm="syz.9.2915" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f303f97ebe9 code=0x7ffc0000 [ 219.983344][T14052] 0 4978 4978 [ 219.983368][T14052] Node 0 Normal free:4361820kB boost:0kB min:7184kB low:12280kB high:17376kB reserved_highatomic:0KB free_highatomic:0KB active_anon:17456kB inactive_anon:108kB active_file:75572kB inactive_file:9260kB unevictable:0kB writepending:1856kB present:5242880kB managed:5098240kB mlocked:0kB bounce:0kB free_pcp:66832kB local_pcp:11616kB free_cma:0kB [ 219.983452][T14052] lowmem_reserve[]: 0 0 0 0 [ 219.983476][T14052] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 220.099216][T14052] Node 0 DMA32: 3*4kB (M) 2*8kB (M) 2*16kB (M) 3*32kB (M) 3*64kB (M) 4*128kB (M) 3*256kB (M) 3*512kB (M) 3*1024kB (M) 3*2048kB (M) 717*4096kB (M) = 2949212kB [ 220.115511][T14052] Node 0 Normal: 680*4kB (UME) 639*8kB (UME) 545*16kB (UME) 166*32kB (UME) 173*64kB (UME) 264*128kB (UME) 182*256kB (UM) 246*512kB (UME) 126*1024kB (UM) 48*2048kB (UME) 951*4096kB (UM) = 4361896kB [ 220.135118][T14052] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 220.144540][T14052] 21982 total pagecache pages [ 220.149287][T14052] 24 pages in swap cache [ 220.153642][T14052] Free swap = 124900kB [ 220.157991][T14052] Total swap = 124996kB [ 220.162119][T14052] 2097051 pages RAM [ 220.165914][T14052] 0 pages HighMem/MovableOnly [ 220.170564][T14052] 80440 pages reserved [ 220.177200][ T29] audit: type=1326 audit(1755607218.362:5489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14058 comm="syz.9.2915" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f303f97ebe9 code=0x7ffc0000 [ 220.200721][ T29] audit: type=1326 audit(1755607218.362:5490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14058 comm="syz.9.2915" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f303f97ebe9 code=0x7ffc0000 [ 220.224331][ T29] audit: type=1326 audit(1755607218.362:5491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14058 comm="syz.9.2915" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f303f97ebe9 code=0x7ffc0000 [ 220.248033][ T29] audit: type=1326 audit(1755607218.362:5492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14058 comm="syz.9.2915" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f303f97ebe9 code=0x7ffc0000 [ 220.271570][ T29] audit: type=1326 audit(1755607218.362:5493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14058 comm="syz.9.2915" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f303f97ebe9 code=0x7ffc0000 [ 220.295161][ T29] audit: type=1326 audit(1755607218.362:5494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14058 comm="syz.9.2915" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f303f97ebe9 code=0x7ffc0000 [ 220.334657][T14063] siw: device registration error -23 [ 220.514881][T13946] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 220.533062][T13946] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 220.573944][T13946] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 220.595971][T13946] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 220.653880][T13946] 8021q: adding VLAN 0 to HW filter on device bond0 [ 220.666687][T13946] 8021q: adding VLAN 0 to HW filter on device team0 [ 220.685945][ T8830] bridge0: port 1(bridge_slave_0) entered blocking state [ 220.693100][ T8830] bridge0: port 1(bridge_slave_0) entered forwarding state [ 220.717322][T14111] bridge0: entered promiscuous mode [ 220.734933][T14111] bridge0: port 3(macvtap0) entered blocking state [ 220.741637][T14111] bridge0: port 3(macvtap0) entered disabled state [ 220.748641][T14111] macvtap0: entered allmulticast mode [ 220.754063][T14111] bridge0: entered allmulticast mode [ 220.760787][T14111] macvtap0: left allmulticast mode [ 220.766009][T14111] bridge0: left allmulticast mode [ 220.772597][T14111] bridge0: left promiscuous mode [ 220.797323][ T8830] bridge0: port 2(bridge_slave_1) entered blocking state [ 220.804535][ T8830] bridge0: port 2(bridge_slave_1) entered forwarding state [ 220.818810][T14116] wireguard1: entered promiscuous mode [ 220.824662][T14116] wireguard1: entered allmulticast mode [ 220.836044][T14116] netlink: 'syz.8.2936': attribute type 1 has an invalid length. [ 220.849162][T14111] bridge0: entered promiscuous mode [ 220.857361][T14111] bridge0: left promiscuous mode [ 220.910663][T14111] bridge0: entered promiscuous mode [ 220.918364][T14111] bridge0: left promiscuous mode [ 220.948359][T13946] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 220.980990][T14111] bridge0: entered promiscuous mode [ 220.991455][T14111] bridge0: left promiscuous mode [ 221.038354][T14111] bridge0: entered promiscuous mode [ 221.045452][T14111] bridge0: left promiscuous mode [ 221.073078][T13946] veth0_vlan: entered promiscuous mode [ 221.082560][T13946] veth1_vlan: entered promiscuous mode [ 221.100487][T13946] veth0_macvtap: entered promiscuous mode [ 221.108681][T13946] veth1_macvtap: entered promiscuous mode [ 221.121920][T13946] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 221.137480][T14111] bridge0: entered promiscuous mode [ 221.144584][T14111] bridge0: left promiscuous mode [ 221.161283][T13946] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 221.172659][ T8852] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.185000][ T8852] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.197110][ T8852] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.208109][ T8852] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.226359][T14111] bridge0: entered promiscuous mode [ 221.237797][T14111] bridge0: left promiscuous mode [ 221.333411][T14111] bridge0: entered promiscuous mode [ 221.356931][T14111] bridge0: left promiscuous mode [ 221.370580][T14133] sg_write: data in/out 11329/120 bytes for SCSI command 0x0-- guessing data in; [ 221.370580][T14133] program syz.6.2937 not setting count and/or reply_len properly [ 221.514877][T14111] bridge0: entered promiscuous mode [ 221.884711][T14143] sg_write: data in/out 11329/120 bytes for SCSI command 0x0-- guessing data in; [ 221.884711][T14143] program syz.2.2940 not setting count and/or reply_len properly [ 222.769933][T14111] bridge0: left promiscuous mode [ 222.866189][T14160] loop9: detected capacity change from 0 to 128 [ 222.927538][T14160] SELinux: security_context_str_to_sid (s\^(m`dR%]v;hfePiz׺+8x։?=MSg%אVDXڶ}Y_gWT~Lf00000000000000000000000Bx3!/ھ5;Y$]V1{ȉj+4bR}$PZh [ 222.927538][T14160] ~~= Tݦ҃IUJ3bfAc@ u+INTT[M|zk@IQ1>dS IN'=Y^_G^1M@`aȥqxY_u\ [ 222.927538][T14160]  [ 222.927538][T14160] yҟvyhB/ P^i/ފ [ 222.927538][T14160] Dlڰ{8AOIA:?v0'!ӜB8kp٫] ^6H76$+NJU#/Jm]UGꦴwM`Z^J*PqUdP}K5\a44 f9ݳ ~-V) failed with errno=-22 [ 223.099233][T14173] loop8: detected capacity change from 0 to 128 [ 223.107419][T14173] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 223.107670][T14173] ext4 filesystem being mounted at /149/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 223.171090][T11414] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 223.202336][T14177] wireguard0: entered promiscuous mode [ 223.202353][T14177] wireguard0: entered allmulticast mode [ 223.204957][T14177] netlink: 'syz.2.2952': attribute type 1 has an invalid length. [ 223.254890][ T1036] hid-generic 0000:3000000:0000.004F: unknown main item tag 0x4 [ 223.262664][ T1036] hid-generic 0000:3000000:0000.004F: unknown main item tag 0x2 [ 223.263989][ T1036] hid-generic 0000:3000000:0000.004F: unknown main item tag 0x3 [ 223.279177][ T1036] hid-generic 0000:3000000:0000.004F: hidraw0: HID v0.00 Device [sy] on syz0 [ 223.311910][T14183] lo speed is unknown, defaulting to 1000 [ 223.530479][T14192] netlink: 4 bytes leftover after parsing attributes in process `wޣ'. [ 223.625796][T14202] loop9: detected capacity change from 0 to 128 [ 223.634144][T14202] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 223.634351][T14202] ext4 filesystem being mounted at /153/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 223.669304][T11699] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 223.738950][T14211] wireguard2: entered promiscuous mode [ 223.739024][T14211] wireguard2: entered allmulticast mode [ 223.742085][T14211] netlink: 'syz.8.2965': attribute type 1 has an invalid length. [ 223.778223][T14216] loop8: detected capacity change from 0 to 1024 [ 223.778877][T14216] EXT4-fs: Ignoring removed mblk_io_submit option [ 223.881739][T14222] SELinux: security_context_str_to_sid (s\^(m`dR%]v;hfePiz׺+8x։?=MSg%אVDXڶ}Y_gWT~Lf00000000000000000000000Bx3!/ھ5;Y$]V1{ȉj+4bR}$PZh [ 223.881739][T14222] ~~= Tݦ҃IUJ3bfAc@ u+INTT[M|zk@IQ1>dS IN'=Y^_G^1M@`aȥqxY_u\ [ 223.881739][T14222]  [ 223.881739][T14222] yҟvyhB/ P^i/ފ [ 223.881739][T14222] Dlڰ{8AOIA:?v0'!ӜB8kp٫] ^6H76$+NJU#/Jm]UGꦴwM`Z^J*PqUdP}K5\a44 f9ݳ ~-V) failed with errno=-22 [ 223.980585][T14230] loop7: detected capacity change from 0 to 128 [ 223.989608][T14230] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 224.002057][T14230] ext4 filesystem being mounted at /197/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 224.023911][T11240] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 224.401803][T14252] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(17) [ 224.408401][T14252] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 224.415987][T14252] vhci_hcd vhci_hcd.0: Device attached [ 224.600392][ T3398] vhci_hcd: vhci_device speed not set [ 224.660757][ T3398] usb 15-1: new full-speed USB device number 2 using vhci_hcd [ 224.687377][T14260] loop8: detected capacity change from 0 to 512 [ 224.701299][T14260] EXT4-fs (loop8): too many log groups per flexible block group [ 224.709059][T14260] EXT4-fs (loop8): failed to initialize mballoc (-12) [ 224.715980][T14260] EXT4-fs (loop8): mount failed [ 224.757669][T14269] wireguard3: entered promiscuous mode [ 224.763311][T14269] wireguard3: entered allmulticast mode [ 224.784537][T14274] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 224.793279][T14274] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 224.807777][T14274] loop9: detected capacity change from 0 to 512 [ 224.906964][T14280] sg_write: data in/out 11329/120 bytes for SCSI command 0x0-- guessing data in; [ 224.906964][T14280] program syz.6.2990 not setting count and/or reply_len properly [ 224.941119][T14253] vhci_hcd: connection reset by peer [ 224.946847][ T8868] vhci_hcd: stop threads [ 224.951135][ T8868] vhci_hcd: release socket [ 224.951845][T14269] netlink: 'syz.8.2986': attribute type 1 has an invalid length. [ 224.955587][ T8868] vhci_hcd: disconnect device [ 225.405056][T14289] netlink: 4 bytes leftover after parsing attributes in process `wޣ'. [ 225.458137][T14291] loop9: detected capacity change from 0 to 512 [ 225.467228][T14291] EXT4-fs (loop9): too many log groups per flexible block group [ 225.475021][T14291] EXT4-fs (loop9): failed to initialize mballoc (-12) [ 225.482001][T14291] EXT4-fs (loop9): mount failed [ 225.543407][ T29] kauditd_printk_skb: 380 callbacks suppressed [ 225.543422][ T29] audit: type=1400 audit(1755607991.771:5875): avc: denied { ioctl } for pid=14296 comm="syz.9.2997" path="socket:[39013]" dev="sockfs" ino=39013 ioctlcmd=0x943c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 225.622477][ T29] audit: type=1326 audit(1755607991.844:5876): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14312 comm="syz.9.3004" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f303f97ebe9 code=0x0 [ 225.731333][ T1036] hid-generic 0000:3000000:0000.0050: unknown main item tag 0x4 [ 225.739127][ T1036] hid-generic 0000:3000000:0000.0050: unknown main item tag 0x2 [ 225.746887][ T1036] hid-generic 0000:3000000:0000.0050: unknown main item tag 0x3 [ 225.754832][ T1036] hid-generic 0000:3000000:0000.0050: hidraw0: HID v0.00 Device [sy] on syz0 [ 225.782607][ T29] audit: type=1326 audit(1755607992.012:5877): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14319 comm="syz.7.3006" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b33d6ebe9 code=0x7ffc0000 [ 225.806198][ T29] audit: type=1326 audit(1755607992.012:5878): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14319 comm="syz.7.3006" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b33d6ebe9 code=0x7ffc0000 [ 225.830586][ T29] audit: type=1326 audit(1755607992.012:5879): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14319 comm="syz.7.3006" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6b33d6ebe9 code=0x7ffc0000 [ 225.854214][ T29] audit: type=1326 audit(1755607992.012:5880): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14319 comm="syz.7.3006" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b33d6ebe9 code=0x7ffc0000 [ 225.877707][ T29] audit: type=1326 audit(1755607992.012:5881): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14319 comm="syz.7.3006" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b33d6ebe9 code=0x7ffc0000 [ 225.878059][T14320] loop7: detected capacity change from 0 to 512 [ 225.901465][ T29] audit: type=1326 audit(1755607992.012:5882): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14319 comm="syz.7.3006" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6b33d6ebe9 code=0x7ffc0000 [ 225.901493][ T29] audit: type=1326 audit(1755607992.012:5883): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14319 comm="syz.7.3006" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b33d6ebe9 code=0x7ffc0000 [ 225.901587][ T29] audit: type=1326 audit(1755607992.012:5884): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14319 comm="syz.7.3006" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b33d6ebe9 code=0x7ffc0000 [ 225.981742][T14320] EXT4-fs (loop7): Cannot turn on journaled quota: type 0: error -2 [ 225.990052][T14320] EXT4-fs error (device loop7): ext4_free_branches:1023: inode #13: comm syz.7.3006: invalid indirect mapped block 2683928664 (level 1) [ 226.005404][T14320] EXT4-fs (loop7): 1 truncate cleaned up [ 226.013229][T14320] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 226.041046][T14320] EXT4-fs error (device loop7): htree_dirblock_to_tree:1080: inode #2: block 13: comm syz.7.3006: bad entry in directory: rec_len % 4 != 0 - offset=108, inode=4294901777, rec_len=65535, size=1024 fake=0 [ 226.063532][T14329] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3010'. [ 226.072641][T14329] 8021q: VLANs not supported on ip6_vti0 [ 226.086449][T11240] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 226.104238][T14332] wireguard5: entered promiscuous mode [ 226.109791][T14332] wireguard5: entered allmulticast mode [ 226.124803][T14332] netlink: 'syz.7.3011': attribute type 1 has an invalid length. [ 226.146073][T14334] lo speed is unknown, defaulting to 1000 [ 226.547315][T14356] loop9: detected capacity change from 0 to 512 [ 226.554126][T14356] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 226.566276][T14356] EXT4-fs (loop9): 1 truncate cleaned up [ 226.572466][T14356] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 226.585889][T14356] sg_write: data in/out 11329/120 bytes for SCSI command 0x0-- guessing data in; [ 226.585889][T14356] program syz.9.3019 not setting count and/or reply_len properly [ 226.774995][T11699] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 227.031104][T14391] loop7: detected capacity change from 0 to 512 [ 227.040821][T14391] EXT4-fs: Ignoring removed nobh option [ 227.055742][T14383] loop9: detected capacity change from 0 to 512 [ 227.067189][T14383] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 227.080750][T14383] EXT4-fs (loop9): 1 truncate cleaned up [ 227.084685][T14391] EXT4-fs error (device loop7): ext4_do_update_inode:5653: inode #3: comm syz.7.3036: corrupted inode contents [ 227.086968][T14383] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 227.102411][T14391] EXT4-fs error (device loop7): ext4_dirty_inode:6538: inode #3: comm syz.7.3036: mark_inode_dirty error [ 227.118222][T14383] sg_write: data in/out 11329/120 bytes for SCSI command 0x0-- guessing data in; [ 227.118222][T14383] program syz.9.3032 not setting count and/or reply_len properly [ 227.128151][T14391] EXT4-fs error (device loop7): ext4_do_update_inode:5653: inode #3: comm syz.7.3036: corrupted inode contents [ 227.153114][T14391] EXT4-fs error (device loop7): __ext4_ext_dirty:206: inode #3: comm syz.7.3036: mark_inode_dirty error [ 227.165951][T14391] EXT4-fs error (device loop7): ext4_acquire_dquot:6937: comm syz.7.3036: Failed to acquire dquot type 0 [ 227.182219][T14391] EXT4-fs error (device loop7): ext4_do_update_inode:5653: inode #16: comm syz.7.3036: corrupted inode contents [ 227.196096][T14391] EXT4-fs error (device loop7): ext4_dirty_inode:6538: inode #16: comm syz.7.3036: mark_inode_dirty error [ 227.211018][T14391] EXT4-fs error (device loop7): ext4_do_update_inode:5653: inode #16: comm syz.7.3036: corrupted inode contents [ 227.224343][T14391] EXT4-fs error (device loop7): __ext4_ext_dirty:206: inode #16: comm syz.7.3036: mark_inode_dirty error [ 227.241941][T14391] EXT4-fs error (device loop7): ext4_do_update_inode:5653: inode #16: comm syz.7.3036: corrupted inode contents [ 227.267749][T14391] EXT4-fs error (device loop7) in ext4_orphan_del:305: Corrupt filesystem [ 227.282396][T14403] loop8: detected capacity change from 0 to 512 [ 227.289760][T14391] EXT4-fs error (device loop7): ext4_do_update_inode:5653: inode #16: comm syz.7.3036: corrupted inode contents [ 227.292475][T11699] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 227.305456][T14391] EXT4-fs error (device loop7): ext4_truncate:4666: inode #16: comm syz.7.3036: mark_inode_dirty error [ 227.311686][T14405] wireguard6: entered promiscuous mode [ 227.327791][T14405] wireguard6: entered allmulticast mode [ 227.338352][T14391] EXT4-fs error (device loop7) in ext4_process_orphan:347: Corrupt filesystem [ 227.349950][T14405] netlink: 'syz.6.3041': attribute type 1 has an invalid length. [ 227.359992][T14403] EXT4-fs (loop8): Cannot turn on journaled quota: type 0: error -2 [ 227.360209][T14391] EXT4-fs (loop7): 1 truncate cleaned up [ 227.378457][T14403] EXT4-fs error (device loop8): ext4_free_branches:1023: inode #13: comm syz.8.3040: invalid indirect mapped block 2683928664 (level 1) [ 227.378926][T14391] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 227.406278][T14391] ext4 filesystem being mounted at /210/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 227.418787][T14403] EXT4-fs (loop8): 1 truncate cleaned up [ 227.424876][T14403] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 227.445428][T14403] EXT4-fs error (device loop8): htree_dirblock_to_tree:1080: inode #2: block 13: comm syz.8.3040: bad entry in directory: rec_len % 4 != 0 - offset=108, inode=4294901777, rec_len=65535, size=1024 fake=0 [ 227.523349][T11414] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 227.556947][T11240] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 227.577343][ T1036] hid-generic 0000:0003:0000.0051: unknown main item tag 0x1 [ 227.585769][ T1036] hid-generic 0000:0003:0000.0051: hidraw0: HID v0.03 Device [] on syz0 [ 227.585909][T14430] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 227.604321][T14430] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 227.604747][T14427] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 227.622309][T14427] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 227.655819][T14430] loop7: detected capacity change from 0 to 512 [ 227.667571][T14438] loop9: detected capacity change from 0 to 512 [ 227.675989][T14438] EXT4-fs (loop9): Cannot turn on journaled quota: type 0: error -2 [ 227.687471][T14438] EXT4-fs error (device loop9): ext4_free_branches:1023: inode #13: comm syz.9.3052: invalid indirect mapped block 2683928664 (level 1) [ 227.704278][T14438] EXT4-fs (loop9): 1 truncate cleaned up [ 227.710142][T14427] loop8: detected capacity change from 0 to 512 [ 227.719672][T14438] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 227.738601][T14438] EXT4-fs error (device loop9): htree_dirblock_to_tree:1080: inode #2: block 13: comm syz.9.3052: bad entry in directory: rec_len % 4 != 0 - offset=108, inode=4294901777, rec_len=65535, size=1024 fake=0 [ 227.773351][T11699] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 227.793349][T14452] wireguard2: entered promiscuous mode [ 227.798857][T14452] wireguard2: entered allmulticast mode [ 227.807473][T14452] netlink: 'syz.9.3053': attribute type 1 has an invalid length. [ 227.871664][ T1036] hid-generic 0000:0003:0000.0052: unknown main item tag 0x1 [ 227.879101][T14465] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 227.879152][T14465] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 227.896517][ T1036] hid-generic 0000:0003:0000.0052: hidraw0: HID v0.03 Device [] on syz0 [ 228.333159][T14482] loop7: detected capacity change from 0 to 512 [ 228.343342][T14482] EXT4-fs: Ignoring removed nobh option [ 228.369799][T14482] EXT4-fs error (device loop7): ext4_do_update_inode:5653: inode #3: comm syz.7.3065: corrupted inode contents [ 228.383044][T14482] EXT4-fs error (device loop7): ext4_dirty_inode:6538: inode #3: comm syz.7.3065: mark_inode_dirty error [ 228.401143][T14482] EXT4-fs error (device loop7): ext4_do_update_inode:5653: inode #3: comm syz.7.3065: corrupted inode contents [ 228.415849][T14482] EXT4-fs error (device loop7): __ext4_ext_dirty:206: inode #3: comm syz.7.3065: mark_inode_dirty error [ 228.434466][T14482] EXT4-fs error (device loop7): ext4_acquire_dquot:6937: comm syz.7.3065: Failed to acquire dquot type 0 [ 228.451742][T14482] EXT4-fs error (device loop7): ext4_do_update_inode:5653: inode #16: comm syz.7.3065: corrupted inode contents [ 228.466182][T14482] EXT4-fs error (device loop7): ext4_dirty_inode:6538: inode #16: comm syz.7.3065: mark_inode_dirty error [ 228.499173][T14482] EXT4-fs error (device loop7): ext4_do_update_inode:5653: inode #16: comm syz.7.3065: corrupted inode contents [ 228.512941][T14482] EXT4-fs error (device loop7): __ext4_ext_dirty:206: inode #16: comm syz.7.3065: mark_inode_dirty error [ 228.525744][T14502] wireguard1: entered promiscuous mode [ 228.531245][T14502] wireguard1: entered allmulticast mode [ 228.531958][T14482] EXT4-fs error (device loop7): ext4_do_update_inode:5653: inode #16: comm syz.7.3065: corrupted inode contents [ 228.540867][T14502] netlink: 'syz.2.3067': attribute type 1 has an invalid length. [ 228.556139][T14482] EXT4-fs error (device loop7) in ext4_orphan_del:305: Corrupt filesystem [ 228.570941][T14482] EXT4-fs error (device loop7): ext4_do_update_inode:5653: inode #16: comm syz.7.3065: corrupted inode contents [ 228.586487][T14482] EXT4-fs error (device loop7): ext4_truncate:4666: inode #16: comm syz.7.3065: mark_inode_dirty error [ 228.606186][T14482] EXT4-fs error (device loop7) in ext4_process_orphan:347: Corrupt filesystem [ 228.631733][T14482] EXT4-fs (loop7): 1 truncate cleaned up [ 228.649160][T14482] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 228.662168][T14512] wireguard3: entered promiscuous mode [ 228.662882][T14482] ext4 filesystem being mounted at /212/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 228.667717][T14512] wireguard3: entered allmulticast mode [ 228.671033][T14512] netlink: 'syz.9.3070': attribute type 1 has an invalid length. [ 228.714897][T14516] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 228.723441][T14516] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 228.740012][T14516] loop9: detected capacity change from 0 to 512 [ 228.808144][T11240] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 229.397721][T14552] loop9: detected capacity change from 0 to 512 [ 229.407457][T14552] EXT4-fs: Ignoring removed nobh option [ 229.425717][T14552] EXT4-fs error (device loop9): ext4_do_update_inode:5653: inode #3: comm syz.9.3087: corrupted inode contents [ 229.439795][T14552] EXT4-fs error (device loop9): ext4_dirty_inode:6538: inode #3: comm syz.9.3087: mark_inode_dirty error [ 229.453147][T14552] EXT4-fs error (device loop9): ext4_do_update_inode:5653: inode #3: comm syz.9.3087: corrupted inode contents [ 229.465675][ T3398] usb 15-1: enqueue for inactive port 0 [ 229.467478][T14552] EXT4-fs error (device loop9): __ext4_ext_dirty:206: inode #3: comm syz.9.3087: mark_inode_dirty error [ 229.471280][ T3398] usb 15-1: enqueue for inactive port 0 [ 229.490218][T14552] EXT4-fs error (device loop9): ext4_acquire_dquot:6937: comm syz.9.3087: Failed to acquire dquot type 0 [ 229.503523][T14552] EXT4-fs error (device loop9): ext4_do_update_inode:5653: inode #16: comm syz.9.3087: corrupted inode contents [ 229.515966][T14552] EXT4-fs error (device loop9): ext4_dirty_inode:6538: inode #16: comm syz.9.3087: mark_inode_dirty error [ 229.528450][T14552] EXT4-fs error (device loop9): ext4_do_update_inode:5653: inode #16: comm syz.9.3087: corrupted inode contents [ 229.541047][T14552] EXT4-fs error (device loop9): __ext4_ext_dirty:206: inode #16: comm syz.9.3087: mark_inode_dirty error [ 229.543771][ T3398] vhci_hcd: vhci_device speed not set [ 229.558731][T14552] EXT4-fs error (device loop9): ext4_do_update_inode:5653: inode #16: comm syz.9.3087: corrupted inode contents [ 229.571375][T14552] EXT4-fs error (device loop9) in ext4_orphan_del:305: Corrupt filesystem [ 229.581074][T14552] EXT4-fs error (device loop9): ext4_do_update_inode:5653: inode #16: comm syz.9.3087: corrupted inode contents [ 229.594817][T14552] EXT4-fs error (device loop9): ext4_truncate:4666: inode #16: comm syz.9.3087: mark_inode_dirty error [ 229.610706][T14552] EXT4-fs error (device loop9) in ext4_process_orphan:347: Corrupt filesystem [ 229.616541][T14559] loop8: detected capacity change from 0 to 512 [ 229.631666][T14559] EXT4-fs (loop8): too many log groups per flexible block group [ 229.639400][T14559] EXT4-fs (loop8): failed to initialize mballoc (-12) [ 229.640007][T14552] EXT4-fs (loop9): 1 truncate cleaned up [ 229.646322][T14559] EXT4-fs (loop8): mount failed [ 229.670537][T14552] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 229.697154][T14552] ext4 filesystem being mounted at /184/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 229.833582][T14579] loop7: detected capacity change from 0 to 512 [ 229.836332][T14581] loop8: detected capacity change from 0 to 512 [ 229.847429][T14579] EXT4-fs (loop7): Cannot turn on journaled quota: type 0: error -2 [ 229.856928][T14579] EXT4-fs error (device loop7): ext4_free_branches:1023: inode #13: comm syz.7.3097: invalid indirect mapped block 2683928664 (level 1) [ 229.857716][T14581] EXT4-fs (loop8): too many log groups per flexible block group [ 229.872964][T14579] EXT4-fs (loop7): 1 truncate cleaned up [ 229.878795][T14581] EXT4-fs (loop8): failed to initialize mballoc (-12) [ 229.884929][T14579] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 229.892222][T14581] EXT4-fs (loop8): mount failed [ 229.912514][T14579] EXT4-fs error (device loop7): htree_dirblock_to_tree:1080: inode #2: block 13: comm syz.7.3097: bad entry in directory: rec_len % 4 != 0 - offset=108, inode=4294901777, rec_len=65535, size=1024 fake=0 [ 229.950515][T11240] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 229.961398][T11699] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 229.982902][T14588] loop9: detected capacity change from 0 to 512 [ 229.991694][T14588] EXT4-fs (loop9): Cannot turn on journaled quota: type 0: error -2 [ 229.999861][T14588] EXT4-fs error (device loop9): ext4_free_branches:1023: inode #13: comm syz.9.3101: invalid indirect mapped block 2683928664 (level 1) [ 230.007196][T14593] loop7: detected capacity change from 0 to 512 [ 230.014775][T14588] EXT4-fs (loop9): 1 truncate cleaned up [ 230.026245][T14588] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 230.043707][T14588] EXT4-fs error (device loop9): htree_dirblock_to_tree:1080: inode #2: block 13: comm syz.9.3101: bad entry in directory: rec_len % 4 != 0 - offset=108, inode=4294901777, rec_len=65535, size=1024 fake=0 [ 230.067812][T14593] EXT4-fs (loop7): too many log groups per flexible block group [ 230.075554][T14593] EXT4-fs (loop7): failed to initialize mballoc (-12) [ 230.084143][T14593] EXT4-fs (loop7): mount failed [ 230.096918][T11699] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 230.121802][T14600] wireguard4: entered promiscuous mode [ 230.127378][T14600] wireguard4: entered allmulticast mode [ 230.137325][T14600] netlink: 'syz.9.3103': attribute type 1 has an invalid length. [ 230.139006][T14605] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3106'. [ 230.157400][T14605] netlink: 'syz.7.3106': attribute type 1 has an invalid length. [ 230.299846][T14611] loop7: detected capacity change from 0 to 512 [ 230.308309][T14611] EXT4-fs: Ignoring removed nobh option [ 230.329856][T14611] EXT4-fs error (device loop7): ext4_do_update_inode:5653: inode #3: comm syz.7.3109: corrupted inode contents [ 230.342472][T14611] EXT4-fs error (device loop7): ext4_dirty_inode:6538: inode #3: comm syz.7.3109: mark_inode_dirty error [ 230.355802][T14611] EXT4-fs error (device loop7): ext4_do_update_inode:5653: inode #3: comm syz.7.3109: corrupted inode contents [ 230.368412][T14611] EXT4-fs error (device loop7): __ext4_ext_dirty:206: inode #3: comm syz.7.3109: mark_inode_dirty error [ 230.382353][T14611] __quota_error: 792 callbacks suppressed [ 230.382381][T14611] Quota error (device loop7): write_blk: dquota write failed [ 230.396414][T14611] Quota error (device loop7): qtree_write_dquot: Error -117 occurred while creating quota [ 230.407295][T14611] EXT4-fs error (device loop7): ext4_acquire_dquot:6937: comm syz.7.3109: Failed to acquire dquot type 0 [ 230.420751][T14611] EXT4-fs error (device loop7): ext4_do_update_inode:5653: inode #16: comm syz.7.3109: corrupted inode contents [ 230.434053][T14611] EXT4-fs error (device loop7): ext4_dirty_inode:6538: inode #16: comm syz.7.3109: mark_inode_dirty error [ 230.446561][T14611] EXT4-fs error (device loop7): ext4_do_update_inode:5653: inode #16: comm syz.7.3109: corrupted inode contents [ 230.459538][T14611] EXT4-fs error (device loop7): __ext4_ext_dirty:206: inode #16: comm syz.7.3109: mark_inode_dirty error [ 230.471922][T14611] EXT4-fs error (device loop7): ext4_do_update_inode:5653: inode #16: comm syz.7.3109: corrupted inode contents [ 230.484269][T14611] EXT4-fs error (device loop7) in ext4_orphan_del:305: Corrupt filesystem [ 230.493668][T14611] EXT4-fs error (device loop7): ext4_do_update_inode:5653: inode #16: comm syz.7.3109: corrupted inode contents [ 230.506886][T14611] EXT4-fs error (device loop7): ext4_truncate:4666: inode #16: comm syz.7.3109: mark_inode_dirty error [ 230.519536][T14611] EXT4-fs error (device loop7) in ext4_process_orphan:347: Corrupt filesystem [ 230.544420][T14611] EXT4-fs (loop7): 1 truncate cleaned up [ 230.559129][T14611] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 230.573834][T14611] ext4 filesystem being mounted at /227/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 230.649872][ T29] audit: type=1326 audit(1755611069.125:6671): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14616 comm="syz.2.3111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f602d56ebe9 code=0x7ffc0000 [ 230.675057][ T29] audit: type=1326 audit(1755611069.125:6672): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14616 comm="syz.2.3111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f602d56ebe9 code=0x7ffc0000 [ 230.698672][ T29] audit: type=1326 audit(1755611069.125:6673): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14616 comm="syz.2.3111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f602d56ebe9 code=0x7ffc0000 [ 230.722186][ T29] audit: type=1326 audit(1755611069.125:6674): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14616 comm="syz.2.3111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f602d56ebe9 code=0x7ffc0000 [ 230.745711][ T29] audit: type=1326 audit(1755611069.125:6675): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14616 comm="syz.2.3111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f602d56ebe9 code=0x7ffc0000 [ 230.769199][ T29] audit: type=1326 audit(1755611069.125:6676): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14616 comm="syz.2.3111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f602d56ebe9 code=0x7ffc0000 [ 230.792768][ T29] audit: type=1326 audit(1755611069.125:6677): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14616 comm="syz.2.3111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f602d56ebe9 code=0x7ffc0000 [ 230.816314][ T29] audit: type=1326 audit(1755611069.125:6678): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14616 comm="syz.2.3111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f602d56ebe9 code=0x7ffc0000 [ 230.863520][T11240] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 230.928905][T14632] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3118'. [ 230.944920][T14632] netlink: 'syz.9.3118': attribute type 1 has an invalid length. [ 230.958290][ T3398] hid-generic 0000:3000000:0000.0053: unknown main item tag 0x4 [ 230.966188][ T3398] hid-generic 0000:3000000:0000.0053: unknown main item tag 0x2 [ 230.974459][ T3398] hid-generic 0000:3000000:0000.0053: unknown main item tag 0x3 [ 230.984047][ T3398] hid-generic 0000:3000000:0000.0053: hidraw0: HID v0.00 Device [sy] on syz0 [ 231.006800][T14638] netlink: 4 bytes leftover after parsing attributes in process `wޣ'. [ 231.056454][T14645] loop7: detected capacity change from 0 to 512 [ 231.064734][T14645] EXT4-fs (loop7): Cannot turn on journaled quota: type 0: error -2 [ 231.073346][T14645] EXT4-fs error (device loop7): ext4_free_branches:1023: inode #13: comm syz.7.3124: invalid indirect mapped block 2683928664 (level 1) [ 231.088595][T14645] EXT4-fs (loop7): 1 truncate cleaned up [ 231.094569][T14645] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 231.109609][T14645] EXT4-fs error (device loop7): htree_dirblock_to_tree:1080: inode #2: block 13: comm syz.7.3124: bad entry in directory: rec_len % 4 != 0 - offset=108, inode=4294901777, rec_len=65535, size=1024 fake=0 [ 231.140523][T11240] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 231.254422][T14655] wireguard6: entered promiscuous mode [ 231.259962][T14655] wireguard6: entered allmulticast mode [ 231.269270][T14655] netlink: 'syz.7.3128': attribute type 1 has an invalid length. [ 231.291486][T14658] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3129'. [ 231.515615][T14674] loop7: detected capacity change from 0 to 512 [ 231.522409][T14674] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 231.533729][T14674] EXT4-fs (loop7): 1 truncate cleaned up [ 231.539724][T14674] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 231.553141][T14674] sg_write: data in/out 11329/120 bytes for SCSI command 0x0-- guessing data in; [ 231.553141][T14674] program syz.7.3136 not setting count and/or reply_len properly [ 231.713317][T11240] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 231.733787][T14677] netlink: 4 bytes leftover after parsing attributes in process `wޣ'. [ 231.763526][T14681] loop9: detected capacity change from 0 to 512 [ 231.787650][T14681] EXT4-fs (loop9): too many log groups per flexible block group [ 231.795463][T14681] EXT4-fs (loop9): failed to initialize mballoc (-12) [ 231.804020][T14681] EXT4-fs (loop9): mount failed [ 231.832471][T14687] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3141'. [ 231.961692][T14708] loop9: detected capacity change from 0 to 512 [ 231.977696][T14708] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 231.997429][T14702] loop8: detected capacity change from 0 to 512 [ 232.006620][T14702] EXT4-fs: Ignoring removed nobh option [ 232.020527][T14708] EXT4-fs (loop9): 1 truncate cleaned up [ 232.028730][T14708] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 232.043083][T14708] sg_write: data in/out 11329/120 bytes for SCSI command 0x0-- guessing data in; [ 232.043083][T14708] program syz.9.3147 not setting count and/or reply_len properly [ 232.062210][T14702] EXT4-fs error (device loop8): ext4_do_update_inode:5653: inode #3: comm syz.8.3148: corrupted inode contents [ 232.081792][T14702] EXT4-fs error (device loop8): ext4_dirty_inode:6538: inode #3: comm syz.8.3148: mark_inode_dirty error [ 232.101120][T14702] EXT4-fs error (device loop8): ext4_do_update_inode:5653: inode #3: comm syz.8.3148: corrupted inode contents [ 232.117782][T14702] EXT4-fs error (device loop8): __ext4_ext_dirty:206: inode #3: comm syz.8.3148: mark_inode_dirty error [ 232.135432][T14702] EXT4-fs error (device loop8): ext4_acquire_dquot:6937: comm syz.8.3148: Failed to acquire dquot type 0 [ 232.150930][T14702] EXT4-fs error (device loop8): ext4_do_update_inode:5653: inode #16: comm syz.8.3148: corrupted inode contents [ 232.165612][T14702] EXT4-fs error (device loop8): ext4_dirty_inode:6538: inode #16: comm syz.8.3148: mark_inode_dirty error [ 232.179055][T14702] EXT4-fs error (device loop8): ext4_do_update_inode:5653: inode #16: comm syz.8.3148: corrupted inode contents [ 232.194029][T14702] EXT4-fs error (device loop8): __ext4_ext_dirty:206: inode #16: comm syz.8.3148: mark_inode_dirty error [ 232.194222][T11699] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 232.225225][T14702] EXT4-fs error (device loop8): ext4_do_update_inode:5653: inode #16: comm syz.8.3148: corrupted inode contents [ 232.235809][T14731] netlink: 4 bytes leftover after parsing attributes in process `wޣ'. [ 232.252674][T14702] EXT4-fs error (device loop8) in ext4_orphan_del:305: Corrupt filesystem [ 232.263665][T14702] EXT4-fs error (device loop8): ext4_do_update_inode:5653: inode #16: comm syz.8.3148: corrupted inode contents [ 232.279314][T14702] EXT4-fs error (device loop8): ext4_truncate:4666: inode #16: comm syz.8.3148: mark_inode_dirty error [ 232.295646][T14702] EXT4-fs error (device loop8) in ext4_process_orphan:347: Corrupt filesystem [ 232.309335][T14702] EXT4-fs (loop8): 1 truncate cleaned up [ 232.326827][T14702] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 232.341190][T14702] ext4 filesystem being mounted at /185/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 232.408915][T11414] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 232.435200][ T3418] hid-generic 0000:0003:0000.0054: unknown main item tag 0x1 [ 232.444021][T14747] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 232.452836][ T3418] hid-generic 0000:0003:0000.0054: hidraw0: HID v0.03 Device [] on syz0 [ 232.453337][T14747] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 232.472250][T14747] loop8: detected capacity change from 0 to 512 [ 232.514336][T14752] loop7: detected capacity change from 0 to 512 [ 232.525161][T14752] EXT4-fs (loop7): too many log groups per flexible block group [ 232.533038][T14752] EXT4-fs (loop7): failed to initialize mballoc (-12) [ 232.539845][T14752] EXT4-fs (loop7): mount failed [ 232.673000][T14762] netlink: 4 bytes leftover after parsing attributes in process `wޣ'. [ 232.772146][T14711] 9pnet_fd: p9_fd_create_tcp (14711): problem connecting socket to 127.0.0.1 [ 233.016059][T14790] netlink: 4 bytes leftover after parsing attributes in process `wޣ'. [ 233.121785][T14795] loop8: detected capacity change from 0 to 512 [ 233.129720][T14795] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 233.142115][T14795] EXT4-fs (loop8): 1 truncate cleaned up [ 233.148060][T14795] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 233.166340][T14795] sg_write: data in/out 11329/120 bytes for SCSI command 0x0-- guessing data in; [ 233.166340][T14795] program syz.8.3185 not setting count and/or reply_len properly [ 233.326545][T11414] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 233.385025][T14808] loop8: detected capacity change from 0 to 512 [ 233.393968][T14808] EXT4-fs: Ignoring removed nobh option [ 233.401654][T14814] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3194'. [ 233.430333][T14808] EXT4-fs error (device loop8): ext4_do_update_inode:5653: inode #3: comm syz.8.3191: corrupted inode contents [ 233.443848][T14808] EXT4-fs error (device loop8): ext4_dirty_inode:6538: inode #3: comm syz.8.3191: mark_inode_dirty error [ 233.457877][T14808] EXT4-fs error (device loop8): ext4_do_update_inode:5653: inode #3: comm syz.8.3191: corrupted inode contents [ 233.470339][T14808] EXT4-fs error (device loop8): __ext4_ext_dirty:206: inode #3: comm syz.8.3191: mark_inode_dirty error [ 233.484062][T14808] EXT4-fs error (device loop8): ext4_acquire_dquot:6937: comm syz.8.3191: Failed to acquire dquot type 0 [ 233.497802][T14808] EXT4-fs error (device loop8): ext4_do_update_inode:5653: inode #16: comm syz.8.3191: corrupted inode contents [ 233.511077][T14808] EXT4-fs error (device loop8): ext4_dirty_inode:6538: inode #16: comm syz.8.3191: mark_inode_dirty error [ 233.523283][T14808] EXT4-fs error (device loop8): ext4_do_update_inode:5653: inode #16: comm syz.8.3191: corrupted inode contents [ 233.535538][T14808] EXT4-fs error (device loop8): __ext4_ext_dirty:206: inode #16: comm syz.8.3191: mark_inode_dirty error [ 233.548916][T14808] EXT4-fs error (device loop8): ext4_do_update_inode:5653: inode #16: comm syz.8.3191: corrupted inode contents [ 233.562127][T14808] EXT4-fs error (device loop8) in ext4_orphan_del:305: Corrupt filesystem [ 233.568344][ T10] hid-generic 0000:0003:0000.0055: unknown main item tag 0x1 [ 233.573325][T14808] EXT4-fs error (device loop8): ext4_do_update_inode:5653: inode #16: comm syz.8.3191: corrupted inode contents [ 233.579232][T14822] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 233.592559][T14808] EXT4-fs error (device loop8): ext4_truncate:4666: inode #16: comm syz.8.3191: mark_inode_dirty error [ 233.599407][T14822] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 233.611447][T14808] EXT4-fs error (device loop8) in ext4_process_orphan:347: Corrupt filesystem [ 233.618528][ T10] hid-generic 0000:0003:0000.0055: hidraw0: HID v0.03 Device [] on syz0 [ 233.632318][T14808] EXT4-fs (loop8): 1 truncate cleaned up [ 233.648457][T14808] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 233.663092][T14808] ext4 filesystem being mounted at /188/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 233.664313][T14822] loop7: detected capacity change from 0 to 512 [ 233.761258][T11414] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 233.830551][T14832] FAULT_INJECTION: forcing a failure. [ 233.830551][T14832] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 233.843724][T14832] CPU: 1 UID: 0 PID: 14832 Comm: syz.8.3200 Not tainted 6.17.0-rc2-syzkaller-00028-gbe48bcf004f9 #0 PREEMPT(voluntary) [ 233.843758][T14832] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 233.843828][T14832] Call Trace: [ 233.843836][T14832] [ 233.843897][T14832] __dump_stack+0x1d/0x30 [ 233.843918][T14832] dump_stack_lvl+0xe8/0x140 [ 233.843935][T14832] dump_stack+0x15/0x1b [ 233.843954][T14832] should_fail_ex+0x265/0x280 [ 233.843974][T14832] should_fail+0xb/0x20 [ 233.843993][T14832] should_fail_usercopy+0x1a/0x20 [ 233.844020][T14832] _copy_from_user+0x1c/0xb0 [ 233.844045][T14832] __ia32_sys_rt_sigreturn+0x128/0x350 [ 233.844075][T14832] x64_sys_call+0x2d3c/0x2ff0 [ 233.844124][T14832] do_syscall_64+0xd2/0x200 [ 233.844177][T14832] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 233.844199][T14832] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 233.844281][T14832] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 233.844301][T14832] RIP: 0033:0x7fc03dd1add9 [ 233.844314][T14832] Code: 64 c7 00 16 00 00 00 b8 ff ff ff ff c3 0f 1f 40 00 90 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 c7 c0 0f 00 00 00 0f 05 <0f> 1f 80 00 00 00 00 48 81 ec 48 01 00 00 49 89 d0 64 48 8b 04 25 [ 233.844340][T14832] RSP: 002b:00007fc03c7dea80 EFLAGS: 00000202 ORIG_RAX: 000000000000000f [ 233.844430][T14832] RAX: ffffffffffffffda RBX: 00007fc03dfa5fa0 RCX: 00007fc03dd1add9 [ 233.844443][T14832] RDX: 00007fc03c7dea80 RSI: 00007fc03c7debb0 RDI: 0000000000000021 [ 233.844457][T14832] RBP: 00007fc03c7df090 R08: 0000000000000000 R09: 0000000000000000 [ 233.844470][T14832] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000001 [ 233.844483][T14832] R13: 00007fc03dfa6038 R14: 00007fc03dfa5fa0 R15: 00007ffd4e8b6a08 [ 233.844502][T14832] [ 234.024383][T14835] sg_write: data in/out 11329/120 bytes for SCSI command 0x0-- guessing data in; [ 234.024383][T14835] program syz.6.3201 not setting count and/or reply_len properly [ 234.118782][T14840] netlink: 'syz.6.3203': attribute type 1 has an invalid length. [ 234.254221][ T3398] hid-generic 0000:3000000:0000.0056: unknown main item tag 0x4 [ 234.262062][ T3398] hid-generic 0000:3000000:0000.0056: unknown main item tag 0x2 [ 234.270641][ T3398] hid-generic 0000:3000000:0000.0056: unknown main item tag 0x3 [ 234.278800][ T3398] hid-generic 0000:3000000:0000.0056: hidraw0: HID v0.00 Device [sy] on syz0 [ 235.022924][T14895] wireguard4: entered promiscuous mode [ 235.028454][T14895] wireguard4: entered allmulticast mode [ 235.036932][T14895] netlink: 'syz.8.3219': attribute type 1 has an invalid length. [ 235.079143][T14899] sg_write: data in/out 11329/120 bytes for SCSI command 0x0-- guessing data in; [ 235.079143][T14899] program syz.6.3220 not setting count and/or reply_len properly [ 235.221142][T14910] loop9: detected capacity change from 0 to 512 [ 235.230130][T14910] EXT4-fs (loop9): too many log groups per flexible block group [ 235.237927][T14910] EXT4-fs (loop9): failed to initialize mballoc (-12) [ 235.244757][T14910] EXT4-fs (loop9): mount failed [ 235.363653][T14929] __nla_validate_parse: 1 callbacks suppressed [ 235.363667][T14929] netlink: 4 bytes leftover after parsing attributes in process `wޣ'. [ 235.414803][ T3398] hid-generic 0000:3000000:0000.0057: unknown main item tag 0x4 [ 235.422576][ T3398] hid-generic 0000:3000000:0000.0057: unknown main item tag 0x2 [ 235.431441][ T3398] hid-generic 0000:3000000:0000.0057: hidraw0: HID v0.00 Device [sy] on syz0 [ 235.453916][ T29] kauditd_printk_skb: 554 callbacks suppressed [ 235.453930][ T29] audit: type=1326 audit(1755612610.167:7229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14935 comm="syz.7.3234" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6b33d6ebe9 code=0x0 [ 235.851020][T14944] loop8: detected capacity change from 0 to 512 [ 235.868733][T14944] EXT4-fs (loop8): too many log groups per flexible block group [ 235.876533][T14944] EXT4-fs (loop8): failed to initialize mballoc (-12) [ 235.883460][T14944] EXT4-fs (loop8): mount failed [ 235.937138][ T29] audit: type=1326 audit(1755612610.671:7230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14953 comm="syz.2.3241" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f602d56ebe9 code=0x7ffc0000 [ 235.960981][ T29] audit: type=1326 audit(1755612610.671:7231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14953 comm="syz.2.3241" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f602d56ebe9 code=0x7ffc0000 [ 235.984704][ T29] audit: type=1326 audit(1755612610.682:7232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14953 comm="syz.2.3241" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f602d56ebe9 code=0x7ffc0000 [ 236.008336][ T29] audit: type=1326 audit(1755612610.682:7233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14953 comm="syz.2.3241" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f602d56ebe9 code=0x7ffc0000 [ 236.009199][T14955] loop8: detected capacity change from 0 to 512 [ 236.031911][ T29] audit: type=1326 audit(1755612610.682:7234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14953 comm="syz.2.3241" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f602d56ebe9 code=0x7ffc0000 [ 236.042754][T14955] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 236.061742][ T29] audit: type=1326 audit(1755612610.682:7235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14953 comm="syz.2.3241" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f602d56ebe9 code=0x7ffc0000 [ 236.095158][ T29] audit: type=1326 audit(1755612610.682:7236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14953 comm="syz.2.3241" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f602d56ebe9 code=0x7ffc0000 [ 236.118731][ T29] audit: type=1326 audit(1755612610.682:7237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14953 comm="syz.2.3241" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f602d56ebe9 code=0x7ffc0000 [ 236.142092][ T29] audit: type=1326 audit(1755612610.682:7238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14953 comm="syz.2.3241" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f602d56ebe9 code=0x7ffc0000 [ 236.176482][T14955] EXT4-fs (loop8): 1 truncate cleaned up [ 236.182609][T14955] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 236.205995][T14950] sg_write: data in/out 11329/120 bytes for SCSI command 0x0-- guessing data in; [ 236.205995][T14950] program syz.8.3239 not setting count and/or reply_len properly [ 236.243004][T11414] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 236.271700][T14971] wireguard5: entered promiscuous mode [ 236.277236][T14971] wireguard5: entered allmulticast mode [ 236.289540][T14971] netlink: 'syz.8.3246': attribute type 1 has an invalid length. [ 237.154200][T15025] netlink: 4 bytes leftover after parsing attributes in process `wޣ'. [ 237.302326][T15043] loop8: detected capacity change from 0 to 512 [ 237.319443][T15043] EXT4-fs (loop8): too many log groups per flexible block group [ 237.327270][T15043] EXT4-fs (loop8): failed to initialize mballoc (-12) [ 237.337812][T15043] EXT4-fs (loop8): mount failed [ 237.352725][T15049] wireguard7: entered promiscuous mode [ 237.358355][T15049] wireguard7: entered allmulticast mode [ 237.372090][T15049] netlink: 'syz.6.3266': attribute type 1 has an invalid length. [ 237.392161][ T3398] hid_parser_main: 1 callbacks suppressed [ 237.392244][ T3398] hid-generic 0000:3000000:0000.0058: unknown main item tag 0x4 [ 237.406319][ T3398] hid-generic 0000:3000000:0000.0058: unknown main item tag 0x2 [ 237.414092][ T3398] hid-generic 0000:3000000:0000.0058: unknown main item tag 0x3 [ 237.422207][ T3398] hid-generic 0000:3000000:0000.0058: hidraw0: HID v0.00 Device [sy] on syz0 [ 237.819040][T15093] loop9: detected capacity change from 0 to 512 [ 237.826217][T15093] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 237.837745][T15093] EXT4-fs (loop9): 1 truncate cleaned up [ 237.843970][T15093] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 237.857459][T15093] sg_write: data in/out 11329/120 bytes for SCSI command 0x0-- guessing data in; [ 237.857459][T15093] program syz.9.3277 not setting count and/or reply_len properly [ 238.018393][T11699] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 238.171782][ T1036] hid-generic 0000:3000000:0000.0059: unknown main item tag 0x4 [ 238.179519][ T1036] hid-generic 0000:3000000:0000.0059: unknown main item tag 0x2 [ 238.195509][ T1036] hid-generic 0000:3000000:0000.0059: unknown main item tag 0x3 [ 238.205637][T15103] netlink: 32 bytes leftover after parsing attributes in process `syz.8.3281'. [ 238.214817][ T1036] hid-generic 0000:3000000:0000.0059: hidraw0: HID v0.00 Device [sy] on syz0 [ 238.218272][T15103] netlink: 'syz.8.3281': attribute type 1 has an invalid length. [ 238.426673][T15139] loop7: detected capacity change from 0 to 512 [ 238.426733][ T3398] hid-generic 0000:3000000:0000.005A: unknown main item tag 0x4 [ 238.434995][T15139] EXT4-fs (loop7): Cannot turn on journaled quota: type 0: error -2 [ 238.440760][ T3398] hid-generic 0000:3000000:0000.005A: unknown main item tag 0x2 [ 238.450061][T15139] EXT4-fs error (device loop7): ext4_free_branches:1023: inode #13: comm syz.7.3295: invalid indirect mapped block 2683928664 (level 1) [ 238.456756][ T3398] hid-generic 0000:3000000:0000.005A: unknown main item tag 0x3 [ 238.475520][T15139] EXT4-fs (loop7): 1 truncate cleaned up [ 238.484287][T15139] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 238.484598][ T3398] hid-generic 0000:3000000:0000.005A: hidraw0: HID v0.00 Device [sy] on syz0 [ 238.514767][T15139] EXT4-fs error (device loop7): htree_dirblock_to_tree:1080: inode #2: block 13: comm syz.7.3295: bad entry in directory: rec_len % 4 != 0 - offset=108, inode=4294901777, rec_len=65535, size=1024 fake=0 [ 238.556743][T11240] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 238.885899][ T1036] hid-generic 0000:3000000:0000.005B: unknown main item tag 0x4 [ 238.894232][ T1036] hid-generic 0000:3000000:0000.005B: hidraw0: HID v0.00 Device [sy] on syz0 [ 239.063322][T15187] loop8: detected capacity change from 0 to 512 [ 239.160956][ T3398] hid-generic 0000:3000000:0000.005C: hidraw0: HID v0.00 Device [sy] on syz0 [ 239.203158][T15203] loop8: detected capacity change from 0 to 512 [ 239.221911][T15203] EXT4-fs (loop8): too many log groups per flexible block group [ 239.230041][T15203] EXT4-fs (loop8): failed to initialize mballoc (-12) [ 239.237083][T15203] EXT4-fs (loop8): mount failed [ 239.372662][T15219] loop8: detected capacity change from 0 to 512 [ 239.380265][T15219] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 239.392100][T15219] EXT4-fs (loop8): 1 truncate cleaned up [ 239.398582][T15219] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 239.412804][T15219] sg_write: data in/out 11329/120 bytes for SCSI command 0x0-- guessing data in; [ 239.412804][T15219] program syz.8.3329 not setting count and/or reply_len properly [ 239.574642][T11414] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 239.641949][T15256] loop8: detected capacity change from 0 to 512 [ 239.660371][T15256] EXT4-fs (loop8): too many log groups per flexible block group [ 239.668207][T15256] EXT4-fs (loop8): failed to initialize mballoc (-12) [ 239.675346][T15256] EXT4-fs (loop8): mount failed [ 239.712610][T15173] 9pnet_fd: p9_fd_create_tcp (15173): problem connecting socket to 127.0.0.1 [ 239.729232][T15273] loop8: detected capacity change from 0 to 512 [ 239.741974][T15273] EXT4-fs (loop8): Cannot turn on journaled quota: type 0: error -2 [ 239.751633][T15273] EXT4-fs error (device loop8): ext4_free_branches:1023: inode #13: comm syz.8.3341: invalid indirect mapped block 2683928664 (level 1) [ 239.778023][T15273] EXT4-fs (loop8): 1 truncate cleaned up [ 239.784312][T15273] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 239.799673][T15273] EXT4-fs error (device loop8): htree_dirblock_to_tree:1080: inode #2: block 13: comm syz.8.3341: bad entry in directory: rec_len % 4 != 0 - offset=108, inode=4294901777, rec_len=65535, size=1024 fake=0 [ 239.857942][T11414] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 239.916566][T15304] sg_write: data in/out 11329/120 bytes for SCSI command 0x0-- guessing data in; [ 239.916566][T15304] program syz.6.3346 not setting count and/or reply_len properly [ 239.998405][T15312] tipc: Started in network mode [ 240.003446][T15312] tipc: Node identity 8a1c89f8406b, cluster identity 4711 [ 240.010640][T15312] tipc: Enabled bearer , priority 0 [ 240.022576][T15311] tipc: Resetting bearer [ 240.050326][T15322] 9pnet_fd: p9_fd_create_tcp (15322): problem connecting socket to 127.0.0.1 [ 240.063417][T15311] tipc: Disabling bearer [ 240.194829][T15348] 9pnet_fd: p9_fd_create_tcp (15348): problem connecting socket to 127.0.0.1 [ 240.285224][ T29] kauditd_printk_skb: 657 callbacks suppressed [ 240.285238][ T29] audit: type=1326 audit(1755612615.238:7896): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15365 comm="syz.8.3369" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc03dd7ebe9 code=0x0 [ 240.369677][T15381] loop9: detected capacity change from 0 to 512 [ 240.376886][T15381] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 240.393383][T15381] EXT4-fs (loop9): 1 truncate cleaned up [ 240.399819][T15381] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 240.414000][T15381] sg_write: data in/out 11329/120 bytes for SCSI command 0x0-- guessing data in; [ 240.414000][T15381] program syz.9.3370 not setting count and/or reply_len properly [ 240.571205][T11699] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 240.694730][ T29] audit: type=1400 audit(1755612615.669:7897): avc: denied { execute } for pid=15423 comm="syz.2.3385" path="/104/file1" dev="tmpfs" ino=569 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 240.717537][ T29] audit: type=1400 audit(1755612615.669:7898): avc: denied { module_request } for pid=15405 comm="syz.9.3381" kmod="block-major-0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 240.750101][ T29] audit: type=1400 audit(1755612615.721:7899): avc: denied { recv } for pid=0 comm="swapper/0" saddr=10.128.0.163 src=30036 daddr=10.128.0.124 dest=37206 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 240.776506][ T29] audit: type=1400 audit(1755612615.721:7900): avc: denied { read write } for pid=11699 comm="syz-executor" name="loop9" dev="devtmpfs" ino=109 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 240.800842][ T29] audit: type=1400 audit(1755612615.721:7901): avc: denied { open } for pid=11699 comm="syz-executor" path="/dev/loop9" dev="devtmpfs" ino=109 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 240.825126][ T29] audit: type=1400 audit(1755612615.721:7902): avc: denied { ioctl } for pid=11699 comm="syz-executor" path="/dev/loop9" dev="devtmpfs" ino=109 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 240.851550][ T29] audit: type=1400 audit(1755612615.816:7903): avc: denied { create } for pid=15432 comm="syz.2.3388" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 240.872167][ T29] audit: type=1400 audit(1755612615.816:7904): avc: denied { write } for pid=15432 comm="syz.2.3388" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 240.892666][ T29] audit: type=1400 audit(1755612615.816:7905): avc: denied { read } for pid=15432 comm="syz.2.3388" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 240.945030][T15443] FAULT_INJECTION: forcing a failure. [ 240.945030][T15443] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 240.958157][T15443] CPU: 1 UID: 0 PID: 15443 Comm: syz.9.3392 Not tainted 6.17.0-rc2-syzkaller-00028-gbe48bcf004f9 #0 PREEMPT(voluntary) [ 240.958235][T15443] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 240.958243][T15443] Call Trace: [ 240.958247][T15443] [ 240.958252][T15443] __dump_stack+0x1d/0x30 [ 240.958324][T15443] dump_stack_lvl+0xe8/0x140 [ 240.958335][T15443] dump_stack+0x15/0x1b [ 240.958344][T15443] should_fail_ex+0x265/0x280 [ 240.958357][T15443] should_fail+0xb/0x20 [ 240.958372][T15443] should_fail_usercopy+0x1a/0x20 [ 240.958463][T15443] _copy_to_user+0x20/0xa0 [ 240.958491][T15443] simple_read_from_buffer+0xb5/0x130 [ 240.958510][T15443] proc_fail_nth_read+0x10e/0x150 [ 240.958545][T15443] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 240.958644][T15443] vfs_read+0x1a8/0x770 [ 240.958655][T15443] ? __rcu_read_unlock+0x4f/0x70 [ 240.958730][T15443] ? __fget_files+0x184/0x1c0 [ 240.958742][T15443] ? finish_task_switch+0xad/0x2b0 [ 240.958799][T15443] ksys_read+0xda/0x1a0 [ 240.958819][T15443] __x64_sys_read+0x40/0x50 [ 240.958841][T15443] x64_sys_call+0x27bc/0x2ff0 [ 240.958864][T15443] do_syscall_64+0xd2/0x200 [ 240.958879][T15443] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 240.958893][T15443] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 240.958914][T15443] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 240.958927][T15443] RIP: 0033:0x7f303f97d5fc [ 240.958937][T15443] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 240.958947][T15443] RSP: 002b:00007f303e3df030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 240.958959][T15443] RAX: ffffffffffffffda RBX: 00007f303fba5fa0 RCX: 00007f303f97d5fc [ 240.958966][T15443] RDX: 000000000000000f RSI: 00007f303e3df0a0 RDI: 0000000000000005 [ 240.959011][T15443] RBP: 00007f303e3df090 R08: 0000000000000000 R09: 0000000000000000 [ 240.959018][T15443] R10: 0000000000000032 R11: 0000000000000246 R12: 0000000000000001 [ 240.959025][T15443] R13: 00007f303fba6038 R14: 00007f303fba5fa0 R15: 00007ffc8a7223b8 [ 240.959035][T15443] [ 241.200883][T15449] 9pnet_fd: p9_fd_create_tcp (15449): problem connecting socket to 127.0.0.1 [ 241.237604][T15455] loop9: detected capacity change from 0 to 512 [ 241.249175][T15455] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 241.272170][T15455] EXT4-fs (loop9): 1 truncate cleaned up [ 241.278210][T15463] netlink: 32 bytes leftover after parsing attributes in process `syz.6.3397'. [ 241.280149][T15455] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 241.289844][T15463] netlink: 'syz.6.3397': attribute type 1 has an invalid length. [ 241.310613][T15455] sg_write: data in/out 11329/120 bytes for SCSI command 0x0-- guessing data in; [ 241.310613][T15455] program syz.9.3393 not setting count and/or reply_len properly [ 241.402903][T15479] netlink: 96 bytes leftover after parsing attributes in process `syz.8.3399'. [ 241.449604][T11699] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 241.493696][T15489] loop9: detected capacity change from 0 to 512 [ 241.519028][T15489] EXT4-fs (loop9): too many log groups per flexible block group [ 241.526889][T15489] EXT4-fs (loop9): failed to initialize mballoc (-12) [ 241.535988][T15489] EXT4-fs (loop9): mount failed [ 241.711278][T15522] loop7: detected capacity change from 0 to 512 [ 241.729746][T15525] loop8: detected capacity change from 0 to 512 [ 241.737127][T15525] EXT4-fs: Ignoring removed i_version option [ 241.743188][T15525] EXT4-fs: Ignoring removed bh option [ 241.749953][T15522] EXT4-fs (loop7): too many log groups per flexible block group [ 241.757686][T15522] EXT4-fs (loop7): failed to initialize mballoc (-12) [ 241.764717][T15522] EXT4-fs (loop7): mount failed [ 241.766419][T15525] ext4 filesystem being mounted at /251/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 241.883377][ T2] ================================================================== [ 241.891482][ T2] BUG: KCSAN: data-race in copy_process / free_pid [ 241.897977][ T2] [ 241.900285][ T2] read-write to 0xffffffff8685fc48 of 4 bytes by task 11240 on cpu 0: [ 241.908449][ T2] free_pid+0x77/0x180 [ 241.912507][ T2] free_pids+0x54/0xb0 [ 241.916560][ T2] release_task+0x9a9/0xb60 [ 241.921049][ T2] wait_consider_task+0x114a/0x1660 [ 241.926240][ T2] __do_wait+0xfa/0x510 [ 241.930383][ T2] do_wait+0xb7/0x260 [ 241.934360][ T2] kernel_wait4+0x16b/0x1e0 [ 241.938853][ T2] __x64_sys_wait4+0x91/0x120 [ 241.943519][ T2] x64_sys_call+0x2a66/0x2ff0 [ 241.948201][ T2] do_syscall_64+0xd2/0x200 [ 241.952693][ T2] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 241.958567][ T2] [ 241.960880][ T2] read to 0xffffffff8685fc48 of 4 bytes by task 2 on cpu 1: [ 241.968139][ T2] copy_process+0x14a6/0x2000 [ 241.972804][ T2] kernel_clone+0x16c/0x5c0 [ 241.977305][ T2] kernel_thread+0xac/0xe0 [ 241.981713][ T2] kthreadd+0x28d/0x360 [ 241.985852][ T2] ret_from_fork+0xda/0x150 [ 241.990345][ T2] ret_from_fork_asm+0x1a/0x30 [ 241.995093][ T2] [ 241.997405][ T2] value changed: 0x80000142 -> 0x80000141 [ 242.003124][ T2] [ 242.005456][ T2] Reported by Kernel Concurrency Sanitizer on: [ 242.011587][ T2] CPU: 1 UID: 0 PID: 2 Comm: kthreadd Not tainted 6.17.0-rc2-syzkaller-00028-gbe48bcf004f9 #0 PREEMPT(voluntary) [ 242.023550][ T2] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 242.033599][ T2] ================================================================== [ 242.681860][T15539] syz.2.3422 (15539) used greatest stack depth: 6416 bytes left